Avira - Minecraft.exe enthält TR/agent?

AdmiralE · 19.09.2015, 13:41

Servus,
als ich eben Minecraft gestartet habe, lief noch alles perfekt. Dann habe ich nach kurzer Spieldauer auf seriösen Servern das Spiel geschlossen und wollte es kurz darauf erneut starten. Avira hat dann einen TR/agent gefunden und natürlich sofort in die Quarantäne verschoben. Minecraft startet natürlich nicht mehr.
Hier der Log:
Exportierte Ereignisse:

19.09.2015 14:22 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\302-\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5\41ZAXAK1\Minecraft[2].exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

19.09.2015 14:19 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\302-\Downloads\Minecraft.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

19.09.2015 14:22 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

19.09.2015 14:19 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\302-\Downloads\Minecraft.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:23 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.1241088.107'
[trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '48e8eb00.qua'
verschoben!

19.09.2015 14:17 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\302-\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5\BE35N6HO\Minecraft[3].exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.1241088.107'
[trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1aa5b848.qua'
verschoben!

19.09.2015 14:17 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.1241088.107'
[trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '48fae2a0.qua'
verschoben!

19.09.2015 14:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\302-\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5\BE35N6HO\Minecraft[2].exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

19.09.2015 14:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:22 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:20 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\302-\Downloads\Minecraft.exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.1241088.107'
[trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '503ac559.qua'
verschoben!

19.09.2015 14:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

19.09.2015 14:17 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 13:49 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.1241088.107'
[trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4893f1b0.qua'
verschoben!

19.09.2015 14:17 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 13:49 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 13:48 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:17 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:17 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

19.09.2015 14:17 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Minecraft\MinecraftLauncher.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

19.09.2015 14:17 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\302-\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Content.IE5\BE35N6HO\Minecraft[3].exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.1241088.107' [trojan]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

Was soll ich jetzt machen? Minecraft komplett deinstallieren und neu installieren hilft nichts, der "Virus" tritt immer wieder auf.
Danke, AdmiralE

M-K-D-B · 19.09.2015, 13:43

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Wie wäre es mit Deinstallieren und nicht wieder installieren?

Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von TDSS-Killer,
die beiden neuen Logdateien von FRST.

