| |
| |||||||
Log-Analyse und Auswertung: windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
11.08.2015, 19:21
| #1 |
 |  windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Hallo, mein Rechner friert unberechenbar ein und zeigt anschließend einen bluescreen:  Teilweise läuft der Rechner noch eine Stunde bevor der BSOD auftaucht. Es waren bisher verschiedene bluescreens. Beim Neustart kam auch schon die Meldung "no boot device found". Da ich die Ursache nicht kenne habe ich folgende Schritte unternommen: - Rechnergehäuse entstaubt - Windows Update durchgeführt - Java Update durchgeführt - Windows Arbeitsspeicherdiagnosetool durchgeführt: keine Probleme - Datenträgerprüfung durchgeführt: keine Probleme - Windows im abgesicherten Modus gestartet und Avira Virenscan durchgeführt: nach einer Stunde - Abbruch durch freeze / bluescreen FRST und GMER habe ich bereits runtergeladen und auf dem Desktop abgelegt. Als ich aber FRST durchführen wollte kam die Meldung: "Nicht genügend Systemressourcen, um den angeforderten Dienst auszuführen" und zusätzlich der Sicherheitshinweis von Avira dass der Zugriff aufgrund eines unerwünschten Programms blockiert wurde. In der Checkliste stand nicht explizit dass man den Scanner deaktivieren soll, daher war Avira noch aktiv. Die weiteren Schritte der Checkliste habe ich daher erstmal nicht weiter durchgeführt. Einen Avira Log kann ich dennoch anfügen: Code:
ATTFilter Exportierte Ereignisse:
09.08.2015 22:12 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_518\uninstall.exe'
enthielt einen Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5'
[riskware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '3aa70d0d.qua'
verschoben!
09.08.2015 22:12 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_519\uninstall.exe'
enthielt einen Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5'
[riskware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7f23203f.qua'
verschoben!
09.08.2015 22:09 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_518\uninstall.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
09.08.2015 22:09 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_519\uninstall.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
04.08.2015 21:00 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_518\uninstall.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
04.08.2015 21:00 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_519\uninstall.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
04.08.2015 20:50 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_518\uninstall.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
04.08.2015 20:50 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Uninstall
Information\ib_uninst_519\uninstall.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
Danke & Gruß, MBB |
|
11.08.2015, 20:01
| #2 |
| /// the machine /// TB-Ausbilder    | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Hi,
__________________Rechner nochmal neu starten, Avira aus, dann FRST laufen lassen.
__________________ |
|
11.08.2015, 20:17
| #3 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Ok, ich muss separat posten.
__________________Hier erstmal FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:11-08-2015
durchgeführt von Fragster (Administrator) auf FRAGSTER-PC (11-08-2015 21:05:25)
Gestartet von C:\Users\Fragster\Desktop
Geladene Profile: Fragster (Verfügbare Profile: Fragster)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wacom Technology, Corp.) C:\Windows\System32\WTablet\Wacom_TabletUser.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Akamai Technologies, Inc.) C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Dropbox, Inc.) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() G:\Programme\Func Tastatur\KB-460_Core.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(NVIDIA Corporation) C:\Users\Fragster\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Func KB-460] => G:\Programme\Func Tastatur\KB-460_Core
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Steam] => "C:\Program Files (x86)\Steam\Steam.exe" -silent
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Google Update] => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-10-05] (Google Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Dropbox Update] => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-06] (Dropbox, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Spotify Web Helper] => C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-05-08] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012-08-26]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk [2013-03-17]
ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-03-30]
ShortcutTarget: Dropbox.lnk -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2049330118-253893184-3514707546-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
Toolbar: HKLM - Linkury Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
Toolbar: HKLM-x32 - Linkury Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4803DB8B-CB64-458F-8261-FEDB79E73BCE}: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-04-05] ()
FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2009-09-25] (Wacom, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/O1DPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fragster\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-16] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: Adblock Plus - C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-29]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-09]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
Chrome:
=======
CHR Profile: C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-02]
CHR Extension: (Google Docs) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-02]
CHR Extension: (Google Drive) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-02]
CHR Extension: (YouTube) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-02]
CHR Extension: (Google Search) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-02]
CHR Extension: (Savings Sidekick) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo [2015-04-02]
CHR Extension: (Google Sheets) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR Extension: (Gmail) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [dhdepfaagokllfmhfbcfmocaeigmoebo] - C:\Users\Fragster\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx [2012-06-15]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-05-15] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 mi-raysat_3dsmax2015_64; G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [86016 2011-09-15] () [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-07-21] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-02] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [6245744 2010-03-09] (Wacom Technology, Corp.)
S4 TomTomHOMEService; G:\Programme\TomTom HOME 2\TomTomHOMEService.exe [93040 2014-06-05] (TomTom)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-12] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R3 I1KBFLTR; C:\Windows\System32\drivers\I1KBFLTR.sys [29440 2013-07-31] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [106760 2015-05-09] (WIBU-SYSTEMS AG)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-11 21:05 - 2015-08-11 21:05 - 00028727 _____ C:\Users\Fragster\Desktop\FRST.txt
2015-08-11 21:05 - 2015-08-11 21:05 - 00000000 ____D C:\Users\Fragster\Desktop\FRST-OlderVersion
2015-08-11 21:05 - 2015-08-11 21:05 - 00000000 ____D C:\FRST
2015-08-11 20:01 - 2015-08-11 20:09 - 00001111 _____ C:\Users\Fragster\Desktop\Neues Textdokument.txt
2015-08-11 19:07 - 2015-08-11 19:07 - 00380416 _____ C:\Users\Fragster\Desktop\Gmer-19357.exe
2015-08-11 19:04 - 2015-08-11 21:05 - 02172416 _____ (Farbar) C:\Users\Fragster\Desktop\FRST64.exe
2015-08-11 19:01 - 2015-08-11 19:01 - 00005312 _____ C:\Users\Fragster\Desktop\Avira_Ereignisse.txt
2015-08-09 22:18 - 2015-08-10 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-09 21:59 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-09 21:59 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-09 21:59 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 21:59 - 2015-06-03 22:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-08-09 21:58 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-08-04 20:35 - 2015-08-04 20:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\GWX
2015-08-03 19:19 - 2015-08-03 19:21 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-03 19:18 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2015-08-03 19:18 - 2015-01-09 01:43 - 00419936 _____ C:\Windows\system32\locale.nls
2015-08-03 19:17 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-08-03 19:17 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 19:17 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-08-03 19:17 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-08-03 19:16 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-08-03 19:16 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-08-03 19:16 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-08-03 19:16 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-08-03 19:14 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-08-03 19:14 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-08-03 19:13 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-03 19:13 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-03 19:13 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-03 19:13 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-03 19:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-08-03 19:13 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-03 19:13 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-03 19:13 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-03 19:13 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-03 19:13 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-03 19:13 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-03 19:13 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-03 19:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-08-03 19:13 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-08-03 19:13 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-08-03 19:13 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-08-03 19:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-08-03 19:13 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-08-03 19:13 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-08-03 19:13 - 2014-11-11 03:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-08-03 19:13 - 2014-11-08 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-03 19:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-08-03 19:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-03 19:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-03 19:13 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-08-03 19:13 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-08-03 19:13 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-08-03 19:13 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-03 19:13 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-08-03 19:13 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-08-03 19:13 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-08-03 19:13 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-08-03 19:13 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-08-03 19:13 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2015-08-03 19:13 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-08-03 19:13 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-08-03 19:13 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-08-03 19:13 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-03 19:13 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-03 19:13 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-08-03 19:13 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2015-08-03 19:13 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-08-03 19:13 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-08-03 19:13 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-08-03 19:13 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2015-08-03 19:13 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-08-03 19:13 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-08-03 19:13 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2015-08-03 19:13 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-08-03 19:13 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-03 19:13 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-08-03 19:13 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-08-03 19:13 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-03 19:13 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-08-03 19:13 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-08-03 19:13 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2015-08-03 19:13 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-08-03 19:13 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2015-08-03 19:13 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-08-03 19:13 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2015-08-03 19:13 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-08-03 19:13 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-08-03 19:13 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-08-03 19:13 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-08-03 19:13 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-08-03 19:13 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-08-03 19:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-03 19:12 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-08-03 19:12 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-08-03 19:12 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-08-03 19:12 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-08-03 19:12 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-08-03 19:12 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2015-08-03 19:10 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-08-03 19:09 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 19:06 - 2015-08-03 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-08-02 22:13 - 2015-08-02 22:13 - 00007192 ____N C:\bootsqm.dat
2015-07-29 08:19 - 2015-07-29 08:19 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-27 22:19 - 2015-07-27 22:19 - 00000000 ____D C:\Users\Fragster\AppData\Local\CEF
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-27 00:30 - 2015-07-27 00:30 - 00000000 ____D C:\Users\Fragster\Desktop\Der kleine Bruder CD 1
2015-07-21 23:14 - 2015-08-04 21:17 - 00000000 ____D C:\Users\Public\Documents\Jagged Alliance - Back in Action
2015-07-21 21:55 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 21:55 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 21:55 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 12:24 - 2015-07-16 12:24 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-07-15 11:12 - 2015-07-15 11:12 - 00000796 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2015.lnk
2015-07-15 10:28 - 2015-07-15 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Steuer-Sparbuch 2015
2015-07-15 10:18 - 2015-07-15 10:18 - 01038704 _____ (Amazon Services LLC) C:\Users\Fragster\Downloads\WISO_Steuer_Sparbuch_2015_Downloader.exe
2015-07-15 10:14 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 10:14 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 10:14 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 10:14 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 10:14 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 10:14 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 10:14 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 10:14 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 10:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 10:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 10:13 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 10:13 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 10:13 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 10:13 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 10:13 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 10:13 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 10:13 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 10:13 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 10:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 10:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 10:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 10:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 10:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 10:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 10:13 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 10:13 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 10:13 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:13 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 10:13 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 10:13 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 10:13 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:13 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:13 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 10:13 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 10:13 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 10:13 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 10:13 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 10:13 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 10:13 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 10:13 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 10:13 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 10:13 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 10:13 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 10:13 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 10:13 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 10:13 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 10:13 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 10:13 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 10:13 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 10:13 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 10:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 10:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 10:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 10:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-13 14:14 - 2015-07-13 14:14 - 01187520 _____ (Adobe Systems Incorporated) C:\Users\Fragster\Downloads\flashplayer18au_ha_install.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-11 21:05 - 2015-06-06 14:07 - 00001236 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-11 21:03 - 2012-05-10 19:55 - 00000000 ___RD C:\Users\Fragster\Dropbox
2015-08-11 21:03 - 2012-05-10 19:53 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Dropbox
2015-08-11 21:02 - 2015-04-02 15:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-11 21:02 - 2012-12-22 14:38 - 00000408 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2015-08-11 21:02 - 2012-09-22 15:20 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\WTablet
2015-08-11 21:02 - 2012-03-30 22:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-11 21:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-11 21:02 - 2009-07-14 06:51 - 00282275 _____ C:\Windows\setupact.log
2015-08-11 20:27 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-11 20:27 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-11 20:12 - 2012-10-05 21:49 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-11 20:09 - 2015-04-02 15:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-11 19:56 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Oracle
