Verdacht auf Befall, auffällige Upload/Download spikes

Kinderwerfer · 31.08.2015, 13:03

Guten Tach liebes TB Team!

Ich hab seit kurzem den Verdacht, dass mein Rechner mit irgendwas befallen ist.
Ständig habe ich Einbrüche bzw. Ausbrüche meiner Download/Upload Raten.

Es werden mir merkwürdige Netzwerknutzungen angezeigt, obwohl ich keine Programme am Laufen habe. (Oftmals direkt nach dem Booten)

Ich bin wahrlich kein Experte auf dem Gebiet, allerdings bin ich immer sehr vorsichtig, wenn es um Dateien, besuchte Websites etc. geht.

Freunde haben mir von diesem Forum erzählt und meinten ich soll hier mal um Hilfe bitten.

Danke schonmal im Voraus.

M-K-D-B · 31.08.2015, 13:04

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von TDSS-Killer,
die beiden neuen Logdateien von FRST.

Kinderwerfer · 31.08.2015, 13:15

Habe direkt eine Fehlermeldung FRST bekommen.

"FRST funktioniert nicht mehr."

Habe Win 7 64bit

Habe als Admin ausgeführt, funktioniert nun.

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:30-08-2015
durchgeführt von Marius (Administrator) auf Marius-PC (31-08-2015 14:27:12)
Gestartet von C:\Users\Marius\Downloads
Geladene Profile: Marius (Verfügbare Profile: Marius)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(SteelSeries ApS) E:\SteelSeries Engine\SteelSeriesEngine.exe
(Valve Corporation) E:\Steam\Steam.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) E:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(Valve Corporation) E:\Steam\bin\steamwebhelper.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(Valve Corporation) E:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [XMouseButtonControl] => C:\Treiber\Mouse\XMouseButtonControl.exe [1075344 2014-12-08] (Highresolution Enterprises)
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-08-25] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [f.lux] => C:\Users\Marius\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [HP Officejet 4620 series (NET)] => C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [GoogleChromeAutoLaunch_13084EC567A31CF05A20DE11558C97D1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-08-18] (Google Inc.)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [SteelSeries Engine] => E:\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-10-09] (SteelSeries ApS)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [Steam] => E:\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
Startup: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk [2015-01-02]
ShortcutTarget: ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers)
Startup: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk [2015-02-03]
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{541E91B9-1654-46E4-ABFB-142C8951D2D9}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{65C5BDB0-A08C-4F87-8C64-C1FBB97BD232}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{6F2B1CF5-8C59-4A5B-8978-70A6526DCE91}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9D5CAB89-8FBB-4A18-9C25-FE12CB13F6F6}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9EEDBA40-3F78-4D39-9955-99EBE42125A9}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{D2D0FA3D-B252-4F0D-91CE-7595A8E590AE}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-01-06] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-06] (Oracle Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-03-05] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-01-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-01-06] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-03-05] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-07] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-07] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2015-01-17]
CHR Extension: (Google Slides) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-18]
CHR Extension: (Google Docs) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-18]
CHR Extension: (Google Drive) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-18]
CHR Extension: (Dark Skin for Youtube™) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfeknfgchonpnofdjokchhdhdnddhglm [2014-12-18]
CHR Extension: (YouTube) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-18]
CHR Extension: (Adblock Plus) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-18]
CHR Extension: (Google Search) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-18]
CHR Extension: (Google Sheets) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-18]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-14]
CHR Extension: (Black Black Chrome Theme Dark Blue Highlight) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\njpbabhpbnilgchdjbajcbgnnclkaida [2015-02-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-18]
CHR Extension: (Gmail) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1125888 2015-08-29] ()
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2014-12-27] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-08-25] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-07] ()
S3 Survarium Update Service; C:\SSD Games\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-14] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 Alpham1; C:\Windows\System32\DRIVERS\Alpham164.sys [52992 2007-07-23] (Ideazon Corporation)
R3 Alpham2; C:\Windows\System32\DRIVERS\Alpham264.sys [21760 2007-03-20] (Ideazon Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2014-12-24] ()
R3 DroidCam; C:\Windows\System32\DRIVERS\droidcam.sys [33592 2015-06-16] (Dev47Apps)
R3 DroidCamVideo; C:\Windows\System32\DRIVERS\droidcamvideo.sys [229432 2015-06-16] (Dev47Apps)
S3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2014-12-18] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-05-27] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-05-27] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2014-12-24] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13536 2015-05-27] ()
S3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [25088 2015-01-27] (SteelSeries ApS)
S3 usbrndis6; C:\Windows\system32\drivers\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-31 14:13 - 2015-08-31 14:27 - 00016147 _____ C:\Users\Marius\Downloads\FRST.txt
2015-08-31 14:13 - 2015-08-31 14:27 - 00000000 ____D C:\FRST
2015-08-31 14:13 - 2015-08-31 14:13 - 02188288 _____ (Farbar) C:\Users\Marius\Downloads\FRST64.exe
2015-08-31 14:13 - 2015-08-31 14:13 - 00000333 _____ C:\Users\Marius\Downloads\Addition.txt
2015-08-31 13:55 - 2015-08-31 13:55 - 00016462 _____ C:\ComboFix.txt
2015-08-31 13:50 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-31 13:50 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-31 13:50 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-31 13:49 - 2015-08-31 13:55 - 00000000 ____D C:\Qoobox
2015-08-31 13:49 - 2015-08-31 13:54 - 00000000 ____D C:\Windows\erdnt
2015-08-31 13:49 - 2015-08-31 13:49 - 05635666 ____R (Swearware) C:\Users\Marius\Downloads\ComboFix.exe
2015-08-31 12:54 - 2015-08-31 12:57 - 00000000 ____D C:\$Windows.~BT
2015-08-31 00:08 - 2015-08-31 00:08 - 00000000 ____D C:\ProgramData\Battle.net
2015-08-31 00:03 - 2015-08-31 00:03 - 03056696 _____ (Blizzard Entertainment) C:\Users\Marius\Downloads\Hearthstone-Setup-deDE.exe
2015-08-30 21:58 - 2015-08-30 21:58 - 79773682 _____ C:\Users\Marius\Downloads\NixName_entjungferung.mp4
2015-08-30 15:21 - 2015-08-30 15:21 - 00000000 ____D C:\Users\Marius\Desktop\@Exile
2015-08-30 14:48 - 2015-08-07 02:04 - 00572024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-08-30 02:21 - 2015-08-11 03:20 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-30 02:21 - 2015-08-11 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-30 02:21 - 2015-08-11 02:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-30 02:21 - 2015-08-11 02:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-30 01:47 - 2015-08-30 01:47 - 00003096 _____ C:\Windows\System32\Tasks\{FF580481-FD18-496F-A1B1-848D8AD3F857}
2015-08-30 01:37 - 2015-08-30 01:37 - 00003174 _____ C:\Windows\System32\Tasks\{300BBE3C-4E88-4E4A-AB6C-25A5E4837FD3}
2015-08-29 23:58 - 2015-08-30 00:01 - 189360904 _____ C:\Users\Marius\Desktop\@Exile-0.9.18.zip
2015-08-29 12:47 - 2015-08-29 12:47 - 00000202 _____ C:\Users\Marius\Desktop\Stealth Inc 2.url
2015-08-29 12:26 - 2015-08-29 12:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-29 12:26 - 2015-08-29 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-29 03:40 - 2015-08-29 04:11 - 650065163 _____ C:\Users\Marius\Downloads\RWM-SSRW_BETA2.rar
2015-08-29 03:04 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-29 03:04 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-28 19:34 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-28 19:34 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-28 19:34 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-28 19:34 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-28 19:34 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-28 19:34 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-28 19:34 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-28 19:34 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-28 19:34 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-28 19:34 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-28 19:34 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-28 19:34 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-28 19:34 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-28 19:34 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-28 19:34 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-28 19:34 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-28 19:34 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-28 19:34 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-28 19:34 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-28 19:34 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-28 19:34 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-28 19:34 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-28 19:34 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-28 19:34 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-28 19:34 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-28 19:34 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-28 19:34 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-28 19:34 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-28 19:34 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-28 19:34 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-28 19:34 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-28 19:34 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-28 19:34 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-28 19:34 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-28 19:34 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-28 19:34 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-28 19:34 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-28 19:34 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-28 19:34 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-28 19:34 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-28 19:34 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-28 19:34 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-28 19:34 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-28 19:34 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-28 19:34 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-28 19:34 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-28 19:34 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-28 19:34 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-28 19:34 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-28 19:34 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-28 19:34 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-28 19:34 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-28 19:34 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-28 19:34 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-28 19:34 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-28 19:34 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-28 19:32 - 2015-08-28 19:32 - 00000862 _____ C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2015-08-28 19:32 - 2015-08-28 19:32 - 00000832 _____ C:\Users\Marius\Desktop\Start Tor Browser.lnk
2015-08-28 19:31 - 2015-08-28 19:31 - 00000000 ____D C:\ROT
2015-08-28 19:27 - 2015-08-28 19:31 - 43791480 _____ C:\Users\Marius\Downloads\torbrowser-install-5.0.2_en-US.exe
2015-08-28 19:19 - 2015-07-28 22:09 - 00017344 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-28 19:19 - 2015-07-28 22:05 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00437760 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-28 19:19 - 2015-07-28 21:55 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-28 19:19 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-28 19:19 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-28 19:19 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-28 19:19 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-28 19:19 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-28 19:19 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-28 19:19 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-28 19:19 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-28 19:19 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-28 19:19 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-28 19:19 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-28 19:19 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-28 19:19 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-28 19:19 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-28 19:19 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-28 19:19 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-28 19:19 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-28 19:19 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-28 19:19 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-28 19:19 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-28 19:19 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-28 19:19 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-28 19:19 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-28 19:19 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-28 19:19 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-28 19:19 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-28 19:19 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-28 19:19 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-28 19:19 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-28 19:19 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-28 19:18 - 2015-08-28 19:18 - 00000000 ____D C:\Users\Marius\AppData\Local\CEF
2015-08-28 19:12 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-28 19:12 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-28 19:12 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-28 19:12 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-28 19:12 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-28 19:12 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-28 19:12 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-28 19:12 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-28 19:12 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-28 19:12 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-28 19:12 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-28 19:12 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-28 19:10 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-28 19:10 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-28 19:10 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-28 19:10 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-28 19:10 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-28 19:10 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-28 19:10 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-28 19:10 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-28 19:10 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-28 19:10 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-28 19:10 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-28 19:10 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-11 01:08 - 2015-08-11 01:08 - 42740536 _____ C:\Windows\system32\nvcompiler.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 30497920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 22960768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 16160424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 14512608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 11845224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 11063440 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-11 01:08 - 2015-08-11 01:08 - 02942280 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 02609480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01906832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435382.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01577808 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01568056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435382.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01071416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01063040 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00991888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00985232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00948832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00513840 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00417096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00415840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00372880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00213360 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-08-11 01:08 - 2015-08-11 01:08 - 00185632 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00164192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00160896 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00137424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00048992 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-31 14:26 - 2015-03-05 03:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-31 14:24 - 2014-12-18 15:43 - 00000000 ____D C:\Users\Marius\AppData\Roaming\Skype
2015-08-31 14:20 - 2014-12-18 03:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-31 14:07 - 2014-12-18 02:48 - 02005106 _____ C:\Windows\WindowsUpdate.log
2015-08-31 13:55 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-31 13:55 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-31 13:54 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-08-31 13:02 - 2009-07-14 06:45 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-31 13:02 - 2009-07-14 06:45 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-31 12:57 - 2014-12-18 02:44 - 00000000 ____D C:\Windows\Panther
2015-08-31 10:37 - 2014-12-19 14:38 - 00000000 ____D C:\Users\Marius\Documents\Arma 3
2015-08-31 05:20 - 2014-12-18 03:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-31 03:11 - 2009-07-14 06:51 - 00215301 _____ C:\Windows\setupact.log
2015-08-30 20:07 - 2014-12-19 14:38 - 00000000 ____D C:\Users\Marius\AppData\Local\Arma 3
2015-08-30 19:42 - 2015-03-29 01:57 - 00000000 ____D C:\Users\Marius\AppData\Local\Arma 3 Launcher
2015-08-30 18:26 - 2014-12-19 17:17 - 00000000 ____D C:\Users\Marius\AppData\Roaming\TS3Client
2015-08-30 15:50 - 2015-03-29 01:57 - 00000000 ____D C:\Users\Marius\AppData\Local\Bohemia_Interactive
2015-08-30 15:12 - 2015-06-24 12:48 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2015-08-30 14:56 - 2009-07-14 19:58 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-08-30 14:56 - 2009-07-14 19:58 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-08-30 14:56 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-30 14:51 - 2015-07-02 01:58 - 00003030 _____ C:\Windows\System32\Tasks\MSIAfterburner
2015-08-30 14:50 - 2014-12-18 03:07 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-30 14:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-30 14:48 - 2015-01-07 08:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-30 14:48 - 2014-12-18 03:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-30 01:51 - 2014-12-24 18:43 - 00000000 ____D C:\SS3
2015-08-30 00:05 - 2014-12-19 17:17 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-29 12:47 - 2014-12-18 16:29 - 00000000 ____D C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-29 12:26 - 2014-12-18 15:43 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-29 12:26 - 2014-12-18 15:43 - 00000000 ____D C:\ProgramData\Skype
2015-08-29 07:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-08-29 07:21 - 2014-12-18 03:09 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-29 07:21 - 2014-12-18 03:09 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-29 07:21 - 2009-07-14 06:45 - 00294640 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-29 05:15 - 2014-12-18 03:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-29 05:15 - 2014-12-18 03:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-29 03:03 - 2014-12-18 03:07 - 00000000 ____D C:\Windows\system32\MRT
2015-08-29 03:00 - 2014-12-18 03:07 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-28 19:35 - 2014-12-18 03:16 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-11 01:08 - 2015-05-31 18:12 - 15902640 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-08-11 01:08 - 2015-05-31 18:12 - 15139256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-08-11 01:08 - 2015-05-31 18:12 - 01110768 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-08-11 01:08 - 2015-01-07 08:29 - 37757584 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-08-11 01:08 - 2015-01-07 08:29 - 03417208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-08-11 01:08 - 2014-12-18 03:06 - 00123008 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-08-11 01:08 - 2014-12-18 03:06 - 00115512 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-08-11 01:08 - 2014-08-19 23:15 - 17625848 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-08-11 01:08 - 2014-08-19 23:15 - 13277448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-08-11 01:08 - 2014-08-19 23:14 - 12885072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-08-11 01:08 - 2014-08-19 23:13 - 03019128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-08-10 23:43 - 2014-08-19 23:14 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-08-07 02:44 - 2014-12-18 03:06 - 06873904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 03492984 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 02558768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 00937592 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-08-07 02:44 - 2014-12-18 03:06 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 00062584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-08-03 15:07 - 2014-12-18 03:06 - 05133709 _____ C:\Windows\system32\nvcoproc.bin

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-02-03 14:48 - 2015-02-03 14:48 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-06-16 00:29 - 2015-06-16 00:36 - 0000034 _____ () C:\ProgramData\droidcam-settings

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-29 04:02

==================== Ende von FRST.txt ============================

Kinderwerfer · 31.08.2015, 13:40

Code:

ATTFilter

14:37:02.0019 0x1cbc  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
14:37:03.0929 0x1cbc  ============================================================
14:37:03.0929 0x1cbc  Current date / time: 2015/08/31 14:37:03.0929
14:37:03.0929 0x1cbc  SystemInfo:
14:37:03.0929 0x1cbc  
14:37:03.0929 0x1cbc  OS Version: 6.1.7601 ServicePack: 1.0
14:37:03.0929 0x1cbc  Product type: Workstation
14:37:03.0929 0x1cbc  ComputerName: Marius-PC
14:37:03.0929 0x1cbc  UserName: Marius
14:37:03.0929 0x1cbc  Windows directory: C:\Windows
14:37:03.0929 0x1cbc  System windows directory: C:\Windows
14:37:03.0929 0x1cbc  Running under WOW64
14:37:03.0929 0x1cbc  Processor architecture: Intel x64
14:37:03.0929 0x1cbc  Number of processors: 4
14:37:03.0929 0x1cbc  Page size: 0x1000
14:37:03.0929 0x1cbc  Boot type: Normal boot
14:37:03.0929 0x1cbc  ============================================================
14:37:04.0079 0x1cbc  KLMD registered as C:\Windows\system32\drivers\11765461.sys
14:37:04.0119 0x1cbc  System UUID: {3AEA6EEE-CD67-3FCB-0575-ADB370667083}
14:37:04.0279 0x1cbc  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:37:04.0279 0x1cbc  Drive \Device\Harddisk1\DR1 - Size: 0x15D50F66000 ( 1397.27 Gb ), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:37:04.0279 0x1cbc  ============================================================
14:37:04.0279 0x1cbc  \Device\Harddisk0\DR0:
14:37:04.0279 0x1cbc  MBR partitions:
14:37:04.0279 0x1cbc  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:37:04.0279 0x1cbc  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D192800
14:37:04.0279 0x1cbc  \Device\Harddisk1\DR1:
14:37:04.0279 0x1cbc  MBR partitions:
14:37:04.0279 0x1cbc  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAEA86800
14:37:04.0279 0x1cbc  ============================================================
14:37:04.0279 0x1cbc  C: <-> \Device\Harddisk0\DR0\Partition2
14:37:04.0279 0x1cbc  E: <-> \Device\Harddisk1\DR1\Partition1
14:37:04.0279 0x1cbc  ============================================================
14:37:04.0279 0x1cbc  Initialize success
14:37:04.0279 0x1cbc  ============================================================
14:37:08.0628 0x09f0  ============================================================
14:37:08.0628 0x09f0  Scan started
14:37:08.0628 0x09f0  Mode: Manual; 
14:37:08.0628 0x09f0  ============================================================
14:37:08.0628 0x09f0  KSN ping started
14:37:10.0952 0x09f0  KSN ping finished: true
14:37:11.0332 0x09f0  ================ Scan system memory ========================
14:37:11.0332 0x09f0  System memory - ok
14:37:11.0332 0x09f0  ================ Scan services =============================
14:37:11.0362 0x09f0  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
14:37:11.0362 0x09f0  1394ohci - ok
14:37:11.0382 0x09f0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
14:37:11.0382 0x09f0  ACPI - ok
14:37:11.0382 0x09f0  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
14:37:11.0382 0x09f0  AcpiPmi - ok
14:37:11.0392 0x09f0  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:37:11.0392 0x09f0  AdobeARMservice - ok
14:37:11.0422 0x09f0  [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:37:11.0422 0x09f0  AdobeFlashPlayerUpdateSvc - ok
14:37:11.0442 0x09f0  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
14:37:11.0442 0x09f0  adp94xx - ok
14:37:11.0452 0x09f0  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
14:37:11.0452 0x09f0  adpahci - ok
14:37:11.0462 0x09f0  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
14:37:11.0462 0x09f0  adpu320 - ok
14:37:11.0462 0x09f0  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
14:37:11.0462 0x09f0  AeLookupSvc - ok
14:37:11.0472 0x09f0  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
14:37:11.0482 0x09f0  AFD - ok
14:37:11.0482 0x09f0  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
14:37:11.0482 0x09f0  agp440 - ok
14:37:11.0492 0x09f0  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
14:37:11.0492 0x09f0  ALG - ok
14:37:11.0492 0x09f0  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
14:37:11.0492 0x09f0  aliide - ok
14:37:11.0492 0x09f0  [ B3E801135E0C81733542C14D9AA8120A, 69A19C73BBB942DDEBD079EF924ED1AEFC3516867569618D2FBBD1CD831204C2 ] Alpham1         C:\Windows\system32\DRIVERS\Alpham164.sys
14:37:11.0502 0x09f0  Alpham1 - ok
14:37:11.0502 0x09f0  [ 6493983FEDBC49D9112703ECE9B251FE, E5D0EEBA8C8D9C02CC4109C86ABC6375E5CF79F6549917C011238FD2DD78BF71 ] Alpham2         C:\Windows\system32\DRIVERS\Alpham264.sys
14:37:11.0502 0x09f0  Alpham2 - ok
14:37:11.0502 0x09f0  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
14:37:11.0502 0x09f0  amdide - ok
14:37:11.0502 0x09f0  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
14:37:11.0502 0x09f0  AmdK8 - ok
14:37:11.0512 0x09f0  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
14:37:11.0512 0x09f0  AmdPPM - ok
14:37:11.0512 0x09f0  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
14:37:11.0512 0x09f0  amdsata - ok
14:37:11.0522 0x09f0  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
14:37:11.0522 0x09f0  amdsbs - ok
14:37:11.0522 0x09f0  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
14:37:11.0522 0x09f0  amdxata - ok
14:37:11.0532 0x09f0  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID           C:\Windows\system32\drivers\appid.sys
14:37:11.0532 0x09f0  AppID - ok
14:37:11.0532 0x09f0  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
14:37:11.0532 0x09f0  AppIDSvc - ok
14:37:11.0542 0x09f0  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll
14:37:11.0542 0x09f0  Appinfo - ok
14:37:11.0542 0x09f0  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll
14:37:11.0552 0x09f0  AppMgmt - ok
14:37:11.0552 0x09f0  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
14:37:11.0552 0x09f0  arc - ok
14:37:11.0552 0x09f0  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
14:37:11.0562 0x09f0  arcsas - ok
14:37:11.0572 0x09f0  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:37:11.0572 0x09f0  aspnet_state - ok
14:37:11.0572 0x09f0  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
14:37:11.0572 0x09f0  AsyncMac - ok
14:37:11.0572 0x09f0  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
14:37:11.0572 0x09f0  atapi - ok
14:37:11.0582 0x09f0  [ B4BDE3F758A34658A37DFED3D9783CD8, BC9F6B9BDD639457894DE0F596AB3A655374E078796762FE5E8E5414F0481208 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
14:37:11.0582 0x09f0  atksgt - ok
14:37:11.0602 0x09f0  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:37:11.0602 0x09f0  AudioEndpointBuilder - ok
14:37:11.0622 0x09f0  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
14:37:11.0632 0x09f0  AudioSrv - ok
14:37:11.0632 0x09f0  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
14:37:11.0642 0x09f0  AxInstSV - ok
14:37:11.0652 0x09f0  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
14:37:11.0652 0x09f0  b06bdrv - ok
14:37:11.0662 0x09f0  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
14:37:11.0662 0x09f0  b57nd60a - ok
14:37:11.0672 0x09f0  [ 4BEFF67C1775D353A16A62347E727874, 62363C5E5F4BF049A3E49FADA8CB17269945056ACADB319FDC4F05B74E2553C8 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe
14:37:11.0672 0x09f0  BBSvc - ok
14:37:11.0682 0x09f0  [ A6DAAD3EA93DBDBD07FA821BCED133F6, 8F33D4E4B82091D09E62FD5487C88F3DF0DAC31FCBB846183CC4020533A131DE ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe
14:37:11.0682 0x09f0  BBUpdate - ok
14:37:11.0692 0x09f0  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
14:37:11.0692 0x09f0  BDESVC - ok
14:37:11.0692 0x09f0  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
14:37:11.0692 0x09f0  Beep - ok
14:37:11.0712 0x09f0  [ 56805606D40B1EC96AE8442E21318C13, 3CBCB50EA8D2124B5E322D38F721670B4997F5F6865D3C7D5F819B9EF9620394 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
14:37:11.0722 0x09f0  BEService - ok
14:37:11.0732 0x09f0  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
14:37:11.0742 0x09f0  BFE - ok
14:37:11.0762 0x09f0  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\system32\qmgr.dll
14:37:11.0772 0x09f0  BITS - ok
14:37:11.0782 0x09f0  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
14:37:11.0782 0x09f0  blbdrive - ok
14:37:11.0792 0x09f0  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
14:37:11.0792 0x09f0  Bonjour Service - ok
14:37:11.0802 0x09f0  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
14:37:11.0802 0x09f0  bowser - ok
14:37:11.0802 0x09f0  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:37:11.0802 0x09f0  BrFiltLo - ok
14:37:11.0802 0x09f0  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:37:11.0802 0x09f0  BrFiltUp - ok
14:37:11.0812 0x09f0  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
14:37:11.0812 0x09f0  BridgeMP - ok
14:37:11.0812 0x09f0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
14:37:11.0822 0x09f0  Browser - ok
14:37:11.0822 0x09f0  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
14:37:11.0832 0x09f0  Brserid - ok
14:37:11.0832 0x09f0  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
14:37:11.0832 0x09f0  BrSerWdm - ok
14:37:11.0832 0x09f0  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
14:37:11.0832 0x09f0  BrUsbMdm - ok
14:37:11.0832 0x09f0  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
14:37:11.0832 0x09f0  BrUsbSer - ok
14:37:11.0842 0x09f0  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
14:37:11.0842 0x09f0  BTHMODEM - ok
14:37:11.0842 0x09f0  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
14:37:11.0852 0x09f0  bthserv - ok
14:37:11.0852 0x09f0  [ 0572F7D579759EE54B44A74B7E7F39B2, 829AC2296F879F738F004DF7224B2B9144A451A10505AF1F389904FBB80E7D0E ] busenum         C:\Windows\system32\DRIVERS\SteelBus64.sys
14:37:11.0852 0x09f0  busenum - ok
14:37:11.0862 0x09f0  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
14:37:11.0862 0x09f0  cdfs - ok
14:37:11.0862 0x09f0  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
14:37:11.0862 0x09f0  cdrom - ok
14:37:11.0872 0x09f0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
14:37:11.0872 0x09f0  CertPropSvc - ok
14:37:11.0872 0x09f0  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
14:37:11.0872 0x09f0  circlass - ok
14:37:11.0882 0x09f0  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
14:37:11.0892 0x09f0  CLFS - ok
14:37:11.0892 0x09f0  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:37:11.0892 0x09f0  clr_optimization_v2.0.50727_32 - ok
14:37:11.0902 0x09f0  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:37:11.0902 0x09f0  clr_optimization_v2.0.50727_64 - ok
14:37:11.0912 0x09f0  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:37:11.0912 0x09f0  clr_optimization_v4.0.30319_32 - ok
14:37:11.0912 0x09f0  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
14:37:11.0922 0x09f0  clr_optimization_v4.0.30319_64 - ok
14:37:11.0922 0x09f0  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
14:37:11.0922 0x09f0  CmBatt - ok
14:37:11.0922 0x09f0  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
14:37:11.0922 0x09f0  cmdide - ok
14:37:11.0932 0x09f0  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
14:37:11.0942 0x09f0  CNG - ok
14:37:11.0942 0x09f0  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
14:37:11.0942 0x09f0  Compbatt - ok
14:37:11.0942 0x09f0  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
14:37:11.0942 0x09f0  CompositeBus - ok
14:37:11.0942 0x09f0  COMSysApp - ok
14:37:11.0952 0x09f0  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
14:37:11.0952 0x09f0  crcdisk - ok
14:37:11.0952 0x09f0  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
14:37:11.0962 0x09f0  CryptSvc - ok
14:37:11.0972 0x09f0  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys
14:37:11.0972 0x09f0  CSC - ok
14:37:11.0992 0x09f0  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
14:37:12.0002 0x09f0  CscService - ok
14:37:12.0012 0x09f0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
14:37:12.0022 0x09f0  DcomLaunch - ok
14:37:12.0032 0x09f0  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
14:37:12.0032 0x09f0  defragsvc - ok
14:37:12.0102 0x09f0  [ 0B24043732807EE3AA25389356F4DE7C, 6A9A65B38968FF704C3938BEF5E6C1226447FF4F78997473B1694EA8D3D519DF ] DevoloNetworkService C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
14:37:12.0142 0x09f0  DevoloNetworkService - ok
14:37:12.0152 0x09f0  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
14:37:12.0152 0x09f0  DfsC - ok
14:37:12.0152 0x09f0  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
14:37:12.0152 0x09f0  dg_ssudbus - ok
14:37:12.0162 0x09f0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
14:37:12.0162 0x09f0  Dhcp - ok
14:37:12.0192 0x09f0  [ AA5319FA8602676B5D3A2B4A1355896D, 57532E16FF0DDE3D62B6B6DC35E2598DD453140E9277247965A1E835645E588A ] DiagTrack       C:\Windows\system32\diagtrack.dll
14:37:12.0202 0x09f0  DiagTrack - ok
14:37:12.0212 0x09f0  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
14:37:12.0212 0x09f0  discache - ok
14:37:12.0212 0x09f0  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
14:37:12.0212 0x09f0  Disk - ok
14:37:12.0222 0x09f0  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
14:37:12.0222 0x09f0  Dnscache - ok
14:37:12.0232 0x09f0  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
14:37:12.0232 0x09f0  dot3svc - ok
14:37:12.0242 0x09f0  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
14:37:12.0242 0x09f0  DPS - ok
14:37:12.0242 0x09f0  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
14:37:12.0242 0x09f0  drmkaud - ok
14:37:12.0242 0x09f0  [ 8078AC9954094E43E93E976AC6CB4BA4, 7DC3CD6318C65D9B8BCC1FCC2C070B4DB1B2C811D3E7D5CD3D0185AA21E1F1EA ] DroidCam        C:\Windows\system32\DRIVERS\droidcam.sys
14:37:12.0242 0x09f0  DroidCam - ok
14:37:12.0252 0x09f0  [ DEA6132C81EE004EECB4F23889D9295F, 7CF48EA26FF350995F54FED592F94DB634CE3C96C7F9FD76D67993CE8F0FAD87 ] DroidCamVideo   C:\Windows\system32\DRIVERS\droidcamvideo.sys
14:37:12.0262 0x09f0  DroidCamVideo - ok
14:37:12.0282 0x09f0  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
14:37:12.0292 0x09f0  DXGKrnl - ok
14:37:12.0302 0x09f0  [ 73F8DE25B04A66CE3BE5D09A10DE56E6, ABA5AA50D936897CC71D710BBCF9A1B1CCCAC290FCD10A710E4471C1CDDE1093 ] e1dexpress      C:\Windows\system32\DRIVERS\e1d62x64.sys
14:37:12.0312 0x09f0  e1dexpress - ok
14:37:12.0312 0x09f0  EagleX64 - ok
14:37:12.0312 0x09f0  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
14:37:12.0312 0x09f0  EapHost - ok
14:37:12.0322 0x09f0  EasyAntiCheat - ok
14:37:12.0382 0x09f0  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
14:37:12.0412 0x09f0  ebdrv - ok
14:37:12.0422 0x09f0  [ 0D48E93C6BE3143C0198CB252B992D16, AF34A41BAAE967045C8078E80B070E66ED60FDA0945FA752F715E49FD43373A4 ] EFS             C:\Windows\System32\lsass.exe
14:37:12.0422 0x09f0  EFS - ok
14:37:12.0432 0x09f0  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
14:37:12.0442 0x09f0  ehRecvr - ok
14:37:12.0452 0x09f0  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
14:37:12.0452 0x09f0  ehSched - ok
14:37:12.0462 0x09f0  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
14:37:12.0472 0x09f0  elxstor - ok
14:37:12.0472 0x09f0  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
14:37:12.0472 0x09f0  ErrDev - ok
14:37:12.0482 0x09f0  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
14:37:12.0482 0x09f0  EventSystem - ok
14:37:12.0492 0x09f0  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
14:37:12.0492 0x09f0  exfat - ok
14:37:12.0502 0x09f0  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
14:37:12.0502 0x09f0  fastfat - ok
14:37:12.0522 0x09f0  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
14:37:12.0522 0x09f0  Fax - ok
14:37:12.0532 0x09f0  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
14:37:12.0532 0x09f0  fdc - ok
14:37:12.0532 0x09f0  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
14:37:12.0532 0x09f0  fdPHost - ok
14:37:12.0532 0x09f0  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
14:37:12.0542 0x09f0  FDResPub - ok
14:37:12.0542 0x09f0  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
14:37:12.0542 0x09f0  FileInfo - ok
14:37:12.0542 0x09f0  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
14:37:12.0542 0x09f0  Filetrace - ok
14:37:12.0542 0x09f0  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
14:37:12.0552 0x09f0  flpydisk - ok
14:37:12.0552 0x09f0  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
14:37:12.0562 0x09f0  FltMgr - ok
14:37:12.0572 0x09f0  [ D5A775990A7C202A037378FDBCDB6141, 27AD242914FAFB7A27B3045C0F0F6AFE6873FE331A51D8BB29A63B5D84C72EFB ] FontCache       C:\Windows\system32\FntCache.dll
14:37:12.0592 0x09f0  FontCache - ok
14:37:12.0592 0x09f0  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:37:12.0592 0x09f0  FontCache3.0.0.0 - ok
14:37:12.0592 0x09f0  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
14:37:12.0592 0x09f0  FsDepends - ok
14:37:12.0602 0x09f0  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
14:37:12.0602 0x09f0  Fs_Rec - ok
14:37:12.0602 0x09f0  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
14:37:12.0612 0x09f0  fvevol - ok
14:37:12.0612 0x09f0  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
14:37:12.0612 0x09f0  gagp30kx - ok
14:37:12.0642 0x09f0  [ 7F18FB86E1023DDB80874CEA671442D5, BA236CD30A6932DC439DCA1DD4B06B7DF9181B1EC3654A72D05DFD70949C5E06 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
14:37:12.0652 0x09f0  GfExperienceService - ok
14:37:12.0662 0x09f0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
14:37:12.0672 0x09f0  gpsvc - ok
14:37:12.0682 0x09f0  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:37:12.0682 0x09f0  gupdate - ok
14:37:12.0682 0x09f0  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:37:12.0682 0x09f0  gupdatem - ok
14:37:12.0692 0x09f0  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys
14:37:12.0692 0x09f0  hamachi - ok
14:37:12.0692 0x09f0  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
14:37:12.0692 0x09f0  hcw85cir - ok
14:37:12.0702 0x09f0  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:37:12.0712 0x09f0  HdAudAddService - ok
14:37:12.0712 0x09f0  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
14:37:12.0712 0x09f0  HDAudBus - ok
14:37:12.0722 0x09f0  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
14:37:12.0722 0x09f0  HidBatt - ok
14:37:12.0722 0x09f0  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
14:37:12.0722 0x09f0  HidBth - ok
14:37:12.0732 0x09f0  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
14:37:12.0732 0x09f0  HidIr - ok
14:37:12.0732 0x09f0  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\System32\hidserv.dll
14:37:12.0732 0x09f0  hidserv - ok
14:37:12.0732 0x09f0  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
14:37:12.0732 0x09f0  HidUsb - ok
14:37:12.0732 0x09f0  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
14:37:12.0742 0x09f0  hkmsvc - ok
14:37:12.0742 0x09f0  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:37:12.0752 0x09f0  HomeGroupListener - ok
14:37:12.0752 0x09f0  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:37:12.0752 0x09f0  HomeGroupProvider - ok
14:37:12.0762 0x09f0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
14:37:12.0762 0x09f0  HpSAMD - ok
14:37:12.0782 0x09f0  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
14:37:12.0792 0x09f0  HTTP - ok
14:37:12.0792 0x09f0  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
14:37:12.0792 0x09f0  hwpolicy - ok
14:37:12.0792 0x09f0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
14:37:12.0792 0x09f0  i8042prt - ok
14:37:12.0812 0x09f0  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
14:37:12.0812 0x09f0  iaStorV - ok
14:37:12.0832 0x09f0  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:37:12.0842 0x09f0  idsvc - ok
14:37:12.0842 0x09f0  IEEtwCollectorService - ok
14:37:12.0842 0x09f0  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
14:37:12.0842 0x09f0  iirsp - ok
14:37:12.0852 0x09f0  [ FF604BCE2537A4734DA0CE19AD9B7B7A, E40E87961F46B374122ED2B06E79C575FCFA4D29F95763ADC7E88270D064AFE8 ] ikbevent        C:\Windows\system32\DRIVERS\ikbevent.sys
14:37:12.0852 0x09f0  ikbevent - ok
14:37:12.0872 0x09f0  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
14:37:12.0882 0x09f0  IKEEXT - ok
14:37:12.0882 0x09f0  [ 298E67827BE3C4403C32EAB66987A334, BE7D95E2BB0D6D60B40966305D0354CA93F773FD2FA2727F1076DC8E162D5EB1 ] imsevent        C:\Windows\system32\DRIVERS\imsevent.sys
14:37:12.0882 0x09f0  imsevent - ok
14:37:12.0882 0x09f0  [ 0BBE196EED750C18E5D4B3CB55EB097C, 6A67BF6CD9BBC77034AD1BBDE6FD1DE78440825E317DB7C517BD4D773FEBDA39 ] INETMON         C:\Windows\System32\Drivers\INETMON.sys
14:37:12.0882 0x09f0  INETMON - ok
14:37:12.0892 0x09f0  [ CBF7341E55A8348C7AB01A9870C7D948, A5084DF3C6321788C88A9E6B5F43FE5BCFDBB579BDE3A4D5F55558C6D13035A5 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
14:37:12.0892 0x09f0  Intel(R) PROSet Monitoring Service - ok
14:37:12.0892 0x09f0  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
14:37:12.0892 0x09f0  intelide - ok
14:37:12.0902 0x09f0  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
14:37:12.0902 0x09f0  intelppm - ok
14:37:12.0902 0x09f0  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
14:37:12.0902 0x09f0  IPBusEnum - ok
14:37:12.0902 0x09f0  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:37:12.0912 0x09f0  IpFilterDriver - ok
14:37:12.0922 0x09f0  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
14:37:12.0932 0x09f0  iphlpsvc - ok
14:37:12.0932 0x09f0  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
14:37:12.0932 0x09f0  IPMIDRV - ok
14:37:12.0942 0x09f0  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
14:37:12.0942 0x09f0  IPNAT - ok
14:37:12.0942 0x09f0  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
14:37:12.0942 0x09f0  IRENUM - ok
14:37:12.0942 0x09f0  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
14:37:12.0942 0x09f0  isapnp - ok
14:37:12.0952 0x09f0  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
14:37:12.0962 0x09f0  iScsiPrt - ok
14:37:12.0962 0x09f0  [ 35C0995BCDB0E45D1EEBE4FB582D1563, 67B44EE25B8FF5778AC58255265536EC4CC444A5A8368D6311DEDAF58357E5ED ] ISCT            C:\Windows\system32\DRIVERS\ISCTD.sys
14:37:12.0962 0x09f0  ISCT - ok
14:37:12.0972 0x09f0  [ 796A8DFCB3609C61E6AD43E551F55D9A, 20A0FF8E72238DAC64A65DEEAA84BD8D7AD45249FC87DEA11B715D0CD0DBDCBC ] ISCTAgent       C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
14:37:12.0972 0x09f0  ISCTAgent - ok
14:37:12.0972 0x09f0  [ 78D369F8A81A341109FBA1DB64B4C512, E584F693255CCBF7006E7D35984149CF599BB0849A8F02EFDD6223DF0D606049 ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys
14:37:12.0972 0x09f0  iusb3hcs - ok
14:37:12.0982 0x09f0  [ 5B632ABA038CE2E2D5D2D1115C6B26D1, 605A8FFA704E4369CF9D17DF8630DC9E196B8920D47F1CC5151759E60B234C1F ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
14:37:12.0992 0x09f0  iusb3hub - ok
14:37:13.0002 0x09f0  [ EA841584EF59528D11F20355770E427E, 515737761BB2A0A233F4AD141E28D93E3B9789320A15B7D5FB3DB5AC3CD8E249 ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
14:37:13.0012 0x09f0  iusb3xhc - ok
14:37:13.0012 0x09f0  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
14:37:13.0012 0x09f0  kbdclass - ok
14:37:13.0022 0x09f0  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
14:37:13.0022 0x09f0  kbdhid - ok
14:37:13.0022 0x09f0  [ 0D48E93C6BE3143C0198CB252B992D16, AF34A41BAAE967045C8078E80B070E66ED60FDA0945FA752F715E49FD43373A4 ] KeyIso          C:\Windows\system32\lsass.exe
14:37:13.0022 0x09f0  KeyIso - ok
14:37:13.0022 0x09f0  [ 67A1743377EBB5D9A370A8C2086CFDCC, 2F0FD6C1969B1EEEEFFC1A8F972E1E90F1AD9558FF00EC159BC19ED927FD4BF5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
14:37:13.0022 0x09f0  KSecDD - ok
14:37:13.0032 0x09f0  [ 522A1595D5701800DD41B2D472F5AAED, B62924AE94A5AC454AD6057BC133D717BB1C6445BE36D6BECAB76E1600F60C33 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
14:37:13.0032 0x09f0  KSecPkg - ok
14:37:13.0032 0x09f0  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
14:37:13.0032 0x09f0  ksthunk - ok
14:37:13.0042 0x09f0  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
14:37:13.0042 0x09f0  KtmRm - ok
14:37:13.0062 0x09f0  [ 305BB2AC00D46542E0A653AB63F4ABB1, E3BE57A0EBB1194656D20C11688863A7864B06223419F688D82881F9F49604B6 ] LADF_CaptureOnly C:\Windows\system32\DRIVERS\ladfGSCamd64.sys
14:37:13.0062 0x09f0  LADF_CaptureOnly - ok
14:37:13.0062 0x09f0  [ 28CDDC7D478A6313F55077416DCBD0DE, EE4174FC9444856DF0693D1A5F16EB88352A3B012AA82D49C462980703981A7A ] LADF_RenderOnly C:\Windows\system32\DRIVERS\ladfGSRamd64.sys
14:37:13.0062 0x09f0  LADF_RenderOnly - ok
14:37:13.0072 0x09f0  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
14:37:13.0082 0x09f0  LanmanServer - ok
14:37:13.0082 0x09f0  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:37:13.0082 0x09f0  LanmanWorkstation - ok
14:37:13.0082 0x09f0  [ FA529FB35694C24BF98A9EF67C1CD9D0, 7B3C587C38CF13D514140F0A55E58997D6071D1DEFD97E274E3F490660AC6075 ] LGBusEnum       C:\Windows\system32\drivers\LGBusEnum.sys
14:37:13.0082 0x09f0  LGBusEnum - ok
14:37:13.0092 0x09f0  [ 94AF1384A67B9FCF5651E70BC9D4C526, 9C025F7BBB5BBE9DAF3DEF2F6385CE77C8F413912C4D16930814F6D19B62B367 ] LGSHidFilt      C:\Windows\system32\DRIVERS\LGSHidFilt.Sys
14:37:13.0092 0x09f0  LGSHidFilt - ok
14:37:13.0092 0x09f0  [ 94B29CE153765E768F004FB3440BE2B0, E74C01CEBDA589CDDE35CBCBAA18700E3742DD3B48A90DB3630992467FFC5024 ] LGVirHid        C:\Windows\system32\drivers\LGVirHid.sys
14:37:13.0092 0x09f0  LGVirHid - ok
14:37:13.0092 0x09f0  [ 955982BF4421B77722196552B62E8DC2, 3732449ACDBB78E1ED8436DF153C899C28573F458FDCFE345DFA1B305D085033 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
14:37:13.0092 0x09f0  lirsgt - ok
14:37:13.0102 0x09f0  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
14:37:13.0102 0x09f0  lltdio - ok
14:37:13.0112 0x09f0  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
14:37:13.0112 0x09f0  lltdsvc - ok
14:37:13.0112 0x09f0  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
14:37:13.0112 0x09f0  lmhosts - ok
14:37:13.0122 0x09f0  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
14:37:13.0122 0x09f0  LSI_FC - ok
14:37:13.0122 0x09f0  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
14:37:13.0122 0x09f0  LSI_SAS - ok
14:37:13.0132 0x09f0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:37:13.0132 0x09f0  LSI_SAS2 - ok
14:37:13.0132 0x09f0  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:37:13.0132 0x09f0  LSI_SCSI - ok
14:37:13.0142 0x09f0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
14:37:13.0142 0x09f0  luafv - ok
14:37:13.0142 0x09f0  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
14:37:13.0142 0x09f0  Mcx2Svc - ok
14:37:13.0142 0x09f0  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
14:37:13.0142 0x09f0  megasas - ok
14:37:13.0152 0x09f0  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
14:37:13.0162 0x09f0  MegaSR - ok
14:37:13.0162 0x09f0  [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
14:37:13.0162 0x09f0  MEIx64 - ok
14:37:13.0162 0x09f0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
14:37:13.0172 0x09f0  MMCSS - ok
14:37:13.0172 0x09f0  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
14:37:13.0172 0x09f0  Modem - ok
14:37:13.0172 0x09f0  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
14:37:13.0172 0x09f0  monitor - ok
14:37:13.0172 0x09f0  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
14:37:13.0172 0x09f0  mouclass - ok
14:37:13.0182 0x09f0  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
14:37:13.0182 0x09f0  mouhid - ok
14:37:13.0182 0x09f0  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
14:37:13.0182 0x09f0  mountmgr - ok
14:37:13.0182 0x09f0  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
14:37:13.0192 0x09f0  mpio - ok
14:37:13.0192 0x09f0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
14:37:13.0192 0x09f0  mpsdrv - ok
14:37:13.0212 0x09f0  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
14:37:13.0222 0x09f0  MpsSvc - ok
14:37:13.0232 0x09f0  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
14:37:13.0232 0x09f0  MRxDAV - ok
14:37:13.0232 0x09f0  [ B2081803D510DCE174992BA880EDCA70, 37DB53C9756EC03EB7165DEB58251615D70B7C86DF32A54DE25ADAF30A04D792 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
14:37:13.0232 0x09f0  mrxsmb - ok
14:37:13.0242 0x09f0  [ 552FA62B0EFECD22D8D52499324BCA4F, C3A02C9C30C36928AC7B1025496544967187A05BEF5D100B54F2C0155E47145C ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:37:13.0242 0x09f0  mrxsmb10 - ok
14:37:13.0252 0x09f0  [ 97687971F9CB30E2633DE0F1296B9F61, 865DA87523E4C32D65D55D5475A5CDDFA10699780DA500E6D606384FB3BEB1BE ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:37:13.0252 0x09f0  mrxsmb20 - ok
14:37:13.0252 0x09f0  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
14:37:13.0252 0x09f0  msahci - ok
14:37:13.0252 0x09f0  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
14:37:13.0262 0x09f0  msdsm - ok
14:37:13.0262 0x09f0  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
14:37:13.0262 0x09f0  MSDTC - ok
14:37:13.0262 0x09f0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
14:37:13.0272 0x09f0  Msfs - ok
14:37:13.0272 0x09f0  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
14:37:13.0272 0x09f0  mshidkmdf - ok
14:37:13.0272 0x09f0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
14:37:13.0272 0x09f0  msisadrv - ok
14:37:13.0282 0x09f0  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
14:37:13.0282 0x09f0  MSiSCSI - ok
14:37:13.0282 0x09f0  msiserver - ok
14:37:13.0282 0x09f0  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
14:37:13.0282 0x09f0  MSKSSRV - ok
14:37:13.0282 0x09f0  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
14:37:13.0282 0x09f0  MSPCLOCK - ok
14:37:13.0282 0x09f0  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
14:37:13.0292 0x09f0  MSPQM - ok
14:37:13.0302 0x09f0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
14:37:13.0302 0x09f0  MsRPC - ok
14:37:13.0302 0x09f0  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
14:37:13.0302 0x09f0  mssmbios - ok
14:37:13.0302 0x09f0  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
14:37:13.0302 0x09f0  MSTEE - ok
14:37:13.0312 0x09f0  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
14:37:13.0312 0x09f0  MTConfig - ok
14:37:13.0312 0x09f0  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
14:37:13.0312 0x09f0  Mup - ok
14:37:13.0322 0x09f0  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
14:37:13.0332 0x09f0  napagent - ok
14:37:13.0342 0x09f0  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
14:37:13.0342 0x09f0  NativeWifiP - ok
14:37:13.0362 0x09f0  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
14:37:13.0372 0x09f0  NDIS - ok
14:37:13.0382 0x09f0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
14:37:13.0382 0x09f0  NdisCap - ok
14:37:13.0382 0x09f0  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
14:37:13.0382 0x09f0  NdisTapi - ok
14:37:13.0382 0x09f0  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
14:37:13.0382 0x09f0  Ndisuio - ok
14:37:13.0392 0x09f0  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
14:37:13.0392 0x09f0  NdisWan - ok
14:37:13.0402 0x09f0  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
14:37:13.0402 0x09f0  NDProxy - ok