AdmiralE · 19.09.2015, 14:07

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
durchgeführt von 302- (Administrator) auf KUNDEN-6P3VFCVU (19-09-2015 15:04:31)
Gestartet von C:\Users\302-\Desktop
Geladene Profile: 302- (Verfügbare Profile: 302-)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe
() C:\Windows\System32\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
() C:\Program Files (x86)\puush\puush.exe
(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\302-\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [735744 2013-02-27] (Creative Technology Ltd)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1843088 2015-08-26] (APN)
HKLM-x32\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4370976 2014-12-12] (Fitbit, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [GoogleChromeAutoLaunch_2A449E69A85980F7931D61A86EB5A808] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-12] (Google Inc.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4370976 2014-12-12] (Fitbit, Inc.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638256 2015-09-02] (Electronic Arts)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-08-05] ()
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Spotify Web Helper] => C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2025016 2015-09-18] (Spotify Ltd)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53737488 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1D4920EC-6CB7-4635-8A61-89687EE6ACAE}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{44F3AFEE-D438-4A5F-A52D-A77C72C530FF}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://syb.msn.com
hxxp://www.tecstore.net
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
hxxp://www.tecstore.net
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {37A091F5-7A12-4D4C-9193-B1CD432C6693} URL = hxxp://www.search.ask.com/web?tpid=ORJ-SPE&o=APN11412&pf=V7&p2=^BBK^OSJ000^YY^DE&gct=&itbv=12.21.0.114&apn_uid=24D764A5-E239-48A2-81CD-9567BF245C94&apn_ptnrs=BBK&apn_dtid=^OSJ000^YY^DE&apn_dbr=cr_39.0.2171.95&doi=2014-12-21&trgb=CR&q={searchTerms}&psv=&pt=tb
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = 
BHO: Search App by Ask -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll [2015-08-26] (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)
BHO-x32: Search App by Ask -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll [2015-08-26] (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)
Toolbar: HKLM - Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll [2015-08-26] (APN LLC.)
Toolbar: HKLM-x32 - Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll [2015-08-26] (APN LLC.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox -> C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default\Extensions\abs@avira.com [2014-08-26]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-25]
CHR HKLM\...\Chrome\Extension: [aaaaahaeginbdcckocjkhbciadcafnep] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahaeginbdcckocjkhbciadcafnep.crx [2015-04-28]
CHR HKLM\...\Chrome\Extension: [aaaaahlfahldnilidgnlikdckbfehhca] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahlfahldnilidgnlikdckbfehhca.crx [2015-04-28]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-08-28]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaahaeginbdcckocjkhbciadcafnep] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahaeginbdcckocjkhbciadcafnep.crx [2015-04-28]
CHR HKLM-x32\...\Chrome\Extension: [aaaaahlfahldnilidgnlikdckbfehhca] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahlfahldnilidgnlikdckbfehhca.crx [2015-04-28]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-08-28]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-26] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [201616 2015-08-26] (APN LLC.)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2012-10-08] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [112640 2013-05-22] (Creative Technology Ltd)
R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5738528 2014-12-12] (Fitbit, Inc.) [Datei ist nicht signiert]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-02] (Electronic Arts)
S3 PAExec; C:\Windows\PAExec.exe [207872 2015-09-09] (Power Admin LLC) [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-02-17] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-16] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
R3 cthda; C:\Windows\System32\drivers\cthda.sys [1060632 2013-05-22] (Creative Technology Ltd)
R3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [33560 2013-05-22] (Creative Technology Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ElgatoGC656Y; C:\Windows\System32\Drivers\ElgatoGC656.sys [94440 2014-07-07] (UB658)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R2 NPF; C:\Windows\SysWow64\drivers\aztech_npf64.sys [40208 2009-05-04] (CACE Technologies)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-19 15:04 - 2015-09-19 15:04 - 00022150 _____ C:\Users\302-\Desktop\FRST.txt
2015-09-19 15:04 - 2015-09-19 15:04 - 00000000 ____D C:\FRST
2015-09-19 15:03 - 2015-09-19 15:03 - 02191360 _____ (Farbar) C:\Users\302-\Desktop\FRST64.exe
2015-09-19 15:02 - 2015-09-19 15:02 - 02191360 _____ (Farbar) C:\Users\302-\Downloads\FRST64.exe
2015-09-19 14:53 - 2015-09-19 14:53 - 00071092 _____ C:\Users\302-\AppData\Local\recently-used.xbel
2015-09-19 14:45 - 2015-09-19 14:52 - 00981770 _____ C:\Users\302-\Documents\Captive4.xcf
2015-09-19 14:37 - 2015-09-19 14:37 - 00000772 _____ C:\Users\302-\Documents\Ereignisse.txt
2015-09-19 14:20 - 2015-09-19 14:20 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller (1).msi
2015-09-19 14:16 - 2015-09-19 14:16 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller.msi
2015-09-19 00:41 - 2015-09-19 00:42 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4.sfk
2015-09-18 21:37 - 2015-09-18 21:37 - 07076424 _____ C:\Users\302-\Downloads\Smaug.rar
2015-09-18 17:32 - 2015-09-18 17:32 - 00105362 _____ C:\Users\302-\Documents\JWSchrift2.xcf
2015-09-18 17:24 - 2015-09-18 17:24 - 00023870 _____ C:\Users\302-\Downloads\ventilla_script.zip
2015-09-18 17:24 - 2015-09-18 17:24 - 00000000 ____D C:\Users\302-\Downloads\JW_files
2015-09-18 15:42 - 2015-09-18 15:42 - 13668628 _____ C:\Users\302-\Downloads\sbs.xcf
2015-09-18 14:24 - 2015-09-18 14:24 - 10973286 _____ C:\Users\302-\Downloads\tntop10.xcf
2015-09-18 03:11 - 2015-09-18 03:11 - 00100458 _____ C:\Users\302-\Downloads\the_minion.zip
2015-09-18 02:08 - 2015-09-18 02:08 - 00000000 ____D C:\Users\302-\Documents\OFX Presets
2015-09-18 02:01 - 2015-09-18 02:01 - 00109651 _____ C:\Users\302-\Downloads\old_london.zip
2015-09-18 00:24 - 2015-09-18 00:24 - 101167727 _____ C:\Users\302-\Downloads\DuKannstVerkaufenGehn.rar
2015-09-17 14:59 - 2015-09-17 15:01 - 00038368 _____ C:\Users\302-\Downloads\Allahu Akbar Sound Effect.mp3.sfk
2015-09-16 22:00 - 2015-09-16 22:00 - 00918328 _____ C:\Windows\Minidump\091615-6786-01.dmp
2015-09-16 03:23 - 2015-09-16 03:23 - 00007016 _____ C:\Users\302-\Downloads\Diamanten!!! - Captive Minecraft 2 #6 - DieBuddiesZocken.mp3.sfk
2015-09-16 01:53 - 2015-09-16 01:53 - 15488826 _____ C:\Users\302-\Downloads\Killduell324141.rar
2015-09-16 01:24 - 2015-09-16 01:24 - 04235110 _____ C:\Users\302-\Downloads\TNSchaf.xcf
2015-09-16 01:15 - 2015-09-16 01:15 - 00108443 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrundk.xcf
2015-09-16 01:06 - 2015-09-16 01:06 - 00518160 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrund.xcf
2015-09-16 00:14 - 2015-09-16 00:16 - 157760736 _____ C:\Users\302-\Downloads\AufdieNahme.rar
2015-09-15 22:00 - 2015-09-15 22:01 - 02853166 _____ C:\Users\302-\Downloads\Tourismusterroristen.xcf
2015-09-15 21:47 - 2015-09-15 21:49 - 02445994 _____ C:\Users\302-\Downloads\mw3.xcf
2015-09-15 21:15 - 2015-09-15 21:29 - 02178366 _____ C:\Users\302-\Downloads\sir.xcf
2015-09-15 21:14 - 2015-09-15 21:14 - 00029442 _____ C:\Users\302-\Downloads\cartoon.zip
2015-09-15 20:59 - 2015-09-15 21:00 - 02343327 _____ C:\Users\302-\Downloads\GK2F.xcf
2015-09-15 20:57 - 2015-09-15 20:57 - 06360873 _____ C:\Users\302-\Downloads\GK2R.xcf
2015-09-15 20:53 - 2015-09-15 20:53 - 06368456 _____ C:\Users\302-\Downloads\GK2H.xcf
2015-09-15 20:37 - 2015-09-15 20:37 - 05428462 _____ C:\Users\302-\Downloads\GK2.xcf
2015-09-15 20:36 - 2015-09-15 20:36 - 00176676 _____ C:\Users\302-\Downloads\plane_crash.zip
2015-09-15 20:31 - 2015-09-15 20:31 - 00815586 _____ C:\Users\302-\Downloads\Me262.jpeg
2015-09-15 20:23 - 2015-09-15 20:23 - 02812464 _____ C:\Users\302-\Downloads\GK1H.xcf
2015-09-15 20:17 - 2015-09-15 20:18 - 02774868 _____ C:\Users\302-\Downloads\GK1R.xcf
2015-09-15 20:12 - 2015-09-15 20:21 - 02793449 _____ C:\Users\302-\Downloads\GK1.xcf
2015-09-15 20:03 - 2015-09-15 20:03 - 00487638 _____ C:\Users\302-\Downloads\cf_nuclear_war.zip
2015-09-15 19:58 - 2015-09-15 20:03 - 07830183 _____ C:\Users\302-\Downloads\tiger.xcf
2015-09-15 19:58 - 2015-09-15 19:58 - 00399765 _____ C:\Users\302-\Downloads\defused.zip
2015-09-15 01:16 - 2015-09-15 01:16 - 00009112 _____ C:\Users\302-\Downloads\badaboom_bb.zip
2015-09-15 01:07 - 2015-09-15 01:07 - 00327869 _____ C:\Users\302-\Documents\DÖ2.xcf
2015-09-15 01:01 - 2015-09-15 01:01 - 00136904 _____ C:\Users\302-\Downloads\DÖ.pdn
2015-09-15 00:51 - 2015-09-15 00:51 - 00194676 _____ C:\Users\302-\Downloads\Flagge Ö.pdn
2015-09-14 23:32 - 2015-09-14 23:37 - 00012504 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4.sfk
2015-09-14 23:32 - 2015-09-14 23:32 - 00655235 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4
2015-09-14 23:31 - 2015-09-14 23:31 - 00012520 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp3.sfk
2015-09-14 20:10 - 2015-09-14 20:10 - 00064857 _____ C:\Users\302-\Downloads\bad_grunge.zip
2015-09-14 20:01 - 2015-09-14 20:01 - 00000000 ____D C:\Users\302-\AppData\Local\webkit
2015-09-14 19:56 - 2015-09-14 20:23 - 00959668 _____ C:\Users\302-\Downloads\Bands.xcf
2015-09-14 19:56 - 2015-09-14 19:56 - 00132321 _____ C:\Users\302-\Downloads\germanica_family.zip
2015-09-14 18:04 - 2015-09-14 18:04 - 00176072 _____ C:\Users\302-\Downloads\Pomade.mp3.sfk
2015-09-14 18:04 - 2015-09-14 18:04 - 00161632 _____ C:\Users\302-\Downloads\Dude_Bro.mp3.sfk
2015-09-14 18:04 - 2015-09-14 18:04 - 00161600 _____ C:\Users\302-\Downloads\Fire_Breather.mp3.sfk
2015-09-14 17:51 - 2015-09-14 17:51 - 21414792 _____ C:\Users\302-\Downloads\Aufnahme.rar
2015-09-13 21:25 - 2015-09-13 21:42 - 74100176 _____ C:\Users\302-\Downloads\§4Mercury§c Pack §4Animated.zip
2015-09-13 20:32 - 2015-09-17 16:34 - 00617883 _____ C:\Users\302-\Documents\Captive.xcf
2015-09-13 18:02 - 2015-09-13 18:02 - 101426665 _____ C:\Users\302-\Downloads\Captive.rar
2015-09-13 17:05 - 2015-09-13 17:05 - 09605800 _____ C:\Users\302-\Downloads\Captive-Minecraft-Beta1_6.zip
2015-09-13 16:22 - 2015-09-13 16:22 - 09706665 _____ C:\Users\302-\Downloads\Captive-Minecraft-III-Beta1_3_1.zip
2015-09-13 00:50 - 2015-09-17 21:01 - 00529671 _____ C:\Users\302-\Downloads\DdnTN.xcf
2015-09-13 00:49 - 2015-09-13 00:49 - 00198034 _____ C:\Users\302-\Downloads\28_days_later.zip
2015-09-12 17:18 - 2015-09-12 17:21 - 00358552 _____ C:\Users\302-\Downloads\Alan Walker - Fade [NCS Release].mp3.sfk
2015-09-12 17:17 - 2015-09-12 17:17 - 00353048 _____ C:\Users\302-\Downloads\Tobu - Infectious [NCS Release].mp3.sfk
2015-09-12 17:17 - 2015-09-12 17:17 - 00252392 _____ C:\Users\302-\Downloads\Tobu - Life [NCS Release].mp3.sfk
2015-09-12 16:04 - 2015-09-12 16:04 - 66872007 _____ C:\Users\302-\Downloads\MC Killduell.rar
2015-09-10 19:21 - 2015-09-10 19:21 - 00000000 ____D C:\Windows\rescache
2015-09-10 17:47 - 2015-09-10 17:50 - 00288248 _____ C:\Users\302-\Downloads\Krys Talk - Fly Away (JPB Remix) [NCS Release].mp3.sfk
2015-09-10 17:47 - 2015-09-10 17:50 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release] (1).mp3.sfk
2015-09-10 17:47 - 2015-09-10 17:47 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release] (1).mp3.sfk
2015-09-10 17:30 - 2015-09-10 17:30 - 30264527 _____ C:\Users\302-\Downloads\CalleFicktGerneTiere.rar
2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Roaming\ATI
2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Local\ATI
2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\ProgramData\ATI
2015-09-09 23:33 - 2015-09-09 23:33 - 00053615 _____ C:\Windows\SysWOW64\CCCInstall_201509092333135219.log
2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 _____ C:\Windows\ativpsrm.bin
2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\AMD
2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files (x86)\AMD
2015-09-09 23:31 - 2015-09-09 23:31 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility (1).exe
2015-09-09 23:29 - 2015-09-09 23:30 - 00207872 _____ (Power Admin LLC) C:\Windows\PAExec.exe
2015-09-09 23:29 - 2015-09-09 23:29 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1 (1).zip
2015-09-09 23:28 - 2015-09-09 23:28 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1.zip
2015-09-09 23:10 - 2015-09-09 23:10 - 00782824 _____ C:\Windows\Minidump\090915-8642-01.dmp
2015-09-09 23:01 - 2015-09-09 23:01 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility.exe
2015-09-09 22:51 - 2015-09-09 22:51 - 01046528 _____ C:\Users\302-\Downloads\MicrosoftFixit50848.msi
2015-09-09 22:49 - 2015-09-09 22:49 - 00918352 _____ C:\Windows\Minidump\090915-8876-01.dmp
2015-09-09 22:21 - 2015-09-09 22:21 - 00782856 _____ C:\Windows\Minidump\090915-16239-01.dmp
2015-09-09 19:19 - 2015-09-09 19:19 - 00782968 _____ C:\Windows\Minidump\090915-21574-01.dmp
2015-09-09 18:57 - 2015-09-09 18:57 - 00271864 _____ C:\Users\302-\Downloads\e-dubble - Let Me Oh (Freestyle Friday #9).mp3.sfk
2015-09-09 18:55 - 2015-09-09 18:55 - 00416480 _____ C:\Users\302-\Downloads\e-dubble - Be A King.mp3.sfk
2015-09-09 18:55 - 2015-09-09 18:55 - 00220672 _____ C:\Users\302-\Downloads\Otis McMusic - Otis McDonald.mp3.sfk
2015-09-09 17:45 - 2015-09-09 17:46 - 25470651 _____ C:\Users\302-\Downloads\SchwarzeSchwänze.rar
2015-09-09 16:32 - 2015-09-09 16:33 - 03595280 _____ C:\Users\302-\Downloads\Top 10 NoCopyRightSounds [NCS].mp3.sfk
2015-09-09 12:26 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-09 12:26 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-09 12:26 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 12:26 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-09 12:26 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 12:26 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-09 12:26 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-09 12:26 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 12:26 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 12:26 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-09 12:26 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-09 12:26 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-09 12:26 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-09 12:26 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 12:26 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-09 12:26 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 12:26 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-09 12:26 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-09 12:26 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-09 12:26 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-09 12:26 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 12:26 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-09-09 12:26 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-09 12:26 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 12:26 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-09 12:26 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-09 12:26 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 12:26 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-09-09 12:26 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-09 12:26 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-09 12:26 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-09-09 12:26 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-09-09 12:26 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 12:26 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-09-09 12:26 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-09-09 12:26 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-09 12:26 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 12:26 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-09-09 12:26 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-09-09 12:26 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-09 12:26 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-09 12:26 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-09 12:26 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-09 12:26 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-09-09 12:26 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 12:26 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-09 12:26 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-09-09 12:26 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-09-09 12:26 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-09-09 12:26 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-09 12:26 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-09 12:26 