2015-08-11 19:56 - 2012-03-31 17:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-11 19:55 - 2013-11-01 20:55 - 00321632 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-11 19:55 - 2013-11-01 20:55 - 00000000 ____D C:\Program Files\Java
2015-08-11 19:55 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2015-08-11 19:55 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2015-08-11 19:55 - 2009-07-14 07:13 - 01620110 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-11 19:54 - 2013-11-01 21:09 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-08-11 19:54 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-11 19:51 - 2012-03-30 22:21 - 01401220 _____ C:\Windows\WindowsUpdate.log
2015-08-11 19:49 - 2012-03-30 22:56 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-11 19:49 - 2012-03-30 22:56 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-11 19:49 - 2012-03-30 22:56 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 19:45 - 2013-02-11 22:14 - 00001978 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-08-10 20:03 - 2012-05-08 22:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-10 20:03 - 2010-11-21 05:47 - 00543278 _____ C:\Windows\PFRO.log
2015-08-04 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2015-08-03 19:21 - 2012-03-30 23:08 - 00066376 _____ C:\Users\Fragster\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-03 19:20 - 2009-07-14 06:45 - 05112912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-03 19:20 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-03 19:06 - 2012-07-09 12:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-02 16:05 - 2015-06-06 14:07 - 00001184 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-08-02 13:40 - 2012-12-22 14:38 - 00000000 ____D C:\Program Files (x86)\File Type Assistant
2015-07-31 22:28 - 2015-04-14 18:47 - 00000080 _____ C:\Users\Fragster\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-07-31 09:09 - 2015-07-11 23:42 - 00001120 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-31 09:09 - 2014-07-16 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-31 09:09 - 2013-10-11 19:31 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-30 08:35 - 2014-07-16 20:50 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-30 08:35 - 2014-07-16 20:50 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-27 22:17 - 2012-03-30 23:14 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Origin
2015-07-27 22:17 - 2012-03-30 23:13 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 22:16 - 2012-03-30 23:13 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-27 20:13 - 2014-09-15 11:35 - 00000726 _____ C:\Windows\wiso.ini
2015-07-27 19:11 - 2014-09-15 15:15 - 00000000 ____D C:\Users\Fragster\Documents\Steuer-Sparbuch
2015-07-27 19:07 - 2012-08-26 16:53 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Spotify
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Local\Spotify
2015-07-21 23:13 - 2012-03-31 00:38 - 00725453 _____ C:\Windows\DirectX.log
2015-07-19 18:57 - 2013-05-22 22:11 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\vlc
2015-07-19 16:36 - 2012-04-01 19:38 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\dvdcss
2015-07-19 13:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-18 16:00 - 2015-06-06 14:07 - 00004216 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-18 16:00 - 2015-06-06 14:07 - 00003820 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-16 12:04 - 2015-04-02 15:47 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 12:04 - 2015-04-02 15:47 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-16 03:12 - 2012-10-05 21:49 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-16 03:07 - 2012-10-05 21:49 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-16 03:07 - 2012-10-05 21:49 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-15 17:54 - 2013-11-16 19:21 - 00000000 ____D C:\Windows\rescache
2015-07-15 17:07 - 2015-04-14 18:47 - 00000000 ____D C:\Program Files\Rockstar Games
2015-07-15 17:07 - 2014-08-18 19:36 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-07-15 11:25 - 2012-07-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 11:23 - 2013-08-15 12:46 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 11:12 - 2014-09-15 11:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\Buhl
2015-07-15 10:56 - 2012-03-30 23:03 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Skype
2015-07-15 10:28 - 2014-02-26 01:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-13 16:07 - 2014-12-05 21:44 - 00000000 __SHD C:\Users\Fragster\AppData\Local\EmieBrowserModeList
2015-07-13 16:07 - 2014-05-09 21:33 - 00000000 __SHD C:\Users\Fragster\AppData\Local\EmieUserList
2015-07-13 16:07 - 2014-05-09 21:33 - 00000000 __SHD C:\Users\Fragster\AppData\Local\EmieSiteList
2015-07-13 14:17 - 2014-08-18 21:54 - 00000000 ____D C:\Users\Fragster\AppData\Local\Adobe
2015-07-12 21:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2012-11-15 00:11 - 2009-12-31 14:01 - 0266240 _____ (Chaos Group Ltd) C:\Program Files\cgauth.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1101312 _____ () C:\Program Files\dte_wrapper.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0802304 _____ () C:\Program Files\glslang.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0173056 _____ () C:\Program Files\glvm.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1038848 _____ (Joe Alter Inc) C:\Program Files\HairVrPrims2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 3381944 _____ (Intel Corporation) C:\Program Files\libmmd.dll
2012-11-14 23:06 - 2012-11-15 00:11 - 0000125 _____ () C:\Program Files\plugin.ini
2012-11-15 00:11 - 2012-11-15 00:11 - 4333568 _____ (Chaos Software Ltd) C:\Program Files\vray.dll
2012-11-15 00:11 - 2010-12-10 19:15 - 7111168 _____ (Chaos Software Ltd) C:\Program Files\vray2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0172032 _____ () C:\Program Files\vraydummy2011.max
2012-11-15 00:11 - 2012-11-15 00:11 - 0011798 _____ () C:\Program Files\vraydummy2011.xml
2012-11-15 00:11 - 2012-11-15 00:11 - 0144896 _____ () C:\Program Files\vrayspawner2011.exe
2015-05-08 20:09 - 2015-05-08 20:10 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-05-08 20:07 - 2015-05-08 20:07 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe Targa Format CS5 Prefs
2012-04-10 20:44 - 2012-10-21 19:37 - 0000125 ___SH () C:\ProgramData\.zreglib
Einige Dateien in TEMP:
====================
C:\Users\Fragster\AppData\Local\Temp\AcDeltree.exe
C:\Users\Fragster\AppData\Local\Temp\avgnt.exe
C:\Users\Fragster\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Fragster\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Fragster\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuruufd.dll
C:\Users\Fragster\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Fragster\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\Fragster\AppData\Local\Temp\installerdll2241453.dll
C:\Users\Fragster\AppData\Local\Temp\installerdll2250532.dll
C:\Users\Fragster\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Fragster\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Fragster\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\Fragster\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Fragster\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Fragster\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Fragster\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Fragster\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Fragster\AppData\Local\Temp\nvStInst.exe
C:\Users\Fragster\AppData\Local\Temp\rootsupd.exe
C:\Users\Fragster\AppData\Local\Temp\Setup.exe
C:\Users\Fragster\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Fragster\AppData\Local\Temp\sonarinst.exe
C:\Users\Fragster\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Fragster\AppData\Local\Temp\tmd_34015902.exe
C:\Users\Fragster\AppData\Local\Temp\tmd_34019315.exe
C:\Users\Fragster\AppData\Local\Temp\Uninst.exe
C:\Users\Fragster\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Fragster\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.2-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.5-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.7-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vrayuninst.dll
C:\Users\Fragster\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-03 20:57
==================== Ende von Ergebnis ============================
|
|
11.08.2015, 20:19
| #4 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Und hier die Addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:11-08-2015
durchgeführt von Fragster (2015-08-11 21:05:43)
Gestartet von C:\Users\Fragster\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2049330118-253893184-3514707546-500 - Administrator - Disabled)
Fragster (S-1-5-21-2049330118-253893184-3514707546-1000 - Administrator - Enabled) => C:\Users\Fragster
Gast (S-1-5-21-2049330118-253893184-3514707546-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2049330118-253893184-3514707546-1004 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe After Effects CS3 Third Party Content (HKLM-x32\...\Adobe_3675c95c239b992d5d0ee8fce969b9e) (Version: 3 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Content (HKLM-x32\...\{C0AA232E-BD1B-40B5-A176-A2BEB67FFAE1}) (Version: 10 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Royalty Content (HKLM-x32\...\{CD29B5CA-4727-4114-9AD9-25CCCE6E4014}) (Version: 10 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen (HKLM-x32\...\Adobe_67a7fb1e97aa14ee9ef0950eb6fd757) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{53BC789D-073D-47B6-AA9F-DE05990AF07A}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Premiere Pro CS3 Third Party Content (HKLM-x32\...\Adobe_71c180716438072ebd356ce2549df41) (Version: 3 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin’s Creed® III (HKLM-x32\...\Steam App 208480) (Version: - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version: - Ubisoft Montreal)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1995390206.48.56.3157818 - Audible, Inc.)
Autodesk 3ds Max 2011 64-bit (HKLM\...\{39BFB02A-9692-0409-A808-3F5C7B1F8953}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2015 (HKLM\...\Autodesk 3ds Max 2015) (Version: 17.1.149.0 - Autodesk)
Autodesk 3ds Max 2015 (Version: 17.1.149.0 - Autodesk) Hidden
Autodesk 3ds Max 2015 Populate Data (HKLM\...\{57E92DED-DC6C-41E5-B9E1-76D83BD2EABE}) (Version: 17.0.0.0 - Autodesk)
Autodesk 3ds Max 2015 SP1 (HKLM\...\Autodesk 3ds Max 2015 SP1) (Version: 17.1.149.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Backburner 2015 (HKLM-x32\...\{8C5F38D2-8EFE-49A4-B3F5-BF3210FED168}) (Version: 15.0.0.0 - Autodesk)
Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)
Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden
Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2015 (HKLM\...\{9167CA34-4E48-49E3-8892-3C439739D2D3}) (Version: 17.0.2 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2015 (HKLM-x32\...\{9F6466D9-6EFC-4A10-B931-C72D1A3F1763}) (Version: 5.2.9.100 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Avira (HKLM-x32\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Botanicula (HKLM-x32\...\Steam App 207690) (Version: - Amanita Design)
Broforce (HKLM-x32\...\Steam App 274190) (Version: - Free Lives)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version: - )
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )
Canon MP540 series Benutzerregistrierung (HKLM-x32\...\Canon MP540 series Benutzerregistrierung) (Version: - )
Canon MP540 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP540_series) (Version: - )
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Command & Conquer Alarmstufe Rot 2 (HKLM-x32\...\Red Alert 2) (Version: - )
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Deadlight (HKLM-x32\...\Steam App 211400) (Version: - Tequila Works, S.L.)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version: - Eidos Montreal)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
DIY DataRecovery DiskPatch 3 (HKLM-x32\...\DiskPatch_is1) (Version: 3.5.300 - DIY DataRecovery.nl)
Dropbox (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
File Type Assistant (HKLM-x32\...\Trusted Software Assistant_is1) (Version: 2014.5.6.0 - ) <==== ACHTUNG
Free File Viewer 2012 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2012.10.9.0 - Bitberry Software) <==== ACHTUNG
Free Video to MP3 Converter version 5.0.17.903 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.17.903 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Func KB-460 Settings software (HKLM-x32\...\{8918A402-4EEF-489F-940F-DC25BEEFA6FF}_sbay) (Version: - )
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version: - Valve)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
iExplorer 3.1.1.0 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant LLC)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)
Jagged Alliance - Back in Action (HKLM-x32\...\Steam App 57740) (Version: - Coreplay GmbH)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kane & Lynch: Dead Men (HKLM-x32\...\Steam App 8080) (Version: - IO Interactive)
Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version: - Rockstar Studios)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Excel 2007 (HKLM-x32\...\EXCEL) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint 2007 (HKLM-x32\...\POWERPOINT) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4554 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version: - CAPCOM Co., Ltd.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version: - Coffee Stain Studios)
Savings Sidekick (HKLM-x32\...\Savings Sidekick) (Version: 1.18.149.149 - 215 Apps)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version: - Christian Handorf)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version: - Yager)
Spotify (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs)
State of Decay: Year-One (HKLM-x32\...\Steam App 329430) (Version: - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version: - Capcom)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Expendabros (HKLM-x32\...\Steam App 312990) (Version: - Free Lives)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version: - Hinterland Studio Inc.)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2009 - Thrustmaster)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Trapcode Suite 64-bit (HKLM-x32\...\InstallShield_{BA357941-25A7-410C-A47E-9AAF7DE1248B}) (Version: 12.0.0 - Red Giant Software)
Trapcode Suite 64-bit (Version: 12.0.0 - Red Giant Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
V-Ray for 3dsmax 2011 for x64 (HKLM\...\V-Ray for 3dsmax 2011 for x64) (Version: 2.20.03 - Chaos Software Ltd)
V-Ray for 3dsmax 2015 for x64 (HKLM\...\V-Ray for 3dsmax 2015 for x64) (Version: 3.00.08 - Chaos Software Ltd)
Wacom Tablett (HKLM-x32\...\Wacom Tablet Driver) (Version: - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.4 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.3 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WindowsMangerProtect20.0.0.722 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ACHTUNG
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{04179292-C74D-4AA1-8FFA-8387CA3B67B5}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{54A83CB1-9CDE-4E73-B263-90C64D4619FC}) (Version: 22.00.8811 - Buhl Data Service GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> G:\Autodesk\3ds Max 2011\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll Keine Datei
==================== Wiederherstellungspunkte =========================
15-07-2015 11:20:13 Windows Update
21-07-2015 23:13:22 DirectX wurde installiert
22-07-2015 01:49:44 Windows Update
03-08-2015 19:06:20 Windows Update
03-08-2015 19:14:15 Windows Update
03-08-2015 20:58:01 Windows Update
05-08-2015 08:12:14 Windows Update
10-08-2015 19:27:26 Windows Update
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2015-03-20 23:22 - 00001059 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {010E9455-640F-49EF-8341-56B03E47E5B8} - System32\Tasks\{131CE2A1-80E5-4013-8A2A-6873D7F84BC5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {0A600157-92CB-4C7D-A3D7-FE8700F71386} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {173AE9B3-DC2E-4AF3-B64B-5B9349290381} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\CloneDVD2\ExecuteWithUAC.exe [2008-06-27] ()
Task: {1972673D-70BD-46DC-B45A-05F6EABF7F1C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {2112F3C3-4ADB-41CE-B604-F91ED5C90B02} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [2012-10-13] (Bitberry Software) <==== ACHTUNG
Task: {26D1A02D-67C2-4FB0-9861-254C166460D1} - System32\Tasks\{48CF35FF-433B-432E-8D27-6B4DDC955A4E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {26F12A49-55E0-49EB-B694-DFEBA829A253} - System32\Tasks\{26AF6ED6-A302-4497-88B2-D36EE5833B6D} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {3ACEA9AB-9CD1-4981-9429-97C14693D6DC} - System32\Tasks\{4268E6F3-C933-400A-A726-044594806FF1} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6F74DD1A-AEBA-475F-B26B-097BE57850F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {7E742DD6-7B52-4E01-966D-798499021D08} - System32\Tasks\ProgramUpdateCheck => C:\Program Files (x86)\File Type Assistant\TSAssist.exe [2014-05-06] (FTA ApS) <==== ACHTUNG
Task: {A145D6B4-B10E-4A2C-8280-31494289BAE6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {A4CD521B-493B-44A4-9DAA-D3DD144BD91C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {AF37AC83-2051-4952-B6D6-8BBD0CEE24F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {C35BE482-BBCC-461A-820C-CF73FE134F29} - System32\Tasks\ProgramRefresh-ATFST => C:\Program Files (x86)\File Type Assistant\tsasetup.exe [2014-05-11] ( ) <==== ACHTUNG
Task: {C9DF2EBC-0F2C-4485-A15D-5167FE2108A6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {CDA8CE5F-AA6D-464F-B7F6-9873E97E288A} - System32\Tasks\AdobeAAMUpdater-1.0-Fragster-PC-Fragster => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {DE7D3939-590E-451B-AADF-4506D005ED12} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {E78E4FBD-EF42-44FA-858D-2AE8EF13E848} - System32\Tasks\{B72B600D-D7DA-4470-8738-08ECF6CEDB95} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3BCD646-49D2-483E-803D-D2AC8E7A061E} - System32\Tasks\{B177CA05-EDC9-4630-BADE-B0C6AEBFDBAC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.115/de/go/help.faq.installer?LastError=1603
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2012-03-31 17:32 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-21 22:56 - 2014-07-21 22:56 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2015-05-22 15:50 - 2013-09-16 09:33 - 01757184 _____ () G:\Programme\Func Tastatur\KB-460_Core.exe