14:37:13.0402 0x09f0  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
14:37:13.0402 0x09f0  NetBIOS - ok
14:37:13.0412 0x09f0  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
14:37:13.0412 0x09f0  NetBT - ok
14:37:13.0412 0x09f0  [ 0D48E93C6BE3143C0198CB252B992D16, AF34A41BAAE967045C8078E80B070E66ED60FDA0945FA752F715E49FD43373A4 ] Netlogon        C:\Windows\system32\lsass.exe
14:37:13.0412 0x09f0  Netlogon - ok
14:37:13.0422 0x09f0  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
14:37:13.0432 0x09f0  Netman - ok
14:37:13.0432 0x09f0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:37:13.0442 0x09f0  NetMsmqActivator - ok
14:37:13.0442 0x09f0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:37:13.0442 0x09f0  NetPipeActivator - ok
14:37:13.0452 0x09f0  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
14:37:13.0462 0x09f0  netprofm - ok
14:37:13.0482 0x09f0  [ 618C55B392238B9467F9113E13525C49, 304A77EF3E1E7A1738E5A4F6A911B4DF736CEF4867C6F07CA71E227048E90370 ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys
14:37:13.0492 0x09f0  netr28ux - ok
14:37:13.0492 0x09f0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:37:13.0492 0x09f0  NetTcpActivator - ok
14:37:13.0502 0x09f0  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:37:13.0502 0x09f0  NetTcpPortSharing - ok
14:37:13.0502 0x09f0  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
14:37:13.0502 0x09f0  nfrd960 - ok
14:37:13.0512 0x09f0  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
14:37:13.0512 0x09f0  NlaSvc - ok
14:37:13.0522 0x09f0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
14:37:13.0522 0x09f0  Npfs - ok
14:37:13.0542 0x09f0  [ 49697C2C761ACB5C0DE99CC8FE93E95B, 02EEA7FB21D28B235A05FE0A6061170F366470EF6E45C9B21D7C8C0E7C728FC5 ] NPF_devolo      C:\Windows\sysWOW64\drivers\npf_devolo.sys
14:37:13.0542 0x09f0  NPF_devolo - ok
14:37:13.0542 0x09f0  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
14:37:13.0542 0x09f0  nsi - ok
14:37:13.0552 0x09f0  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
14:37:13.0552 0x09f0  nsiproxy - ok
14:37:13.0582 0x09f0  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
14:37:13.0602 0x09f0  Ntfs - ok
14:37:13.0602 0x09f0  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
14:37:13.0602 0x09f0  Null - ok
14:37:13.0612 0x09f0  [ C1CBFEA565CB9BF8AE63657EE10DCE73, E908449BFB679D950764A2BA6A2B9875327605E399626F854BA8F968BDC14107 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
14:37:13.0612 0x09f0  NVHDA - ok
14:37:13.0752 0x09f0  [ 98C14B589F567F5880C0B514632949E7, 1445D242B94E2A2228AC91B70C6EBF5A7795999A62430CE8587FD67882E82CB3 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:37:13.0872 0x09f0  nvlddmkm - ok
14:37:13.0922 0x09f0  [ DB7C6892180C79714EF79F69A788E865, 0E4C109C6F8E8D37447FCE1D7CABCBFAE8E5AA6FD4512150DD17156C9021A6FC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
14:37:13.0942 0x09f0  NvNetworkService - ok
14:37:13.0942 0x09f0  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
14:37:13.0942 0x09f0  nvraid - ok
14:37:13.0952 0x09f0  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
14:37:13.0952 0x09f0  nvstor - ok
14:37:13.0962 0x09f0  [ 7308AA5672CC6D14F43C91965DC67200, 573566D94D19F3AEDFB326B0B5987DC52F3802E5F5CAF8C32830660193B93E19 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
14:37:13.0962 0x09f0  NvStreamKms - ok
14:37:13.0962 0x09f0  NvStreamSvc - ok
14:37:13.0972 0x09f0  [ 1BC6175DAFB0BFEAF8C927F109F912BF, EDEAC4AD10518FEDA9E827E60B840F8CBD2E22CC796E798941A8C64268115224 ] nvsvc           C:\Windows\system32\nvvsvc.exe
14:37:13.0982 0x09f0  nvsvc - ok
14:37:13.0992 0x09f0  [ D0EB00C3BDD50E9CABA534CF829593E8, 6E11117DC30E834C70DC9381A67D057BC2DADA956855A0EEA9801D45C75536B1 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
14:37:13.0992 0x09f0  nvvad_WaveExtensible - ok
14:37:13.0992 0x09f0  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
14:37:13.0992 0x09f0  nv_agp - ok
14:37:13.0992 0x09f0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
14:37:13.0992 0x09f0  ohci1394 - ok
14:37:14.0002 0x09f0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
14:37:14.0012 0x09f0  p2pimsvc - ok
14:37:14.0022 0x09f0  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
14:37:14.0022 0x09f0  p2psvc - ok
14:37:14.0032 0x09f0  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
14:37:14.0032 0x09f0  Parport - ok
14:37:14.0032 0x09f0  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
14:37:14.0032 0x09f0  partmgr - ok
14:37:14.0042 0x09f0  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
14:37:14.0042 0x09f0  PcaSvc - ok
14:37:14.0052 0x09f0  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
14:37:14.0052 0x09f0  pci - ok
14:37:14.0052 0x09f0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
14:37:14.0052 0x09f0  pciide - ok
14:37:14.0062 0x09f0  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
14:37:14.0062 0x09f0  pcmcia - ok
14:37:14.0062 0x09f0  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
14:37:14.0062 0x09f0  pcw - ok
14:37:14.0082 0x09f0  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
14:37:14.0082 0x09f0  PEAUTH - ok
14:37:14.0122 0x09f0  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
14:37:14.0132 0x09f0  PeerDistSvc - ok
14:37:14.0142 0x09f0  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
14:37:14.0142 0x09f0  PerfHost - ok
14:37:14.0172 0x09f0  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
14:37:14.0192 0x09f0  pla - ok
14:37:14.0202 0x09f0  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
14:37:14.0202 0x09f0  PlugPlay - ok
14:37:14.0212 0x09f0  PnkBstrA - ok
14:37:14.0212 0x09f0  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
14:37:14.0212 0x09f0  PNRPAutoReg - ok
14:37:14.0222 0x09f0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
14:37:14.0222 0x09f0  PNRPsvc - ok
14:37:14.0232 0x09f0  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
14:37:14.0242 0x09f0  PolicyAgent - ok
14:37:14.0242 0x09f0  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
14:37:14.0252 0x09f0  Power - ok
14:37:14.0252 0x09f0  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
14:37:14.0252 0x09f0  PptpMiniport - ok
14:37:14.0262 0x09f0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
14:37:14.0262 0x09f0  Processor - ok
14:37:14.0262 0x09f0  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
14:37:14.0272 0x09f0  ProfSvc - ok
14:37:14.0272 0x09f0  [ 0D48E93C6BE3143C0198CB252B992D16, AF34A41BAAE967045C8078E80B070E66ED60FDA0945FA752F715E49FD43373A4 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:37:14.0272 0x09f0  ProtectedStorage - ok
14:37:14.0272 0x09f0  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
14:37:14.0272 0x09f0  Psched - ok
14:37:14.0312 0x09f0  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
14:37:14.0332 0x09f0  ql2300 - ok
14:37:14.0332 0x09f0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
14:37:14.0332 0x09f0  ql40xx - ok
14:37:14.0342 0x09f0  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
14:37:14.0342 0x09f0  QWAVE - ok
14:37:14.0352 0x09f0  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
14:37:14.0352 0x09f0  QWAVEdrv - ok
14:37:14.0352 0x09f0  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
14:37:14.0352 0x09f0  RasAcd - ok
14:37:14.0352 0x09f0  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
14:37:14.0352 0x09f0  RasAgileVpn - ok
14:37:14.0352 0x09f0  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
14:37:14.0362 0x09f0  RasAuto - ok
14:37:14.0362 0x09f0  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
14:37:14.0362 0x09f0  Rasl2tp - ok
14:37:14.0372 0x09f0  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
14:37:14.0382 0x09f0  RasMan - ok
14:37:14.0382 0x09f0  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
14:37:14.0382 0x09f0  RasPppoe - ok
14:37:14.0382 0x09f0  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
14:37:14.0382 0x09f0  RasSstp - ok
14:37:14.0392 0x09f0  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
14:37:14.0392 0x09f0  rdbss - ok
14:37:14.0402 0x09f0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
14:37:14.0402 0x09f0  rdpbus - ok
14:37:14.0402 0x09f0  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
14:37:14.0402 0x09f0  RDPCDD - ok
14:37:14.0402 0x09f0  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
14:37:14.0412 0x09f0  RDPDR - ok
14:37:14.0412 0x09f0  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
14:37:14.0412 0x09f0  RDPENCDD - ok
14:37:14.0412 0x09f0  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
14:37:14.0412 0x09f0  RDPREFMP - ok
14:37:14.0412 0x09f0  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
14:37:14.0412 0x09f0  RdpVideoMiniport - ok
14:37:14.0422 0x09f0  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
14:37:14.0422 0x09f0  RDPWD - ok
14:37:14.0432 0x09f0  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
14:37:14.0432 0x09f0  rdyboost - ok
14:37:14.0432 0x09f0  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
14:37:14.0442 0x09f0  RemoteAccess - ok
14:37:14.0442 0x09f0  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
14:37:14.0442 0x09f0  RemoteRegistry - ok
14:37:14.0452 0x09f0  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
14:37:14.0452 0x09f0  RpcEptMapper - ok
14:37:14.0452 0x09f0  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
14:37:14.0452 0x09f0  RpcLocator - ok
14:37:14.0462 0x09f0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
14:37:14.0472 0x09f0  RpcSs - ok
14:37:14.0472 0x09f0  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
14:37:14.0472 0x09f0  rspndr - ok
14:37:14.0482 0x09f0  [ 027E10A5048B135862D638B9085D1402, BAC1CD96BA242CDF29F8FEAC501110739F1524F0DB1C8FCAD59409E77B8928BA ] RTCore64        C:\Program Files (x86)\MSI Afterburner\RTCore64.sys
14:37:14.0482 0x09f0  RTCore64 - ok
14:37:14.0482 0x09f0  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
14:37:14.0482 0x09f0  s3cap - ok
14:37:14.0482 0x09f0  [ 0D48E93C6BE3143C0198CB252B992D16, AF34A41BAAE967045C8078E80B070E66ED60FDA0945FA752F715E49FD43373A4 ] SamSs           C:\Windows\system32\lsass.exe
14:37:14.0482 0x09f0  SamSs - ok
14:37:14.0492 0x09f0  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
14:37:14.0492 0x09f0  sbp2port - ok
14:37:14.0492 0x09f0  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
14:37:14.0502 0x09f0  SCardSvr - ok
14:37:14.0502 0x09f0  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
14:37:14.0502 0x09f0  scfilter - ok
14:37:14.0522 0x09f0  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
14:37:14.0542 0x09f0  Schedule - ok
14:37:14.0542 0x09f0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
14:37:14.0542 0x09f0  SCPolicySvc - ok
14:37:14.0552 0x09f0  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
14:37:14.0552 0x09f0  SDRSVC - ok
14:37:14.0552 0x09f0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
14:37:14.0552 0x09f0  secdrv - ok
14:37:14.0552 0x09f0  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
14:37:14.0562 0x09f0  seclogon - ok
14:37:14.0562 0x09f0  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
14:37:14.0562 0x09f0  SENS - ok
14:37:14.0562 0x09f0  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
14:37:14.0562 0x09f0  SensrSvc - ok
14:37:14.0572 0x09f0  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
14:37:14.0572 0x09f0  Serenum - ok
14:37:14.0572 0x09f0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
14:37:14.0572 0x09f0  Serial - ok
14:37:14.0572 0x09f0  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
14:37:14.0572 0x09f0  sermouse - ok
14:37:14.0582 0x09f0  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
14:37:14.0582 0x09f0  SessionEnv - ok
14:37:14.0582 0x09f0  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
14:37:14.0582 0x09f0  sffdisk - ok
14:37:14.0592 0x09f0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
14:37:14.0592 0x09f0  sffp_mmc - ok
14:37:14.0592 0x09f0  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
14:37:14.0592 0x09f0  sffp_sd - ok
14:37:14.0592 0x09f0  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
14:37:14.0592 0x09f0  sfloppy - ok
14:37:14.0602 0x09f0  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
14:37:14.0612 0x09f0  SharedAccess - ok
14:37:14.0622 0x09f0  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:37:14.0622 0x09f0  ShellHWDetection - ok
14:37:14.0632 0x09f0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:37:14.0632 0x09f0  SiSRaid2 - ok
14:37:14.0632 0x09f0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
14:37:14.0632 0x09f0  SiSRaid4 - ok
14:37:14.0642 0x09f0  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
14:37:14.0642 0x09f0  SkypeUpdate - ok
14:37:14.0642 0x09f0  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
14:37:14.0642 0x09f0  Smb - ok
14:37:14.0652 0x09f0  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
14:37:14.0652 0x09f0  SNMPTRAP - ok
14:37:14.0652 0x09f0  [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan        C:\Windows\syswow64\speedfan.sys
14:37:14.0652 0x09f0  speedfan - ok
14:37:14.0662 0x09f0  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
14:37:14.0662 0x09f0  spldr - ok
14:37:14.0672 0x09f0  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
14:37:14.0672 0x09f0  Spooler - ok
14:37:14.0752 0x09f0  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
14:37:14.0792 0x09f0  sppsvc - ok
14:37:14.0802 0x09f0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
14:37:14.0802 0x09f0  sppuinotify - ok
14:37:14.0812 0x09f0  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
14:37:14.0812 0x09f0  srv - ok
14:37:14.0832 0x09f0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
14:37:14.0832 0x09f0  srv2 - ok
14:37:14.0832 0x09f0  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
14:37:14.0842 0x09f0  srvnet - ok
14:37:14.0842 0x09f0  [ F87ADF027C7D05B2681FA4AC820B7D66, 482ED455B8DD963AD2535609A6EF0D1D27C1D356E76FA963AA41039C5BEA6EE0 ] ssdevfactory    C:\Windows\system32\DRIVERS\ssdevfactory.sys
14:37:14.0842 0x09f0  ssdevfactory - ok
14:37:14.0852 0x09f0  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
14:37:14.0852 0x09f0  SSDPSRV - ok
14:37:14.0852 0x09f0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
14:37:14.0852 0x09f0  SstpSvc - ok
14:37:14.0872 0x09f0  [ 2A6EDC2FBB4B9C11BB21BE3881C7A692, 74482CA4EC2B98C069A32C224BA5449AE10A8B41BFC053A4C23B6F65113A97A4 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
14:37:14.0872 0x09f0  Steam Client Service - ok
14:37:14.0882 0x09f0  [ 0E952C9DDE28962922CCDEFA0BF8C425, 41AEA8777DDDE907E94B69A0D03D4EAD4983DB1B798CB01A77E4D8E57CA4A9AD ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
14:37:14.0892 0x09f0  Stereo Service - ok
14:37:14.0892 0x09f0  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
14:37:14.0892 0x09f0  stexstor - ok
14:37:14.0892 0x09f0  [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys
14:37:14.0892 0x09f0  StillCam - ok
14:37:14.0912 0x09f0  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
14:37:14.0912 0x09f0  stisvc - ok
14:37:14.0922 0x09f0  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
14:37:14.0922 0x09f0  storflt - ok
14:37:14.0922 0x09f0  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll
14:37:14.0922 0x09f0  StorSvc - ok
14:37:14.0922 0x09f0  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
14:37:14.0922 0x09f0  storvsc - ok
14:37:14.0932 0x09f0  [ 860E400C827967AB0B0204AE98EA0FC4, E9A08B8FAC4E4DE6B05E5F990103260EFFFC1FD153CE2A47206111F1698C56A5 ] Survarium Update Service C:\SSD Games\Survarium\game\binaries\x86\survarium_service.exe
14:37:14.0932 0x09f0  Survarium Update Service - ok
14:37:14.0932 0x09f0  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
14:37:14.0932 0x09f0  swenum - ok
14:37:14.0942 0x09f0  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
14:37:14.0952 0x09f0  swprv - ok
14:37:14.0983 0x09f0  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll
14:37:15.0003 0x09f0  SysMain - ok
14:37:15.0009 0x09f0  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:37:15.0010 0x09f0  TabletInputService - ok
14:37:15.0021 0x09f0  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
14:37:15.0026 0x09f0  TapiSrv - ok
14:37:15.0030 0x09f0  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
14:37:15.0032 0x09f0  TBS - ok
14:37:15.0072 0x09f0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
14:37:15.0093 0x09f0  Tcpip - ok
14:37:15.0134 0x09f0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
14:37:15.0155 0x09f0  TCPIP6 - ok
14:37:15.0160 0x09f0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
14:37:15.0161 0x09f0  tcpipreg - ok
14:37:15.0163 0x09f0  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
14:37:15.0164 0x09f0  TDPIPE - ok
14:37:15.0167 0x09f0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
14:37:15.0167 0x09f0  TDTCP - ok
14:37:15.0171 0x09f0  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
14:37:15.0173 0x09f0  tdx - ok
14:37:15.0175 0x09f0  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
14:37:15.0176 0x09f0  TermDD - ok
14:37:15.0192 0x09f0  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
14:37:15.0200 0x09f0  TermService - ok
14:37:15.0203 0x09f0  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
14:37:15.0204 0x09f0  Themes - ok
14:37:15.0208 0x09f0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
14:37:15.0209 0x09f0  THREADORDER - ok
14:37:15.0213 0x09f0  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
14:37:15.0215 0x09f0  TrkWks - ok
14:37:15.0220 0x09f0  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:37:15.0223 0x09f0  TrustedInstaller - ok
14:37:15.0226 0x09f0  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
14:37:15.0226 0x09f0  tssecsrv - ok
14:37:15.0230 0x09f0  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
14:37:15.0231 0x09f0  TsUsbFlt - ok
14:37:15.0236 0x09f0  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
14:37:15.0238 0x09f0  tunnel - ok
14:37:15.0242 0x09f0  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
14:37:15.0243 0x09f0  uagp35 - ok
14:37:15.0253 0x09f0  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
14:37:15.0257 0x09f0  udfs - ok
14:37:15.0261 0x09f0  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
14:37:15.0262 0x09f0  UI0Detect - ok
14:37:15.0266 0x09f0  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
14:37:15.0267 0x09f0  uliagpkx - ok
14:37:15.0270 0x09f0  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
14:37:15.0271 0x09f0  umbus - ok
14:37:15.0273 0x09f0  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
14:37:15.0273 0x09f0  UmPass - ok
14:37:15.0278 0x09f0  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
14:37:15.0281 0x09f0  UmRdpService - ok
14:37:15.0291 0x09f0  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
14:37:15.0296 0x09f0  upnphost - ok
14:37:15.0300 0x09f0  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
14:37:15.0302 0x09f0  usbaudio - ok
14:37:15.0306 0x09f0  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
14:37:15.0307 0x09f0  usbccgp - ok
14:37:15.0310 0x09f0  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
14:37:15.0312 0x09f0  usbcir - ok
14:37:15.0315 0x09f0  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
14:37:15.0316 0x09f0  usbehci - ok
14:37:15.0325 0x09f0  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
14:37:15.0329 0x09f0  usbhub - ok
14:37:15.0332 0x09f0  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
14:37:15.0332 0x09f0  usbohci - ok
14:37:15.0335 0x09f0  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
14:37:15.0335 0x09f0  usbprint - ok
14:37:15.0337 0x09f0  [ 2C42E595E7E381596B9A14F88F5AE027, 948C2AD7FA0B01184312D1ABE43F2F3D85A934CF0658A8B2BDF9F0919568377B ] usbrndis6       C:\Windows\system32\drivers\usb80236.sys
14:37:15.0338 0x09f0  usbrndis6 - ok
14:37:15.0340 0x09f0  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
14:37:15.0341 0x09f0  usbscan - ok
14:37:15.0344 0x09f0  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:37:15.0345 0x09f0  USBSTOR - ok
14:37:15.0348 0x09f0  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
14:37:15.0348 0x09f0  usbuhci - ok
14:37:15.0351 0x09f0  [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys
14:37:15.0351 0x09f0  usb_rndisx - ok
14:37:15.0353 0x09f0  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
14:37:15.0355 0x09f0  UxSms - ok
14:37:15.0357 0x09f0  [ 0D48E93C6BE3143C0198CB252B992D16, AF34A41BAAE967045C8078E80B070E66ED60FDA0945FA752F715E49FD43373A4 ] VaultSvc        C:\Windows\system32\lsass.exe
14:37:15.0358 0x09f0  VaultSvc - ok
14:37:15.0360 0x09f0  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
14:37:15.0360 0x09f0  vdrvroot - ok
14:37:15.0370 0x09f0  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
14:37:15.0380 0x09f0  vds - ok
14:37:15.0380 0x09f0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
14:37:15.0380 0x09f0  vga - ok
14:37:15.0380 0x09f0  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
14:37:15.0380 0x09f0  VgaSave - ok
14:37:15.0390 0x09f0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
14:37:15.0390 0x09f0  vhdmp - ok
14:37:15.0390 0x09f0  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
14:37:15.0390 0x09f0  viaide - ok
14:37:15.0400 0x09f0  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
14:37:15.0400 0x09f0  vmbus - ok
14:37:15.0400 0x09f0  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
14:37:15.0400 0x09f0  VMBusHID - ok
14:37:15.0400 0x09f0  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
14:37:15.0410 0x09f0  volmgr - ok
14:37:15.0410 0x09f0  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
14:37:15.0420 0x09f0  volmgrx - ok
14:37:15.0420 0x09f0  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
14:37:15.0430 0x09f0  volsnap - ok
14:37:15.0430 0x09f0  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
14:37:15.0430 0x09f0  vsmraid - ok
14:37:15.0470 0x09f0  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
14:37:15.0490 0x09f0  VSS - ok
14:37:15.0490 0x09f0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
14:37:15.0490 0x09f0  vwifibus - ok
14:37:15.0490 0x09f0  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
14:37:15.0490 0x09f0  vwififlt - ok
14:37:15.0500 0x09f0  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
14:37:15.0510 0x09f0  W32Time - ok
14:37:15.0510 0x09f0  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
14:37:15.0510 0x09f0  WacomPen - ok
14:37:15.0520 0x09f0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
14:37:15.0520 0x09f0  WANARP - ok
14:37:15.0520 0x09f0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
14:37:15.0520 0x09f0  Wanarpv6 - ok
14:37:15.0550 0x09f0  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
14:37:15.0570 0x09f0  wbengine - ok
14:37:15.0570 0x09f0  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
14:37:15.0580 0x09f0  WbioSrvc - ok
14:37:15.0590 0x09f0  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
14:37:15.0590 0x09f0  wcncsvc - ok
14:37:15.0590 0x09f0  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:37:15.0600 0x09f0  WcsPlugInService - ok
14:37:15.0600 0x09f0  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
14:37:15.0600 0x09f0  Wd - ok
14:37:15.0620 0x09f0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
14:37:15.0630 0x09f0  Wdf01000 - ok
14:37:15.0630 0x09f0  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
14:37:15.0630 0x09f0  WdiServiceHost - ok
14:37:15.0640 0x09f0  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
14:37:15.0640 0x09f0  WdiSystemHost - ok
14:37:15.0640 0x09f0  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll
14:37:15.0650 0x09f0  WebClient - ok
14:37:15.0650 0x09f0  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
14:37:15.0660 0x09f0  Wecsvc - ok
14:37:15.0660 0x09f0  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
14:37:15.0660 0x09f0  wercplsupport - ok
14:37:15.0670 0x09f0  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
14:37:15.0670 0x09f0  WerSvc - ok
14:37:15.0670 0x09f0  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
14:37:15.0670 0x09f0  WfpLwf - ok
14:37:15.0670 0x09f0  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
14:37:15.0670 0x09f0  WIMMount - ok
14:37:15.0670 0x09f0  WinDefend - ok
14:37:15.0680 0x09f0  WinHttpAutoProxySvc - ok
14:37:15.0680 0x09f0  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
14:37:15.0690 0x09f0  Winmgmt - ok
14:37:15.0770 0x09f0  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
14:37:15.0790 0x09f0  WinRM - ok
14:37:15.0800 0x09f0  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
14:37:15.0800 0x09f0  WinUsb - ok
14:37:15.0850 0x09f0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
14:37:15.0860 0x09f0  Wlansvc - ok
14:37:15.0860 0x09f0  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
14:37:15.0860 0x09f0  WmiAcpi - ok
14:37:15.0870 0x09f0  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
14:37:15.0870 0x09f0  wmiApSrv - ok
14:37:15.0880 0x09f0  WMPNetworkSvc - ok
14:37:15.0880 0x09f0  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
14:37:15.0880 0x09f0  WPCSvc - ok
14:37:15.0890 0x09f0  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
14:37:15.0890 0x09f0  WPDBusEnum - ok
14:37:15.0900 0x09f0  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
14:37:15.0900 0x09f0  ws2ifsl - ok
14:37:15.0910 0x09f0  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
14:37:15.0910 0x09f0  wscsvc - ok
14:37:15.0920 0x09f0  WSearch - ok
14:37:16.0010 0x09f0  [ 499034D7F1F6AF49F9EE12F8822793CB, 55D591C4861AF66C6B9201BF78808B2ECE7B79D95C6BB07FF0ED87EFE63DD99E ] wuauserv        C:\Windows\system32\wuaueng.dll
14:37:16.0040 0x09f0  wuauserv - ok
14:37:16.0050 0x09f0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
14:37:16.0050 0x09f0  WudfPf - ok
14:37:16.0050 0x09f0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys
14:37:16.0050 0x09f0  WUDFRd - ok
14:37:16.0060 0x09f0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
14:37:16.0060 0x09f0  wudfsvc - ok
14:37:16.0060 0x09f0  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
14:37:16.0070 0x09f0  WwanSvc - ok
14:37:16.0070 0x09f0  ================ Scan global ===============================
14:37:16.0080 0x09f0  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
14:37:16.0080 0x09f0  [ E80CA72FA43BF258E72C408CEF9839BE, 06482E80F43AD91F4B9E5919A0C50219382213D59EACF9FBAE7AFD7A321F30D2 ] C:\Windows\system32\winsrv.dll
14:37:16.0090 0x09f0  [ E80CA72FA43BF258E72C408CEF9839BE, 06482E80F43AD91F4B9E5919A0C50219382213D59EACF9FBAE7AFD7A321F30D2 ] C:\Windows\system32\winsrv.dll
14:37:16.0090 0x09f0  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
14:37:16.0100 0x09f0  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
14:37:16.0110 0x09f0  [ Global ] - ok
14:37:16.0110 0x09f0  ================ Scan MBR ==================================
14:37:16.0110 0x09f0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:37:16.0150 0x09f0  \Device\Harddisk0\DR0 - ok
14:37:16.0150 0x09f0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
14:37:16.0160 0x09f0  \Device\Harddisk1\DR1 - ok
14:37:16.0160 0x09f0  ================ Scan VBR ==================================
14:37:16.0160 0x09f0  [ E1BE2EC629924A204E178381C9570AB9 ] \Device\Harddisk0\DR0\Partition1
14:37:16.0160 0x09f0  \Device\Harddisk0\DR0\Partition1 - ok
14:37:16.0160 0x09f0  [ 743B2BEFEFA674AE3DF075063B507580 ] \Device\Harddisk0\DR0\Partition2
14:37:16.0160 0x09f0  \Device\Harddisk0\DR0\Partition2 - ok
14:37:16.0160 0x09f0  [ 37DC2D04A8EA466EEB1B8EEFF5D3C8ED ] \Device\Harddisk1\DR1\Partition1
14:37:16.0160 0x09f0  \Device\Harddisk1\DR1\Partition1 - ok
14:37:16.0160 0x09f0  ================ Scan generic autorun ======================
14:37:16.0220 0x09f0  [ A416FBE18A8FF5C942B5E4A65A66EAE0, DC021A544A16BA984A906D235E0E6DA8AC0DF0A7FC8A89D192E427BBE6D2434C ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
14:37:16.0250 0x09f0  NvBackend - ok
14:37:16.0280 0x09f0  [ 2B6699671E08E46FF5FDFD891CCCF74E, F29C37FF118F25805783F35B95A0534AF4218F470CD8D17FF28072FB310062F2 ] C:\Treiber\Mouse\XMouseButtonControl.exe
14:37:16.0290 0x09f0  XMouseButtonControl - ok
14:37:16.0410 0x09f0  [ EEF85F53AB2B172D10629CAE1A491EC2, C0787C1F8C193BCC0577F13A503E939056AD41BC4D34BD4B62DADA7F3D0AF429 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
14:37:16.0470 0x09f0  ISCT Tray - ok
14:37:16.0480 0x09f0  [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\rundll32.exe
14:37:16.0480 0x09f0  ShadowPlay - ok
14:37:16.0930 0x09f0  [ 3F0B5EBDEB180C073E01A4A2DFA28C12, 0ACE6F70260E17284B8307D0DD0ACC9B59B379A99AE43429AB644B421ADAE8A7 ] C:\Program Files\Logitech Gaming Software\LCore.exe
14:37:17.0070 0x09f0  Launch LCore - ok
14:37:17.0080 0x09f0  [ 094E4E76FB9AB960A73F841BC6733F42, 01C1BFF17BEC6588E192EC4D7ACB74FC9B95ECA7CB8BB9585B04FC8EA73C3B43 ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
14:37:17.0090 0x09f0  USB3MON - ok
14:37:17.0090 0x09f0  [ 34D296AFC913E302953C70463EF09A48, BC413307CBC56C039EE8A05B51A56E14EF59678FBB33815AEB320078056C8CE7 ] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
14:37:17.0090 0x09f0  HP Software Update - ok
14:37:17.0130 0x09f0  [ 44A9229022A519ED45294A1934C05EEC, 6DEF0DB5F9B50E9B0AFEE1CF50066BEB4FB7E15E2DC829A499509925660D6992 ] C:\Users\Marius\AppData\Local\FluxSoftware\Flux\flux.exe
14:37:17.0140 0x09f0  f.lux - ok
14:37:17.0220 0x09f0  [ 22F7B9670AD770C7ED7F4738204C8E5C, 7B793AC094CB1B073419B5DAE09DFBB8EBED03D29301F490AA76EA0667613438 ] C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe
14:37:17.0240 0x09f0  HP Officejet 4620 series (NET) - ok
14:37:17.0290 0x09f0  [ 92B2CC464136BA72FF7E57DF98993ACA, 76FA85AD2CA9EADEDB5B018D6432FD7D6D90A0893E9B1676C3B686001AB9EFF1 ] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
14:37:17.0300 0x09f0  GoogleChromeAutoLaunch_13084EC567A31CF05A20DE11558C97D1 - ok
14:37:17.0300 0x09f0  [ 60FDE7A426F04871D072A178055E7C79, 5F81C256AEF900FE62BCE94DA81D4F7DE0B913067DC0F6EF00C2ED6A0DF554C1 ] E:\SteelSeries Engine\SteelSeriesEngine.exe
14:37:17.0300 0x09f0  SteelSeries Engine - ok
14:37:17.0840 0x09f0  [ 86BF17A265E1B4BA41325623EC132E66, 4414B5F01A78B76BFC1A7C39F595645A09E674FA6DE7991F31BA6673EEB23F9E ] E:\Steam\steam.exe
14:37:17.0870 0x09f0  Steam - ok
14:37:17.0870 0x09f0  Skype - ok
14:37:17.0870 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:18.0870 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:19.0870 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:20.0879 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:21.0879 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:22.0879 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:23.0879 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:24.0879 0x09f0  Waiting for KSN requests completion. In queue: 450
14:37:25.0887 0x09f0  Waiting for KSN requests completion. In queue: 166
14:37:26.0887 0x09f0  Waiting for KSN requests completion. In queue: 166
14:37:27.0887 0x09f0  Win FW state via NFP2: enabled ( trusted )
14:37:30.0230 0x09f0  ============================================================
14:37:30.0230 0x09f0  Scan finished
14:37:30.0230 0x09f0  ============================================================
14:37:30.0233 0x26d4  Detected object count: 0
14:37:30.0233 0x26d4  Actual detected object count: 0
14:37:53.0476 0x1860  Deinitialize success