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 12:26 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-09 12:26 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-09 12:26 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-09-09 12:26 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-09 12:26 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-09 12:26 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-09 12:26 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-09 12:26 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-09 12:26 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 12:26 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-09 12:26 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-09 12:26 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-09 12:26 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-09 12:26 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-09 12:26 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-09 12:26 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-09 12:26 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-09 12:26 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-09 12:24 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-09 12:24 - 2015-07-23 02:06 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-09 12:24 - 2015-07-23 02:06 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-09 12:24 - 2015-07-23 02:06 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-09 12:24 - 2015-07-23 02:03 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-09 12:24 - 2015-07-23 02:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-09 12:24 - 2015-07-23 02:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-09-09 12:24 - 2015-07-23 02:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-09-09 12:24 - 2015-07-23 02:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-09 12:24 - 2015-07-23 02:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-09 12:24 - 2015-07-23 01:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-09 12:24 - 2015-07-23 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:51 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-09 12:24 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-09-09 12:24 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-09-09 12:24 - 2015-07-22 19:54 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-09-09 12:24 - 2015-07-22 19:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-09-09 12:24 - 2015-07-22 19:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-09-09 12:24 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-09-09 12:24 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-09 12:24 - 2015-07-22 18:45 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-09 12:24 - 2015-07-22 18:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-09 12:24 - 2015-07-22 18:44 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-09 12:24 - 2015-07-22 18:34 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-09-09 12:24 - 2015-07-22 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-09-09 12:24 - 2015-07-22 18:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 12:24 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-09 12:24 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-09 12:24 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-09 12:24 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-09 12:23 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-09 12:23 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-09 12:23 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-09 12:23 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-09 12:23 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 12:23 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 12:23 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 12:23 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-09 12:23 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-09 12:23 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-09 12:23 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-09 12:23 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-09 12:23 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-09 12:23 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-09-09 12:23 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-09 12:23 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-09-09 12:23 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-09-09 12:23 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-09 12:23 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-09 12:23 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-09 12:23 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 12:23 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 12:23 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-09 12:23 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-08 23:26 - 2015-09-08 23:26 - 00266216 _____ C:\Users\302-\Downloads\K-391 - Everybody [NCS Release].mp3.sfk
2015-09-08 23:24 - 2015-09-08 23:24 - 00353080 _____ C:\Users\302-\Downloads\Jim Yosef - Firefly [NCS Release].mp3.sfk
2015-09-08 23:24 - 2015-09-08 23:24 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release].mp3.sfk
2015-09-08 22:17 - 2015-09-08 22:20 - 00219664 _____ C:\Users\302-\Downloads\Your_Voice_Is_American.mp3.sfk
2015-09-08 22:17 - 2015-09-08 22:20 - 00115304 _____ C:\Users\302-\Downloads\Burnt.mp3.sfk
2015-09-07 22:28 - 2015-09-07 22:38 - 02073750 _____ C:\Users\302-\Downloads\SETN2.xcf
2015-09-07 22:04 - 2015-09-07 22:10 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release].mp3.sfk
2015-09-07 19:31 - 2015-09-07 19:31 - 90479094 _____ C:\Users\302-\Downloads\Revo Aufnahme.rar
2015-09-07 17:52 - 2015-09-07 17:52 - 27599935 _____ C:\Users\302-\Downloads\Sphax Max Edit.zip
2015-09-06 23:02 - 2015-09-06 23:06 - 00002408 _____ C:\Users\302-\Downloads\Censor Beep Sound Effect.mp3.sfk
2015-09-06 22:57 - 2015-09-06 23:01 - 03080840 _____ C:\Users\302-\Downloads\Best of No Copyright Sounds - February 2015 - Gaming Mix - NCS PixelMusic.mp3.sfk
2015-09-06 22:36 - 2015-09-06 22:36 - 00001904 _____ C:\Users\302-\Downloads\WINDOWS XP ERROR SOUND.wmv.mp3.sfk
2015-09-06 22:30 - 2015-09-06 22:33 - 00020800 _____ C:\Users\302-\Downloads\Whoosh Hits Sound Effect In High Quality.mp3.sfk
2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Program Files\Blender Foundation
2015-09-06 02:08 - 2015-09-06 02:09 - 83956748 _____ C:\Users\302-\Downloads\blender-2.75a-windows64.msi
2015-09-06 01:28 - 2015-09-06 01:28 - 04382072 _____ C:\Users\302-\Downloads\Blender_Minecraft_Rig.rar
2015-09-06 00:18 - 2015-09-06 00:31 - 00000000 ____D C:\Users\302-\AppData\Roaming\Minecraft Skin Viewer
2015-09-06 00:18 - 2015-09-06 00:18 - 00155858 _____ C:\Users\302-\Downloads\Minecraft Skin Viewer.zip
2015-09-06 00:17 - 2015-09-06 00:17 - 00889416 _____ (Microsoft Corporation) C:\Users\302-\Downloads\dotNetFx40_Full_setup.exe
2015-09-05 23:10 - 2015-09-05 23:10 - 06103007 _____ C:\Users\302-\Downloads\SETN.xcf
2015-09-05 23:08 - 2015-09-05 23:08 - 00120462 _____ C:\Users\302-\Downloads\war_is_over.zip
2015-09-05 23:08 - 2015-09-05 23:08 - 00000000 ____D C:\Users\302-\Downloads\war_is_over
2015-09-05 21:59 - 2015-09-05 22:00 - 00308800 _____ C:\Users\302-\Downloads\Pride_Before_the_Fall.mp3.sfk
2015-09-05 18:32 - 2015-09-05 18:32 - 00431408 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4
2015-09-05 18:32 - 2015-09-05 18:32 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD].mp4.sfk
2015-09-05 18:26 - 2015-09-05 18:29 - 00388904 _____ C:\Users\302-\Downloads\Ahrix - Nova [NCS Release].mp3.sfk
2015-09-05 17:11 - 2015-09-05 17:12 - 00001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-09-05 17:11 - 2015-09-05 17:11 - 00000000 ____D C:\Program Files\GIMP 2
2015-09-05 17:09 - 2015-09-05 17:10 - 91931728 _____ (The GIMP Team ) C:\Users\302-\Downloads\gimp-2.8.14-setup-1.exe
2015-09-05 17:03 - 2015-09-05 17:03 - 00254887 _____ C:\Users\302-\Downloads\teb.xcf
2015-09-05 16:34 - 2015-09-05 16:34 - 00782840 _____ C:\Windows\Minidump\090515-17284-01.dmp
2015-09-04 19:48 - 2015-09-04 19:52 - 00368200 _____ C:\Users\302-\Downloads\Different Heaven & EH!DE - My Heart [NCS Release].mp3.sfk
2015-09-04 18:50 - 2015-09-04 19:01 - 00004744 _____ C:\Users\302-\Downloads\Ba Dum Tss!.mp3.sfk
2015-09-04 18:39 - 2015-09-04 18:41 - 00095248 _____ C:\Users\302-\Downloads\Ditch_Diggin.mp3.sfk
2015-09-04 18:13 - 2015-09-04 18:13 - 32596498 _____ C:\Users\302-\Downloads\Österreichische Begriffe.rar
2015-09-04 15:06 - 2015-03-27 18:50 - 04938520 _____ (Piriform Ltd) C:\Users\302-\Desktop\recuva64.exe
2015-09-04 15:05 - 2015-09-04 15:05 - 04000946 _____ C:\Users\302-\Downloads\rcsetup1.5.2_slim.zip
2015-09-03 22:09 - 2015-09-03 22:21 - 00006472 _____ C:\Users\302-\Downloads\Sad Trombone Wah Wah Wah Fail Sound Effect.mp3.sfk
2015-09-03 22:01 - 2015-09-03 22:01 - 108800816 _____ (Apple Inc.) C:\Users\302-\Downloads\iTunesSetup.exe
2015-09-03 20:42 - 2015-09-03 21:21 - 00181720 _____ C:\Users\302-\Downloads\Drop_and_Roll.mp3.sfk
2015-09-03 15:45 - 2015-09-03 15:45 - 00918336 _____ C:\Windows\Minidump\090315-18564-01.dmp
2015-09-03 01:56 - 2015-09-03 01:57 - 00013864 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4.sfk
2015-09-03 01:56 - 2015-09-03 01:56 - 03551842 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4
2015-09-02 17:44 - 2015-09-02 17:44 - 00001201 _____ C:\Users\302-\Desktop\Uplay.lnk
2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Local\Ubisoft Game Launcher
2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2015-09-01 22:15 - 2015-09-01 22:15 - 00276728 _____ C:\Windows\Minidump\090115-23150-01.dmp
2015-08-31 22:18 - 2015-08-31 22:18 - 00000000 ____D C:\Users\302-\AppData\Roaming\MPEG Streamclip
2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-08-31 21:37 - 2015-08-31 21:46 - 03223256 _____ C:\Users\Public\Viele Hacker, gutes Gameplay am Ende 36 Kills - Kopie.mp3.sfk
2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free MP4 MP3 Converter
2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\Program Files (x86)\free-mp4-mp3-converter
2015-08-29 14:18 - 2015-08-29 14:18 - 00001216 _____ C:\Users\302-\Desktop\Movie Studio Platinum 12.0 (64-bit).lnk
2015-08-29 14:11 - 2015-08-29 14:11 - 00715038 _____ C:\Windows\unins000.exe
2015-08-29 14:10 - 2015-08-29 14:11 - 00003448 _____ C:\Windows\unins000.dat
2015-08-29 14:10 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2015-08-29 14:10 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2015-08-27 15:30 - 2015-08-27 15:30 - 00782872 _____ C:\Windows\Minidump\082715-18002-01.dmp
2015-08-26 03:00 - 2015-08-26 03:00 - 00000222 _____ C:\Users\302-\Desktop\Call of Duty Black Ops III Beta.url
2015-08-26 01:51 - 2015-08-26 01:51 - 00781856 _____ C:\Windows\Minidump\082615-33774-01.dmp
2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Users\302-\AppData\Local\Dxtory Software
2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0
2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Program Files (x86)\ExKode
2015-08-25 13:19 - 2014-06-08 22:14 - 02610736 _____ (ExKode Co. Ltd.) C:\Windows\system32\DxtoryCodec.dll
2015-08-25 13:19 - 2014-06-08 22:14 - 02508336 _____ (ExKode Co. Ltd.) C:\Windows\SysWOW64\DxtoryCodec.dll
2015-08-24 22:46 - 2015-09-19 02:59 - 00000000 ____D C:\Users\302-\Documents\Movie Studio Platinum 12.0 Projekte
2015-08-24 22:46 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Roaming\Publish Providers
2015-08-24 22:43 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Local\Sony
2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Sony
2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\Program Files (x86)\Sony
2015-08-24 22:43 - 2015-08-24 22:43 - 00000000 ____D C:\Program Files\Sony
2015-08-24 22:41 - 2015-08-24 23:50 - 00000000 ____D C:\Users\302-\AppData\Roaming\Sony
2015-08-22 00:14 - 2009-05-04 14:55 - 00040208 _____ (CACE Technologies) C:\Windows\SysWOW64\Drivers\aztech_npf64.sys
2015-08-22 00:13 - 2015-08-22 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomePlugAV Utility
2015-08-20 14:49 - 2015-08-20 14:49 - 00000000 ____D C:\Users\302-\AppData\Roaming\Downloaded Installations
2015-08-20 14:49 - 2015-08-20 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PingPlotter
2015-08-20 14:49 - 2015-08-19 02:49 - 00000040 ____H C:\Program Files (x86)\2fe72cf2.tmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-19 15:02 - 2014-08-22 18:30 - 01900665 _____ C:\Windows\WindowsUpdate.log
2015-09-19 14:57 - 2014-08-26 23:59 - 00000000 ____D C:\Users\302-\Desktop\Shepherd of Fire
2015-09-19 14:53 - 2015-05-12 16:23 - 00000000 ____D C:\Users\302-\AppData\Local\gtk-2.0
2015-09-19 14:53 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.gimp-2.8
2015-09-19 14:48 - 2014-08-31 16:05 - 00000000 ____D C:\Users\302-\AppData\Roaming\TS3Client
2015-09-19 14:23 - 2015-01-30 16:21 - 00000000 ____D C:\Program Files (x86)\Minecraft
2015-09-19 14:21 - 2014-08-25 16:31 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-19 14:18 - 2014-08-25 22:42 - 00000000 ____D C:\Users\302-\AppData\Roaming\Skype
2015-09-19 13:49 - 2014-08-25 22:41 - 00000000 ____D C:\Users\302-\AppData\Local\Spotify
2015-09-19 13:48 - 2014-08-25 22:40 - 00000000 ____D C:\Users\302-\AppData\Roaming\Spotify
2015-09-19 13:26 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-19 13:26 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-19 13:23 - 2010-11-21 08:50 - 00700130 _____ C:\Windows\system32\perfh007.dat
2015-09-19 13:23 - 2010-11-21 08:50 - 00149768 _____ C:\Windows\system32\perfc007.dat
2015-09-19 13:23 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-19 13:18 - 2015-03-09 17:38 - 00345749 _____ C:\Windows\SysWOW64\debug.log
2015-09-19 13:18 - 2015-02-16 22:07 - 00000000 ____D C:\ProgramData\Origin
2015-09-19 13:18 - 2015-01-04 17:57 - 00000000 ____D C:\Users\302-\AppData\Roaming\Raptr
2015-09-19 13:18 - 2014-12-24 23:57 - 00000000 ____D C:\Users\302-\AppData\Local\CrashDumps
2015-09-19 13:18 - 2014-08-25 16:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-19 13:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-19 13:17 - 2009-07-14 06:51 - 00086461 _____ C:\Windows\setupact.log
2015-09-19 13:17 - 2009-07-14 06:45 - 00309464 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-19 00:25 - 2015-08-04 20:16 - 00000000 ____D C:\Users\302-\AppData\Roaming\Audacity
2015-09-18 21:38 - 2015-04-24 18:28 - 00000000 ____D C:\Users\302-\Desktop\saves
2015-09-18 17:26 - 2014-08-25 16:20 - 00070064 _____ C:\Users\302-\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-18 03:02 - 2014-11-15 23:11 - 00000000 ____D C:\Users\302-\AppData\Roaming\vlc
2015-09-18 02:15 - 2014-11-15 22:29 - 00000000 ____D C:\Fraps
2015-09-16 22:00 - 2014-08-27 00:21 - 00000000 ____D C:\Windows\Minidump
2015-09-16 07:52 - 2014-08-26 17:12 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-16 00:41 - 2014-08-25 16:20 - 00000000 ____D C:\Users\302-
2015-09-14 20:16 - 2014-08-25 16:31 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-14 20:16 - 2014-08-25 16:31 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-13 22:12 - 2015-04-24 18:28 - 00000000 ____D C:\Users\302-\Desktop\resourcepacks
2015-09-13 01:17 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.thumbnails
2015-09-10 13:53 - 2014-08-25 16:31 - 00000000 ____D C:\Users\302-\AppData\Local\Google
2015-09-09 23:07 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 23:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-09 23:05 - 2015-04-14 22:31 - 00000000 ____D C:\Windows\system32\MRT
2015-09-02 14:00 - 2015-02-16 22:07 - 00000000 ____D C:\Program Files (x86)\Origin
2015-09-01 11:46 - 2014-08-22 18:36 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-31 22:14 - 2014-10-06 19:52 - 00000000 ____D C:\Users\302-\AppData\Local\Apple Computer
2015-08-31 00:38 - 2015-04-25 21:41 - 00000080 _____ C:\Users\302-\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-08-31 00:31 - 2015-04-25 19:43 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-08-31 00:31 - 2015-04-25 19:42 - 00000000 ____D C:\Program Files\Rockstar Games
2015-08-30 23:09 - 2015-02-16 22:08 - 00000000 ____D C:\Users\302-\AppData\Roaming\Origin
2015-08-29 16:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-26 18:37 - 2015-04-14 22:31 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-26 17:13 - 2015-08-08 00:01 - 00001134 _____ C:\Users\Public\Desktop\Game Capture HD.lnk
2015-08-26 14:20 - 2014-08-26 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-08-26 03:00 - 2014-08-26 17:19 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-25 12:26 - 2014-08-31 16:05 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-24 18:46 - 2015-08-06 01:58 - 00000000 ____D C:\Users\302-\AppData\Local\Windows Live
2015-08-22 02:14 - 2015-08-19 21:33 - 00000000 ____D C:\Users\302-\AppData\Local\FluxSoftware
2015-08-22 00:13 - 2014-08-22 18:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-20 14:49 - 2015-08-19 02:49 - 0000040 ____H () C:\Program Files (x86)\2fe72cf2.tmp
2015-09-19 14:53 - 2015-09-19 14:53 - 0071092 _____ () C:\Users\302-\AppData\Local\recently-used.xbel
2014-08-22 18:39 - 2014-08-22 18:39 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\302-\worldpainter_64_1.11.1.exe