2011-11-11 14:07 - 2011-11-11 14:07 - 00265240 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-14 18:53 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-08-11 21:02 - 2015-08-11 21:02 - 00071168 _____ () c:\users\fragster\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuruufd.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00012800 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00779776 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-29 08:19 - 2015-07-17 02:31 - 00056320 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00012288 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2012-07-23 15:10 - 2012-07-23 15:10 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Fragster^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Fragster\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "G:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{04772F86-5DB8-4C6A-A377-08DF17290936}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{574CA899-AB81-4E4D-AB8D-8FEC89D09293}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{549D29DC-91F6-4C15-ACE7-26570D36EA35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{C23751AF-6623-402C-9934-86ECBBCA93A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{7A3859A1-076C-4F92-9E2F-EEF12754F48F}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8D38BD63-BC0A-4FA1-9DDF-BC3B68D1814A}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E9EF6603-8105-4B60-A3B1-8278879E4905}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AAF77C0F-6CAC-44AB-BE11-C7881F173CB1}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{5D94EAF6-F3FB-48A0-B8AC-2F67D7E52F1A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{61E6332A-CDC4-47B0-AED4-990B3BCA17C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B9732DB-2878-4197-9924-EFFD925FE0C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{53810B60-CC84-4949-95FD-5DE17B626E91}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A79D7BB9-70CD-47AD-B18B-B278F9DBF0D0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{92164434-A096-4C22-93AF-02C27B5D1DC5}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A216B3C5-B8AA-4EB5-8A86-F91B6B14459B}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{0D0D48AF-DAB4-4984-B571-AAD6462491DF}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{ADBA8C4A-8875-417A-AE97-E07C5CC99602}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [{42C73DB4-CDA0-46BC-8A81-2042AC4CD019}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{560F1BC0-FA3D-41D6-A8F4-3F0F3F72EE76}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F624A1E4-81C3-44F5-AAAA-F1A0C3D00788}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{433C07DF-C084-4E1C-9C2A-35949029C429}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{939C8397-8C0D-4160-8D24-2C96E38F4CFB}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{9560D2B1-ACC8-46C7-AF73-ADAF2AE9626F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{8845F407-343F-4752-919D-101797C7054A}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [{F36F179C-FEBD-43C6-A6F8-182CDE38A5A2}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [TCP Query User{BF60A732-4555-4159-A5E4-5ABA035C133B}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{37F16CD7-2601-4BB0-B1F8-6AC408FBF471}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{4CECB07B-A4CD-4191-9FAE-D5554A1E1C73}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{6DA30031-A46F-46A1-A0E9-60FB8E981913}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{357C4974-F08A-46F0-AED2-9EB147A3C6B4}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{3BEAF8A0-EF3C-4580-B1B1-157728B4D34A}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{8E3AECEB-B488-4CAA-9A7B-B18604862034}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{BC8D44D6-D7C8-4182-891F-7D8EC5714CC3}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{DD498A71-73BC-4507-9500-2FD3F723A5F7}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe
FirewallRules: [{F3289D37-CDAA-41C8-9678-D5D8DEE3CF45}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{9BF8916F-677E-4128-B364-88072B430ABD}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{8B001813-1808-4064-8EF1-85672B74614E}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{403299AC-828C-4252-971D-45AD03DD430A}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{0FFB8E58-3C7D-4348-8445-B9DFFBE36AFA}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{D3B8DB34-732D-4EE4-9DA0-BEB3B67123C9}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{73EAC45E-2EE4-43EE-A2DD-635626D08266}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{BC8F8396-981B-4161-B8E0-2C369C3B2332}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{C871AE4F-4F5C-4B51-B17E-7F2760048088}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{CF093C2D-6ADC-44C2-9A82-89A72EFE42BB}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{D0F5B256-573F-4C5B-8256-3C2A751BEC3C}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{D3B2E3E1-7945-467A-82D4-3550592AC818}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{2556B1F4-C425-4D4A-BBE1-F98EB768CF2E}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9DB9FA04-2743-4EF0-9257-8A50BA34D124}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{FBBBB055-BCEE-4A0F-A238-797A2FE566A8}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{7C777E7F-8380-43BF-8943-3E7C8B942F3B}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{1DAEC672-62C1-4E96-A116-C2A4E64BEDA4}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{699D413B-A161-4A89-A545-787A458804CA}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{D6BBFD72-9338-4893-B2D3-F026C717CAB7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E879D55B-48AD-4FF0-A060-213DD3B00A9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{18B1B000-01D1-4AC0-A928-45664A067013}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6E096CFE-4002-4AB6-AE44-8E46C572FA3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3C791AB1-6310-497D-9454-2695EBADD24F}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{92709542-8D6B-470B-B2D2-BCF3A7E75C67}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{F6692971-2805-4CE9-9882-0E85B559BA48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4C917EE2-A10C-4974-A9EC-03BAF40C4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C8E0F0F8-5304-4903-A643-63DE99F60E0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DCFBC4EC-39B3-48B9-BD69-7D1BC7A2AECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BF130E0C-6EF2-49DD-979C-D3C1FC6EB875}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E6713910-9B34-48DD-86D8-8E66B2EC27FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D5CB6D0-91C1-4588-A9BD-F4871377D466}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{AE21C3B2-C9F2-4AE0-B15F-1F0C7B55F083}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [TCP Query User{D28FE169-D35F-41F8-B34E-F046E7D806E4}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [UDP Query User{A13F3145-95E2-4BD5-95D2-91E2DB55A05B}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [{4514C525-706D-49A4-82C8-C6334236C941}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0765D295-ADD1-4DEF-9A1B-D9B77EAA2C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ABE242B8-1A78-475A-9F92-E15C62CAB44D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EB6B6981-75BD-472B-9F7F-D5E931EC97F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EE4476E3-56AE-4C9C-9B39-4D1351E809B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{23BCF370-916F-46DD-9C86-23022703724D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1CA5304E-6674-4CEC-88D1-7DFB10088BFC}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AE726CEB-4819-4B53-AE81-C2104B1D19AA}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{4891125E-5848-4732-AB5A-DBD65919BFCF}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{5C7B94D8-C8AA-4AE4-8F3E-3C4E9C54C79B}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{F751BFA2-6348-427B-825E-51B148D73035}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{747968A5-22E9-4E9D-AA3C-6B5C6B4270C9}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{2501AC61-7494-478E-8846-659AB0C5DB79}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{ED392498-9A12-4F3C-9C98-1898CB6CB5B1}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{0E3695E9-234A-4943-90B1-91484FC4E53C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F85C0664-0DAA-4C14-88A8-E2A65EBA519E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4C8EDC58-E5D7-4D3A-9939-DC47D5A4E276}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D990613-3F11-4775-8916-2796202413AB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{21040FD5-4830-4A11-9714-2B7DF08AD411}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{81A8077B-281C-4470-A2F8-E61C13720356}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{0B9EAA1F-426A-4D75-B48B-F9BB771FA281}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{D780652A-2985-4428-9CB0-92600E2D9BAA}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{BB248C14-F16C-450A-8BAF-140781E4121E}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{080B6801-9FC8-4B0C-9805-325DF10030A1}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{983810A9-C3F8-4D61-B8F3-C9DCA43AF64E}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{9161CDAC-F6DA-4F85-BB33-13E3A0593CFB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{09546B13-D2E3-4A10-9199-9DF234966AAB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [TCP Query User{F6ADA89A-C5E9-4504-A452-D146CD4D6CA6}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{556B934E-CB16-4DA2-9DC2-83B78DF9252A}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A91893FB-FBA6-4EA6-915C-3AF348FA98DF}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{6DBB5E7E-241E-4062-B0DB-B761CE09435B}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{1318A5A6-CEBE-4C95-8416-691C4EDE6A27}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{D58A04A8-5986-44E6-8B77-31B049373598}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{ED836365-CE81-42C7-9CFC-816F9BF8752D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{680B8274-FA65-447B-8757-066B3EA8D820}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{25B73349-C4A5-4948-B5FA-D3BD47F62EAC}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{D2F05AE9-111B-4A68-A677-2B20A724F67D}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{2BAA366C-06C3-4B42-9A80-BB6A0EE5C505}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F331FE8C-14CB-453C-B3C0-56F8043006C0}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F49BB3DF-A9F9-4A4B-8406-E6BF62A22429}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [TCP Query User{1730FA25-BFF7-498A-B90A-F742D8A381DE}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{65F843E5-4908-430C-8FDD-2753F843013E}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{8B25FA57-A457-49F8-A244-1D59E7004041}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9070EC11-5D6C-4419-A266-21764558A7C4}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{ADF83E23-75F1-4158-B38D-9E025F424B13}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{DFEF48F2-6D3C-430B-85DC-B7114C81A5A3}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{F50297AD-EFC4-45DA-B302-BDD29D0C1B1B}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{A9C07798-6F06-4B21-8AC0-DDB080025B73}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{DF5AA543-EAE5-4673-904A-661F81D649F1}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{33879106-1BAE-4841-9880-1CEE70D30A39}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{9CAC3A7A-BE1B-41D6-A81B-4A957BEC8283}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{800606E3-8931-41DD-80AD-900A0C3E6C8B}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{A607C67D-A64C-4921-AF46-63702D8AF209}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{60D70F08-EB56-4CD6-BDB3-BE12C77317A6}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{8A46F07B-1399-4CAE-B49C-20E69D4911BC}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{3154C3F1-900B-4552-9AD4-C6DD1979BC0A}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{195F4797-35E1-4DF7-8176-2CCFFDB1246F}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [TCP Query User{BAA61285-4407-4C86-83BF-556DF23649DB}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{42ADCBB1-C6B0-41BF-9DC6-10F6A8541226}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{81A3E701-8BF5-426E-9B9F-0140CE200AB0}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7B1D7A83-AE0C-4240-B17A-84263B50156B}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{04549210-E155-463F-B3A0-3273E899260D}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{01E3C50B-55A5-4983-A7C8-53E7201FB795}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{7465A788-F8FF-4206-A43E-5AB3992C8C10}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9BF02656-0546-45F3-9A40-CAEE617953E0}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{CBFC222F-CD0D-48D1-84A8-F2D7AF57EE1A}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{A48AAC77-B6F3-4962-A88E-B144BB3AC3B6}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{8D164D4D-C6DD-4F70-85E0-7E99CFDEFFAF}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{2BF4F822-B92F-4B98-B841-2821758DFC25}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{8AA187CD-50F9-4EB5-B0C7-7215B0C5AB94}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{D0D6D217-D15E-4F12-A899-2C46D5D148F6}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{B1EC055C-75E3-41B3-92EE-132F00B8A4BF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{A97E5FC3-A34F-466C-AFAA-FE329318A2D1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1D7D0ECA-92AF-4424-95F7-E05294B252C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{0E245602-5662-4494-A000-7E29DE940BFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{B532F760-64E7-4378-94E9-DD229D94E8AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{BBACCB83-78A5-4969-9FD8-4D696ED0DB0F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [TCP Query User{45F662C7-58FC-430B-9717-731AD59BE39E}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [UDP Query User{BD475D86-9B89-4617-BC51-C69FB3FB882B}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [{7DED0881-FF83-40AB-A0B8-7255CC737D9A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{6289FC7E-7D17-427B-9F7C-040CE9B04F52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{9D01342C-3464-4414-A420-AC07DA00F57D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5FEC9C48-EA4A-4677-9BC7-6BB7A1957AF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{E854083A-7487-42E4-A4EF-865951EE5AD9}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{FF966DA4-F86C-416A-84E9-8A110D94900A}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{01A8DE84-10C1-4557-AADA-31107B198A04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{55B7142D-372E-4220-B36C-9A327449FE55}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{58B0ECB5-27D8-478F-AD28-D9B883C9372D}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{510FF323-F72A-41C3-84C1-22815EF836CB}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{D61B73A0-9A05-4400-B605-26B881B6825A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B6EC10F-AAC5-4C6E-A3C3-3213838F4315}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54220F57-3EC1-4C22-961E-7A4858932FF4}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D5333F6A-1D67-4867-9E16-61126A2A9E0B}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{88472125-5C81-4D9F-AA94-1DA6E57D5A97}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{94478AAC-386B-4AB9-A147-C1DAF43EFB8C}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{7FB5CF23-230F-4B47-8300-FF15C146D36E}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{78FA8D49-81A8-4453-9DAD-CC141F20FA04}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{D8AE0B5A-BBE1-44B8-A0DD-5220FD445491}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{4ECDF369-99C6-4E1F-AB3D-D002BFE60225}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{BDBD7F25-A0D1-404F-A84C-6C0BCA43F764}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{818D2685-B72B-4BDE-A449-847334ADB541}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{330D1A31-851D-4BD5-B5A8-4D560B3BB70E}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{C95CC401-5D09-4297-BE13-684D36EC6002}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{52A78883-B5F2-49D0-B871-AF1F040E40FB}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [{81551F1B-273B-41D2-92BE-164D3B11A2FC}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [TCP Query User{27924A78-3837-4643-B729-CF68A1288617}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [UDP Query User{FAEC16AF-64B7-4809-AC1A-BCD91EB6542A}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [{C0C7C695-24C3-4F50-B0E6-75AFCD15C41E}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{D7764ACC-7A01-4BB3-AE62-DC706CDE42C6}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{60E1D514-CBF2-44E4-BB4A-4D7CF0121687}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{4924B6E3-A427-430C-B0C2-092517A533FB}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{F2D1C817-EFA3-435B-B54D-1335F64BE8FA}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E674C8C8-30DE-4401-856A-A4389D2D8EF7}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{2D0B287E-2D9C-4068-972E-1C294D520941}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{6FA2EA87-26C1-43AF-8508-DEE0D884C1D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{D6D2444A-7AE8-4836-AAC6-4E455289BAA1}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{34612F93-F7AA-43F8-A477-8E19DF57C1B5}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{818D1CA3-65A4-4845-BEA5-36614E6BBCA3}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{977444CC-3FD0-47EF-8DAF-B26E4775F3C2}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35079B59-D6F4-4468-AB56-D68ADA4DA551}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{C1A7A97D-9C5E-4748-A2D8-E299A000BAB6}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{3D34C7CE-88A7-403B-A07A-32696C136419}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{8BDD7D3A-7E2B-442D-B5A7-04ACE5300178}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{31AB5FE5-3B04-4443-ACED-243A857C7DDD}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{DFD70EAF-9819-41AC-B2CF-D032A11FBB9C}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{C07E8B73-6083-4E1E-BBB9-1DAD7BE45CD8}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{477C0385-9098-4090-97B8-CDECA67116A6}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{657CD02C-4992-4814-9E84-6F1F90192C0F}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{2FC44B08-BB5F-424F-9062-96FF1BA08816}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{1967D040-DF78-48D9-9EB0-64741F61E8F6}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{BFF41C64-7C68-46B1-874B-8DC31FC02F23}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{358FC54A-852B-4FCA-A476-AD7C4FE96CC2}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{6165BD4E-3EF1-4539-861D-00C355660487}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{8E0E10E6-4B36-4450-957A-315B29A89482}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A2A17870-FA78-41A3-8504-149CCF0745AB}] => (Allow) LPort=49237
FirewallRules: [{9F44221F-33FE-49F5-AD36-4F38265D71C4}] => (Allow) LPort=5000
FirewallRules: [{D7687439-1F08-41EE-8FB6-C33A1A105CE1}] => (Allow) LPort=49212
FirewallRules: [{4A8FD2E9-F134-4FB2-9034-8163CC178215}] => (Allow) LPort=5000
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/11/2015 09:03:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0x918
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/11/2015 09:03:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/11/2015 07:48:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xc58
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/11/2015 07:48:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/11/2015 07:34:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xea4
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/11/2015 07:34:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/11/2015 07:28:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]
Error: (08/11/2015 06:47:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0x5a0
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/11/2015 06:47:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/10/2015 08:40:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Systemfehler:
=============
Error: (08/11/2015 09:02:49 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 11.08.2015 um 20:47:34 unerwartet heruntergefahren.