M-K-D-B · 31.08.2015, 16:19

Servus,

Addition.txt von FRST fehlt noch.

Kinderwerfer · 31.08.2015, 16:32

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:30-08-2015
durchgeführt von Marius (2015-08-31 14:13:57)
Gestartet von C:\Users\Marius\Downloads
Start-Modus: Normal
==========================================================


==================== Konten: =============================

M-K-D-B · 31.08.2015, 16:56

Das ist alles, was in der Addtion.txt steht? Kann ich mir nicht vorstellen...

Kinderwerfer · 31.08.2015, 17:04

Sorry, hat rumgespackt weil ichs nicht aufm Desktop hatte.

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:30-08-2015
durchgeführt von Marius (2015-08-31 18:02:24)
Gestartet von C:\Users\Marius\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3071925943-2123122995-1479801150-500 - Administrator - Disabled)
Gast (S-1-5-21-3071925943-2123122995-1479801150-501 - Limited - Disabled)
Marius (S-1-5-21-3071925943-2123122995-1479801150-1000 - Administrator - Enabled) => C:\Users\Marius

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

"Sudden Strike - Release 1.0" (HKLM-x32\...\"Sudden Strike - Release 1.0") (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\{1194343F-ACFE-4AB4-B1C0-C1E913B729BF}_is1) (Version: 3.8.2662 - Microsoft Studios, Tolyak26)
Archeage (HKLM-x32\...\Glyph Archeage) (Version:  - Trion Worlds, Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version:  - ASRock Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cities Skylines, âåðñèÿ 1.0.0.0 (HKLM-x32\...\Cities Skylines_is1) (Version: 1.0.0.0 - RePack by SEYTER)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
devolo dLAN-Konfigurationsassistent (HKLM-x32\...\dlanconf) (Version: 20.0.0.0 - devolo AG)
devolo Informer (HKLM-x32\...\dslmon) (Version: 28.0.0.0 - devolo AG)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
EVGA PrecisionX 16 (HKLM-x32\...\{DD747735-7FA7-4F0F-903A-271D0DCE7240}) (Version: 5.2.7 - EVGA Corporation)
EVGA PrecisionX 16 (HKLM-x32\...\Steam App 268850) (Version:  - EVGA)
f.lux (HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Flux) (Version:  - )
Fallout 2 (HKLM-x32\...\GOGPACKFALLOUT2_is1) (Version: 2.0.0.12 - GOG.com)
Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)
Fallout 3 - Unofficial Fallout 3 Patch (HKLM-x32\...\{297C7552-BA68-4F73-AB83-82510777421D}_is1) (Version: v1.2.0 - Quarn (quarny@gmail.com))
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FileZilla Client 3.9.0.6 (HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.157 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version:  - Reto-Moto)
hide.me VPN Version 1.0.7 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.0.7 - eVenture Limited)
HP Officejet 4620 series - Grundlegende Software für das Gerät (HKLM\...\{B16F9E6E-1388-472C-98C3-F32D397EF85D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 4620 series Hilfe (HKLM-x32\...\{72EDA2AC-2908-4BB3-97E5-4F9DDEBF9731}) (Version: 6.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IL-2 Sturmovik Battle of Stalingrad (HKLM-x32\...\{66F649A9-0FA2-487E-BC0D-894BD7E89D5E}_is1) (Version:  - 1C Game Studios)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)
Intel(R) Smart Connect Technology (HKLM\...\{94A137EA-92EF-441C-A7E2-6757CC08EA82}) (Version: 5.0.10.2907 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
IP Camera Adapter (HKLM-x32\...\{6D140BFF-7CC5-4BFE-AD6D-47035FFE5F14}) (Version: 2.0.0.0 - Pavel Khlebovich)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Killing Floor (HKLM-x32\...\Steam App 1250) (Version:  - Tripwire Interactive)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)
Medieval Engineers (HKLM-x32\...\Steam App 333950) (Version:  - Keen Software House)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version:  - OVERKILL Software)
Play withSIX Windows client (HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\PlaywithSIX) (Version: 1.66.1146.4 - SIX Networks GmbH)
Prison Architect (HKLM-x32\...\Steam App 233450) (Version:  - Introversion Software)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version:  - The Indie Stone)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)
qBittorrent 3.1.12 (HKLM-x32\...\qBittorrent) (Version: 3.1.12 - The qBittorrent project)
Rising Storm/Red Orchestra 2 Multiplayer (HKLM-x32\...\Steam App 35450) (Version:  - Tripwire Interactive)
RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.0 - Rockstar Games)
Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)
S.T.A.L.K.E.R.: Call of Pripyat (HKLM-x32\...\Steam App 41700) (Version:  - GSC Game World)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
ShareX 9.5.0 (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 9.5.0 - ShareX Developers)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Stealth Inc 2 (HKLM-x32\...\Steam App 329380) (Version:  - Carbon)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries Engine (HKLM\...\SteelSeries Engine) (Version: 2.9.2014.1 - SteelSeries)
Stranded Deep (HKLM-x32\...\Steam App 313120) (Version:  - Beam Team Games)
Studie zur Verbesserung von HP Officejet 4620 series Produkten (HKLM\...\{ABBC6F00-E9C9-4B1E-B046-8FFD7BA3A456}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Sudden Strike 3 (HKLM-x32\...\Sudden Strike 3) (Version:  - )
Survarium (HKLM-x32\...\{FEA2E954-A6D0-42FA-8FF1-DFA325758FAC}_is1) (Version: 0.27a7 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Verdun (HKLM-x32\...\Steam App 242860) (Version:  - M2H)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Wargame: Red Dragon (HKLM-x32\...\Steam App 251060) (Version:  - Eugen Systems)
X-Mouse Button Control 2.9.1 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.9.1 - Highresolution Enterprises)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