Einige Dateien in TEMP:
====================
C:\Users\302-\AppData\Local\Temp\amd-catalyst-15.7.1-without-dotnet45-win7-64bit.exe
C:\Users\302-\AppData\Local\Temp\APNSetup.exe
C:\Users\302-\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\302-\AppData\Local\Temp\avgnt.exe
C:\Users\302-\AppData\Local\Temp\jansi-64-git-Bukkit-1.7.2-R0.3-2-g85f5776-b3023jnks.dll
C:\Users\302-\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\302-\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\302-\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\302-\AppData\Local\Temp\raptrpatch.exe
C:\Users\302-\AppData\Local\Temp\raptr_stub.exe
C:\Users\302-\AppData\Local\Temp\SkypeSetup.exe
C:\Users\302-\AppData\Local\Temp\sonarinst.exe
C:\Users\302-\AppData\Local\Temp\tmp8AF0.exe
C:\Users\302-\AppData\Local\Temp\tmp9BF0.exe
C:\Users\302-\AppData\Local\Temp\tmpD480.exe
C:\Users\302-\AppData\Local\Temp\WdfCoInstaller01007.dll
C:\Users\302-\AppData\Local\Temp\xmlUpdater.exe
C:\Users\302-\AppData\Local\Temp\{220FE1C3-9232-4E9C-8425-58D57680F42A}-44.0.2403.107_chrome_installer.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-11 00:53