Error: (08/11/2015 07:48:34 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 11.08.2015 um 19:45:45 unerwartet heruntergefahren.
Error: (08/11/2015 06:46:54 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 10.08.2015 um 21:37:30 unerwartet heruntergefahren.
Error: (08/10/2015 09:29:24 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (08/10/2015 08:40:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (08/10/2015 08:39:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office:
=========================
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 8167.08 MB
Verfügbarer physikalischer RAM: 5726.08 MB
Summe virtueller Speicher: 16332.37 MB
Verfügbarer virtueller Speicher: 13626.16 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:43.79 GB) NTFS
Drive d: (Disk) (CDROM) (Total:0.29 GB) (Free:0 GB) CDFS
Drive g: (Volume) (Fixed) (Total:1863.01 GB) (Free:1038.18 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: DA05D2BC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 444DA12D)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Ergebnis ============================
|
|
11.08.2015, 20:30
| #5 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Und hier Gmer: Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-08-11 21:27:02
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP5T0L0-7 M4-CT256M4SSD2 rev.0001 238,47GB
Running: Gmer-19357.exe; Driver: C:\Users\Fragster\AppData\Local\Temp\kgddakod.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000075892ab1 5 bytes JMP 00000001009a2ac0
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
---- Processes - GMER 2.1 ----
Library c:\users\fragster\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuruufd.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-08-11 19:02:55) 0000000073160000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Core.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:24) 0000000064110000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\icuin55.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (ICU I18N DLL/The ICU Project)(2015-07-29 06:19:22) 000000004a900000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\icuuc55.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (ICU Common DLL/The ICU Project)(2015-07-29 06:19:22) 0000000005120000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\icudt55.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (ICU Data DLL/The ICU Project)(2015-07-29 06:19:22) 0000000062850000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Widgets.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:28) 0000000062390000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Gui.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000061f50000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Network.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000060fc0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5WebKit.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 000000005ffa0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Quick.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 000000005fd50000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Qml.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 000000005fae0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5WebChannel.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-07-29 06:19:22) 000000006a3c0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Sql.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 000000005fab0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5WebKitWidgets.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:28) 000000005fa70000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5PrintSupport.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 000000005fa20000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5OpenGL.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 000000005f9d0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:30) 000000005f860000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:30) 00000000734c0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-03-04 21:45:30) 00000000732d0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-03-04 21:45:30) 000000005f5b0000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-07-29 06:19:23) 0000000073190000
Library C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-03-04 21:45:30) 000000006a760000
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00268331816f
Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch@Epoch 14575
Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{D7687439-1F08-41EE-8FB6-C33A1A105CE1} v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=49212|Name=Akamai NetSession Interface|
Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{4A8FD2E9-F134-4FB2-9034-8163CC178215} v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5000|Name=Akamai NetSession Interface|
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00268331816f (not active ControlSet)
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Fragster\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe 1
---- EOF - GMER 2.1 ----
|
|
12.08.2015, 11:36
| #6 |
| /// the machine /// TB-Ausbilder | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ --> windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) |
|
12.08.2015, 19:49
| #7 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund)Code:
ATTFilter ComboFix 15-08-08.01 - Fragster 12.08.2015 20:39:44.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8167.4701 [GMT 2:00]
ausgeführt von:: c:\users\Fragster\Desktop\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0\3
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\background.html
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\background.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\crossriderManifest.json
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\extension.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\actions\icon1.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\icon128.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\icon16.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\icon48.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\notifications\icon1.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\notifications\icon48.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\chrome.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\cookie.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\message.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\push.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\background.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\app_api.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\async_api.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\bg_app_api.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\cookie_store.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\data_store.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\faye-browser-min.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\util.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\manifest.json
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\popup.html
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Fragster\AppData\Local\Savings Sidekick
c:\users\Fragster\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx
c:\users\Fragster\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
G:\install.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-07-12 bis 2015-08-12 ))))))))))))))))))))))))))))))
.
.
2015-08-12 18:43 . 2015-08-12 18:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-08-12 18:31 . 2015-08-12 18:31 -------- d-----w- c:\program files (x86)\VS Revo Group
2015-08-11 19:05 . 2015-08-11 19:05 -------- d-----w- C:\FRST
2015-08-11 17:55 . 2015-08-11 17:55 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-08-09 19:59 . 2015-06-09 18:03 3180544 ----a-w- c:\windows\system32\rdpcorets.dll
2015-08-09 19:59 . 2015-06-09 18:03 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 19:59 . 2015-06-03 20:17 243200 ----a-w- c:\windows\system32\rdpudd.dll
2015-08-09 19:59 . 2015-06-11 17:57 53248 ----a-w- c:\windows\SysWow64\tsgqec.dll
2015-08-09 19:59 . 2015-06-11 17:57 856064 ----a-w- c:\windows\SysWow64\rdvidcrl.dll
2015-08-09 19:59 . 2015-06-11 17:57 6131200 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-08-09 19:59 . 2015-06-11 17:56 7077376 ----a-w- c:\windows\system32\mstscax.dll
2015-08-09 19:59 . 2015-06-11 17:56 62976 ----a-w- c:\windows\system32\tsgqec.dll
2015-08-09 19:59 . 2015-06-11 17:56 1057792 ----a-w- c:\windows\system32\rdvidcrl.dll
2015-08-09 19:59 . 2015-06-11 13:15 429568 ----a-w- c:\windows\system32\wksprt.exe
2015-08-09 19:58 . 2014-12-11 17:47 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2015-08-04 18:35 . 2015-08-04 18:35 -------- d-----w- c:\users\Fragster\AppData\Local\GWX
2015-08-03 17:19 . 2015-08-03 17:21 -------- d-s---w- c:\windows\system32\GWX
2015-08-03 17:19 . 2015-08-03 17:19 -------- d-s---w- c:\windows\SysWow64\GWX
2015-08-03 17:19 . 2015-08-03 17:19 -------- d-s---w- c:\windows\system32\CompatTel
2015-08-03 17:19 . 2015-08-03 17:19 -------- d-----w- c:\windows\system32\appraiser
2015-08-03 17:17 . 2013-10-02 01:10 44544 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 17:17 . 2013-10-02 04:51 3584 ----a-w- c:\windows\system32\drivers\de-DE\tsusbflt.sys.mui
2015-08-03 17:17 . 2013-10-02 02:22 56832 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2015-08-03 17:17 . 2013-10-02 02:11 13824 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 17:17 . 2013-10-02 02:08 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 17:17 . 2013-10-02 01:48 56832 ----a-w- c:\windows\system32\MsRdpWebAccess.dll
2015-08-03 17:17 . 2013-10-02 01:48 18944 ----a-w- c:\windows\system32\wksprtPS.dll
2015-08-03 17:17 . 2013-10-02 00:14 50176 ----a-w- c:\windows\SysWow64\MsRdpWebAccess.dll
2015-08-03 17:17 . 2013-10-02 00:14 17920 ----a-w- c:\windows\SysWow64\wksprtPS.dll
2015-08-03 17:17 . 2013-10-01 23:31 1147392 ----a-w- c:\windows\system32\mstsc.exe
2015-08-03 17:17 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\SysWow64\mstsc.exe
2015-08-03 17:16 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2015-08-03 17:16 . 2012-08-23 14:08 30208 ----a-w- c:\windows\system32\drivers\TsUsbGD.sys
2015-08-03 17:16 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2015-08-03 17:16 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2015-08-03 17:14 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2015-08-03 17:14 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2015-08-03 17:12 . 2015-04-11 03:19 69888 ----a-w- c:\windows\system32\drivers\stream.sys
2015-08-03 17:12 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2015-08-03 17:12 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2015-08-03 17:12 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2015-08-03 17:12 . 2014-10-30 02:03 165888 ----a-w- c:\windows\system32\charmap.exe
2015-08-03 17:12 . 2014-10-30 01:45 155136 ----a-w- c:\windows\SysWow64\charmap.exe
2015-08-03 17:12 . 2013-01-24 06:01 223752 ----a-w- c:\windows\system32\drivers\fvevol.sys
2015-08-03 17:10 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2015-08-03 17:09 . 2015-05-09 18:26 493504 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 17:06 . 2015-08-03 17:06 -------- d-----w- c:\program files (x86)\Microsoft
2015-07-27 20:19 . 2015-07-27 20:19 -------- d-----w- c:\users\Fragster\AppData\Local\CEF
2015-07-27 17:07 . 2015-07-27 17:07 -------- d-----w- c:\program files\McAfee Security Scan
2015-07-21 19:55 . 2015-07-15 03:19 41984 ----a-w- c:\windows\system32\lpk.dll
2015-07-21 19:55 . 2015-07-15 03:19 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-07-21 19:55 . 2015-07-15 03:19 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-07-21 19:55 . 2015-07-15 03:19 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-07-21 19:55 . 2015-07-15 02:55 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-07-21 19:55 . 2015-07-15 02:55 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-07-21 19:55 . 2015-07-15 02:55 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-07-21 19:55 . 2015-07-15 02:54 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-07-21 19:55 . 2015-07-15 01:59 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-07-21 19:55 . 2015-07-15 01:52 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-07-15 08:14 . 2015-06-27 02:47 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-07-15 08:14 . 2015-06-27 02:43 5923840 ----a-w- c:\windows\system32\jscript9.dll
2015-07-15 08:14 . 2015-06-27 01:39 4520448 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-07-15 08:14 . 2015-06-25 08:57 3207168 ----a-w- c:\windows\system32\win32k.sys
2015-07-15 08:14 . 2015-06-17 17:47 404992 ----a-w- c:\windows\system32\gdi32.dll
2015-07-15 08:14 . 2015-06-17 17:37 312320 ----a-w- c:\windows\SysWow64\gdi32.dll
2015-07-15 08:14 . 2015-06-02 00:07 254976 ----a-w- c:\windows\system32\cewmdm.dll
2015-07-15 08:14 . 2015-06-01 23:47 210432 ----a-w- c:\windows\SysWow64\cewmdm.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-11 17:55 . 2013-11-01 18:55 321632 ----a-w- c:\windows\system32\javaws.exe
2015-08-11 17:55 . 2013-11-01 18:55 206944 ----a-w- c:\windows\system32\javaw.exe
2015-08-11 17:55 . 2013-11-01 18:55 206432 ----a-w- c:\windows\system32\java.exe
2015-08-11 17:55 . 2013-11-01 18:55 110688 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2015-08-11 17:54 . 2013-11-01 19:09 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-08-11 17:49 . 2012-03-30 20:56 778440 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-08-11 17:49 . 2012-03-30 20:56 142536 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-07-30 06:35 . 2014-07-16 18:50 162528 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2015-07-30 06:35 . 2014-07-16 18:50 141416 ----a-w- c:\windows\system32\drivers\avipbb.sys
2015-07-03 06:43 . 2012-06-11 20:34 130333168 ----a-w- c:\windows\system32\MRT.exe
2015-06-16 23:01 . 2015-06-16 23:01 1202856 ----a-w- c:\windows\SysWow64\FM20.DLL
2015-05-25 18:01 . 2015-08-03 17:13 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-11-14 22:11 . 2012-11-14 22:11 144896 ----a-w- c:\program files\vrayspawner2011.exe
2012-11-14 22:11 . 2012-11-14 22:11 1101312 ----a-w- c:\program files\dte_wrapper.dll
2012-11-14 22:11 . 2012-11-14 22:11 1038848 ----a-w- c:\program files\HairVrPrims2011.dll
2012-11-14 22:11 . 2012-11-14 22:11 802304 ----a-w- c:\program files\glslang.dll
2012-11-14 22:11 . 2012-11-14 22:11 4333568 ----a-w- c:\program files\vray.dll
2012-11-14 22:11 . 2012-11-14 22:11 3381944 ----a-w- c:\program files\libmmd.dll
2012-11-14 22:11 . 2012-11-14 22:11 173056 ----a-w- c:\program files\glvm.dll
2010-12-10 17:15 . 2012-11-14 22:11 7111168 ----a-w- c:\program files\vray2011.dll
2009-12-31 12:01 . 2012-11-14 22:11 266240 ----a-w- c:\program files\cgauth.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44 189464 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\Fragster\AppData\Local\Akamai\netsession_win.exe" [2015-07-23 4691384]
"Dropbox Update"="c:\users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe" [2015-06-06 134512]
"Spotify Web Helper"="c:\users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-05-08 2020920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Func KB-460"="g:\programme\Func Tastatur\KB-460_Core" [X]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-11-11 205336]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-07-30 782008]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"Avira Systray"="c:\program files (x86)\Avira\Launcher\Avira.Systray.exe" [2015-07-02 134368]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-06-08 334896]
.