30-08-2015 02:21:00 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {05DE32CC-3267-4D20-B16B-D90CA11BE343} - System32\Tasks\{D0698FE9-B715-462D-986C-1107B74D6986} => C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
Task: {24D33F3D-CFD6-4C1B-9546-1E511F3B5C74} - System32\Tasks\Steam_x64-S-2-106-91 => C:\Users\Marius\AppData\Roaming\TS3Client\CODEXi\Steam [2015-01-05] () <==== ACHTUNG
Task: {29876E41-77F8-46E4-8C27-C3EBEDA9833F} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {369ED377-2B08-4D07-9267-07D11D4FDB66} - System32\Tasks\{FF580481-FD18-496F-A1B1-848D8AD3F857} => pcalua.exe -a C:\SS3\ss3_addon_1_4_german_setup.exe -d C:\SS3
Task: {57DFC41A-0A19-49EB-ACB4-5C2ED2039EDF} - System32\Tasks\{EC764047-45CA-4CD2-81DD-C08E0A23B125} => pcalua.exe -a C:\Users\Marius\Downloads\ZE_25030_NA_64.exe -d C:\Users\Marius\Downloads
Task: {6143CCC7-279E-42A1-9020-AF54EECCF852} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {6F99C182-FC4A-414F-9043-66441EC5C202} - System32\Tasks\{300BBE3C-4E88-4E4A-AB6C-25A5E4837FD3} => pcalua.exe -a "C:\Users\Marius\Downloads\Batus Mod 2-0 Installer.exe" -d C:\Users\Marius\Downloads
Task: {7216762F-B66C-40A2-A602-57D231E78084} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-05] (Adobe Systems Incorporated)
Task: {84E828B0-57C5-46B5-857B-06A36CECD4E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {8800F0D0-9A93-4F7C-A423-C2A3C3987D73} - System32\Tasks\arp_flush => C:\Program Files (x86)\hide.me VPN\FlushArpCache.exe [2015-04-03] ()
Task: {8B3C3BFC-3CE8-4032-8321-EE4E19EBE16D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {975CC1ED-2C98-407B-AE77-A39D0B0DAEB2} - System32\Tasks\{C622914B-9D44-49C1-AE63-B66C572C37C7} => pcalua.exe -a C:\Users\Marius\AppData\Local\Temp\Temp2_pbsetup.zip\pbsetup.exe
Task: {AA0BB100-5E71-4365-B06E-B2920EF0CFF4} - System32\Tasks\HPCustParticipation HP Officejet 4620 series => C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {B2175FD2-AFEF-4563-9F23-C3042E7BCCDC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {C0E1CD41-5613-4CAD-860E-9FEB6C208C85} - System32\Tasks\{569EEAE3-070C-4B39-B2C7-BF4154D0F769} => pcalua.exe -a "C:\Users\Marius\Downloads\ZE_25030_NA_64 (1).exe" -d C:\Users\Marius\Downloads
Task: {CE43AB65-31D0-4FB2-B412-8EA5A4F28A80} - System32\Tasks\{B1D4E6A6-F912-4C47-94D4-1C121A336A78} => pcalua.exe -a "C:\Program Files (x86)\devolo\setup.exe" -d "C:\Program Files (x86)\devolo"
Task: {F7ED16F9-FCB2-41A4-AEFF-C2C55D88A8EC} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2015-05-27] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-12-18 03:06 - 2015-08-07 02:44 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-25 17:01 - 2014-08-25 17:01 - 00209712 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2014-08-25 17:01 - 2014-08-25 17:01 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2014-08-25 17:01 - 2014-08-25 17:01 - 00037168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-08-25 17:01 - 2014-08-25 17:01 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTEncryptionCheck.dll
2015-01-26 14:33 - 2015-02-07 22:53 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-03-12 20:23 - 2015-03-12 20:23 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-03-12 20:23 - 2015-03-12 20:23 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00504832 _____ () E:\SteelSeries Engine\SSEngineLib.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 09315328 _____ () E:\SteelSeries Engine\SSEngineWinGui.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00015872 _____ () E:\SteelSeries Engine\Localization.dll
2014-10-09 21:43 - 2014-10-09 21:43 - 00011264 _____ () E:\SteelSeries Engine\ISSPlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00011264 _____ () E:\SteelSeries Engine\Utilities.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00115200 _____ () E:\SteelSeries Engine\DriverCommunication.dll
2014-10-08 17:30 - 2014-10-08 17:30 - 00047616 _____ () E:\SteelSeries Engine\SteelSeriesDrivers\x2api.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00034304 _____ () E:\SteelSeries Engine\DBUtils.dll
2014-10-08 17:30 - 2014-10-08 17:30 - 01102336 _____ () E:\SteelSeries Engine\System.Data.SQLite.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00189440 _____ () E:\SteelSeries Engine\MousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00030720 _____ () E:\SteelSeries Engine\D3MousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00031744 _____ () E:\SteelSeries Engine\KKMousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00030720 _____ () E:\SteelSeries Engine\SRawPlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00159744 _____ () E:\SteelSeries Engine\MLGSenseiPlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00020992 _____ () E:\SteelSeries Engine\WoWGoldPlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00030720 _____ () E:\SteelSeries Engine\GW2MousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00029696 _____ () E:\SteelSeries Engine\CSGOMousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00030208 _____ () E:\SteelSeries Engine\DOTA2MousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00023040 _____ () E:\SteelSeries Engine\WoWWirelessPlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00030720 _____ () E:\SteelSeries Engine\CODMousePlugin.dll
2014-10-09 21:44 - 2014-10-09 21:44 - 00030208 _____ () E:\SteelSeries Engine\WoTMousePlugin.dll
2015-05-27 12:05 - 2015-05-27 12:05 - 00578272 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2015-03-30 18:25 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-18 03:30 - 2015-07-03 18:12 - 00778240 _____ () E:\Steam\SDL2.dll
2015-01-20 02:40 - 2015-07-03 18:12 - 04962816 _____ () E:\Steam\v8.dll
2015-01-20 02:40 - 2015-07-03 18:12 - 01556992 _____ () E:\Steam\icui18n.dll
2015-01-20 02:40 - 2015-07-03 18:12 - 01187840 _____ () E:\Steam\icuuc.dll
2014-12-18 03:30 - 2015-08-19 22:39 - 02413248 _____ () E:\Steam\video.dll
2014-12-18 03:30 - 2014-12-01 23:31 - 02396672 _____ () E:\Steam\libavcodec-56.dll
2014-12-18 03:30 - 2014-12-01 23:31 - 00442880 _____ () E:\Steam\libavutil-54.dll
2014-12-18 03:30 - 2014-12-01 23:31 - 00479744 _____ () E:\Steam\libavformat-56.dll
2014-12-18 03:30 - 2014-12-01 23:31 - 00332800 _____ () E:\Steam\libavresample-2.dll
2014-12-18 03:30 - 2014-12-01 23:31 - 00485888 _____ () E:\Steam\libswscale-3.dll
2014-12-18 03:30 - 2015-08-19 22:39 - 00704192 _____ () E:\Steam\bin\chromehtml.DLL
2015-08-28 19:18 - 2015-07-27 03:13 - 00171008 _____ () E:\Steam\bin\openvr_api.dll
2014-04-17 03:27 - 2014-04-17 03:27 - 00087552 _____ () E:\IPW\IPCameraAdapter.dll
2015-05-08 07:08 - 2015-05-08 07:08 - 00151552 _____ () E:\IPW\DroidCam\lib\DroidCam.dll
2015-05-08 07:08 - 2015-05-08 07:08 - 00081920 _____ () E:\IPW\DroidCam\lib\DroidCamFilter.ax
2015-05-08 07:14 - 2015-05-08 07:14 - 00086016 _____ () E:\IPW\DroidCam\lib\DroidCamFilter240p.ax
2014-12-18 03:30 - 2015-07-03 18:12 - 39553928 _____ () E:\Steam\bin\libcef.dll
2015-05-18 13:43 - 2015-05-18 13:43 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2015-05-18 13:43 - 2015-05-18 13:43 - 00057856 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2015-05-18 13:43 - 2015-05-18 13:43 - 00218624 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2015-05-22 12:56 - 2015-05-22 12:56 - 00357888 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2015-05-22 13:36 - 2015-05-22 13:36 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2015-08-28 19:35 - 2015-08-18 07:23 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\libglesv2.dll
2015-08-28 19:35 - 2015-08-18 07:23 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\libegl.dll
2015-08-28 19:35 - 2015-08-18 07:23 - 16393032 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{10431163-6F78-4964-AB22-10A710A99A6D}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{E5272C4F-CA1C-4678-9726-B8F709ABF5DB}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{099707C1-4880-43AF-BAC9-112D3CFB2A2D}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{8789977B-C500-4865-B086-398D21F36C54}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{AD7FBC10-A317-4E9A-B64B-5B26EC775C66}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{D34A5816-8480-4E27-96A9-EA5DA11DC238}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{C0F65330-066F-494D-A34C-9B806E0E86E8}C:\program files (x86)\devolo\informer\devinf.exe] => (Allow) C:\program files (x86)\devolo\informer\devinf.exe
FirewallRules: [UDP Query User{801B2C83-4832-48E5-B4CD-0A47F3CF4E1F}C:\program files (x86)\devolo\informer\devinf.exe] => (Allow) C:\program files (x86)\devolo\informer\devinf.exe
FirewallRules: [{73DE59D3-B113-4F17-A913-F3D036BDDA79}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0B5CB2CD-4CF1-4808-B5D4-69CAB987765D}] => (Allow) E:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{7A37DC45-DCE9-4555-954F-DA10BBF6A23A}] => (Allow) E:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{6D067E16-87A1-447C-8C6E-05B8CF4C5525}E:\steam\steamapps\common\war thunder\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{6BFD521D-CB6C-45BC-8B8D-4438FD2A33DB}E:\steam\steamapps\common\war thunder\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{AFC7C9FB-54E1-48CF-B7BB-758CC0032C45}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe
FirewallRules: [{49A1C67C-14FC-4333-A111-549C2F266897}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe
FirewallRules: [{08D26069-6226-45BD-B5F1-BE0C7E582363}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{C40F4C5A-4BA1-4DD4-B81E-5C6FC352CDC1}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{67B4F175-DF02-4484-845A-76E5F5C39E75}] => (Allow) E:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{15E17D2A-57E9-4AA0-9124-D2B954DF130E}] => (Allow) E:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{52170EE8-63C7-43B4-82A8-DEE1673B6B19}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{DA057402-2FF3-4755-B393-8FC5B91EA58E}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{7A32AA8C-4DD9-4B72-B79C-B32C6484C1B0}] => (Allow) E:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{8920CEA8-84F2-40C8-BC27-5F3D5F8461B6}] => (Allow) E:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [TCP Query User{20812DBE-85E6-4500-98E5-AEAEDBE50C19}E:\games\ss3\sudden strike 3\ss3game.exe] => (Allow) E:\games\ss3\sudden strike 3\ss3game.exe
FirewallRules: [UDP Query User{81DB81F3-1345-426B-ACD5-EA3BD080D7C3}E:\games\ss3\sudden strike 3\ss3game.exe] => (Allow) E:\games\ss3\sudden strike 3\ss3game.exe
FirewallRules: [{EB19ABA0-E1D1-41DB-946A-C5E6C5C3D3CC}] => (Allow) E:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{D4D16F3C-3B83-4A1E-B73E-5714F256520F}] => (Allow) E:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{60FC24B4-899B-415B-A21F-AA2BCBA23FC6}] => (Allow) E:\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{8872DEF0-3A22-4104-A51A-ECE541E61C7A}] => (Allow) E:\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{F7ECAB72-A57B-4AF4-A649-7143A9DB739F}] => (Allow) E:\Steam\steamapps\common\Red Orchestra 2\Binaries\Win32\ROGame.exe
FirewallRules: [{7569E96E-B8DE-44CA-8B20-325F9AE48CAF}] => (Allow) E:\Steam\steamapps\common\Red Orchestra 2\Binaries\Win32\ROGame.exe
FirewallRules: [{1670F5FA-FC1A-457F-866C-DFCB985F709F}] => (Allow) E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{674CE9D6-CACB-4BA4-BD79-8F8481480EED}] => (Allow) E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{74441FC2-2AA7-4210-A3B0-F91DD5320325}] => (Allow) E:\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{1EF590E4-2A99-442F-B20E-260A26252DF4}] => (Allow) E:\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{65188269-2D58-40F1-A5DA-6237DE740CDC}] => (Allow) E:\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{0538DC7E-19CD-4C5B-AF76-775454062506}] => (Allow) E:\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{7F330725-FD7D-4F21-84D3-3301C26EC31E}] => (Allow) E:\Steam\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{3D5FFCBC-6465-41CA-84B9-3A9F7E53E989}] => (Allow) E:\Steam\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{9E0755FE-F60B-4622-B103-797862AF5853}] => (Allow) E:\Steam\steamapps\common\Verdun\Verdun.exe
FirewallRules: [{CF5DDADF-2AD5-4C0B-8082-3C94DB7C3AF6}] => (Allow) E:\Steam\steamapps\common\Verdun\Verdun.exe
FirewallRules: [{D2EBC07D-4E6D-43ED-B665-87762AC29BBD}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\Stalker-COP.exe
FirewallRules: [{564C4F13-CF81-4038-B27A-1B98CBB22BA8}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\Stalker-COP.exe
FirewallRules: [TCP Query User{5A5B7242-840B-4E9B-82FA-A756EC428A24}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4A60BE38-84D3-4A34-AB94-5B46824F7E39}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{FC9C8F02-8C71-4818-A642-22216FEC90D4}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe
FirewallRules: [{0E5E20B6-6160-4B0C-BD74-3083164FC95A}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe
FirewallRules: [TCP Query User{1A1E6B20-74A2-499C-ADBB-124BDA5D618D}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{AEDFFB3E-2489-462B-9106-244DC25A4A5C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{7B2059D0-9939-4F6C-9DBA-1002A1385CBD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{970B7030-53A6-4790-B5A3-BD7F311DD50A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{A34321E0-5FCD-4A1F-90AA-6A89BEBCF166}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{AB94FBA8-DD00-4D7B-8568-7B44F3266FBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{FE616160-8996-40AD-A5A2-B64DAA5172D3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{32FB0411-A985-4315-952D-D6A7F4DD3DA1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E589B1E5-3F5D-4EA4-A7B6-E4A1C2ABE3D4}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{B8E4BBCC-D87E-4F88-90DA-00EC430995B7}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [TCP Query User{3D54CAA1-9C8F-4D81-938E-A73B45D73D94}C:\ssd games\wot\wotlauncher.exe] => (Allow) C:\ssd games\wot\wotlauncher.exe
FirewallRules: [UDP Query User{04D7ED63-038A-4430-BEDB-EAF5783B272A}C:\ssd games\wot\wotlauncher.exe] => (Allow) C:\ssd games\wot\wotlauncher.exe
FirewallRules: [TCP Query User{5965A23D-1460-4F3A-843E-6357C929FDFE}C:\ssd games\wot\worldoftanks.exe] => (Allow) C:\ssd games\wot\worldoftanks.exe
FirewallRules: [UDP Query User{B09E7AE8-B6C8-4BA1-BC37-3F5DD463DB95}C:\ssd games\wot\worldoftanks.exe] => (Allow) C:\ssd games\wot\worldoftanks.exe
FirewallRules: [TCP Query User{87BDEB8D-6025-4B9A-85B8-0E4C8F95E03E}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [UDP Query User{2C996A29-1C83-4AFB-8328-1ED6F32A162D}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [TCP Query User{FFB04806-5807-4912-A757-D8F23A8C4F85}C:\ssd games\red orchestra 2\binaries\win32\rogame.exe] => (Allow) C:\ssd games\red orchestra 2\binaries\win32\rogame.exe
FirewallRules: [UDP Query User{CE8B51A0-3846-4B2D-A96F-272C2C353576}C:\ssd games\red orchestra 2\binaries\win32\rogame.exe] => (Allow) C:\ssd games\red orchestra 2\binaries\win32\rogame.exe
FirewallRules: [{4FD642AF-8181-449B-9B4E-7A78418EA37F}] => (Allow) E:\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{5D2C902B-E28E-4F41-B231-0602BC8B0A67}] => (Allow) E:\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{25B8F72E-BE8F-487C-9E0C-04CFB739F595}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\FaxApplications.exe
FirewallRules: [{2F9478E8-0A64-4A68-A889-9B208B9003CD}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\DigitalWizards.exe
FirewallRules: [{D1300F72-ECCF-4840-B033-FA69E56DC140}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\SendAFax.exe
FirewallRules: [{379EF083-C4BD-4E4F-825D-72E3B3A1C978}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\DeviceSetup.exe
FirewallRules: [{F4528D24-7CDC-477B-8410-FF42312B0FE1}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{41E81572-D167-4E93-874A-A0E5B3B6983D}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{866D5DA0-B5FF-4F50-A3A5-8D73AEF3633D}] => (Allow) E:\Steam\steamapps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{1A60ED27-48D7-4702-8839-2702285CB7CF}] => (Allow) E:\Steam\steamapps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{95D38983-585D-436B-B5B3-50EC6CDDD076}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe
FirewallRules: [{CC444A1C-769E-4640-8539-4B70098941E0}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe
FirewallRules: [{976345EF-91E2-435A-8298-8C1181C13224}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1E7DEE2B-63EB-4ABB-B2B5-545A9AD303D6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F130D5A6-1512-4039-87E8-22AB66C9652C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{59ECE972-F7DE-406D-AFF4-460717CABC36}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{02798DD2-514A-45FD-A1CF-A3A907569C2D}] => (Allow) E:\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{7820F7A2-E541-4653-A277-F1E05C26374F}] => (Allow) E:\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{9134F345-B7EF-4B19-84AC-A909A6EE5C21}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A6AB2514-EF50-44DA-A087-69FC94DB8A76}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{752AACB9-1EEA-446E-84DC-2699E2B1829B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E5875AF8-19E8-45D8-9739-73217641646B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B3689597-921C-4516-9EB1-5C1467C43AAC}] => (Allow) E:\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{83342F92-AA22-41F3-B953-AF5FF8B5F822}] => (Allow) E:\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{C4B98ABC-8B33-46D8-B45A-22D68AED25FB}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{603C0CE0-1005-4D5A-9E60-882E2A2F6082}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{AB4DC87A-C1E3-43D7-B846-AFD3A5D315F6}] => (Allow) E:\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{CA6310CA-0265-4997-B9CE-EC62B0FB78E3}] => (Allow) E:\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{C12C1429-1FB2-4D1A-B6A5-F66A1E3E6C94}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\bin\xrEngine.exe
FirewallRules: [{3101FB08-5384-4640-905E-F0C5F0BC4B2B}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\bin\xrEngine.exe
FirewallRules: [TCP Query User{0C605BB7-40F2-40BF-98AD-C6D7E3E32B25}C:\ssd games\arma 3\arma3.exe] => (Allow) C:\ssd games\arma 3\arma3.exe
FirewallRules: [UDP Query User{CEBBFB84-AAF4-4991-8F2B-C6DC6FF66B13}C:\ssd games\arma 3\arma3.exe] => (Allow) C:\ssd games\arma 3\arma3.exe
FirewallRules: [{1FE9F4E1-C97B-4743-A4DB-D13A96118D20}] => (Allow) E:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{99309C44-5043-4979-A94A-47CC1D05808B}] => (Allow) E:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [TCP Query User{CEA4324B-2B4F-4CDF-99C5-3FEEF7CF9226}C:\ssd games\dcsworld\bin\dcs.exe] => (Allow) C:\ssd games\dcsworld\bin\dcs.exe
FirewallRules: [UDP Query User{CF28042F-7BD4-4346-9D0C-115AE1D04E45}C:\ssd games\dcsworld\bin\dcs.exe] => (Allow) C:\ssd games\dcsworld\bin\dcs.exe
FirewallRules: [TCP Query User{7EB732E2-BCC1-4831-9D17-5A37CB80B7F1}E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe
FirewallRules: [UDP Query User{60A253C2-893C-474B-AF8B-BC200C09107D}E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe
FirewallRules: [TCP Query User{8F42C91B-33AF-4683-85A0-99EC9F5D98F0}E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe
FirewallRules: [UDP Query User{D3DCF481-6385-4146-B746-FE976A3FB58C}E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe
FirewallRules: [TCP Query User{0F7790C4-4AC3-4230-9D2B-029EC26D89FA}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [UDP Query User{E201881E-7826-4174-8857-CA71663D8694}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [TCP Query User{0CA1E1E6-6B9D-4044-A3E3-D17ACAB63DA7}E:\games\wot\worldoftanks.exe] => (Allow) E:\games\wot\worldoftanks.exe
FirewallRules: [UDP Query User{05878096-C6D4-44F9-8C04-32EC12DA494D}E:\games\wot\worldoftanks.exe] => (Allow) E:\games\wot\worldoftanks.exe
FirewallRules: [{00D5F7B4-3E10-4386-B0BB-D9CA40814A8C}] => (Allow) C:\SSD Games\Survarium\temp\survarium_launcher.exe
FirewallRules: [{0BBD8811-00AF-447F-B5CC-83AC69DD7E2F}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [{7FA0D38D-B59F-4D24-9DD0-F71FAA395AF0}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [{65F2B81B-C3D9-4C36-86D8-F78E3661F003}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [{275AAA10-2DEE-4A35-AE9A-809ABB687264}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [TCP Query User{DE03EDB7-5DF2-41F5-89C3-70653E40C748}E:\games\gta\gta5.exe] => (Allow) E:\games\gta\gta5.exe
FirewallRules: [UDP Query User{63D32B1C-BD4C-4C80-A290-52B4E4FF8AF6}E:\games\gta\gta5.exe] => (Allow) E:\games\gta\gta5.exe
FirewallRules: [TCP Query User{6CEA1FF4-C478-40D6-A6E8-5CB37ADE8464}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{87A4F0FC-977C-4FA7-954B-987765C9E133}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{2E2BD049-2254-454A-B6F4-8D20A3059724}] => (Allow) E:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{EB17836B-B18E-424D-BF14-44C3CD769652}] => (Allow) E:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{8F1963F1-7526-43D8-8DBF-2B7BD0022DA2}] => (Allow) E:\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{95B65407-77A0-4C74-9540-FD16EB3ACB51}] => (Allow) E:\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{4B1CBEF8-CE4D-4557-A864-2D3E54CE5C59}] => (Allow) E:\Steam\steamapps\common\Rust\Legacy\rust.exe
FirewallRules: [{6D7CA649-C87B-4B9C-BECA-7DB14CE879EF}] => (Allow) E:\Steam\steamapps\common\Rust\Legacy\rust.exe
FirewallRules: [TCP Query User{74860F48-E8BE-475C-83FD-20B49D1DA77A}C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{BD4CD320-430E-40C6-A48A-FD5DF3EC5EA7}C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{6F8A5237-E876-498F-8AF9-8BE6EFDAC372}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{DDDB0D79-2807-4536-A496-5CA6341E86A9}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{CBE8BB53-DD60-43EF-ADFF-6F41CAEA8FFD}] => (Allow) E:\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{C9A57527-AAAC-41AA-90D0-F60DB71AA32B}] => (Allow) E:\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{B5063A8A-5C2A-491D-A126-AD10BF5FA367}] => (Allow) E:\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{EAA1AB9D-E632-4BF9-8B97-1BCB5692DE07}] => (Allow) E:\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{33AEF70B-E74E-4113-8FCA-D3DB9A6F9826}] => (Allow) E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{F3E5D836-A53F-4AFA-B685-DF2B19C347EE}] => (Allow) E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{E53A88FE-7784-4774-993E-7E1632F5A3C4}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{6B60BE3F-F5A0-4A28-BA8D-76CDCF18FE34}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{654EF626-1C54-47DB-9A71-767346BAD6E3}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{870A2896-2D64-4EAC-839F-EDCFF2BAD892}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{87CB30DF-9F7D-450A-81A4-D3DCE6F806CA}] => (Allow) E:\IPW\DroidCam\DroidCamApp.exe
FirewallRules: [{B167CD8A-AB3B-4C97-9551-EBE35F55F24A}] => (Allow) E:\IPW\DroidCam\DroidCamApp.exe
FirewallRules: [{A0B347D8-95C0-4D6E-AE99-7FA417F86A7A}] => (Allow) E:\Steam\steamapps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{3F154E44-9ABF-4CD0-816B-1914C70C2D25}] => (Allow) E:\Steam\steamapps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{2BB73BFA-26AC-4C13-A447-247F158313B3}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [{1762B6C4-A624-41F2-9075-DB690E2D7B38}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [TCP Query User{1D8306E8-7460-49E4-9B59-85D3C3ADABB0}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [UDP Query User{B38BAE62-6B01-4583-822B-CD28EA606EB2}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [{6BA38BB0-CB5E-4C28-B4A1-2D887A19C9D7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Lexmark X422
Description: Lexmark X422
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Lexmark
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Intel(R) Ethernet Connection I217-V
Description: Intel(R) Ethernet Connection I217-V
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1dexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/31/2015 02:13:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 30.8.2015.0, Zeitstempel: 0x55e31bdf
Name des fehlerhaften Moduls: FRST64.exe, Version: 30.8.2015.0, Zeitstempel: 0x55e31bdf
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000262d9
ID des fehlerhaften Prozesses: 0xe14
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Systemfehler:
=============
Error: (08/31/2015 01:54:17 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (08/31/2015 01:52:29 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (08/29/2015 05:31:32 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (08/29/2015 05:42:09 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (08/28/2015 07:18:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/28/2015 07:18:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (07/16/2015 07:22:21 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (07/16/2015 02:43:51 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (07/13/2015 08:23:49 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.2.58
registriert werden. Der Computer mit IP-Adresse 192.168.2.23 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (07/04/2015 11:54:00 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "devolo Network Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.


Microsoft Office:
=========================
Error: (08/31/2015 02:13:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRST64.exe30.8.2015.055e31bdfFRST64.exe30.8.2015.055e31bdfc000000500000000000262d9e1401d0e3e6723a1d5dC:\Users\Marius\Downloads\FRST64.exeC:\Users\Marius\Downloads\FRST64.exec18a97f9-4fd9-11e5-8791-ee785e82cfdf

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity:
===================================
  Date: 2015-01-06 16:46:13.165
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Marius\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-06 16:46:13.055
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Marius\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-06 16:46:12.925
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-06 16:46:12.825
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Processor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 12218.59 MB
Verfügbarer physikalischer RAM: 9095.81 MB
Summe virtueller Speicher: 24435.38 MB
Verfügbarer virtueller Speicher: 20265.96 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:232.79 GB) (Free:52.68 GB) NTFS
Drive e: (Volume) (Fixed) (Total:1397.26 GB) (Free:1067.13 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 65E01175)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 2BAB359D)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

M-K-D-B · 31.08.2015, 22:13

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und Shortcut.txt und drücke auf Scan.
FRST erstellt nun drei Logdateien (FRST.txt, Addition.txt und Shortcut.txt).
Poste mir alle drei Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die drei neuen Logdateien von FRST.

Kinderwerfer · 31.08.2015, 23:25

Code:

ATTFilter

# AdwCleaner v5.004 - Bericht erstellt 31/08/2015 um 23:34:11
# Aktualisiert 26/08/2015 von Xplode
# Datenbank : 2015-08-31.2 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : Marius - Marius-PC
# Gestarted von : C:\Users\Marius\Desktop\AdwCleaner_5.004.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.easylife.de_0.localstorage
[-] Datei Gelöscht : C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.easylife.de_0.localstorage-journal

***** [ Verknüpfungen ] *****


***** [ Geplante Tasks ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\edbc6da3-20bd-2c08-2914-5993ee60cb12
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS

***** [ Internetbrowser ] *****


*************************

:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1303 Bytes] ##########

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 31.08.2015
Suchlaufzeit: 23:38
Protokolldatei: 2.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.08.31.04
Rootkit-Datenbank: v2015.08.16.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Marius

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 375654
Abgelaufene Zeit: 4 Min., 58 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.9 (08.27.2015:1)
OS: Windows 7 Professional x64
Ran by Marius on 31.08.2015 at 23:51:14,28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_13084EC567A31CF05A20DE11558C97D1



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer



~~~ Files

Successfully deleted: [File] C:\Users\Marius\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage
Successfully deleted: [File] C:\Users\Marius\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Marius\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.lyricsfreak.com_0.localstorage
Successfully deleted: [File] C:\Users\Marius\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.lyricsfreak.com_0.localstorage-journal