==================== Ende von FRST.txt ============================

AdmiralE · 19.09.2015, 14:09

Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von 302- (2015-09-19 15:04:47)
Gestartet von C:\Users\302-\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-08-25 14:20:23)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

302- (S-1-5-21-570197401-3978400442-3683679341-1000 - Administrator - Enabled) => C:\Users\302-
Administrator (S-1-5-21-570197401-3978400442-3683679341-500 - Administrator - Disabled)
Gast (S-1-5-21-570197401-3978400442-3683679341-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avira (HKLM-x32\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)
Battlefield 4™ CTE (HKLM-x32\...\{551A08D1-B60E-4DED-9B67-C3B38258CCA3}) (Version: 1.0.2.33598 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Besiege (HKLM-x32\...\Steam App 346010) (Version:  - Spiderling Studios)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.0.2282.0 - Microsoft Corporation)
Blender (HKLM\...\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - Treyarch)
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Black Ops III Beta (HKLM-x32\...\Steam App 388520) (Version:  - Treyarch)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Desktopicon amazon.de (HKLM\...\DesktopIconAmazon) (Version: 1.0.1 - )
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
DVD Architect Studio 5.0 (HKLM-x32\...\{E42939AE-9660-11E2-9A0D-F04DA23A5C58}) (Version: 5.0.178 - Sony)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elgato Game Capture HD (HKLM-x32\...\{BB567603-AAA6-4AAA-BFC7-5C8EC0971650}) (Version: 2.11.43.962 - Elgato Systems GmbH)
Fitbit Connect (HKLM-x32\...\{08002BE6-6476-4012-8D4B-CF0AE7C71F29}) (Version: 2.0.0.6518 - Fitbit Inc.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free MP4 MP3 Converter 3.0.1 (HKLM-x32\...\Free MP4 MP3 Converter) (Version: 3.0.1 - ZISUN Freeware)
Game Capture HD v2.3.3.38 (HKLM-x32\...\Software_Elgato_Game Capture HD) (Version: 2.3.3.38 - Elgato Systems)
Gameforge Live 2.0.7 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.7 - Gameforge)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.6.1 - Reto-Moto)
HomePlug AV Ethernet Adapter (HKLM-x32\...\{2DFC446B-8A6E-4EF3-99DF-C89E37DB156D}) (Version:  - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Metin2 (HKLM-x32\...\Metin2_is1) (Version:  - Gameforge 4D GmbH)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{6C3C3A70-958D-11E2-B0E5-F04DA23A5C58}) (Version: 12.0.896 - Sony)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.3 - Notepad++ Team)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
PingPlotter 4.01.2 (HKLM-x32\...\{7C20D443-1352-49AB-90D8-71CC34C50917}) (Version: 4.1.2.14 - Pingman Tools, LLC)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)
Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C2201}) (Version: 12.34.1.257 - APN, LLC) <==== ACHTUNG
Shopping App by Ask (HKLM-x32\...\{4F524A2D-5354-2D53-5045-A758B70C1C01}) (Version: 12.28.1.170 - APN, LLC) <==== ACHTUNG
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Sound Blaster Z-Series (HKLM-x32\...\{E48EE8B8-1CD6-4F60-AB93-7C398DAAE08E}) (Version: 1.00.21 - Creative Technology Limited)
Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{75B7DF80-925B-11E2-94F5-F04DA23A5C58}) (Version: 10.0.245 - Sony)
Spotify (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Spotify) (Version: 1.0.14.124.g4dfabc51 - Spotify AB)
Startfenster (HKLM-x32\...\Startfenster) (Version:  - Startfenster)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Evil Within (HKLM-x32\...\Steam App 268050) (Version:  - Tango Gameworks)
The Witcher 3: Wild Hunt (HKLM-x32\...\Steam App 292030) (Version:  - CD PROJEKT RED)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.9.6 - Electronic Arts)
Uplay (HKLM-x32\...\Uplay) (Version: 7.4 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder Launcher 1.0.1.397 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
WorldPainter 1.11.1 (HKLM\...\4144-4862-0472-7103) (Version: 1.11.1 - pepsoft.org)
Worms Ultimate Mayhem (HKLM-x32\...\Steam App 70600) (Version:  - Team17 Software Ltd.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1B4C5D0A-96AC-4DC6-8FCE-70B47C7D3C0D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2A7C7229-544E-4E0D-A68E-81A6F296FE6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {44D533B7-9979-4838-91D5-B9948CEDB889} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {504D497B-CDB8-4686-ABBD-EE02DDEB12F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {71596BB6-953D-4B48-845A-BC95605F571C} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {778A3B73-50D3-4D60-872B-5A2F7239F585} - System32\Tasks\{05266ED9-F493-426B-9A0D-787DD87292F2} => pcalua.exe -a C:\Users\302-\Desktop\forge-1.7.2-10.12.2.1121-installer-win.exe -d C:\Users\302-\Desktop