c:\users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-5-5 39179912]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.11.149\SSScheduler.exe [2015-6-26 330456]
Netzwerk Server.lnk - c:\program files (x86)\WIBUKEY\Server\WkSvMgr.exe [2013-3-17 6580080]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys;c:\windows\SYSNATIVE\DRIVERS\lv302a64.sys [x]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe [x]
R3 mi-raysat_3dsmax2015_64;mental ray Satellite for Autodesk 3ds Max 2015 64-bit;g:\autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe;g:\autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [x]
R3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 AdAppMgrSvc;Autodesk Application Manager Service;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe ;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [x]
R4 TomTomHOMEService;TomTomHOMEService;g:\programme\TomTom HOME 2\TomTomHOMEService.exe;g:\programme\TomTom HOME 2\TomTomHOMEService.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 TabletServiceWacom;TabletServiceWacom;c:\windows\system32\Wacom_Tablet.exe;c:\windows\SYSNATIVE\Wacom_Tablet.exe [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 I1KBFLTR;T1 Gaming Keyboard;c:\windows\system32\drivers\I1KBFLTR.sys;c:\windows\SYSNATIVE\drivers\I1KBFLTR.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Pro Webcam C920(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys;c:\windows\SYSNATIVE\DRIVERS\wacmoumonitor.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-08-09 20:10 995144 ----a-w- c:\program files (x86)\Google\Chrome\Application\44.0.2403.130\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-08-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 17:49]
.
2015-08-02 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
- c:\users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06 12:07]
.
2015-08-11 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
- c:\users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06 12:07]
.
2015-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02 13:47]
.
2015-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02 13:47]
.
2015-07-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
- c:\users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05 19:49]
.
2015-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
- c:\users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05 19:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50 226328 ----a-w- c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-03-28 1570672]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-03-28 2673296]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mDefault_Search_URL = about:blank
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = about:blank
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE: Free YouTube to MP3 Converter - c:\users\Fragster\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Steam - c:\program files (x86)\Steam\Steam.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe
AddRemove-Free Video to MP3 Converter_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\Uninstall.exe
AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe
AddRemove-Steam App 280 - c:\program files (x86)\Steam\steam.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*^it#]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*^it#\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*^it#]
"0"=hex:76,00,6c,00,63,00,2e,00,5e,69,74,23,00,00,66,00,36,00,00,00,00,00,00,
00,00,00,00,00,76,00,6c,00,63,00,2e,00,5e,69,74,23,2e,00,6c,00,6e,00,6b,00,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\SecuROM\License information*]
"datasecu"=hex:54,09,13,dc,a1,1b,22,58,25,44,64,14,f7,e9,49,40,0f,78,5b,55,aa,
0c,72,93,ed,b5,3b,24,fb,44,e4,2d,ce,cd,94,04,84,21,e3,8c,8c,d7,e6,19,36,f7,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.18"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\PnkBstrA.exe
c:\users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
g:\programme\Func Tastatur\KB-460_Core.exe
c:\program files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
c:\users\Fragster\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
c:\program files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-08-12 20:47:08 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2015-08-12 18:47
.
Vor Suchlauf: 11 Verzeichnis(se), 62.282.231.808 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 65.060.921.344 Bytes frei
.
- - End Of File - - FCA182DA54DEBBFA4D09BDA1D494BEE4
A36C5E4F47E84449FF07ED3517B43A31
|
|
13.08.2015, 11:01
| #8 |
| /// the machine /// TB-Ausbilder | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
13.08.2015, 19:45
| #9 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) mbam: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 13.08.2015 Suchlaufzeit: 20:09 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.08.13.05 Rootkit-Datenbank: v2015.08.06.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Fragster Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 450995 Abgelaufene Zeit: 9 Min., 42 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 8 PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [6beee1278b003ef8412d00cd6f93a759], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [6beee1278b003ef8412d00cd6f93a759], PUP.Optional.OpenCandy.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OpenCandyHelperRunOnce, Löschen bei Neustart, [4613e2268dfea29419789f77877c9e62], PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WOW6432NODE\InstallIQ, In Quarantäne, [5bfe0efa414a7fb76db978e6030001ff], PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dhdepfaagokllfmhfbcfmocaeigmoebo, In Quarantäne, [a0b9c04822697db9e3fec8e935cf9a66], PUP.Optional.WebSearches.ShrtCln, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\SupHpUISoft, In Quarantäne, [e6730bfddfac80b6ad74b78ad2310df3], PUP.Optional.SavingsSidekick.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\APPDATALOW\SOFTWARE\Savings Sidekick, In Quarantäne, [c59490781f6c46f0ef0860f04bb8af51], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 Apps, In Quarantäne, [91c8f5132a6137ff9b0daa9200030cf4], Registrierungswerte: 4 PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [253442c636556ccaab170638907306fa] PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [5aff6b9dd7b471c5952d51ed3ec50000] PUP.Optional.CrossFire.SA, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS|5060, Savings Sidekick, In Quarantäne, [6dec5fa9e3a8142252f54af0c93b1be5] PUP.Optional.Snapdo.T, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, In Quarantäne, [392045c3167544f21e1d81c5867d16ea] Registrierungsdaten: 4 PUP.Optional.HelperBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[22379e6a1e6de6509e067bcbef16c937] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[1f3ac345d8b3cc6a05a357ef1de86d93] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[6eebcb3d048788ae8721a79fef160ef2] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[f960fc0ca2e9d4623e67f5519b6aa957] Ordner: 4 PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\OpenCandy_84723AEBDC1C4B9C8614AA8AAE0537CC, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, In Quarantäne, [9dbc5cacccbf50e6171fb93ead55827e], Dateien: 8 PUP.Optional.Softonic.A, C:\Users\Fragster\Downloads\SoftonicDownloader_fuer_getdataback.exe, In Quarantäne, [92c768a0315adf57bf11b04736cae917], PUP.Optional.OpenCandy, C:\Users\Fragster\Downloads\DTLite4454-0314.exe, In Quarantäne, [6fea20e8cfbc2b0b36c1a6cf15f0e020], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\2787.ico, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\Installer.exe, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\Linkury_ALL_p1v24.exe, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\OCBrowserHelper_1.0.3.85.dll, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, In Quarantäne, [9dbc5cacccbf50e6171fb93ead55827e], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) AdwCleaner: Code:
ATTFilter # AdwCleaner v4.208 - Bericht erstellt 13/08/2015 um 20:28:44
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-08-12.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Fragster - FRAGSTER-PC
# Gestarted von : C:\Users\Fragster\Desktop\AdwCleaner_4.208.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\FileTypeAssistant
Ordner Gelöscht : C:\Users\Fragster\AppData\Local\FileTypeAssistant
Ordner Gelöscht : C:\Users\Fragster\AppData\Roaming\dvdvideosoftiehelpers
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{33333333-3333-3333-3333-330033503360}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077507760}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077507760}
Schlüssel Gelöscht : HKCU\Software\Bitberry
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savings Sidekick
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17909
-\\ Mozilla Firefox v39.0.3 (x86 de)
-\\ Google Chrome v44.0.2403.155
-\\ Chromium v
*************************
AdwCleaner[R0].txt - [4432 Bytes] - [13/08/2015 20:25:29]
AdwCleaner[S0].txt - [3996 Bytes] - [13/08/2015 20:28:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4055 Bytes] ##########
JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.6 (08.10.2015:1)
OS: Windows 7 Home Premium x64
Ran by Fragster on 13.08.2015 at 20:31:47,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\Users\Fragster\Appdata\Local\28050
~~~ FireFox
Emptied folder: C:\Users\Fragster\AppData\Roaming\mozilla\firefox\profiles\uppe0zay.default-1409093548782\minidumps [27 files]
~~~ Chrome
[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
dhdepfaagokllfmhfbcfmocaeigmoebo
]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.08.2015 at 20:33:54,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Fragster (Administrator) auf FRAGSTER-PC (13-08-2015 20:34:52)
Gestartet von C:\Users\Fragster\Desktop
Geladene Profile: Fragster (Verfügbare Profile: Fragster)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Func KB-460] => G:\Programme\Func Tastatur\KB-460_Core
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe [4691384 2015-07-23] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Dropbox Update] => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-06] (Dropbox, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Spotify Web Helper] => C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-05-08] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012-08-26]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk [2013-03-17]
ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-03-30]
ShortcutTarget: Dropbox.lnk -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4803DB8B-CB64-458F-8261-FEDB79E73BCE}: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-04-05] ()
FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2009-09-25] (Wacom, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/O1DPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fragster\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-16] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: Adblock Plus - C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-29]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-09]
Chrome:
=======
CHR Profile: C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-02]
CHR Extension: (Google Docs) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-02]
CHR Extension: (Google Drive) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-02]
CHR Extension: (YouTube) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-02]
CHR Extension: (Google Search) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-02]
CHR Extension: (Google Sheets) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR Extension: (Gmail) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-05-15] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 mi-raysat_3dsmax2015_64; G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [86016 2011-09-15] () [Datei ist nicht signiert]
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-07-21] ()
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-02] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S2 TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [6245744 2010-03-09] (Wacom Technology, Corp.)