~~~ Folders

Successfully deleted: [Folder] C:\Users\Marius\Appdata\Local\crashrpt



~~~ Chrome


[C:\Users\Marius\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Marius\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Marius\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Marius\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 31.08.2015 at 23:52:28,90
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

ATTFilter

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version:31-08-2015
durchgeführt von Marius (2015-09-01 00:01:25)
Gestartet von C:\Users\Marius\Desktop
Start-Modus: Normal

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)



Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AB0000000001}\SC_Reader.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk -> C:\Program Files (x86)\Audacity\audacity.exe (The Audacity Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk -> C:\Program Files (x86)\HP\IrisOCR_12.3.4.0\regipe.exe (I.R.I.S. Image Recognition Integarted Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk -> C:\Program Files\paint.net\PaintDotNet.exe (dotPDN LLC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files\VideoLAN\VLC\Documentation.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files\VideoLAN\VLC\NEWS.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files\VideoLAN\VLC\VideoLAN Website.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unofficial Fallout 3 Patch\Uninstall.lnk -> E:\Steam\steamapps\common\Fallout 3 goty\Unofficial Fallout 3 Patch\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unofficial Fallout 3 Patch\Unofficial Fallout 3 Patch Readme.lnk -> E:\Steam\steamapps\common\Fallout 3 goty\Unofficial Fallout 3 Patch\Unofficial Fallout 3 Patch Readme.html ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unofficial Fallout 3 Patch\Unofficial Fallout 3 Patch Version History.lnk -> E:\Steam\steamapps\common\Fallout 3 goty\Unofficial Fallout 3 Patch\Unofficial Fallout 3 Patch Version History.html ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\TeamSpeak 3 Client.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\Uninstall.lnk -> C:\Program Files\TeamSpeak 3 Client\Uninstall.exe (TeamSpeak Systems GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Survarium\Uninstall.lnk -> C:\SSD Games\Survarium\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike 3\Sudden Strike 3 Beschreibungseditor.lnk -> E:\Games\SS3\Sudden Strike 3\DescEditor.exe (TODO: <Company name>)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike 3\Sudden Strike 3 deinstallieren.lnk -> E:\Games\SS3\Sudden Strike 3\uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike 3\Sudden Strike 3 Handbuch.lnk -> E:\Games\SS3\Sudden Strike 3\Manual.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike 3\Sudden Strike 3 Karteneditor.lnk -> E:\Games\SS3\Sudden Strike 3\MapEdit.exe (Fireglow Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike 3\Sudden Strike 3 spielen.lnk -> E:\Games\SS3\Sudden Strike 3\SS3Game.exe (Fireglow Games Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike - Release 1.0\Neues in v1.2.lnk -> E:\Games\SS1\SS1\p11deut.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike - Release 1.0\ReadMe.lnk -> E:\Games\SS1\SS1\ReadMe.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike - Release 1.0\Sudden Strike - Release 1.0 deinstallieren.lnk -> C:\Windows\SudLog\UNWISE.EXE ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike - Release 1.0\Sudden Strike - Release 1.0.lnk -> E:\Games\SS1\SS1\SuddenStrike.exe (Nashi Igry)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike - Release 1.0\Sudden Strike.lnk -> E:\Games\SS1\SS1\SuddenStrike.exe (Nashi Igry)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sudden Strike - Release 1.0\www.gamespyarcade.com.lnk -> E:\Games\SS1\SS1\www.gamespyarcade.com.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> E:\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX\ShareX entfernen.lnk -> E:\ShareX\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX\ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician\Samsung Magician entfernen.lnk -> C:\Program Files (x86)\Samsung\Samsung Magician\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician\Samsung Magician.lnk -> C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe (Samsung Electronics.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Grand Theft Auto V\Grand Theft Auto V.lnk -> E:\Games\GTA\PlayGTAV.exe (Rockstar Games)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics\Sid Meier's Civilization 5\Play Sid Meier's Civilization 5.lnk -> E:\Games\Sid Meier's Civilization 5\Language.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics\Sid Meier's Civilization 5\Uninstall Sid Meier's Civilization 5.lnk -> C:\Users\Marius\AppData\Roaming\Sid Meier's Civilization 5\Uninstall\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Base.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sbase.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Calc.lnk -> C:\Program Files (x86)\OpenOffice 4\program\scalc.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Draw.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sdraw.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Impress.lnk -> C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Math.lnk -> C:\Program Files (x86)\OpenOffice 4\program\smath.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice Writer.lnk -> C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1\OpenOffice.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe (NVIDIA Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe (NVIDIA Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware \Malwarebytes Anti-Malware entfernen.lnk -> C:\Program Files (x86)\ Malwarebytes Anti-Malware \unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware \ Malwarebytes Anti-Malware .lnk -> C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware \Tools\Malwarebytes Anti-Malware Chameleon.lnk -> C:\Program Files (x86)\ Malwarebytes Anti-Malware \Chameleon\Windows\chameleon.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech\Logitech Gaming Software 8.58.lnk -> C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\League of Legends.lnk -> E:\Games\lol.launcher.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys\EVEREST Home Edition\EVEREST Home Edition Documentation.lnk -> C:\Program Files (x86)\Lavalys\EVEREST Home Edition\everest.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys\EVEREST Home Edition\EVEREST Home Edition on the Web.lnk -> C:\Program Files (x86)\Lavalys\EVEREST Home Edition\everest.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys\EVEREST Home Edition\EVEREST Home Edition.lnk -> C:\Program Files (x86)\Lavalys\EVEREST Home Edition\everest.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys\EVEREST Home Edition\Uninstall EVEREST Home Edition.lnk -> C:\Program Files (x86)\Lavalys\EVEREST Home Edition\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Java konfigurieren.lnk -> C:\Program Files\Java\jre7\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IP Camera Adapter\Configure IP Camera Adapter.lnk -> C:\Windows\Installer\{6D140BFF-7CC5-4BFE-AD6D-47035FFE5F14}\icon.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel(R) Smart Connect Technology.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTModernUI.exe (Intel Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP*Update.lnk -> C:\Program Files (x86)\HP\HP Software Update\hpwucli.exe (Hewlett-Packard)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Druckereinrichtung & -software.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\DeviceSetupLauncher.exe (Hewlett-Packard Co.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Hilfe.lnk -> C:\Program Files (x86)\HP\HP Officejet 4620 series\bin\HelpViewer\hpqlpvwr.exe (Hewlett-Packard Co.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Officejet 4620 series\bin\HPScan.exe (Hewlett-Packard Co.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Shop für Zubehör.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Website für Produktsupport.lnk -> C:\Program Files\HP\HP Officejet 4620 series\ProductSupportShortcut.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Wireless-Druck - Onlinehilfe.lnk -> C:\Program Files\HP\HP Officejet 4620 series\WirelessEasyShortcut.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises\X-Mouse Button Control\Uninstall.lnk -> C:\Treiber\Mouse\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises\X-Mouse Button Control\Whats New.lnk -> C:\Treiber\Mouse\ChangeLog.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises\X-Mouse Button Control\X-Mouse Button Control User Guide.lnk -> C:\Treiber\Mouse\X-Mouse Button Control User Guide.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hide.me VPN\hide.me VPN.lnk -> C:\Program Files (x86)\hide.me VPN\Hide.me.exe (eVenture Limited)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Fallout 2\Uninstall Fallout 2.lnk -> C:\GOG Games\Fallout 2\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Fallout 2\Documents\Manual.lnk -> C:\GOG Games\Fallout 2\MANUAL.PDF ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Fallout 2\Documents\Readme.lnk -> C:\GOG Games\Fallout 2\readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph\Glyph wird deinstalliert.lnk -> E:\Games\Glyph\GlyphUninstall.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph\Glyph.lnk -> C:\SSD Games\Glyph\GlyphClient.exe (Trion Worlds Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Age of Empires II HD Edition\Age of Empires II HD Edition.lnk -> E:\Games\Age of Empires II HD Edition\AoK HD.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Age of Empires II HD Edition\Uninstall.lnk -> E:\Games\Age of Empires II HD Edition\Uninstall\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EVGA\PrecisionX 16\EVGA PrecisionX 16.lnk -> C:\Windows\Installer\{DD747735-7FA7-4F0F-903A-271D0DCE7240}\PrecisionX_x64.exe_392A563078774EA2A2D938EF7E7829B4.exe (Acresso Software Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo\devolo Cockpit.lnk -> C:\Program Files (x86)\devolo\dlan\frontend\plcnetui.exe ( )
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo\dLAN-Konfigurationsassistent.lnk -> C:\Program Files (x86)\devolo\dlan\dlanconf\dlanconf.exe (devolo AG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo\Informer.lnk -> C:\Program Files (x86)\devolo\informer\devinf.exe (devolo AG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cities Skylines\Óäàëèòü èãðó.lnk -> E:\Games\Cities Skylines\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility\SmartConnect\SmartConnect.lnk -> C:\Program Files\ASRock Utility\SmartConnect\AsrSmartConnect.exe (ASRock)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility\SmartConnect\Uninstall AsrSmartConnect.lnk -> C:\Program Files\ASRock Utility\SmartConnect\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk -> C:\Windows\System32\NetProj.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Game Studios\IL-2 Sturmovik Battle of Stalingrad\IL-2 Sturmovik Battle of Stalingrad.lnk -> E:\Games\IL-2 Sturmovik Battle of Stalingrad\bin\game\launcher.exe (1C-777 Limited)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C Game Studios\IL-2 Sturmovik Battle of Stalingrad\Uninstall IL-2 Sturmovik Battle of Stalingrad.lnk -> E:\Games\IL-2 Sturmovik Battle of Stalingrad\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{8CD8FD37-66B3-4BB4-A98B-FD50FCF9F35D}\PlayTasks\0\Launch.lnk -> E:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe (Bethesda Softworks, Obsidian Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{508E2AA8-98AA-426D-8393-DDABA8A52E54}\PlayTasks\0\Launch.lnk -> E:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (Bethesda Softworks)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Adobe Reader XI.lnk -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
Shortcut: C:\Users\Public\Desktop\Age of Empires II HD Edition.lnk -> E:\Games\Age of Empires II HD Edition\AoK HD.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\ASRock SmartConnect.lnk -> C:\Program Files\ASRock Utility\SmartConnect\AsrSmartConnect.exe (ASRock)
Shortcut: C:\Users\Public\Desktop\Audacity.lnk -> C:\Program Files (x86)\Audacity\audacity.exe (The Audacity Team)
Shortcut: C:\Users\Public\Desktop\Cities Skylines.lnk -> E:\Games\Cities Skylines\Cities.exe ()
Shortcut: C:\Users\Public\Desktop\Defraggler.lnk -> C:\Program Files\Defraggler\Defraggler64.exe (Piriform Ltd)
Shortcut: C:\Users\Public\Desktop\devolo Cockpit.lnk -> C:\Program Files (x86)\devolo\dlan\frontend\plcnetui.exe ( )
Shortcut: C:\Users\Public\Desktop\EVGA PrecisionX 16.lnk -> C:\Windows\Installer\{DD747735-7FA7-4F0F-903A-271D0DCE7240}\NewShortcut1_8B527B9AE32149C5AF54408D18F2D477.exe (Acresso Software Inc.)
Shortcut: C:\Users\Public\Desktop\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe (NVIDIA Corporation)
Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Public\Desktop\Grand Theft Auto V.lnk -> E:\Games\GTA\PlayGTAV.exe (Rockstar Games)
Shortcut: C:\Users\Public\Desktop\hide.me VPN.lnk -> C:\Program Files (x86)\hide.me VPN\Hide.me.exe (eVenture Limited)
Shortcut: C:\Users\Public\Desktop\IL-2 Sturmovik Battle of Stalingrad.lnk -> E:\Games\IL-2 Sturmovik Battle of Stalingrad\bin\game\launcher.exe (1C-777 Limited)
Shortcut: C:\Users\Public\Desktop\League of Legends.lnk -> E:\Games\lol.launcher.exe ()
Shortcut: C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk -> C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation)
Shortcut: C:\Users\Public\Desktop\paint.net.lnk -> C:\Program Files\paint.net\PaintDotNet.exe (dotPDN LLC)
Shortcut: C:\Users\Public\Desktop\Shop für Zubehör - HP Officejet 4620 series.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)
Shortcut: C:\Users\Public\Desktop\Skype.lnk -> C:\Windows\Installer\{6A0549A9-1B96-498C-ACBC-3943001FEB19}\SkypeIcon.exe ()
Shortcut: C:\Users\Public\Desktop\Steam.lnk -> E:\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\Public\Desktop\Sudden Strike 3 spielen.lnk -> E:\Games\SS3\Sudden Strike 3\SS3Game.exe (Fireglow Games Ltd.)
Shortcut: C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\Public\Desktop\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\Users\Marius\Links\Desktop.lnk -> C:\Users\Marius\Desktop ()
Shortcut: C:\Users\Marius\Links\Downloads.lnk -> C:\Users\Marius\Downloads ()
Shortcut: C:\Users\Marius\Documents\Rockstar Games\GTA V\User Music\upon_this_dawning_-_call_me_maybe_ly-7xF0vHraxII_fmt43 - Verknüpfung.lnk -> C:\Users\Marius\Desktop\upon_this_dawning_-_call_me_maybe_ly-7xF0vHraxII_fmt43.mp3 ()
Shortcut: C:\Users\Marius\Desktop\Cities Skylines.lnk -> E:\Games\Cities Skylines\Cities.exe ()
Shortcut: C:\Users\Marius\Desktop\DroidCamApp.lnk -> E:\IPW\DroidCam\DroidCamApp.exe ()
Shortcut: C:\Users\Marius\Desktop\EVEREST Home Edition.lnk -> C:\Program Files (x86)\Lavalys\EVEREST Home Edition\everest.exe ()
Shortcut: C:\Users\Marius\Desktop\FRST.lnk -> C:\Users\Marius\Downloads\FRST.txt ()
Shortcut: C:\Users\Marius\Desktop\Glyph.lnk -> C:\SSD Games\Glyph\GlyphClient.exe (Trion Worlds Inc.)
Shortcut: C:\Users\Marius\Desktop\MSI Afterburner.lnk -> C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe ()
Shortcut: C:\Users\Marius\Desktop\Play withSIX.lnk -> C:\Users\Marius\AppData\Local\PlaywithSIX\app-1.66.1146.4\Play.exe (SIX Networks)
Shortcut: C:\Users\Marius\Desktop\ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers)
Shortcut: C:\Users\Marius\Desktop\Sid Meier's Civilization 5.lnk -> E:\Games\Sid Meier's Civilization 5\Language.exe ()
Shortcut: C:\Users\Marius\Desktop\SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (www.almico.com))
Shortcut: C:\Users\Marius\Desktop\Start Tor Browser.lnk -> C:\ROT\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Marius\Desktop\Sudden Strike - Release 1.0.lnk -> E:\Games\SS1\SS1\SuddenStrike.exe (Nashi Igry)
Shortcut: C:\Users\Marius\Desktop\World of Tanks.lnk -> E:\Games\WOT\WoTLauncher.exe (Wargaming.net)
Shortcut: C:\Users\Marius\Desktop\world\OpenOffice 4.1.1.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk -> C:\ROT\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\Encyclopedia.lnk -> C:\SSD Games\WOT\wiki.url (Keine Datei)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\Game Manual.lnk -> C:\SSD Games\WOT\game_manual.url (Keine Datei)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\Latest updates.lnk -> C:\SSD Games\WOT\readme.url (Keine Datei)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\Official website.lnk -> C:\SSD Games\WOT\website.url (Keine Datei)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\Uninstall World of Tanks.lnk -> C:\SSD Games\WOT\unins000.exe (Keine Datei)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks\World of Tanks.lnk -> E:\Games\WOT\WoTLauncher.exe (Wargaming.net)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\Diablo III Headset User Guide.lnk -> E:\SteelSeries Engine\SteelSeries_Diablo_III_Headset_Guide.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\Diablo III Mouse User Guide.lnk -> E:\SteelSeries Engine\SteelSeries_Diablo_III_Mouse_Guide.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\Sensei User Guide.lnk -> E:\SteelSeries Engine\Sensei_UserGuide.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\SteelSeries Engine User Guide.lnk -> E:\SteelSeries Engine\SteelSeriesEngine_UserGuide.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\SteelSeries Engine.lnk -> E:\SteelSeries Engine\SteelSeriesEngine.exe (SteelSeries ApS)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\SteelSeries Firmware Update Tool.lnk -> E:\SteelSeries Engine\SSEFix.exe (SteelSeries)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries Engine\Uninstall SteelSeries Engine.lnk -> E:\SteelSeries Engine\uninst.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> E:\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SIX Networks\Play withSIX.lnk -> C:\Users\Marius\AppData\Local\PlaywithSIX\app-1.66.1146.4\Play.exe (SIX Networks)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server\ReadMe.lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\Doc\ReadMe.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server\RivaTuner Statistics Server.lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server\Uninstall.lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\Uninstall.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server\SDK\RivaTuner Statistics Server localization reference.lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\SDK\Doc\Localization reference.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server\SDK\RivaTuner Statistics Server skin format reference.lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\SDK\Doc\USF skin format reference.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server\SDK\Samples.lnk -> C:\Program Files (x86)\RivaTuner Statistics Server\SDK\Samples ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\MSI Afterburner.lnk -> C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\ReadMe.lnk -> C:\Program Files (x86)\MSI Afterburner\Doc\ReadMe.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\Uninstall.lnk -> C:\Program Files (x86)\MSI Afterburner\Uninstall.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\SDK\MSI Afterburner localization reference.lnk -> C:\Program Files (x86)\MSI Afterburner\SDK\Doc\Localization reference.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\SDK\MSI Afterburner skin format reference.lnk -> C:\Program Files (x86)\MSI Afterburner\SDK\Doc\USF skin format reference.pdf ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\SDK\Samples.lnk -> C:\Program Files (x86)\MSI Afterburner\SDK\Samples ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux\Flux.lnk -> C:\Users\Marius\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux\Uninstall.lnk -> C:\Users\Marius\AppData\Local\FluxSoftware\Flux\uninstall.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\FileZilla.lnk -> E:\MSI Afterburner\FileZilla FTP Client\filezilla.exe (FileZilla Project)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\Uninstall.lnk -> E:\MSI Afterburner\FileZilla FTP Client\uninstall.exe (Tim Kosse)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DroidCam\DroidCam Client.lnk -> E:\IPW\DroidCam\DroidCamApp.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DroidCam\Uninstall.lnk -> E:\IPW\DroidCam\Uninstall.exe ()
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\SendTo\ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Play withSIX.lnk -> C:\Users\Marius\AppData\Local\PlaywithSIX\app-1.66.1146.4\Play.exe (SIX Networks)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Steam.lnk -> E:\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TeamSpeak 3 Client.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\Marius\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)




ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN) -> -Iskins
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unofficial Fallout 3 Patch\Fixes\Mouse Menu Acceleration Fix - Apply.lnk -> E:\Steam\steamapps\common\Fallout 3 goty\Unofficial Fallout 3 Patch\UF3P.exe () -> -MMAFApply
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unofficial Fallout 3 Patch\Fixes\Mouse Menu Acceleration Fix - Remove.lnk -> E:\Steam\steamapps\common\Fallout 3 goty\Unofficial Fallout 3 Patch\UF3P.exe () -> -MMAFRemove
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Survarium\Play Survarium.lnk -> C:\SSD Games\Survarium\game\binaries\x86\survarium_launcher.exe () -> -product_name=Survarium
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Grand Theft Auto V\GTA Online.lnk -> E:\Games\GTA\PlayGTAV.exe (Rockstar Games) -> -StraightIntoFreemode
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /show
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /disable
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /enable
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Auf Updates prüfen.lnk -> C:\Program Files\Java\jre7\bin\javacpl.exe (Oracle Corporation) -> -tab update
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Info zu Java.lnk -> C:\Program Files\Java\jre7\bin\javacpl.exe (Oracle Corporation) -> -tab about
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /qb /x {B16F9E6E-1388-472C-98C3-F32D397EF85D}
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\HP Officejet 4620 series.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\HP Officejet 4620 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\IP-Adresse aktualisieren.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\DeviceSetup.exe (Hewlett-Packard Co.) -> /changeip ""
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Officejet 4620 series\Studie zur Verbesserung von HP Produkten.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe (Hewlett-Packard Co.) -> /changesettings /UA 10.5 /DDV 0x0a00
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises\X-Mouse Button Control\X-Mouse Button Control.lnk -> C:\Treiber\Mouse\XMouseButtonControl.exe (Highresolution Enterprises) -> /notportable
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Fallout 2\Fallout 2.lnk -> C:\GOG Games\Fallout 2\GOGLauncher.exe () -> GOGFALLOUT2
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Public\Desktop\Fallout 2.lnk -> C:\GOG Games\Fallout 2\GOGLauncher.exe () -> GOGFALLOUT2
ShortcutWithArgument: C:\Users\Public\Desktop\HP Officejet 4620 series.lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\HP Officejet 4620 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage
ShortcutWithArgument: C:\Users\Public\Desktop\Play Survarium.lnk -> C:\SSD Games\Survarium\game\binaries\x86\survarium_launcher.exe () -> -product_name=Survarium
ShortcutWithArgument: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers) -> -silent
ShortcutWithArgument: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files\HP\HP Officejet 4620 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN416351QV05S1;CONNECTION=NW;MONITOR=1;
ShortcutWithArgument: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) ->  -extoff
ShortcutWithArgument: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:


InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> hxxp://support.steampowered.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Fallout 2\Documents\Support.url -> hxxp://www.gog.com/support/fallout_2
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Age of Empires II HD Edition\New releases.url -> hxxp://avg.club/tracker.php?rid=47#results
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Age of Empires II HD Edition\Support.url -> hxxp://avg.club/privmsg.php?mode=post&u=47
InternetURL: C:\Users\Marius\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742
InternetURL: C:\Users\Marius\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700
InternetURL: C:\Users\Marius\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681
InternetURL: C:\Users\Marius\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682
InternetURL: C:\Users\Marius\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680
InternetURL: C:\Users\Marius\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659
InternetURL: C:\Users\Marius\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640
InternetURL: C:\Users\Marius\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636
InternetURL: C:\Users\Marius\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635
InternetURL: C:\Users\Marius\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893
InternetURL: C:\Users\Marius\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893
InternetURL: C:\Users\Marius\Favorites\Links\Vorgeschlagene Sites.url -> hxxps://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Marius\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315
InternetURL: C:\Users\Marius\Documents\Arma 3 - Other Profiles\SPC%20Schmitz%2eM%20[RSS%2f4SFG]\@allinarmaterrainpack\bohemia interactive community wiki - tools.url -> hxxp://community.bistudio.com/wiki/Category:Tools
InternetURL: C:\Users\Marius\Documents\Arma 3 - Other Profiles\SPC%20Schmitz%2eM%20[RSS%2f4SFG]\@allinarmaterrainpack\bohemia interactive community wiki.url -> hxxp://community.bistudio.com/wiki/Main_Page
InternetURL: C:\Users\Marius\Documents\Arma 3 - Other Profiles\SPC%20Schmitz%2eM%20[RSS%2f4SFG]\@allinarmaterrainpack\bohemia interactive forums.url -> hxxp://forums.bistudio.com/
InternetURL: C:\Users\Marius\Documents\Arma 3 - Other Profiles\SPC%20Schmitz%2eM%20[RSS%2f4SFG]\@allinarmaterrainpack\bohemia interactive's licenses @ bistudio.com.url -> hxxp://www.bistudio.com/licenses
InternetURL: C:\Users\Marius\Documents\Arma 3\@tacbf\third_party\https_dev.withsix.com-cba_a3.url -> hxxps://dev.withsix.com/projects/cba-a3/files
InternetURL: C:\Users\Marius\Documents\Arma 3\@tacbf\third_party\http_radio.task-force.ru.url -> hxxp://radio.task-force.ru/en/
InternetURL: C:\Users\Marius\Desktop\Arma 3.url -> steam://rungameid/107410
InternetURL: C:\Users\Marius\Desktop\Banished.url -> steam://rungameid/242920
InternetURL: C:\Users\Marius\Desktop\Company of Heroes 2.url -> steam://rungameid/231430
InternetURL: C:\Users\Marius\Desktop\Counter-Strike Global Offensive.url -> steam://rungameid/730
InternetURL: C:\Users\Marius\Desktop\Fallout 3 - Game of the Year Edition.url -> steam://rungameid/22370
InternetURL: C:\Users\Marius\Desktop\Heroes & Generals.url -> steam://rungameid/227940
InternetURL: C:\Users\Marius\Desktop\Kerbal Space Program.url -> steam://rungameid/220200
InternetURL: C:\Users\Marius\Desktop\Killing Floor.url -> steam://rungameid/1250
InternetURL: C:\Users\Marius\Desktop\Left 4 Dead 2.url -> steam://rungameid/550
InternetURL: C:\Users\Marius\Desktop\Medieval Engineers.url -> steam://rungameid/333950
InternetURL: C:\Users\Marius\Desktop\PAYDAY The Heist.url -> steam://rungameid/24240
InternetURL: C:\Users\Marius\Desktop\Prison Architect.url -> steam://rungameid/233450
InternetURL: C:\Users\Marius\Desktop\Sid Meier's Civilization V.url -> steam://rungameid/8930
InternetURL: C:\Users\Marius\Desktop\Stealth Inc 2.url -> steam://rungameid/329380
InternetURL: C:\Users\Marius\Desktop\Stranded Deep.url -> steam://rungameid/313120
InternetURL: C:\Users\Marius\Desktop\The Long Dark.url -> steam://rungameid/305620
InternetURL: C:\Users\Marius\Desktop\War Thunder.url -> steam://rungameid/236390
InternetURL: C:\Users\Marius\Desktop\Wargame Red Dragon.url -> steam://rungameid/251060
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Arma 3.url -> steam://rungameid/107410
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Banished.url -> steam://rungameid/242920
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Counter-Strike Global Offensive.url -> steam://rungameid/730
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Fallout 3 - Game of the Year Edition.url -> steam://rungameid/22370
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Medieval Engineers.url -> steam://rungameid/333950
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\PAYDAY The Heist.url -> steam://rungameid/24240
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Prison Architect.url -> steam://rungameid/233450