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-02-17 00:44 - 2015-02-17 00:44 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2012-01-10 14:41 - 2015-08-05 01:19 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe
2014-02-28 11:14 - 2015-08-25 12:26 - 00179176 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-08-04 15:43 - 2015-08-25 12:26 - 00103400 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2015-08-25 12:26 - 00108008 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-08-04 15:46 - 2015-08-25 12:26 - 00312296 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:46 - 2015-08-25 12:26 - 00483816 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-06-05 15:48 - 2015-08-25 12:26 - 00318976 _____ () C:\Program Files\TeamSpeak 3 Client\ssleay32.dll
2014-06-05 15:48 - 2015-08-25 12:26 - 01718784 _____ () C:\Program Files\TeamSpeak 3 Client\LIBEAY32.dll
2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-19 23:02 - 2014-11-19 23:02 - 40622592 ____R () C:\Program Files (x86)\Fitbit Connect\libcef.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 01016832 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00028160 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00029696 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00256000 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00266240 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00346112 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2015-02-16 22:08 - 2015-09-02 14:00 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2014-08-27 00:19 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\302-\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2012-11-23 09:04 - 2012-11-23 09:04 - 00741376 _____ () C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\de-DE\SBZ.resources.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2015-07-27 21:32 - 2015-07-27 21:32 - 02551040 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL
2014-08-14 02:37 - 2014-08-14 02:37 - 00027667 _____ () C:\Program Files (x86)\Raptr\plugins\audio_output\libdirectsound_plugin.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 00031251 _____ () C:\Program Files (x86)\Raptr\plugins\audio_output\libwaveout_plugin.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 00066579 _____ () C:\Program Files (x86)\Raptr\plugins\video_output\libdirectdraw_plugin.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2015-03-15 18:25 - 2015-09-18 00:36 - 45067320 _____ () C:\Users\302-\AppData\Roaming\Spotify\libcef.dll
2015-03-15 18:25 - 2015-09-18 00:36 - 01649208 _____ () C:\Users\302-\AppData\Roaming\Spotify\libglesv2.dll
2015-03-15 18:25 - 2015-09-18 00:36 - 00080952 _____ () C:\Users\302-\AppData\Roaming\Spotify\libegl.dll
2015-09-16 03:22 - 2015-09-12 02:22 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libglesv2.dll
2015-09-16 03:22 - 2015-09-12 02:22 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows\Temp:$DATA

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\302-\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{A21238D4-6021-4579-9743-65D460373C02}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{B86369D1-7369-43F7-8FB8-9DC16EF5136F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{13EAD04A-BF46-4FAB-922E-BDA20453D36D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{307A1DD2-E22F-4C72-B4EE-03A5C1937828}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{41561678-51CD-4CCF-AB49-1562FB9B997C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AE499744-5198-4AB8-BB00-C38151141BCA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F2767255-905A-418B-850E-9C52D994230E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{60D25865-1D5E-49A0-8D2C-73E550BCF002}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DAB37258-4657-4F53-B6C4-E3639E692683}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5AE2ECF8-941E-49A7-9CA0-8D15C3C17D60}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [{0D49A9F8-89B1-4B94-96C0-E6BF08C2ED57}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{F65B0709-096C-4A94-A461-A27192A87ED4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{15A6CF55-7638-46BB-B54F-450A4AFDFD7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{1D48A4DB-E10D-4645-872C-2CE3BCDF0CB2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [TCP Query User{9D600FEE-CAFD-4754-AAD6-6B3AB085B767}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{43EDB761-C6B5-4748-9980-A446F92B2068}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{45119345-79B6-498A-90A7-344CAF6A20FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{5C006A65-1280-4025-93EB-B2A2C042BC65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{76842799-2953-4434-A3D3-D017F0719E4A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{0175E2FD-788F-4E30-AA80-A4E1F809868C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{C0DDBE2B-617A-4B19-8BD7-FF5209D29F79}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{F93EDCC5-E716-44A6-A8EF-4DEE31FC1EB0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{CEA18D57-EF55-4981-9BAE-8707A793DF02}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{2782807F-CC9A-4CFE-B1C2-59B020EA75BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{E255702F-89DE-4911-ADC4-58A78FB9423A}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [{9167B2A4-11E3-4DE3-A0DE-FC77A71D54C8}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [TCP Query User{6C274B12-97C1-4099-AFE2-01895FF260C3}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [UDP Query User{0D2A8895-8B18-454C-B943-CA8B22578C77}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [{79DAC04E-562A-464E-A824-2E7E82B7A41B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9415316C-69B8-462E-8595-770E6C74A357}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{61116760-18BD-4EE7-9E44-10961F78C21C}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D08BCAAA-BAFA-4DD8-BF3E-BC9190825F05}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{17ADCC1C-7487-4E69-A446-FFE9BD9962BF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{2FA126F1-D8B5-4F01-8E44-0B231934133C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{016D8929-7329-47B7-BA08-40DC0B6A82E4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{15183706-446C-44F8-8CCC-ED3448622337}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6032C9D7-502D-4525-8C1C-457DBE8475F9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{72214781-06BE-42B5-8E66-A7AEA3237EF6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8501085A-5C8F-4024-B2EF-ABF10A3B9C1E}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{C7E75C1E-0E6A-4943-8E41-F309FF3C8B32}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5DB5A6FB-5A93-4C1D-B745-DAABE9210D6D}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{8A3975EF-F4A5-4AEC-9BDB-8718E5C9E853}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{66ED9E23-85C9-4E48-95BF-60119ACF20BB}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{54E08AA1-59BD-41EB-A6DB-20DC8CD49255}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{A4F286DC-D5AE-444B-9FB4-63B3C0B6AD6A}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{25B7039E-DA45-45C9-8282-F5F244C0CE0D}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{DCB93497-B86A-42B9-BDBB-17D363C84229}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{A76A7F8E-F6CC-4134-813C-04E23C6406F1}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{243D456B-E571-453A-92AF-E6A96D7A824B}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe
FirewallRules: [{6094A5AA-8170-486B-B97B-80C3507CE55D}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe
FirewallRules: [{5E344668-DBA8-4C92-9C2E-8B7D0FD20797}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{21442C22-988F-4C99-ACD4-6C9376033077}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{EECDBAF8-19F8-4E95-9311-9EBE04A12827}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{A65C09E5-ECAB-47CA-9FF0-F3073C98DC9C}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{4CA6BA93-539A-475B-957F-C2F999D80C34}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{5A3DF4B6-D156-4FC3-AD9B-738907A205B9}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{34383B4E-A683-4140-9426-CEF18C00D2CD}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{06BAFC08-2A00-47EA-8177-8D7B1BDE20C4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{D1F6DD60-EB3D-4BE9-B175-AD10D27BC3A1}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{2489C84C-FA21-49C1-AF37-7E4EB8F7C8B1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{428FCB94-A049-4F25-B1F1-F18F4CB41BF9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B6507A59-9E5D-407C-A71C-1903E250D391}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D0C168F1-460D-45A8-B5AE-39D037371059}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{015D2BDE-64B1-4564-A82A-1F6D941DF2C7}] => (Allow) E:\Origin\Titanfall\Titanfall.exe
FirewallRules: [{F5A492B6-57E0-4AA9-8CF2-AF3FDBDAAA13}] => (Allow) E:\Origin\Titanfall\Titanfall.exe
FirewallRules: [{875CCF35-EEEF-46D4-8E95-B3D6A3317E47}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{480840CB-70A7-42E8-BE64-414F132E161A}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [TCP Query User{5BB423DA-3B7F-4F80-BFF0-0FC05C4A8160}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{0F40E0F6-D55A-4558-B10F-ADAD53FE4C50}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{65A64F62-4486-4E17-9AA7-660C4772DE79}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{DD2A2D18-917D-4314-B600-7F9F461D03F2}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{26ECAD15-EDB3-4FB0-8377-69C1608957C4}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{DE7E784A-07C1-4173-AB7D-ED5031F26EC2}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{68CDA800-ACA5-4CC0-862F-3845B267907A}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [{9B239324-9FC5-46A8-82BD-3AB8302FF638}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe
FirewallRules: [{BA216860-CE6A-41E6-9CCE-DA6759D1AA1A}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe
FirewallRules: [{DCC78CCB-6E90-4EDA-A798-BCDE507287BD}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe
FirewallRules: [{AE067506-477C-4C87-85D9-BF2ECFE0C20C}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe
FirewallRules: [TCP Query User{827E3664-75CA-4867-9595-52E7C12FF220}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{F6F402DB-0380-47E5-A950-44A98123AB2E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{DF295CD8-9679-4EF2-9B51-8DEE969B5FCC}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe
FirewallRules: [UDP Query User{190C28F9-A638-4F9B-A9FF-0339EF9E04D3}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe
FirewallRules: [{279F74AD-E7DA-4E3D-B2AE-47AD3AC4E7DE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{032FEBD4-5B37-4C6D-964B-166CD1782410}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{56EE51A9-7D98-4690-9375-FD0EF2802358}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3D661413-EEC8-4372-B531-42FB21C4983B}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe
FirewallRules: [{1368E948-28E1-40D2-809A-889138CE8C27}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe
FirewallRules: [{386B31F2-6240-4E82-A4A0-3718CC79177C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{127DCA54-266E-4C8F-97F5-640A8A86AD5C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{F71DA277-258C-4E02-8FB9-4CA70DF4C42B}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{6C0C0A8B-D3FF-462E-B931-EE196C3E3C3E}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{34215F91-2C28-4732-8855-200DDA463699}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8418F0EF-339C-4BC5-B4E1-AAA18825A1CC}] => (Allow) LPort=2869
FirewallRules: [{2AC34B33-1E7E-4E78-86BB-0C2D05335003}] => (Allow) LPort=1900
FirewallRules: [{23E683D5-512D-4597-B316-D15F22128713}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe
FirewallRules: [{FE4F5940-082F-4004-83D8-D7F9431B1B83}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe
FirewallRules: [{6CE4C917-117B-4B1D-BF6A-8D46B0B892A1}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe
FirewallRules: [{38FFD8AA-165E-43EB-BEC6-201A4D177243}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe
FirewallRules: [{845269B4-F0BF-4418-877D-E5E1D125F304}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{60B8867F-8714-4DA9-B3C1-2FD73EC2F264}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{DE4D4459-6701-4D89-864F-B02EBD793A23}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe
FirewallRules: [{16001459-A2B5-48B2-876C-AF6FD5F61A72}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe
FirewallRules: [{A79A0BA9-4198-480F-839F-1E2C58FE52CF}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{20581424-7ACC-49FA-9607-0073E2049728}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{D514A8B0-EF32-49FF-8CFF-10336D781803}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/19/2015 01:18:26 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 01:18:16 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 01:18:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0xdc4
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3