S4 TomTomHOMEService; G:\Programme\TomTom HOME 2\TomTomHOMEService.exe [93040 2014-06-05] (TomTom)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-12] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R3 I1KBFLTR; C:\Windows\System32\drivers\I1KBFLTR.sys [29440 2013-07-31] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [106760 2015-05-09] (WIBU-SYSTEMS AG)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-13 20:33 - 2015-08-13 20:33 - 00001877 _____ C:\Users\Fragster\Desktop\JRT.txt
2015-08-13 20:31 - 2015-08-13 20:31 - 00004175 _____ C:\Users\Fragster\Desktop\AdwCleaner[S0].txt
2015-08-13 20:25 - 2015-08-13 20:28 - 00000000 ____D C:\AdwCleaner
2015-08-13 20:24 - 2015-08-13 20:24 - 00007011 _____ C:\Users\Fragster\Desktop\mbam.txt
2015-08-13 20:08 - 2015-08-13 20:30 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 20:07 - 2015-08-13 20:07 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-08-13 20:07 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-13 20:07 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-13 20:07 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-13 20:06 - 2015-08-13 20:06 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Fragster\Desktop\JRT.exe
2015-08-13 20:05 - 2015-08-13 20:05 - 02248704 _____ C:\Users\Fragster\Desktop\AdwCleaner_4.208.exe
2015-08-13 20:04 - 2015-08-13 20:04 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Fragster\Desktop\mbam-setup-2.1.8.1057.exe
2015-08-12 20:53 - 2015-08-12 20:47 - 00041956 _____ C:\Users\Fragster\Desktop\ComboFix.txt
2015-08-12 20:47 - 2015-08-12 20:47 - 00041956 _____ C:\ComboFix.txt
2015-08-12 20:38 - 2015-08-12 20:47 - 00000000 ____D C:\Qoobox
2015-08-12 20:38 - 2015-08-12 20:46 - 00000000 ____D C:\Windows\erdnt
2015-08-12 20:38 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-12 20:38 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-12 20:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-12 20:37 - 2015-08-12 20:37 - 05634368 ____R (Swearware) C:\Users\Fragster\Desktop\ComboFix.exe
2015-08-12 20:31 - 2015-08-12 20:31 - 00001264 _____ C:\Users\Fragster\Desktop\Revo Uninstaller.lnk
2015-08-12 20:31 - 2015-08-12 20:31 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-08-12 20:29 - 2015-08-12 20:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Fragster\Desktop\revosetup95.exe
2015-08-11 21:27 - 2015-08-11 21:27 - 00089419 _____ C:\Users\Fragster\Desktop\Gmer.txt
2015-08-11 21:05 - 2015-08-13 20:35 - 00025369 _____ C:\Users\Fragster\Desktop\FRST.txt
2015-08-11 21:05 - 2015-08-13 20:34 - 00000000 ____D C:\Users\Fragster\Desktop\FRST-OlderVersion
2015-08-11 21:05 - 2015-08-13 20:34 - 00000000 ____D C:\FRST
2015-08-11 21:05 - 2015-08-11 21:05 - 00076340 _____ C:\Users\Fragster\Desktop\Addition.txt
2015-08-11 20:01 - 2015-08-11 20:09 - 00001111 _____ C:\Users\Fragster\Desktop\Neues Textdokument.txt
2015-08-11 19:07 - 2015-08-11 19:07 - 00380416 _____ C:\Users\Fragster\Desktop\Gmer-19357.exe
2015-08-11 19:04 - 2015-08-13 20:34 - 02173952 _____ (Farbar) C:\Users\Fragster\Desktop\FRST64.exe
2015-08-11 19:01 - 2015-08-11 19:01 - 00005312 _____ C:\Users\Fragster\Desktop\Avira_Ereignisse.txt
2015-08-09 22:18 - 2015-08-10 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-09 21:59 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-09 21:59 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-09 21:59 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 21:59 - 2015-06-03 22:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-08-09 21:58 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-08-04 20:35 - 2015-08-04 20:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\GWX
2015-08-03 19:19 - 2015-08-03 19:21 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-03 19:18 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2015-08-03 19:18 - 2015-01-09 01:43 - 00419936 _____ C:\Windows\system32\locale.nls
2015-08-03 19:17 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-08-03 19:17 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 19:17 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-08-03 19:17 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-08-03 19:16 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-08-03 19:16 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-08-03 19:16 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-08-03 19:16 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-08-03 19:14 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-08-03 19:14 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-08-03 19:13 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-03 19:13 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-03 19:13 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-03 19:13 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-03 19:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-08-03 19:13 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-03 19:13 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-03 19:13 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-03 19:13 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-03 19:13 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-03 19:13 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-03 19:13 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-03 19:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-08-03 19:13 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-08-03 19:13 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-08-03 19:13 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-08-03 19:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-08-03 19:13 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-08-03 19:13 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-08-03 19:13 - 2014-11-11 03:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-08-03 19:13 - 2014-11-08 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-03 19:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-08-03 19:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-03 19:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-03 19:13 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-08-03 19:13 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-08-03 19:13 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-08-03 19:13 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-03 19:13 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-08-03 19:13 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-08-03 19:13 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-08-03 19:13 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-08-03 19:13 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-08-03 19:13 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2015-08-03 19:13 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-08-03 19:13 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-08-03 19:13 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-08-03 19:13 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-03 19:13 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-03 19:13 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-08-03 19:13 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2015-08-03 19:13 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-08-03 19:13 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-08-03 19:13 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-08-03 19:13 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2015-08-03 19:13 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-08-03 19:13 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-08-03 19:13 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2015-08-03 19:13 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-08-03 19:13 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-03 19:13 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-08-03 19:13 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-08-03 19:13 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-03 19:13 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-08-03 19:13 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-08-03 19:13 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2015-08-03 19:13 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-08-03 19:13 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2015-08-03 19:13 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-08-03 19:13 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2015-08-03 19:13 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-08-03 19:13 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-08-03 19:13 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-08-03 19:13 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-08-03 19:13 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-08-03 19:13 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-08-03 19:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-03 19:12 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-08-03 19:12 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-08-03 19:12 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-08-03 19:12 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-08-03 19:12 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-08-03 19:12 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2015-08-03 19:10 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-08-03 19:09 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 19:06 - 2015-08-03 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-07-29 08:19 - 2015-07-29 08:19 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-27 22:19 - 2015-07-27 22:19 - 00000000 ____D C:\Users\Fragster\AppData\Local\CEF
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-27 00:30 - 2015-07-27 00:30 - 00000000 ____D C:\Users\Fragster\Desktop\Der kleine Bruder CD 1
2015-07-21 23:14 - 2015-08-04 21:17 - 00000000 ____D C:\Users\Public\Documents\Jagged Alliance - Back in Action
2015-07-21 21:55 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 21:55 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 21:55 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 12:24 - 2015-07-16 12:24 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-07-15 11:12 - 2015-07-15 11:12 - 00000796 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2015.lnk
2015-07-15 10:28 - 2015-07-15 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Steuer-Sparbuch 2015
2015-07-15 10:18 - 2015-07-15 10:18 - 01038704 _____ (Amazon Services LLC) C:\Users\Fragster\Downloads\WISO_Steuer_Sparbuch_2015_Downloader.exe
2015-07-15 10:14 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 10:14 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 10:14 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 10:14 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 10:14 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 10:14 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 10:14 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 10:14 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 10:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 10:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 10:13 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 10:13 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 10:13 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 10:13 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 10:13 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 10:13 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 10:13 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 10:13 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 10:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 10:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 10:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 10:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 10:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 10:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 10:13 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 10:13 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 10:13 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:13 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 10:13 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 10:13 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 10:13 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:13 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:13 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 10:13 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 10:13 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 10:13 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 10:13 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 10:13 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 10:13 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 10:13 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 10:13 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 10:13 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 10:13 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 10:13 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 10:13 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 10:13 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 10:13 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 10:13 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 10:13 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 10:13 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 10:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 10:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 10:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 10:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-13 20:34 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2015-08-13 20:34 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2015-08-13 20:34 - 2009-07-14 07:13 - 01620110 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-13 20:33 - 2012-03-30 22:21 - 01796713 _____ C:\Windows\WindowsUpdate.log
2015-08-13 20:32 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-13 20:32 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-13 20:30 - 2012-05-10 19:55 - 00000000 ___RD C:\Users\Fragster\Dropbox
2015-08-13 20:30 - 2012-05-10 19:53 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Dropbox
2015-08-13 20:29 - 2015-04-02 15:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-13 20:29 - 2012-09-22 15:20 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\WTablet
2015-08-13 20:29 - 2010-11-21 05:47 - 00548270 _____ C:\Windows\PFRO.log
2015-08-13 20:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-13 20:29 - 2009-07-14 06:51 - 00283339 _____ C:\Windows\setupact.log
2015-08-13 20:21 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2015-08-13 20:12 - 2012-10-05 21:49 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-13 20:11 - 2015-04-02 15:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-13 20:05 - 2015-06-06 14:07 - 00001236 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-12 20:49 - 2012-03-30 22:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-12 20:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-12 20:45 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-08-12 20:29 - 2012-08-30 00:06 - 00000000 ____D C:\Users\Fragster\AppData\Local\Akamai
2015-08-11 21:56 - 2013-11-16 19:21 - 00000000 ____D C:\Windows\rescache
2015-08-11 19:56 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Oracle
2015-08-11 19:56 - 2012-03-31 17:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-11 19:55 - 2013-11-01 20:55 - 00321632 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-11 19:55 - 2013-11-01 20:55 - 00000000 ____D C:\Program Files\Java
2015-08-11 19:54 - 2013-11-01 21:09 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-08-11 19:54 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-11 19:49 - 2012-03-30 22:56 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-11 19:49 - 2012-03-30 22:56 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-11 19:49 - 2012-03-30 22:56 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 19:45 - 2013-02-11 22:14 - 00001978 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-08-10 20:03 - 2012-05-08 22:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-04 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2015-08-03 19:21 - 2012-03-30 23:08 - 00066376 _____ C:\Users\Fragster\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-03 19:20 - 2009-07-14 06:45 - 05112912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-03 19:20 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-03 19:06 - 2012-07-09 12:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-02 16:05 - 2015-06-06 14:07 - 00001184 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-31 22:28 - 2015-04-14 18:47 - 00000080 _____ C:\Users\Fragster\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-07-31 09:09 - 2015-07-11 23:42 - 00001120 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-31 09:09 - 2014-07-16 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-31 09:09 - 2013-10-11 19:31 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-30 08:35 - 2014-07-16 20:50 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-30 08:35 - 2014-07-16 20:50 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-27 22:17 - 2012-03-30 23:14 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Origin
2015-07-27 22:17 - 2012-03-30 23:13 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 22:16 - 2012-03-30 23:13 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-27 20:13 - 2014-09-15 11:35 - 00000726 _____ C:\Windows\wiso.ini
2015-07-27 19:11 - 2014-09-15 15:15 - 00000000 ____D C:\Users\Fragster\Documents\Steuer-Sparbuch
2015-07-27 19:07 - 2012-08-26 16:53 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Spotify
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Local\Spotify
2015-07-21 23:13 - 2012-03-31 00:38 - 00725453 _____ C:\Windows\DirectX.log
2015-07-19 18:57 - 2013-05-22 22:11 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\vlc
2015-07-19 16:36 - 2012-04-01 19:38 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\dvdcss
2015-07-19 13:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-18 16:00 - 2015-06-06 14:07 - 00004216 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-18 16:00 - 2015-06-06 14:07 - 00003820 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-16 12:04 - 2015-04-02 15:47 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 12:04 - 2015-04-02 15:47 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-16 03:12 - 2012-10-05 21:49 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-16 03:07 - 2012-10-05 21:49 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-16 03:07 - 2012-10-05 21:49 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-15 17:07 - 2015-04-14 18:47 - 00000000 ____D C:\Program Files\Rockstar Games
2015-07-15 17:07 - 2014-08-18 19:36 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-07-15 11:25 - 2012-07-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 11:23 - 2013-08-15 12:46 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 11:12 - 2014-09-15 11:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\Buhl
2015-07-15 10:56 - 2012-03-30 23:03 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Skype
2015-07-15 10:28 - 2014-02-26 01:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2012-11-15 00:11 - 2009-12-31 14:01 - 0266240 _____ (Chaos Group Ltd) C:\Program Files\cgauth.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1101312 _____ () C:\Program Files\dte_wrapper.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0802304 _____ () C:\Program Files\glslang.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0173056 _____ () C:\Program Files\glvm.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1038848 _____ (Joe Alter Inc) C:\Program Files\HairVrPrims2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 3381944 _____ (Intel Corporation) C:\Program Files\libmmd.dll
2012-11-14 23:06 - 2012-11-15 00:11 - 0000125 _____ () C:\Program Files\plugin.ini
2012-11-15 00:11 - 2012-11-15 00:11 - 4333568 _____ (Chaos Software Ltd) C:\Program Files\vray.dll
2012-11-15 00:11 - 2010-12-10 19:15 - 7111168 _____ (Chaos Software Ltd) C:\Program Files\vray2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0172032 _____ () C:\Program Files\vraydummy2011.max
2012-11-15 00:11 - 2012-11-15 00:11 - 0011798 _____ () C:\Program Files\vraydummy2011.xml
2012-11-15 00:11 - 2012-11-15 00:11 - 0144896 _____ () C:\Program Files\vrayspawner2011.exe
2015-05-08 20:09 - 2015-05-08 20:10 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-05-08 20:07 - 2015-05-08 20:07 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe Targa Format CS5 Prefs
2012-04-10 20:44 - 2012-10-21 19:37 - 0000125 ___SH () C:\ProgramData\.zreglib
Einige Dateien in TEMP:
====================
C:\Users\Fragster\AppData\Local\Temp\avgnt.exe
C:\Users\Fragster\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaeqjpl.dll
C:\Users\Fragster\AppData\Local\Temp\Quarantine.exe
C:\Users\Fragster\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-03 20:57
==================== Ende von Ergebnis ============================
|
|
13.08.2015, 19:46
| #10 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Addition_02: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Fragster (2015-08-13 20:35:09)
Gestartet von C:\Users\Fragster\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2049330118-253893184-3514707546-500 - Administrator - Disabled)
Fragster (S-1-5-21-2049330118-253893184-3514707546-1000 - Administrator - Enabled) => C:\Users\Fragster
Gast (S-1-5-21-2049330118-253893184-3514707546-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2049330118-253893184-3514707546-1004 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe After Effects CS3 Third Party Content (HKLM-x32\...\Adobe_3675c95c239b992d5d0ee8fce969b9e) (Version: 3 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Content (HKLM-x32\...\{C0AA232E-BD1B-40B5-A176-A2BEB67FFAE1}) (Version: 10 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Royalty Content (HKLM-x32\...\{CD29B5CA-4727-4114-9AD9-25CCCE6E4014}) (Version: 10 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen (HKLM-x32\...\Adobe_67a7fb1e97aa14ee9ef0950eb6fd757) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{53BC789D-073D-47B6-AA9F-DE05990AF07A}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Premiere Pro CS3 Third Party Content (HKLM-x32\...\Adobe_71c180716438072ebd356ce2549df41) (Version: 3 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin’s Creed® III (HKLM-x32\...\Steam App 208480) (Version: - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version: - Ubisoft Montreal)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1995390206.48.56.3157818 - Audible, Inc.)