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Sid Meier's Civilization V.url -> steam://rungameid/8930
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Stealth Inc 2.url -> steam://rungameid/329380
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\The Long Dark.url -> steam://rungameid/305620
InternetURL: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\War Thunder.url -> steam://rungameid/236390

==================== Ende von Shortcut.txt =============================

Kinderwerfer · 01.09.2015, 00:07

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015
durchgeführt von Marius (Administrator) auf Marius-PC (01-09-2015 00:01:07)
Gestartet von C:\Users\Marius\Desktop
Geladene Profile: Marius (Verfügbare Profile: Marius)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
() C:\Users\Marius\AppData\Roaming\TS3Client\CODEXi\Steam
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [XMouseButtonControl] => C:\Treiber\Mouse\XMouseButtonControl.exe [1075344 2014-12-08] (Highresolution Enterprises)
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-08-25] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [f.lux] => C:\Users\Marius\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [HP Officejet 4620 series (NET)] => C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [SteelSeries Engine] => E:\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-10-09] (SteelSeries ApS)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [Steam] => E:\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Run: [GoogleChromeAutoLaunch_13084EC567A31CF05A20DE11558C97D1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-08-18] (Google Inc.)
Startup: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk [2015-01-02]
ShortcutTarget: ShareX.lnk -> E:\ShareX\ShareX.exe (ShareX Developers)
Startup: C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk [2015-02-03]
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 4620 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{541E91B9-1654-46E4-ABFB-142C8951D2D9}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{65C5BDB0-A08C-4F87-8C64-C1FBB97BD232}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{6F2B1CF5-8C59-4A5B-8978-70A6526DCE91}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9D5CAB89-8FBB-4A18-9C25-FE12CB13F6F6}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9EEDBA40-3F78-4D39-9955-99EBE42125A9}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{D2D0FA3D-B252-4F0D-91CE-7595A8E590AE}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-01-06] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-06] (Oracle Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-03-05] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-01-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-01-06] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-03-05] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-07] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-07] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2015-01-17]
CHR Extension: (Google Slides) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-18]
CHR Extension: (Google Docs) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-18]
CHR Extension: (Google Drive) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-18]
CHR Extension: (Dark Skin for Youtube™) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfeknfgchonpnofdjokchhdhdnddhglm [2014-12-18]
CHR Extension: (YouTube) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-18]
CHR Extension: (Adblock Plus) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-18]
CHR Extension: (Google Search) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-18]
CHR Extension: (Google Sheets) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-18]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-14]
CHR Extension: (Black Black Chrome Theme Dark Blue Highlight) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\njpbabhpbnilgchdjbajcbgnnclkaida [2015-02-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-18]
CHR Extension: (Gmail) - C:\Users\Marius\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1125888 2015-08-29] ()
S2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2014-12-27] (EasyAntiCheat Ltd)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-08-25] ()
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-07] ()
S3 Survarium Update Service; C:\SSD Games\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-14] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 Alpham1; C:\Windows\System32\DRIVERS\Alpham164.sys [52992 2007-07-23] (Ideazon Corporation)
R3 Alpham2; C:\Windows\System32\DRIVERS\Alpham264.sys [21760 2007-03-20] (Ideazon Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2014-12-24] ()
R3 DroidCam; C:\Windows\System32\DRIVERS\droidcam.sys [33592 2015-06-16] (Dev47Apps)
R3 DroidCamVideo; C:\Windows\System32\DRIVERS\droidcamvideo.sys [229432 2015-06-16] (Dev47Apps)
S3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2014-12-18] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-05-27] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-05-27] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2014-12-24] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [25088 2015-01-27] (SteelSeries ApS)
S3 usbrndis6; C:\Windows\system32\drivers\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-01 00:00 - 2015-09-01 00:00 - 00000000 ____D C:\Users\Marius\Desktop\FRST-OlderVersion
2015-08-31 23:52 - 2015-08-31 23:52 - 00002014 _____ C:\Users\Marius\Desktop\JRT.txt
2015-08-31 23:50 - 2015-08-31 23:50 - 00001207 _____ C:\Users\Marius\Desktop\2.txt
2015-08-31 23:37 - 2015-08-31 23:38 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-31 23:37 - 2015-08-31 23:37 - 00001106 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-31 23:37 - 2015-08-31 23:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-31 23:37 - 2015-08-31 23:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-31 23:37 - 2015-08-31 23:37 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-31 23:37 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-31 23:37 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-31 23:37 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-31 23:36 - 2015-08-31 23:36 - 00001381 _____ C:\Users\Marius\Desktop\1.txt
2015-08-31 23:30 - 2015-08-31 23:30 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Marius\Desktop\mbam-setup-2.1.8.1057.exe
2015-08-31 23:29 - 2015-08-31 23:30 - 01798640 _____ (Malwarebytes Corporation) C:\Users\Marius\Desktop\JRT.exe
2015-08-31 23:28 - 2015-08-31 23:28 - 01618432 _____ C:\Users\Marius\Desktop\AdwCleaner_5.004.exe
2015-08-31 18:02 - 2015-09-01 00:01 - 00014027 _____ C:\Users\Marius\Desktop\FRST.txt
2015-08-31 18:02 - 2015-08-31 18:02 - 00056278 _____ C:\Users\Marius\Desktop\Addition.txt
2015-08-31 16:32 - 2015-08-31 16:32 - 02797541 _____ C:\Users\Marius\Desktop\645efc95daf6d168.webm
2015-08-31 14:34 - 2015-08-31 14:34 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Marius\Desktop\tdsskiller.exe
2015-08-31 14:32 - 2015-08-31 14:32 - 00024292 _____ C:\Users\Marius\Desktop\FRST.lnk
2015-08-31 14:13 - 2015-09-01 00:01 - 00000000 ____D C:\FRST
2015-08-31 14:13 - 2015-09-01 00:00 - 02188800 _____ (Farbar) C:\Users\Marius\Desktop\FRST64.exe
2015-08-31 14:13 - 2015-08-31 18:01 - 00059648 _____ C:\Users\Marius\Downloads\FRST.txt
2015-08-31 14:13 - 2015-08-31 14:13 - 00000333 _____ C:\Users\Marius\Downloads\Addition.txt
2015-08-31 13:55 - 2015-08-31 13:55 - 00016462 _____ C:\ComboFix.txt
2015-08-31 13:50 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-31 13:50 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-31 13:50 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-31 13:50 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-31 13:49 - 2015-08-31 13:55 - 00000000 ____D C:\Qoobox
2015-08-31 13:49 - 2015-08-31 13:54 - 00000000 ____D C:\Windows\erdnt
2015-08-31 13:49 - 2015-08-31 13:49 - 05635666 ____R (Swearware) C:\Users\Marius\Downloads\ComboFix.exe
2015-08-31 12:54 - 2015-08-31 12:57 - 00000000 ____D C:\$Windows.~BT
2015-08-31 00:08 - 2015-08-31 00:08 - 00000000 ____D C:\ProgramData\Battle.net
2015-08-31 00:03 - 2015-08-31 00:03 - 03056696 _____ (Blizzard Entertainment) C:\Users\Marius\Downloads\Hearthstone-Setup-deDE.exe
2015-08-30 21:58 - 2015-08-30 21:58 - 79773682 _____ C:\Users\Marius\Downloads\NixName_entjungferung.mp4
2015-08-30 15:21 - 2015-08-30 15:21 - 00000000 ____D C:\Users\Marius\Desktop\@Exile
2015-08-30 14:48 - 2015-08-07 02:04 - 00572024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-08-30 02:21 - 2015-08-11 03:20 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-30 02:21 - 2015-08-11 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-30 02:21 - 2015-08-11 02:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-30 02:21 - 2015-08-11 02:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-30 01:47 - 2015-08-30 01:47 - 00003096 _____ C:\Windows\System32\Tasks\{FF580481-FD18-496F-A1B1-848D8AD3F857}
2015-08-30 01:37 - 2015-08-30 01:37 - 00003174 _____ C:\Windows\System32\Tasks\{300BBE3C-4E88-4E4A-AB6C-25A5E4837FD3}
2015-08-29 23:58 - 2015-08-30 00:01 - 189360904 _____ C:\Users\Marius\Desktop\@Exile-0.9.18.zip
2015-08-29 12:47 - 2015-08-29 12:47 - 00000202 _____ C:\Users\Marius\Desktop\Stealth Inc 2.url
2015-08-29 12:26 - 2015-08-29 12:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-29 12:26 - 2015-08-29 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-29 03:40 - 2015-08-29 04:11 - 650065163 _____ C:\Users\Marius\Downloads\RWM-SSRW_BETA2.rar
2015-08-29 03:04 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-29 03:04 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-28 19:34 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-28 19:34 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-28 19:34 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-28 19:34 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-28 19:34 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-28 19:34 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-28 19:34 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-28 19:34 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-28 19:34 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-28 19:34 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-28 19:34 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-28 19:34 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-28 19:34 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-28 19:34 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-28 19:34 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-28 19:34 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-28 19:34 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-28 19:34 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-28 19:34 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-28 19:34 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-28 19:34 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-28 19:34 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-28 19:34 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-28 19:34 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-28 19:34 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-28 19:34 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-28 19:34 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-28 19:34 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-28 19:34 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-28 19:34 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-28 19:34 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-28 19:34 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-28 19:34 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-28 19:34 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-28 19:34 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-28 19:34 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-28 19:34 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-28 19:34 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-28 19:34 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-28 19:34 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-28 19:34 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-28 19:34 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-28 19:34 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-28 19:34 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-28 19:34 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-28 19:34 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-28 19:34 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-28 19:34 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-28 19:34 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-28 19:34 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-28 19:34 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-28 19:34 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-28 19:34 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-28 19:34 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-28 19:34 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-28 19:34 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-28 19:32 - 2015-08-28 19:32 - 00000862 _____ C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2015-08-28 19:32 - 2015-08-28 19:32 - 00000832 _____ C:\Users\Marius\Desktop\Start Tor Browser.lnk
2015-08-28 19:31 - 2015-08-28 19:31 - 00000000 ____D C:\ROT
2015-08-28 19:27 - 2015-08-28 19:31 - 43791480 _____ C:\Users\Marius\Downloads\torbrowser-install-5.0.2_en-US.exe
2015-08-28 19:19 - 2015-07-28 22:09 - 00017344 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-28 19:19 - 2015-07-28 22:05 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00437760 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-28 19:19 - 2015-07-28 22:05 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-28 19:19 - 2015-07-28 21:55 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-28 19:19 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-28 19:19 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-28 19:19 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-28 19:19 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-28 19:19 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-28 19:19 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-28 19:19 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-28 19:19 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-28 19:19 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-28 19:19 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-28 19:19 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-28 19:19 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-28 19:19 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-28 19:19 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-28 19:19 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-28 19:19 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-28 19:19 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-28 19:19 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-28 19:19 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-28 19:19 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-28 19:19 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-28 19:19 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-28 19:19 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-28 19:19 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-28 19:19 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-28 19:19 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-28 19:19 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-28 19:19 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-28 19:19 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-28 19:19 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-28 19:19 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-28 19:19 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-28 19:19 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-28 19:19 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-28 19:19 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-28 19:19 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-28 19:18 - 2015-08-28 19:18 - 00000000 ____D C:\Users\Marius\AppData\Local\CEF
2015-08-28 19:12 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-28 19:12 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-28 19:12 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-28 19:12 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-28 19:12 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-28 19:12 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-28 19:12 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-28 19:12 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-28 19:12 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-28 19:12 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-28 19:12 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-28 19:12 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-28 19:10 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-28 19:10 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-28 19:10 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-28 19:10 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-28 19:10 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-28 19:10 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-28 19:10 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-28 19:10 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-28 19:10 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-28 19:10 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-28 19:10 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-28 19:10 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-28 19:10 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-28 19:10 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-28 19:10 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-28 19:10 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-11 01:08 - 2015-08-11 01:08 - 42740536 _____ C:\Windows\system32\nvcompiler.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 30497920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 22960768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 16160424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 14512608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 11845224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 11063440 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-11 01:08 - 2015-08-11 01:08 - 02942280 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 02609480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01906832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435382.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01577808 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01568056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435382.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01071416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 01063040 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00991888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00985232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00948832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00513840 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00417096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00415840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00372880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00213360 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-08-11 01:08 - 2015-08-11 01:08 - 00185632 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00164192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00160896 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00137424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 00048992 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-31 23:58 - 2014-12-18 15:43 - 00000000 ____D C:\Users\Marius\AppData\Roaming\Skype
2015-08-31 23:42 - 2009-07-14 06:45 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-31 23:42 - 2009-07-14 06:45 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-31 23:40 - 2009-07-14 19:58 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-08-31 23:40 - 2009-07-14 19:58 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-08-31 23:40 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-31 23:37 - 2014-12-18 02:48 - 02071971 _____ C:\Windows\WindowsUpdate.log
2015-08-31 23:35 - 2015-07-02 01:58 - 00003030 _____ C:\Windows\System32\Tasks\MSIAfterburner
2015-08-31 23:34 - 2015-03-09 04:53 - 00000000 ____D C:\AdwCleaner
2015-08-31 23:34 - 2014-12-18 14:57 - 00183344 _____ C:\Windows\PFRO.log
2015-08-31 23:34 - 2014-12-18 03:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-31 23:34 - 2014-12-18 03:07 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-31 23:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-31 23:34 - 2009-07-14 06:51 - 00216127 _____ C:\Windows\setupact.log
2015-08-31 23:31 - 2015-01-11 19:16 - 00000000 __SHD C:\Users\Marius\AppData\Local\EmieUserList
2015-08-31 23:31 - 2015-01-11 19:16 - 00000000 __SHD C:\Users\Marius\AppData\Local\EmieSiteList
2015-08-31 23:31 - 2015-01-11 19:16 - 00000000 __SHD C:\Users\Marius\AppData\Local\EmieBrowserModeList
2015-08-31 23:26 - 2015-03-05 03:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-31 23:20 - 2014-12-18 03:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-31 18:51 - 2015-02-01 16:49 - 00000202 _____ C:\Users\Marius\Desktop\Prison Architect.url
2015-08-31 18:51 - 2014-12-18 16:29 - 00000000 ____D C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-31 13:55 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-31 13:55 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-31 13:54 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-08-31 12:57 - 2014-12-18 02:44 - 00000000 ____D C:\Windows\Panther
2015-08-31 10:37 - 2014-12-19 14:38 - 00000000 ____D C:\Users\Marius\Documents\Arma 3
2015-08-30 20:07 - 2014-12-19 14:38 - 00000000 ____D C:\Users\Marius\AppData\Local\Arma 3
2015-08-30 19:42 - 2015-03-29 01:57 - 00000000 ____D C:\Users\Marius\AppData\Local\Arma 3 Launcher
2015-08-30 18:26 - 2014-12-19 17:17 - 00000000 ____D C:\Users\Marius\AppData\Roaming\TS3Client
2015-08-30 15:50 - 2015-03-29 01:57 - 00000000 ____D C:\Users\Marius\AppData\Local\Bohemia_Interactive
2015-08-30 15:12 - 2015-06-24 12:48 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2015-08-30 14:48 - 2015-01-07 08:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-30 14:48 - 2014-12-18 03:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-30 01:51 - 2014-12-24 18:43 - 00000000 ____D C:\SS3
2015-08-30 00:05 - 2014-12-19 17:17 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-29 12:26 - 2014-12-18 15:43 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-29 12:26 - 2014-12-18 15:43 - 00000000 ____D C:\ProgramData\Skype
2015-08-29 07:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-08-29 07:21 - 2014-12-18 03:09 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-29 07:21 - 2014-12-18 03:09 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-29 07:21 - 2009-07-14 06:45 - 00294640 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-29 05:15 - 2014-12-18 03:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-29 05:15 - 2014-12-18 03:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-29 03:03 - 2014-12-18 03:07 - 00000000 ____D C:\Windows\system32\MRT
2015-08-29 03:00 - 2014-12-18 03:07 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-28 19:35 - 2014-12-18 03:16 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-11 01:08 - 2015-05-31 18:12 - 15902640 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-08-11 01:08 - 2015-05-31 18:12 - 15139256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-08-11 01:08 - 2015-05-31 18:12 - 01110768 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-08-11 01:08 - 2015-01-07 08:29 - 37757584 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-08-11 01:08 - 2015-01-07 08:29 - 03417208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-08-11 01:08 - 2014-12-18 03:06 - 00123008 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-08-11 01:08 - 2014-12-18 03:06 - 00115512 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-08-11 01:08 - 2014-08-19 23:15 - 17625848 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-08-11 01:08 - 2014-08-19 23:15 - 13277448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-08-11 01:08 - 2014-08-19 23:14 - 12885072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-08-11 01:08 - 2014-08-19 23:13 - 03019128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-08-10 23:43 - 2014-08-19 23:14 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-08-07 02:44 - 2014-12-18 03:06 - 06873904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 03492984 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 02558768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 00937592 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-08-07 02:44 - 2014-12-18 03:06 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-08-07 02:44 - 2014-12-18 03:06 - 00062584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-08-03 15:07 - 2014-12-18 03:06 - 05133709 _____ C:\Windows\system32\nvcoproc.bin

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-02-03 14:48 - 2015-02-03 14:48 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-06-16 00:29 - 2015-06-16 00:36 - 0000034 _____ () C:\ProgramData\droidcam-settings

Einige Dateien in TEMP:
====================
C:\Users\Marius\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-29 04:02

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-08-2015
durchgeführt von Marius (2015-09-01 00:01:18)
Gestartet von C:\Users\Marius\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3071925943-2123122995-1479801150-500 - Administrator - Disabled)
Gast (S-1-5-21-3071925943-2123122995-1479801150-501 - Limited - Disabled)
Marius (S-1-5-21-3071925943-2123122995-1479801150-1000 - Administrator - Enabled) => C:\Users\Marius

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

"Sudden Strike - Release 1.0" (HKLM-x32\...\"Sudden Strike - Release 1.0") (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\{1194343F-ACFE-4AB4-B1C0-C1E913B729BF}_is1) (Version: 3.8.2662 - Microsoft Studios, Tolyak26)
Archeage (HKLM-x32\...\Glyph Archeage) (Version:  - Trion Worlds, Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version:  - ASRock Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cities Skylines, âåðñèÿ 1.0.0.0 (HKLM-x32\...\Cities Skylines_is1) (Version: 1.0.0.0 - RePack by SEYTER)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
devolo dLAN-Konfigurationsassistent (HKLM-x32\...\dlanconf) (Version: 20.0.0.0 - devolo AG)
devolo Informer (HKLM-x32\...\dslmon) (Version: 28.0.0.0 - devolo AG)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
EVGA PrecisionX 16 (HKLM-x32\...\{DD747735-7FA7-4F0F-903A-271D0DCE7240}) (Version: 5.2.7 - EVGA Corporation)
EVGA PrecisionX 16 (HKLM-x32\...\Steam App 268850) (Version:  - EVGA)
f.lux (HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\Flux) (Version:  - )
Fallout 2 (HKLM-x32\...\GOGPACKFALLOUT2_is1) (Version: 2.0.0.12 - GOG.com)
Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)
Fallout 3 - Unofficial Fallout 3 Patch (HKLM-x32\...\{297C7552-BA68-4F73-AB83-82510777421D}_is1) (Version: v1.2.0 - Quarn (quarny@gmail.com))
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FileZilla Client 3.9.0.6 (HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.157 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version:  - Reto-Moto)
hide.me VPN Version 1.0.7 (HKLM-x32\...\{0E00BDA5-7998-4889-BE4B-39A4BBD2EDFB}_is1) (Version: 1.0.7 - eVenture Limited)
HP Officejet 4620 series - Grundlegende Software für das Gerät (HKLM\...\{B16F9E6E-1388-472C-98C3-F32D397EF85D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 4620 series Hilfe (HKLM-x32\...\{72EDA2AC-2908-4BB3-97E5-4F9DDEBF9731}) (Version: 6.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IL-2 Sturmovik Battle of Stalingrad (HKLM-x32\...\{66F649A9-0FA2-487E-BC0D-894BD7E89D5E}_is1) (Version:  - 1C Game Studios)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)
Intel(R) Smart Connect Technology (HKLM\...\{94A137EA-92EF-441C-A7E2-6757CC08EA82}) (Version: 5.0.10.2907 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
IP Camera Adapter (HKLM-x32\...\{6D140BFF-7CC5-4BFE-AD6D-47035FFE5F14}) (Version: 2.0.0.0 - Pavel Khlebovich)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Killing Floor (HKLM-x32\...\Steam App 1250) (Version:  - Tripwire Interactive)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Medieval Engineers (HKLM-x32\...\Steam App 333950) (Version:  - Keen Software House)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version:  - OVERKILL Software)
Play withSIX Windows client (HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\...\PlaywithSIX) (Version: 1.66.1146.4 - SIX Networks GmbH)