Autodesk 3ds Max 2011 64-bit (HKLM\...\{39BFB02A-9692-0409-A808-3F5C7B1F8953}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2015 (HKLM\...\Autodesk 3ds Max 2015) (Version: 17.1.149.0 - Autodesk)
Autodesk 3ds Max 2015 (Version: 17.1.149.0 - Autodesk) Hidden
Autodesk 3ds Max 2015 Populate Data (HKLM\...\{57E92DED-DC6C-41E5-B9E1-76D83BD2EABE}) (Version: 17.0.0.0 - Autodesk)
Autodesk 3ds Max 2015 SP1 (HKLM\...\Autodesk 3ds Max 2015 SP1) (Version: 17.1.149.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Backburner 2015 (HKLM-x32\...\{8C5F38D2-8EFE-49A4-B3F5-BF3210FED168}) (Version: 15.0.0.0 - Autodesk)
Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)
Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden
Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2015 (HKLM\...\{9167CA34-4E48-49E3-8892-3C439739D2D3}) (Version: 17.0.2 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2015 (HKLM-x32\...\{9F6466D9-6EFC-4A10-B931-C72D1A3F1763}) (Version: 5.2.9.100 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Avira (HKLM-x32\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Botanicula (HKLM-x32\...\Steam App 207690) (Version: - Amanita Design)
Broforce (HKLM-x32\...\Steam App 274190) (Version: - Free Lives)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version: - )
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )
Canon MP540 series Benutzerregistrierung (HKLM-x32\...\Canon MP540 series Benutzerregistrierung) (Version: - )
Canon MP540 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP540_series) (Version: - )
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Command & Conquer Alarmstufe Rot 2 (HKLM-x32\...\Red Alert 2) (Version: - )
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Deadlight (HKLM-x32\...\Steam App 211400) (Version: - Tequila Works, S.L.)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version: - Eidos Montreal)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
DIY DataRecovery DiskPatch 3 (HKLM-x32\...\DiskPatch_is1) (Version: 3.5.300 - DIY DataRecovery.nl)
Dropbox (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Free Video to MP3 Converter version 5.0.17.903 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.17.903 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Func KB-460 Settings software (HKLM-x32\...\{8918A402-4EEF-489F-940F-DC25BEEFA6FF}_sbay) (Version: - )
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version: - Valve)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
iExplorer 3.1.1.0 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant LLC)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)
Jagged Alliance - Back in Action (HKLM-x32\...\Steam App 57740) (Version: - Coreplay GmbH)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kane & Lynch: Dead Men (HKLM-x32\...\Steam App 8080) (Version: - IO Interactive)
Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version: - Rockstar Studios)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Excel 2007 (HKLM-x32\...\EXCEL) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint 2007 (HKLM-x32\...\POWERPOINT) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4554 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version: - CAPCOM Co., Ltd.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version: - Coffee Stain Studios)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version: - Christian Handorf)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version: - Yager)
Spotify (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs)
State of Decay: Year-One (HKLM-x32\...\Steam App 329430) (Version: - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version: - Capcom)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Expendabros (HKLM-x32\...\Steam App 312990) (Version: - Free Lives)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version: - Hinterland Studio Inc.)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2009 - Thrustmaster)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Trapcode Suite 64-bit (HKLM-x32\...\InstallShield_{BA357941-25A7-410C-A47E-9AAF7DE1248B}) (Version: 12.0.0 - Red Giant Software)
Trapcode Suite 64-bit (Version: 12.0.0 - Red Giant Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
V-Ray for 3dsmax 2011 for x64 (HKLM\...\V-Ray for 3dsmax 2011 for x64) (Version: 2.20.03 - Chaos Software Ltd)
V-Ray for 3dsmax 2015 for x64 (HKLM\...\V-Ray for 3dsmax 2015 for x64) (Version: 3.00.08 - Chaos Software Ltd)
Wacom Tablett (HKLM-x32\...\Wacom Tablet Driver) (Version: - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.4 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.3 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{04179292-C74D-4AA1-8FFA-8387CA3B67B5}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{54A83CB1-9CDE-4E73-B263-90C64D4619FC}) (Version: 22.00.8811 - Buhl Data Service GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> G:\Autodesk\3ds Max 2011\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll Keine Datei
==================== Wiederherstellungspunkte =========================
03-08-2015 19:06:20 Windows Update
03-08-2015 19:14:15 Windows Update
03-08-2015 20:58:01 Windows Update
05-08-2015 08:12:14 Windows Update
10-08-2015 19:27:26 Windows Update
12-08-2015 20:32:58 Revo Uninstaller's restore point - File Type Assistant
12-08-2015 20:35:15 Revo Uninstaller's restore point - Free File Viewer 2012
12-08-2015 20:36:40 Revo Uninstaller's restore point - WindowsMangerProtect20.0.0.722
13-08-2015 20:31:49 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2015-08-12 20:45 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {010E9455-640F-49EF-8341-56B03E47E5B8} - System32\Tasks\{131CE2A1-80E5-4013-8A2A-6873D7F84BC5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {0A600157-92CB-4C7D-A3D7-FE8700F71386} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {173AE9B3-DC2E-4AF3-B64B-5B9349290381} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\CloneDVD2\ExecuteWithUAC.exe [2008-06-27] ()
Task: {1972673D-70BD-46DC-B45A-05F6EABF7F1C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {26D1A02D-67C2-4FB0-9861-254C166460D1} - System32\Tasks\{48CF35FF-433B-432E-8D27-6B4DDC955A4E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {26F12A49-55E0-49EB-B694-DFEBA829A253} - System32\Tasks\{26AF6ED6-A302-4497-88B2-D36EE5833B6D} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {3ACEA9AB-9CD1-4981-9429-97C14693D6DC} - System32\Tasks\{4268E6F3-C933-400A-A726-044594806FF1} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6F74DD1A-AEBA-475F-B26B-097BE57850F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {A145D6B4-B10E-4A2C-8280-31494289BAE6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {A4CD521B-493B-44A4-9DAA-D3DD144BD91C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {AF37AC83-2051-4952-B6D6-8BBD0CEE24F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {C9DF2EBC-0F2C-4485-A15D-5167FE2108A6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {CDA8CE5F-AA6D-464F-B7F6-9873E97E288A} - System32\Tasks\AdobeAAMUpdater-1.0-Fragster-PC-Fragster => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {DE7D3939-590E-451B-AADF-4506D005ED12} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {E78E4FBD-EF42-44FA-858D-2AE8EF13E848} - System32\Tasks\{B72B600D-D7DA-4470-8738-08ECF6CEDB95} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3BCD646-49D2-483E-803D-D2AC8E7A061E} - System32\Tasks\{B177CA05-EDC9-4630-BADE-B0C6AEBFDBAC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.115/de/go/help.faq.installer?LastError=1603
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Fragster^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Fragster\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "G:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{04772F86-5DB8-4C6A-A377-08DF17290936}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{574CA899-AB81-4E4D-AB8D-8FEC89D09293}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{549D29DC-91F6-4C15-ACE7-26570D36EA35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{C23751AF-6623-402C-9934-86ECBBCA93A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{7A3859A1-076C-4F92-9E2F-EEF12754F48F}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8D38BD63-BC0A-4FA1-9DDF-BC3B68D1814A}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E9EF6603-8105-4B60-A3B1-8278879E4905}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AAF77C0F-6CAC-44AB-BE11-C7881F173CB1}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{5D94EAF6-F3FB-48A0-B8AC-2F67D7E52F1A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{61E6332A-CDC4-47B0-AED4-990B3BCA17C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B9732DB-2878-4197-9924-EFFD925FE0C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{53810B60-CC84-4949-95FD-5DE17B626E91}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A79D7BB9-70CD-47AD-B18B-B278F9DBF0D0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{92164434-A096-4C22-93AF-02C27B5D1DC5}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A216B3C5-B8AA-4EB5-8A86-F91B6B14459B}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{0D0D48AF-DAB4-4984-B571-AAD6462491DF}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{ADBA8C4A-8875-417A-AE97-E07C5CC99602}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [{42C73DB4-CDA0-46BC-8A81-2042AC4CD019}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{560F1BC0-FA3D-41D6-A8F4-3F0F3F72EE76}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F624A1E4-81C3-44F5-AAAA-F1A0C3D00788}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{433C07DF-C084-4E1C-9C2A-35949029C429}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{939C8397-8C0D-4160-8D24-2C96E38F4CFB}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{9560D2B1-ACC8-46C7-AF73-ADAF2AE9626F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{8845F407-343F-4752-919D-101797C7054A}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [{F36F179C-FEBD-43C6-A6F8-182CDE38A5A2}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [TCP Query User{BF60A732-4555-4159-A5E4-5ABA035C133B}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{37F16CD7-2601-4BB0-B1F8-6AC408FBF471}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{4CECB07B-A4CD-4191-9FAE-D5554A1E1C73}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{6DA30031-A46F-46A1-A0E9-60FB8E981913}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{357C4974-F08A-46F0-AED2-9EB147A3C6B4}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{3BEAF8A0-EF3C-4580-B1B1-157728B4D34A}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{8E3AECEB-B488-4CAA-9A7B-B18604862034}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{BC8D44D6-D7C8-4182-891F-7D8EC5714CC3}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{9BF8916F-677E-4128-B364-88072B430ABD}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{8B001813-1808-4064-8EF1-85672B74614E}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{403299AC-828C-4252-971D-45AD03DD430A}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{0FFB8E58-3C7D-4348-8445-B9DFFBE36AFA}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{73EAC45E-2EE4-43EE-A2DD-635626D08266}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{BC8F8396-981B-4161-B8E0-2C369C3B2332}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{C871AE4F-4F5C-4B51-B17E-7F2760048088}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{CF093C2D-6ADC-44C2-9A82-89A72EFE42BB}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{D0F5B256-573F-4C5B-8256-3C2A751BEC3C}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{D3B2E3E1-7945-467A-82D4-3550592AC818}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{2556B1F4-C425-4D4A-BBE1-F98EB768CF2E}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9DB9FA04-2743-4EF0-9257-8A50BA34D124}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{FBBBB055-BCEE-4A0F-A238-797A2FE566A8}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{7C777E7F-8380-43BF-8943-3E7C8B942F3B}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{1DAEC672-62C1-4E96-A116-C2A4E64BEDA4}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{699D413B-A161-4A89-A545-787A458804CA}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{D6BBFD72-9338-4893-B2D3-F026C717CAB7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E879D55B-48AD-4FF0-A060-213DD3B00A9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{18B1B000-01D1-4AC0-A928-45664A067013}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6E096CFE-4002-4AB6-AE44-8E46C572FA3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3C791AB1-6310-497D-9454-2695EBADD24F}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{92709542-8D6B-470B-B2D2-BCF3A7E75C67}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{F6692971-2805-4CE9-9882-0E85B559BA48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4C917EE2-A10C-4974-A9EC-03BAF40C4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C8E0F0F8-5304-4903-A643-63DE99F60E0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DCFBC4EC-39B3-48B9-BD69-7D1BC7A2AECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BF130E0C-6EF2-49DD-979C-D3C1FC6EB875}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E6713910-9B34-48DD-86D8-8E66B2EC27FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D5CB6D0-91C1-4588-A9BD-F4871377D466}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{AE21C3B2-C9F2-4AE0-B15F-1F0C7B55F083}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [TCP Query User{D28FE169-D35F-41F8-B34E-F046E7D806E4}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [UDP Query User{A13F3145-95E2-4BD5-95D2-91E2DB55A05B}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [{4514C525-706D-49A4-82C8-C6334236C941}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0765D295-ADD1-4DEF-9A1B-D9B77EAA2C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ABE242B8-1A78-475A-9F92-E15C62CAB44D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EB6B6981-75BD-472B-9F7F-D5E931EC97F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EE4476E3-56AE-4C9C-9B39-4D1351E809B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{23BCF370-916F-46DD-9C86-23022703724D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1CA5304E-6674-4CEC-88D1-7DFB10088BFC}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AE726CEB-4819-4B53-AE81-C2104B1D19AA}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{4891125E-5848-4732-AB5A-DBD65919BFCF}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{5C7B94D8-C8AA-4AE4-8F3E-3C4E9C54C79B}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{F751BFA2-6348-427B-825E-51B148D73035}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{747968A5-22E9-4E9D-AA3C-6B5C6B4270C9}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{2501AC61-7494-478E-8846-659AB0C5DB79}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{ED392498-9A12-4F3C-9C98-1898CB6CB5B1}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{0E3695E9-234A-4943-90B1-91484FC4E53C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F85C0664-0DAA-4C14-88A8-E2A65EBA519E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4C8EDC58-E5D7-4D3A-9939-DC47D5A4E276}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D990613-3F11-4775-8916-2796202413AB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{21040FD5-4830-4A11-9714-2B7DF08AD411}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{81A8077B-281C-4470-A2F8-E61C13720356}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D780652A-2985-4428-9CB0-92600E2D9BAA}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{BB248C14-F16C-450A-8BAF-140781E4121E}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{080B6801-9FC8-4B0C-9805-325DF10030A1}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{983810A9-C3F8-4D61-B8F3-C9DCA43AF64E}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{9161CDAC-F6DA-4F85-BB33-13E3A0593CFB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{09546B13-D2E3-4A10-9199-9DF234966AAB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [TCP Query User{F6ADA89A-C5E9-4504-A452-D146CD4D6CA6}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{556B934E-CB16-4DA2-9DC2-83B78DF9252A}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A91893FB-FBA6-4EA6-915C-3AF348FA98DF}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{6DBB5E7E-241E-4062-B0DB-B761CE09435B}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{1318A5A6-CEBE-4C95-8416-691C4EDE6A27}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{D58A04A8-5986-44E6-8B77-31B049373598}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{ED836365-CE81-42C7-9CFC-816F9BF8752D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{680B8274-FA65-447B-8757-066B3EA8D820}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{25B73349-C4A5-4948-B5FA-D3BD47F62EAC}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{D2F05AE9-111B-4A68-A677-2B20A724F67D}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{2BAA366C-06C3-4B42-9A80-BB6A0EE5C505}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F331FE8C-14CB-453C-B3C0-56F8043006C0}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [TCP Query User{1730FA25-BFF7-498A-B90A-F742D8A381DE}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{65F843E5-4908-430C-8FDD-2753F843013E}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{8B25FA57-A457-49F8-A244-1D59E7004041}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9070EC11-5D6C-4419-A266-21764558A7C4}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{ADF83E23-75F1-4158-B38D-9E025F424B13}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{DFEF48F2-6D3C-430B-85DC-B7114C81A5A3}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{F50297AD-EFC4-45DA-B302-BDD29D0C1B1B}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{A9C07798-6F06-4B21-8AC0-DDB080025B73}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{DF5AA543-EAE5-4673-904A-661F81D649F1}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{33879106-1BAE-4841-9880-1CEE70D30A39}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{9CAC3A7A-BE1B-41D6-A81B-4A957BEC8283}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{800606E3-8931-41DD-80AD-900A0C3E6C8B}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{60D70F08-EB56-4CD6-BDB3-BE12C77317A6}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{8A46F07B-1399-4CAE-B49C-20E69D4911BC}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{3154C3F1-900B-4552-9AD4-C6DD1979BC0A}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{195F4797-35E1-4DF7-8176-2CCFFDB1246F}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [TCP Query User{BAA61285-4407-4C86-83BF-556DF23649DB}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{42ADCBB1-C6B0-41BF-9DC6-10F6A8541226}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{81A3E701-8BF5-426E-9B9F-0140CE200AB0}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7B1D7A83-AE0C-4240-B17A-84263B50156B}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{04549210-E155-463F-B3A0-3273E899260D}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{01E3C50B-55A5-4983-A7C8-53E7201FB795}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{7465A788-F8FF-4206-A43E-5AB3992C8C10}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9BF02656-0546-45F3-9A40-CAEE617953E0}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{CBFC222F-CD0D-48D1-84A8-F2D7AF57EE1A}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{A48AAC77-B6F3-4962-A88E-B144BB3AC3B6}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{8D164D4D-C6DD-4F70-85E0-7E99CFDEFFAF}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{2BF4F822-B92F-4B98-B841-2821758DFC25}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{8AA187CD-50F9-4EB5-B0C7-7215B0C5AB94}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{D0D6D217-D15E-4F12-A899-2C46D5D148F6}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{B1EC055C-75E3-41B3-92EE-132F00B8A4BF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{A97E5FC3-A34F-466C-AFAA-FE329318A2D1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1D7D0ECA-92AF-4424-95F7-E05294B252C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{0E245602-5662-4494-A000-7E29DE940BFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{B532F760-64E7-4378-94E9-DD229D94E8AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{BBACCB83-78A5-4969-9FD8-4D696ED0DB0F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [TCP Query User{45F662C7-58FC-430B-9717-731AD59BE39E}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [UDP Query User{BD475D86-9B89-4617-BC51-C69FB3FB882B}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [{7DED0881-FF83-40AB-A0B8-7255CC737D9A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{6289FC7E-7D17-427B-9F7C-040CE9B04F52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{9D01342C-3464-4414-A420-AC07DA00F57D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5FEC9C48-EA4A-4677-9BC7-6BB7A1957AF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{E854083A-7487-42E4-A4EF-865951EE5AD9}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{FF966DA4-F86C-416A-84E9-8A110D94900A}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{01A8DE84-10C1-4557-AADA-31107B198A04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{55B7142D-372E-4220-B36C-9A327449FE55}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{58B0ECB5-27D8-478F-AD28-D9B883C9372D}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{510FF323-F72A-41C3-84C1-22815EF836CB}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{D61B73A0-9A05-4400-B605-26B881B6825A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B6EC10F-AAC5-4C6E-A3C3-3213838F4315}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54220F57-3EC1-4C22-961E-7A4858932FF4}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D5333F6A-1D67-4867-9E16-61126A2A9E0B}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{88472125-5C81-4D9F-AA94-1DA6E57D5A97}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{94478AAC-386B-4AB9-A147-C1DAF43EFB8C}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{7FB5CF23-230F-4B47-8300-FF15C146D36E}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{78FA8D49-81A8-4453-9DAD-CC141F20FA04}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{D8AE0B5A-BBE1-44B8-A0DD-5220FD445491}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{4ECDF369-99C6-4E1F-AB3D-D002BFE60225}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{BDBD7F25-A0D1-404F-A84C-6C0BCA43F764}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{818D2685-B72B-4BDE-A449-847334ADB541}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{330D1A31-851D-4BD5-B5A8-4D560B3BB70E}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{C95CC401-5D09-4297-BE13-684D36EC6002}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{52A78883-B5F2-49D0-B871-AF1F040E40FB}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [{81551F1B-273B-41D2-92BE-164D3B11A2FC}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [TCP Query User{27924A78-3837-4643-B729-CF68A1288617}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [UDP Query User{FAEC16AF-64B7-4809-AC1A-BCD91EB6542A}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [{C0C7C695-24C3-4F50-B0E6-75AFCD15C41E}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{D7764ACC-7A01-4BB3-AE62-DC706CDE42C6}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{60E1D514-CBF2-44E4-BB4A-4D7CF0121687}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{4924B6E3-A427-430C-B0C2-092517A533FB}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{F2D1C817-EFA3-435B-B54D-1335F64BE8FA}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E674C8C8-30DE-4401-856A-A4389D2D8EF7}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{2D0B287E-2D9C-4068-972E-1C294D520941}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{6FA2EA87-26C1-43AF-8508-DEE0D884C1D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{D6D2444A-7AE8-4836-AAC6-4E455289BAA1}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{34612F93-F7AA-43F8-A477-8E19DF57C1B5}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{818D1CA3-65A4-4845-BEA5-36614E6BBCA3}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{977444CC-3FD0-47EF-8DAF-B26E4775F3C2}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35079B59-D6F4-4468-AB56-D68ADA4DA551}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{C1A7A97D-9C5E-4748-A2D8-E299A000BAB6}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{3D34C7CE-88A7-403B-A07A-32696C136419}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{8BDD7D3A-7E2B-442D-B5A7-04ACE5300178}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{31AB5FE5-3B04-4443-ACED-243A857C7DDD}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{DFD70EAF-9819-41AC-B2CF-D032A11FBB9C}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{C07E8B73-6083-4E1E-BBB9-1DAD7BE45CD8}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{477C0385-9098-4090-97B8-CDECA67116A6}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{657CD02C-4992-4814-9E84-6F1F90192C0F}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{2FC44B08-BB5F-424F-9062-96FF1BA08816}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{1967D040-DF78-48D9-9EB0-64741F61E8F6}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{BFF41C64-7C68-46B1-874B-8DC31FC02F23}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{358FC54A-852B-4FCA-A476-AD7C4FE96CC2}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{6165BD4E-3EF1-4539-861D-00C355660487}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{BAE3D0D7-D6A3-4239-9C6E-B00FE90DDC01}] => (Allow) LPort=49172
FirewallRules: [{423A5F07-D893-4FCC-8785-AC51A6A229FC}] => (Allow) LPort=5000
FirewallRules: [{3545FCBD-72F0-4320-B02F-646D30A37DAD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D5C1982B-74CE-4211-A6B4-04F77BC50BD2}] => (Allow) LPort=49233
FirewallRules: [{906E88A6-6DA0-4AD9-B01B-442B854B6CF2}] => (Allow) LPort=5000
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/13/2015 08:30:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xd9c
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/13/2015 08:30:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/13/2015 08:21:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xca4
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/13/2015 08:21:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/13/2015 08:03:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xdec
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3
Error: (08/13/2015 08:03:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/12/2015 08:47:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/12/2015 08:45:21 PM) (Source: Avira Antivirus) (EventID: 4122) (User: NT-AUTORITÄT)
Description: Die Datei AvShadow konnte nicht geladen werden.
Fehlercode: 0x3fa
Error: (08/12/2015 08:45:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcCan't create NSS process. [0]
Error: (08/12/2015 08:45:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to create process. [1018]
Systemfehler:
=============
Error: (08/13/2015 08:34:12 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Software Protection" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Error: (08/13/2015 08:32:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/13/2015 08:32:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/13/2015 08:32:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TabletServiceWacom" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office:
=========================
CodeIntegrity:
===================================
Date: 2015-08-12 20:43:36.324
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-08-12 20:43:36.293
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 8167.08 MB
Verfügbarer physikalischer RAM: 5213.04 MB
Summe virtueller Speicher: 16332.37 MB
Verfügbarer virtueller Speicher: 13557.42 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:62.54 GB) NTFS
Drive d: (Disk) (CDROM) (Total:0.29 GB) (Free:0 GB) CDFS
Drive g: (Volume) (Fixed) (Total:1863.01 GB) (Free:1058.71 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: DA05D2BC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 444DA12D)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Ergebnis ============================
|
|
14.08.2015, 16:01
| #11 |
| /// the machine /// TB-Ausbilder | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund)ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.08.2015, 20:40
| #12 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Hallo, den Eset Online Scan kann ich leider nicht vollständig durchführen. 3 Versuche habe ich unternommen. Mein Rechner friert nach ca. 1 Stunde Laufzeit ein. Dann ist der Scan Fortschritt bei 54% und hat 9 infizierte Dateien gefunden. Soll ich den SecurityCheck dennoch durchführen? Inzwischen bleibt auch der BSOD aus, der Rechner friert nur noch ein und ich muss ihn manuell ausschalten. Die Tatsache dass der Rechner eine Stunde durchhält macht mich stutzig. An den Energiespareinstellungen liegt es jedenfalls nicht. P.S.: Auf dem Screenshot wird fälschlicherweise eine Gesamtdauer von über einer Stunde angezeigt. Der Zähler läuft meistens weiter obwohl alles andere schon nicht mehr reagiert. |
|
18.08.2015, 11:15
| #13 |
| /// the machine /// TB-Ausbilder | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Lass ESET weg und mach statt dessen das hier: Lade Dir bitte von hier  Emsisoft Emergency Kit herunter.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.08.2015, 19:52
| #14 |
| | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) EEK scan: Code:
ATTFilter Emsisoft Emergency Kit - Version 10.0
Letztes Update: 18.08.2015 20:47:20
Benutzerkonto: Fragster-PC\Fragster
Scan-Einstellungen:
Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien
PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus
Scan-Beginn: 18.08.2015 20:48:43
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Gefunden: Setting.DisableRegistryTools (A)
Gescannt: 81936
Gefunden 5
Scan-Ende: 18.08.2015 20:49:35
Scan-Zeit: 0:00:52
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Quarantäne Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Quarantäne Setting.DisableTaskMgr (A)
Quarantäne 5
|
|
19.08.2015, 10:39
| #15 |
| /// the machine /// TB-Ausbilder | windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) Dann noch bitte den Rest von oben
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) |
| blockiert, bluescreen, install.exe, neustart, pua/installbrain.gen, pua/installbrain.gen5, pup.optional.crossfire.sa, pup.optional.crossrider.a, pup.optional.helperbar.a, pup.optional.ibupdater.a, pup.optional.installbrain.a, pup.optional.opencandy, pup.optional.opencandy.a, pup.optional.quickshare.a, pup.optional.savingssidekick.a, pup.optional.smartbar, pup.optional.snapdo.t, pup.optional.softonic.a, pup.optional.websearches.shrtcln, uninstall.exe, windows update |
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
Linear-Darstellung