Prison Architect (HKLM-x32\...\Steam App 233450) (Version:  - Introversion Software)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version:  - The Indie Stone)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)
qBittorrent 3.1.12 (HKLM-x32\...\qBittorrent) (Version: 3.1.12 - The qBittorrent project)
Rising Storm/Red Orchestra 2 Multiplayer (HKLM-x32\...\Steam App 35450) (Version:  - Tripwire Interactive)
RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.0 - Rockstar Games)
Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)
S.T.A.L.K.E.R.: Call of Pripyat (HKLM-x32\...\Steam App 41700) (Version:  - GSC Game World)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
ShareX 9.5.0 (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 9.5.0 - ShareX Developers)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Stealth Inc 2 (HKLM-x32\...\Steam App 329380) (Version:  - Carbon)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries Engine (HKLM\...\SteelSeries Engine) (Version: 2.9.2014.1 - SteelSeries)
Stranded Deep (HKLM-x32\...\Steam App 313120) (Version:  - Beam Team Games)
Studie zur Verbesserung von HP Officejet 4620 series Produkten (HKLM\...\{ABBC6F00-E9C9-4B1E-B046-8FFD7BA3A456}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Sudden Strike 3 (HKLM-x32\...\Sudden Strike 3) (Version:  - )
Survarium (HKLM-x32\...\{FEA2E954-A6D0-42FA-8FF1-DFA325758FAC}_is1) (Version: 0.27a7 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Verdun (HKLM-x32\...\Steam App 242860) (Version:  - M2H)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Wargame: Red Dragon (HKLM-x32\...\Steam App 251060) (Version:  - Eugen Systems)
X-Mouse Button Control 2.9.1 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.9.1 - Highresolution Enterprises)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

30-08-2015 02:21:00 Windows Update
31-08-2015 23:51:14 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {05DE32CC-3267-4D20-B16B-D90CA11BE343} - System32\Tasks\{D0698FE9-B715-462D-986C-1107B74D6986} => C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
Task: {24D33F3D-CFD6-4C1B-9546-1E511F3B5C74} - System32\Tasks\Steam_x64-S-2-106-91 => C:\Users\Marius\AppData\Roaming\TS3Client\CODEXi\Steam [2015-01-05] () <==== ACHTUNG
Task: {29876E41-77F8-46E4-8C27-C3EBEDA9833F} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {369ED377-2B08-4D07-9267-07D11D4FDB66} - System32\Tasks\{FF580481-FD18-496F-A1B1-848D8AD3F857} => pcalua.exe -a C:\SS3\ss3_addon_1_4_german_setup.exe -d C:\SS3
Task: {57DFC41A-0A19-49EB-ACB4-5C2ED2039EDF} - System32\Tasks\{EC764047-45CA-4CD2-81DD-C08E0A23B125} => pcalua.exe -a C:\Users\Marius\Downloads\ZE_25030_NA_64.exe -d C:\Users\Marius\Downloads
Task: {6143CCC7-279E-42A1-9020-AF54EECCF852} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {6F99C182-FC4A-414F-9043-66441EC5C202} - System32\Tasks\{300BBE3C-4E88-4E4A-AB6C-25A5E4837FD3} => pcalua.exe -a "C:\Users\Marius\Downloads\Batus Mod 2-0 Installer.exe" -d C:\Users\Marius\Downloads
Task: {7216762F-B66C-40A2-A602-57D231E78084} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-05] (Adobe Systems Incorporated)
Task: {84E828B0-57C5-46B5-857B-06A36CECD4E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {8800F0D0-9A93-4F7C-A423-C2A3C3987D73} - System32\Tasks\arp_flush => C:\Program Files (x86)\hide.me VPN\FlushArpCache.exe [2015-04-03] ()
Task: {8B3C3BFC-3CE8-4032-8321-EE4E19EBE16D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {975CC1ED-2C98-407B-AE77-A39D0B0DAEB2} - System32\Tasks\{C622914B-9D44-49C1-AE63-B66C572C37C7} => pcalua.exe -a C:\Users\Marius\AppData\Local\Temp\Temp2_pbsetup.zip\pbsetup.exe
Task: {A0F61FFE-A40D-40A6-91CF-3AEF121ADDA8} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2015-05-27] ()
Task: {AA0BB100-5E71-4365-B06E-B2920EF0CFF4} - System32\Tasks\HPCustParticipation HP Officejet 4620 series => C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {B2175FD2-AFEF-4563-9F23-C3042E7BCCDC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {C0E1CD41-5613-4CAD-860E-9FEB6C208C85} - System32\Tasks\{569EEAE3-070C-4B39-B2C7-BF4154D0F769} => pcalua.exe -a "C:\Users\Marius\Downloads\ZE_25030_NA_64 (1).exe" -d C:\Users\Marius\Downloads
Task: {CE43AB65-31D0-4FB2-B412-8EA5A4F28A80} - System32\Tasks\{B1D4E6A6-F912-4C47-94D4-1C121A336A78} => pcalua.exe -a "C:\Program Files (x86)\devolo\setup.exe" -d "C:\Program Files (x86)\devolo"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-08-25 17:01 - 2014-08-25 17:01 - 00209712 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2014-08-25 17:01 - 2014-08-25 17:01 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2014-08-25 17:01 - 2014-08-25 17:01 - 00037168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-08-25 17:01 - 2014-08-25 17:01 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTEncryptionCheck.dll
2015-01-05 05:03 - 2015-01-05 05:03 - 01437836 _____ () C:\Users\Marius\AppData\Roaming\TS3Client\CODEXi\Steam
2014-04-17 03:27 - 2014-04-17 03:27 - 00087552 _____ () E:\IPW\IPCameraAdapter.dll
2015-05-08 07:08 - 2015-05-08 07:08 - 00151552 _____ () E:\IPW\DroidCam\lib\DroidCam.dll
2015-05-08 07:08 - 2015-05-08 07:08 - 00081920 _____ () E:\IPW\DroidCam\lib\DroidCamFilter.ax
2015-05-08 07:14 - 2015-05-08 07:14 - 00086016 _____ () E:\IPW\DroidCam\lib\DroidCamFilter240p.ax
2015-01-05 05:03 - 2015-01-05 05:03 - 00279955 _____ () C:\Users\Marius\AppData\Roaming\TS3Client\CODEXi\libidn-11.dll
2015-01-05 05:03 - 2015-01-05 05:03 - 00113166 _____ () C:\Users\Marius\AppData\Roaming\TS3Client\CODEXi\zlib1.dll
2015-08-11 01:08 - 2015-08-11 01:08 - 42740536 _____ () C:\Windows\system32\nvcompiler.dll
2015-08-28 19:35 - 2015-08-18 07:23 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\libglesv2.dll
2015-08-28 19:35 - 2015-08-18 07:23 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Marius\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{10431163-6F78-4964-AB22-10A710A99A6D}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{E5272C4F-CA1C-4678-9726-B8F709ABF5DB}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{099707C1-4880-43AF-BAC9-112D3CFB2A2D}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{8789977B-C500-4865-B086-398D21F36C54}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{AD7FBC10-A317-4E9A-B64B-5B26EC775C66}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{D34A5816-8480-4E27-96A9-EA5DA11DC238}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{C0F65330-066F-494D-A34C-9B806E0E86E8}C:\program files (x86)\devolo\informer\devinf.exe] => (Allow) C:\program files (x86)\devolo\informer\devinf.exe
FirewallRules: [UDP Query User{801B2C83-4832-48E5-B4CD-0A47F3CF4E1F}C:\program files (x86)\devolo\informer\devinf.exe] => (Allow) C:\program files (x86)\devolo\informer\devinf.exe
FirewallRules: [{73DE59D3-B113-4F17-A913-F3D036BDDA79}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0B5CB2CD-4CF1-4808-B5D4-69CAB987765D}] => (Allow) E:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{7A37DC45-DCE9-4555-954F-DA10BBF6A23A}] => (Allow) E:\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{6D067E16-87A1-447C-8C6E-05B8CF4C5525}E:\steam\steamapps\common\war thunder\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{6BFD521D-CB6C-45BC-8B8D-4438FD2A33DB}E:\steam\steamapps\common\war thunder\aces.exe] => (Allow) E:\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{AFC7C9FB-54E1-48CF-B7BB-758CC0032C45}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe
FirewallRules: [{49A1C67C-14FC-4333-A111-549C2F266897}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe
FirewallRules: [{08D26069-6226-45BD-B5F1-BE0C7E582363}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{C40F4C5A-4BA1-4DD4-B81E-5C6FC352CDC1}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{67B4F175-DF02-4484-845A-76E5F5C39E75}] => (Allow) E:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{15E17D2A-57E9-4AA0-9124-D2B954DF130E}] => (Allow) E:\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{52170EE8-63C7-43B4-82A8-DEE1673B6B19}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{DA057402-2FF3-4755-B393-8FC5B91EA58E}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{7A32AA8C-4DD9-4B72-B79C-B32C6484C1B0}] => (Allow) E:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{8920CEA8-84F2-40C8-BC27-5F3D5F8461B6}] => (Allow) E:\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [TCP Query User{20812DBE-85E6-4500-98E5-AEAEDBE50C19}E:\games\ss3\sudden strike 3\ss3game.exe] => (Allow) E:\games\ss3\sudden strike 3\ss3game.exe
FirewallRules: [UDP Query User{81DB81F3-1345-426B-ACD5-EA3BD080D7C3}E:\games\ss3\sudden strike 3\ss3game.exe] => (Allow) E:\games\ss3\sudden strike 3\ss3game.exe
FirewallRules: [{EB19ABA0-E1D1-41DB-946A-C5E6C5C3D3CC}] => (Allow) E:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{D4D16F3C-3B83-4A1E-B73E-5714F256520F}] => (Allow) E:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{60FC24B4-899B-415B-A21F-AA2BCBA23FC6}] => (Allow) E:\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{8872DEF0-3A22-4104-A51A-ECE541E61C7A}] => (Allow) E:\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{F7ECAB72-A57B-4AF4-A649-7143A9DB739F}] => (Allow) E:\Steam\steamapps\common\Red Orchestra 2\Binaries\Win32\ROGame.exe
FirewallRules: [{7569E96E-B8DE-44CA-8B20-325F9AE48CAF}] => (Allow) E:\Steam\steamapps\common\Red Orchestra 2\Binaries\Win32\ROGame.exe
FirewallRules: [{1670F5FA-FC1A-457F-866C-DFCB985F709F}] => (Allow) E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{674CE9D6-CACB-4BA4-BD79-8F8481480EED}] => (Allow) E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{74441FC2-2AA7-4210-A3B0-F91DD5320325}] => (Allow) E:\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{1EF590E4-2A99-442F-B20E-260A26252DF4}] => (Allow) E:\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{65188269-2D58-40F1-A5DA-6237DE740CDC}] => (Allow) E:\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{0538DC7E-19CD-4C5B-AF76-775454062506}] => (Allow) E:\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{7F330725-FD7D-4F21-84D3-3301C26EC31E}] => (Allow) E:\Steam\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{3D5FFCBC-6465-41CA-84B9-3A9F7E53E989}] => (Allow) E:\Steam\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{9E0755FE-F60B-4622-B103-797862AF5853}] => (Allow) E:\Steam\steamapps\common\Verdun\Verdun.exe
FirewallRules: [{CF5DDADF-2AD5-4C0B-8082-3C94DB7C3AF6}] => (Allow) E:\Steam\steamapps\common\Verdun\Verdun.exe
FirewallRules: [{D2EBC07D-4E6D-43ED-B665-87762AC29BBD}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\Stalker-COP.exe
FirewallRules: [{564C4F13-CF81-4038-B27A-1B98CBB22BA8}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\Stalker-COP.exe
FirewallRules: [TCP Query User{5A5B7242-840B-4E9B-82FA-A756EC428A24}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4A60BE38-84D3-4A34-AB94-5B46824F7E39}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{FC9C8F02-8C71-4818-A642-22216FEC90D4}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe
FirewallRules: [{0E5E20B6-6160-4B0C-BD74-3083164FC95A}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\PrecisionX_x64.exe
FirewallRules: [TCP Query User{1A1E6B20-74A2-499C-ADBB-124BDA5D618D}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{AEDFFB3E-2489-462B-9106-244DC25A4A5C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{7B2059D0-9939-4F6C-9DBA-1002A1385CBD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{970B7030-53A6-4790-B5A3-BD7F311DD50A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{A34321E0-5FCD-4A1F-90AA-6A89BEBCF166}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{AB94FBA8-DD00-4D7B-8568-7B44F3266FBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{FE616160-8996-40AD-A5A2-B64DAA5172D3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{32FB0411-A985-4315-952D-D6A7F4DD3DA1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E589B1E5-3F5D-4EA4-A7B6-E4A1C2ABE3D4}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{B8E4BBCC-D87E-4F88-90DA-00EC430995B7}] => (Allow) E:\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [TCP Query User{3D54CAA1-9C8F-4D81-938E-A73B45D73D94}C:\ssd games\wot\wotlauncher.exe] => (Allow) C:\ssd games\wot\wotlauncher.exe
FirewallRules: [UDP Query User{04D7ED63-038A-4430-BEDB-EAF5783B272A}C:\ssd games\wot\wotlauncher.exe] => (Allow) C:\ssd games\wot\wotlauncher.exe
FirewallRules: [TCP Query User{5965A23D-1460-4F3A-843E-6357C929FDFE}C:\ssd games\wot\worldoftanks.exe] => (Allow) C:\ssd games\wot\worldoftanks.exe
FirewallRules: [UDP Query User{B09E7AE8-B6C8-4BA1-BC37-3F5DD463DB95}C:\ssd games\wot\worldoftanks.exe] => (Allow) C:\ssd games\wot\worldoftanks.exe
FirewallRules: [TCP Query User{87BDEB8D-6025-4B9A-85B8-0E4C8F95E03E}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [UDP Query User{2C996A29-1C83-4AFB-8328-1ED6F32A162D}E:\steam\steamapps\common\dayz\dayz.exe] => (Allow) E:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [TCP Query User{FFB04806-5807-4912-A757-D8F23A8C4F85}C:\ssd games\red orchestra 2\binaries\win32\rogame.exe] => (Allow) C:\ssd games\red orchestra 2\binaries\win32\rogame.exe
FirewallRules: [UDP Query User{CE8B51A0-3846-4B2D-A96F-272C2C353576}C:\ssd games\red orchestra 2\binaries\win32\rogame.exe] => (Allow) C:\ssd games\red orchestra 2\binaries\win32\rogame.exe
FirewallRules: [{25B8F72E-BE8F-487C-9E0C-04CFB739F595}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\FaxApplications.exe
FirewallRules: [{2F9478E8-0A64-4A68-A889-9B208B9003CD}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\DigitalWizards.exe
FirewallRules: [{D1300F72-ECCF-4840-B033-FA69E56DC140}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\SendAFax.exe
FirewallRules: [{379EF083-C4BD-4E4F-825D-72E3B3A1C978}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\DeviceSetup.exe
FirewallRules: [{F4528D24-7CDC-477B-8410-FF42312B0FE1}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{41E81572-D167-4E93-874A-A0E5B3B6983D}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{866D5DA0-B5FF-4F50-A3A5-8D73AEF3633D}] => (Allow) E:\Steam\steamapps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{1A60ED27-48D7-4702-8839-2702285CB7CF}] => (Allow) E:\Steam\steamapps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{95D38983-585D-436B-B5B3-50EC6CDDD076}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe
FirewallRules: [{CC444A1C-769E-4640-8539-4B70098941E0}] => (Allow) E:\Steam\steamapps\common\EVGA PrecisionX\Skins\UxfTool.exe
FirewallRules: [{976345EF-91E2-435A-8298-8C1181C13224}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1E7DEE2B-63EB-4ABB-B2B5-545A9AD303D6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F130D5A6-1512-4039-87E8-22AB66C9652C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{59ECE972-F7DE-406D-AFF4-460717CABC36}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{02798DD2-514A-45FD-A1CF-A3A907569C2D}] => (Allow) E:\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{7820F7A2-E541-4653-A277-F1E05C26374F}] => (Allow) E:\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{9134F345-B7EF-4B19-84AC-A909A6EE5C21}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A6AB2514-EF50-44DA-A087-69FC94DB8A76}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{752AACB9-1EEA-446E-84DC-2699E2B1829B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E5875AF8-19E8-45D8-9739-73217641646B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B3689597-921C-4516-9EB1-5C1467C43AAC}] => (Allow) E:\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{83342F92-AA22-41F3-B953-AF5FF8B5F822}] => (Allow) E:\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{C4B98ABC-8B33-46D8-B45A-22D68AED25FB}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{603C0CE0-1005-4D5A-9E60-882E2A2F6082}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{AB4DC87A-C1E3-43D7-B846-AFD3A5D315F6}] => (Allow) E:\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{CA6310CA-0265-4997-B9CE-EC62B0FB78E3}] => (Allow) E:\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{C12C1429-1FB2-4D1A-B6A5-F66A1E3E6C94}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\bin\xrEngine.exe
FirewallRules: [{3101FB08-5384-4640-905E-F0C5F0BC4B2B}] => (Allow) E:\Steam\steamapps\common\Stalker Call of Pripyat\bin\xrEngine.exe
FirewallRules: [TCP Query User{0C605BB7-40F2-40BF-98AD-C6D7E3E32B25}C:\ssd games\arma 3\arma3.exe] => (Allow) C:\ssd games\arma 3\arma3.exe
FirewallRules: [UDP Query User{CEBBFB84-AAF4-4991-8F2B-C6DC6FF66B13}C:\ssd games\arma 3\arma3.exe] => (Allow) C:\ssd games\arma 3\arma3.exe
FirewallRules: [{1FE9F4E1-C97B-4743-A4DB-D13A96118D20}] => (Allow) E:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{99309C44-5043-4979-A94A-47CC1D05808B}] => (Allow) E:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [TCP Query User{CEA4324B-2B4F-4CDF-99C5-3FEEF7CF9226}C:\ssd games\dcsworld\bin\dcs.exe] => (Allow) C:\ssd games\dcsworld\bin\dcs.exe
FirewallRules: [UDP Query User{CF28042F-7BD4-4346-9D0C-115AE1D04E45}C:\ssd games\dcsworld\bin\dcs.exe] => (Allow) C:\ssd games\dcsworld\bin\dcs.exe
FirewallRules: [TCP Query User{7EB732E2-BCC1-4831-9D17-5A37CB80B7F1}E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe
FirewallRules: [UDP Query User{60A253C2-893C-474B-AF8B-BC200C09107D}E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\launcher.exe
FirewallRules: [TCP Query User{8F42C91B-33AF-4683-85A0-99EC9F5D98F0}E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe
FirewallRules: [UDP Query User{D3DCF481-6385-4146-B746-FE976A3FB58C}E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe] => (Allow) E:\games\il-2 sturmovik battle of stalingrad\bin\game\il-2.exe
FirewallRules: [TCP Query User{0F7790C4-4AC3-4230-9D2B-029EC26D89FA}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [UDP Query User{E201881E-7826-4174-8857-CA71663D8694}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [TCP Query User{0CA1E1E6-6B9D-4044-A3E3-D17ACAB63DA7}E:\games\wot\worldoftanks.exe] => (Allow) E:\games\wot\worldoftanks.exe
FirewallRules: [UDP Query User{05878096-C6D4-44F9-8C04-32EC12DA494D}E:\games\wot\worldoftanks.exe] => (Allow) E:\games\wot\worldoftanks.exe
FirewallRules: [{00D5F7B4-3E10-4386-B0BB-D9CA40814A8C}] => (Allow) C:\SSD Games\Survarium\temp\survarium_launcher.exe
FirewallRules: [{0BBD8811-00AF-447F-B5CC-83AC69DD7E2F}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [{7FA0D38D-B59F-4D24-9DD0-F71FAA395AF0}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [{65F2B81B-C3D9-4C36-86D8-F78E3661F003}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [{275AAA10-2DEE-4A35-AE9A-809ABB687264}] => (Allow) C:\SSD Games\Survarium\temp\survarium_updater.exe
FirewallRules: [TCP Query User{DE03EDB7-5DF2-41F5-89C3-70653E40C748}E:\games\gta\gta5.exe] => (Allow) E:\games\gta\gta5.exe
FirewallRules: [UDP Query User{63D32B1C-BD4C-4C80-A290-52B4E4FF8AF6}E:\games\gta\gta5.exe] => (Allow) E:\games\gta\gta5.exe
FirewallRules: [TCP Query User{6CEA1FF4-C478-40D6-A6E8-5CB37ADE8464}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{87A4F0FC-977C-4FA7-954B-987765C9E133}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{2E2BD049-2254-454A-B6F4-8D20A3059724}] => (Allow) E:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{EB17836B-B18E-424D-BF14-44C3CD769652}] => (Allow) E:\Steam\steamapps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{8F1963F1-7526-43D8-8DBF-2B7BD0022DA2}] => (Allow) E:\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{95B65407-77A0-4C74-9540-FD16EB3ACB51}] => (Allow) E:\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{4B1CBEF8-CE4D-4557-A864-2D3E54CE5C59}] => (Allow) E:\Steam\steamapps\common\Rust\Legacy\rust.exe
FirewallRules: [{6D7CA649-C87B-4B9C-BECA-7DB14CE879EF}] => (Allow) E:\Steam\steamapps\common\Rust\Legacy\rust.exe
FirewallRules: [TCP Query User{74860F48-E8BE-475C-83FD-20B49D1DA77A}C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{BD4CD320-430E-40C6-A48A-FD5DF3EC5EA7}C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\Marius\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{6F8A5237-E876-498F-8AF9-8BE6EFDAC372}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{DDDB0D79-2807-4536-A496-5CA6341E86A9}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{CBE8BB53-DD60-43EF-ADFF-6F41CAEA8FFD}] => (Allow) E:\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{C9A57527-AAAC-41AA-90D0-F60DB71AA32B}] => (Allow) E:\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{B5063A8A-5C2A-491D-A126-AD10BF5FA367}] => (Allow) E:\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{EAA1AB9D-E632-4BF9-8B97-1BCB5692DE07}] => (Allow) E:\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{33AEF70B-E74E-4113-8FCA-D3DB9A6F9826}] => (Allow) E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{F3E5D836-A53F-4AFA-B685-DF2B19C347EE}] => (Allow) E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{E53A88FE-7784-4774-993E-7E1632F5A3C4}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{6B60BE3F-F5A0-4A28-BA8D-76CDCF18FE34}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{654EF626-1C54-47DB-9A71-767346BAD6E3}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{870A2896-2D64-4EAC-839F-EDCFF2BAD892}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{87CB30DF-9F7D-450A-81A4-D3DCE6F806CA}] => (Allow) E:\IPW\DroidCam\DroidCamApp.exe
FirewallRules: [{B167CD8A-AB3B-4C97-9551-EBE35F55F24A}] => (Allow) E:\IPW\DroidCam\DroidCamApp.exe
FirewallRules: [{A0B347D8-95C0-4D6E-AE99-7FA417F86A7A}] => (Allow) E:\Steam\steamapps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{3F154E44-9ABF-4CD0-816B-1914C70C2D25}] => (Allow) E:\Steam\steamapps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{2BB73BFA-26AC-4C13-A447-247F158313B3}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [{1762B6C4-A624-41F2-9075-DB690E2D7B38}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [TCP Query User{1D8306E8-7460-49E4-9B59-85D3C3ADABB0}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [UDP Query User{B38BAE62-6B01-4583-822B-CD28EA606EB2}E:\games\wot\wotlauncher.exe] => (Allow) E:\games\wot\wotlauncher.exe
FirewallRules: [{6BA38BB0-CB5E-4C28-B4A1-2D887A19C9D7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{FF85EC17-A9E1-4B4D-B700-FD3E62B50829}] => (Allow) E:\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{0136F369-0592-4356-997B-DA4652853B13}] => (Allow) E:\Steam\steamapps\common\Prison Architect\Prison Architect.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Lexmark X422
Description: Lexmark X422
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Lexmark
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Intel(R) Ethernet Connection I217-V
Description: Intel(R) Ethernet Connection I217-V
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1dexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/31/2015 02:13:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 30.8.2015.0, Zeitstempel: 0x55e31bdf
Name des fehlerhaften Moduls: FRST64.exe, Version: 30.8.2015.0, Zeitstempel: 0x55e31bdf
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000262d9
ID des fehlerhaften Prozesses: 0xe14
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Systemfehler:
=============
Error: (08/31/2015 11:51:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BBUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/31/2015 11:51:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/31/2015 11:51:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/31/2015 11:51:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/31/2015 11:51:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/31/2015 11:51:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/31/2015 11:51:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/31/2015 11:51:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel(R) Smart Connect Technology Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/31/2015 11:51:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet Monitoring Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/31/2015 11:51:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA GeForce Experience Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (08/31/2015 02:13:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRST64.exe30.8.2015.055e31bdfFRST64.exe30.8.2015.055e31bdfc000000500000000000262d9e1401d0e3e6723a1d5dC:\Users\Marius\Downloads\FRST64.exeC:\Users\Marius\Downloads\FRST64.exec18a97f9-4fd9-11e5-8791-ee785e82cfdf

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4025

Error: (08/31/2015 05:49:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (08/31/2015 05:49:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2028

Error: (08/31/2015 05:49:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity:
===================================
  Date: 2015-01-06 16:46:13.165
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Marius\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-06 16:46:13.055
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Marius\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-06 16:46:12.925
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-06 16:46:12.825
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 12218.59 MB
Verfügbarer physikalischer RAM: 9733.94 MB
Summe virtueller Speicher: 24435.38 MB
Verfügbarer virtueller Speicher: 21730.44 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:232.79 GB) (Free:52.48 GB) NTFS
Drive e: (Volume) (Fixed) (Total:1397.26 GB) (Free:1068.38 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 65E01175)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 2BAB359D)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Außerdem habe ich folgende Frage:
Gibts es hier ein Tool mit dem ich meine Netzwerkaktivitäten vernünftig überprüfen kann?

M-K-D-B · 01.09.2015, 13:15

Servus,

du könntest es mal mit SmartSniff versuchen.

Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern.
Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
RemoveProxy:
CMD: ipconfig /flushdns
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von ESET,
die Logdatei von SecurityCheck.

Kinderwerfer · 01.09.2015, 21:16

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-08-2015
durchgeführt von Marius (2015-09-01 15:34:49) Run:1
Gestartet von C:\Users\Marius\Desktop
Geladene Profile: Marius (Verfügbare Profile: Marius)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
RemoveProxy:
CMD: ipconfig /flushdns
EmptyTemp:
end
*****************

Prozess erfolgreich geschlossen.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3071925943-2123122995-1479801150-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


=========  ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========= Ende von CMD: =========

EmptyTemp: => 936.2 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.. 

==== Ende von Fixlog 15:34:53 ====

Code:

ATTFilter

C:\Users\Marius\Downloads\VLC media player 64 Bit - CHIP-Installer.exe	Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung
E:\Games\AoE 2\Setup.exe	Variante von MSIL/CoinMiner.RE Trojaner

Code:

ATTFilter

 Results of screen317's Security Check version 1.008  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Java version 32-bit out of Date! 
  Adobe Flash Player 16.0.0.305 Flash Player out of Date!  
 Adobe Reader XI  
 Google Chrome (43.0.2357.134) 
 Google Chrome (44.0.2403.157) 
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

M-K-D-B · 02.09.2015, 11:25

Zitat:

CHIP-Installer.exe

Bitte keinen Chip-Installer mehr verwenden! Bitte lesen: CHIP-Installer – was ist das?

Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
C:\Users\Marius\Downloads\*CHIP-Installer.exe
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird!

Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte

DelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...

und/oder das Forum mit einer kleinen Spende unterstützen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	MSE

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:

Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.

NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Ghostery Erkennt und blockiert Tracker, Web Bugs, Pixel und Beacons und weitere Scripte, die das Surfverhalten ausspähen/beobachten.

Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie

.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:

Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Kinderwerfer · 03.09.2015, 00:41

Vielen Dank für deine Hilfe, ich werde die letzten Schritte ausführen sobald ich wieder zu Hause bin.

Allerdings stellt sich mit die Frage : was wars denn nun? Oder gab es nichts konkretes?
Außerdem hab ich in den logs etwas von "Bitcoin Miner" gelesen, sind das nicht diese Tools, die benutzt werden um auf infizierten Rechnern CPU oder GPU Power nutzen um Bitcoins zu Minen?

Danke für deine Hilfe

31.08.2015, 16:19	#5
M-K-D-B /// TB-Ausbilder	Verdacht auf Befall, auffällige Upload/Download spikes Servus, Addition.txt von FRST fehlt noch.

31.08.2015, 16:56	#7
M-K-D-B /// TB-Ausbilder	Verdacht auf Befall, auffällige Upload/Download spikes Das ist alles, was in der Addtion.txt steht? Kann ich mir nicht vorstellen...

Verdacht auf Befall, auffällige Upload/Download spikes

Plagegeister aller Art und deren Bekämpfung: Verdacht auf Befall, auffällige Upload/Download spikes