Error: (09/19/2015 01:18:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2015 01:18:00 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.Systray.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Configuration.ConfigurationErrorsException
Stack:
   at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(System.String, Boolean, Boolean, Boolean, Boolean, System.Object ByRef, System.Object ByRef)
   at System.Configuration.BaseConfigurationRecord.GetSection(System.String)
   at System.Configuration.ClientConfigurationSystem.System.Configuration.Internal.IInternalConfigSystem.GetSection(System.String)
   at System.Configuration.ConfigurationManager.GetSection(System.String)
   at System.Configuration.ConfigurationManager.get_AppSettings()
   at Avira.OE.WinCore.OeProductInfo.get_Culture()
   at Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   at Avira.OE.Systray.Program.Main(System.String[])

Error: (09/19/2015 01:17:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/18/2015 09:40:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm javaw.exe, Version 8.0.25.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1e08

Startzeit: 01d0f249b51a3260

Endzeit: 13

Anwendungspfad: C:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

Berichts-ID: 1c402b01-5e3d-11e5-84f7-74d435b2c5d3

Error: (09/18/2015 09:39:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm javaw.exe, Version 8.0.25.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1908

Startzeit: 01d0f21d022dc255

Endzeit: 26

Anwendungspfad: C:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

Berichts-ID: f01bc72a-5e3c-11e5-84f7-74d435b2c5d3

Error: (09/18/2015 01:27:10 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MovieStudioPlatinum120.exe, Version 12.0.0.896 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 500

Startzeit: 01d0f1a049bf582f

Endzeit: 5

Anwendungspfad: C:\Program Files\Sony\Movie Studio Platinum 12.0\MovieStudioPlatinum120.exe

Berichts-ID: 9d1946da-5d93-11e5-84f7-74d435b2c5d3

Error: (09/18/2015 01:26:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MovieStudioPlatinum120.exe, Version: 12.0.0.896, Zeitstempel: 0x5150b61a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55b02e88
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000bffc2
ID des fehlerhaften Prozesses: 0x1de4
Startzeit der fehlerhaften Anwendung: 0xMovieStudioPlatinum120.exe0
Pfad der fehlerhaften Anwendung: MovieStudioPlatinum120.exe1
Pfad des fehlerhaften Moduls: MovieStudioPlatinum120.exe2
Berichtskennung: MovieStudioPlatinum120.exe3


Systemfehler:
=============
Error: (09/19/2015 01:18:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (09/19/2015 01:18:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 01:18:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/17/2015 05:33:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (09/17/2015 05:33:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/17/2015 05:33:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/17/2015 05:20:59 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (09/17/2015 02:28:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (09/17/2015 02:28:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/17/2015 02:28:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 16287 MB
Verfügbarer physikalischer RAM: 10764.87 MB
Summe virtueller Speicher: 32572.2 MB
Verfügbarer virtueller Speicher: 26500.92 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:14.72 GB) NTFS
Drive d: (MSP120Suite) (CDROM) (Total:2.94 GB) (Free:0 GB) CDFS
Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:47.32 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: E8D2D00F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

AdmiralE · 19.09.2015, 14:25

TDSS

Code:

ATTFilter

15:10:37.0356 0x02f8  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
15:15:37.0248 0x02f8  ============================================================
15:15:37.0248 0x02f8  Current date / time: 2015/09/19 15:15:37.0248
15:15:37.0248 0x02f8  SystemInfo:
15:15:37.0248 0x02f8  
15:15:37.0248 0x02f8  OS Version: 6.1.7601 ServicePack: 1.0
15:15:37.0248 0x02f8  Product type: Workstation
15:15:37.0248 0x02f8  ComputerName: KUNDEN-6P3VFCVU
15:15:37.0248 0x02f8  UserName: 302-
15:15:37.0248 0x02f8  Windows directory: C:\Windows
15:15:37.0248 0x02f8  System windows directory: C:\Windows
15:15:37.0248 0x02f8  Running under WOW64
15:15:37.0248 0x02f8  Processor architecture: Intel x64
15:15:37.0248 0x02f8  Number of processors: 8
15:15:37.0248 0x02f8  Page size: 0x1000
15:15:37.0248 0x02f8  Boot type: Normal boot
15:15:37.0248 0x02f8  ============================================================
15:15:38.0034 0x02f8  KLMD registered as C:\Windows\system32\drivers\58505507.sys
15:15:38.0087 0x02f8  System UUID: {F97997CB-548A-8979-0247-D22F685BD715}
15:15:38.0299 0x02f8  Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:15:38.0342 0x02f8  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:15:38.0345 0x02f8  ============================================================
15:15:38.0345 0x02f8  \Device\Harddisk0\DR0:
15:15:38.0345 0x02f8  MBR partitions:
15:15:38.0345 0x02f8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:15:38.0345 0x02f8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xDF61800
15:15:38.0345 0x02f8  \Device\Harddisk1\DR1:
15:15:38.0345 0x02f8  GPT partitions:
15:15:38.0346 0x02f8  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {0D9C6D95-F0AF-4159-98BB-2DFA4ED53FA7}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
15:15:38.0346 0x02f8  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {348BC292-2746-4CC1-AB5D-3492FB965F06}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x746C6000
15:15:38.0346 0x02f8  MBR partitions:
15:15:38.0346 0x02f8  ============================================================
15:15:38.0347 0x02f8  C: <-> \Device\Harddisk0\DR0\Partition2
15:15:38.0362 0x02f8  E: <-> \Device\Harddisk1\DR1\Partition2
15:15:38.0362 0x02f8  ============================================================
15:15:38.0362 0x02f8  Initialize success
15:15:38.0362 0x02f8  ============================================================
15:24:03.0641 0x1b38  ============================================================
15:24:03.0641 0x1b38  Scan started
15:24:03.0641 0x1b38  Mode: Manual; SigCheck; TDLFS; 
15:24:03.0641 0x1b38  ============================================================
15:24:03.0641 0x1b38  KSN ping started
15:24:06.0310 0x1b38  KSN ping finished: true
15:24:08.0050 0x1b38  ================ Scan system memory ========================
15:24:08.0050 0x1b38  System memory - ok
15:24:08.0050 0x1b38  ================ Scan services =============================
15:24:08.0082 0x1b38  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
15:24:08.0108 0x1b38  1394ohci - ok
15:24:08.0117 0x1b38  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
15:24:08.0126 0x1b38  ACPI - ok
15:24:08.0129 0x1b38  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
15:24:08.0136 0x1b38  AcpiPmi - ok
15:24:08.0141 0x1b38  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:24:08.0147 0x1b38  AdobeARMservice - ok
15:24:08.0156 0x1b38  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
15:24:08.0168 0x1b38  adp94xx - ok
15:24:08.0174 0x1b38  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
15:24:08.0184 0x1b38  adpahci - ok
15:24:08.0189 0x1b38  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
15:24:08.0196 0x1b38  adpu320 - ok
15:24:08.0200 0x1b38  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
15:24:08.0207 0x1b38  AeLookupSvc - ok
15:24:08.0216 0x1b38  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
15:24:08.0228 0x1b38  AFD - ok
15:24:08.0232 0x1b38  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
15:24:08.0237 0x1b38  agp440 - ok
15:24:08.0241 0x1b38  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
15:24:08.0248 0x1b38  ALG - ok
15:24:08.0250 0x1b38  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
15:24:08.0255 0x1b38  aliide - ok
15:24:08.0260 0x1b38  [ 606C8F129FE18D6E3EA2FD542D43D72D, 1BDB9B1C3C8345429FFF25189DCA16F4174F29B5C5DFD5AEB5C277CD4E6EBCA8 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:24:08.0271 0x1b38  AMD External Events Utility - ok
15:24:08.0274 0x1b38  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
15:24:08.0279 0x1b38  amdide - ok
15:24:08.0281 0x1b38  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
15:24:08.0287 0x1b38  AmdK8 - ok
15:24:08.0307 0x1b38  amdkmdag - ok
15:24:08.0322 0x1b38  [ C0C27A1094F6EA978FB2CAACFDE0E594, 9B481D55ED3D55A975CB1EB32DD0DB9AD032D592585A5799F81918EFB7843AAE ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
15:24:08.0338 0x1b38  amdkmdap - ok
15:24:08.0341 0x1b38  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
15:24:08.0348 0x1b38  AmdPPM - ok
15:24:08.0351 0x1b38  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
15:24:08.0357 0x1b38  amdsata - ok
15:24:08.0362 0x1b38  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
15:24:08.0369 0x1b38  amdsbs - ok
15:24:08.0371 0x1b38  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
15:24:08.0376 0x1b38  amdxata - ok
15:24:08.0396 0x1b38  [ 9FE1AC875A7AD7B7FF28FEC8B754968D, EEE04D4073E49332C85028B62E8A035EAA2284526A3F3820133492C8F8CBA3D5 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
15:24:08.0416 0x1b38  AntiVirMailService - ok
15:24:08.0425 0x1b38  [ E20B4F23EB153635D67944F63454EC84, FEE76A74767CDB33415C64F08AE1FF248F505AF22C1F1BA1EBB5CC6A75E3926F ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
15:24:08.0436 0x1b38  AntiVirSchedulerService - ok
15:24:08.0444 0x1b38  [ E20B4F23EB153635D67944F63454EC84, FEE76A74767CDB33415C64F08AE1FF248F505AF22C1F1BA1EBB5CC6A75E3926F ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
15:24:08.0455 0x1b38  AntiVirService - ok
15:24:08.0473 0x1b38  [ D9A8EE3F4A1E604B9315B34A5AA4569E, 287BA8FA1949646E03D39F36F50C016251358A8A454EE19D249E76A723F1455E ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
15:24:08.0495 0x1b38  AntiVirWebService - ok
15:24:08.0501 0x1b38  [ 04A9603DE8935EA6AEF8386C8286B972, 64D01203B2D0A6811E577C72BCB503EADCC0D1786EE9DE1EFC31201A8A7EE36B ] APNMCP          C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
15:24:08.0508 0x1b38  APNMCP - ok
15:24:08.0511 0x1b38  [ A0711D119BA4B48A1470C768D301013E, 536366F809125D2C2171597C8C2CB3271BE5C6B373152112E0D970749776E00A ] AppID           C:\Windows\system32\drivers\appid.sys
15:24:08.0518 0x1b38  AppID - ok
15:24:08.0520 0x1b38  [ 173C90AF5B243B4DD86F95CA154CB58A, 349F566DADC96B31FDC34C4F26545FB880844DBF84E5821AA0D0CAA91FB837E1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
15:24:08.0525 0x1b38  AppIDSvc - ok
15:24:08.0528 0x1b38  [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo         C:\Windows\System32\appinfo.dll
15:24:08.0535 0x1b38  Appinfo - ok
15:24:08.0539 0x1b38  [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
15:24:08.0544 0x1b38  Apple Mobile Device - ok
15:24:08.0548 0x1b38  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
15:24:08.0554 0x1b38  arc - ok
15:24:08.0558 0x1b38  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
15:24:08.0564 0x1b38  arcsas - ok
15:24:08.0574 0x1b38  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:24:08.0581 0x1b38  aspnet_state - ok
15:24:08.0583 0x1b38  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
15:24:08.0601 0x1b38  AsyncMac - ok
15:24:08.0603 0x1b38  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
15:24:08.0608 0x1b38  atapi - ok
15:24:08.0613 0x1b38  [ F270AFC3848C54C67E3BFB892CE9B9C6, BF5F087D2677E8D75DB34335B54496A3C3AFBCE5A019C52B9EB2B1D19A0803B1 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
15:24:08.0619 0x1b38  AtiHDAudioService - ok
15:24:08.0630 0x1b38  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:24:08.0645 0x1b38  AudioEndpointBuilder - ok
15:24:08.0656 0x1b38  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
15:24:08.0671 0x1b38  AudioSrv - ok
15:24:08.0675 0x1b38  [ 24843902369DC82B4691F816F08F2938, 330E22C6007B10FE9C232BBCA2F388ADA17DEDBAA11BEC2A70377A4466DFB6FA ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
15:24:08.0683 0x1b38  avgntflt - ok
15:24:08.0686 0x1b38  [ 043E5F34C3878C844568658B79B3E55C, D13D8FC5205562E02F252C0EE1AB2236C9212445D6EC3715041EBDF993CB467F ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
15:24:08.0694 0x1b38  avipbb - ok
15:24:08.0699 0x1b38  [ 05ABC09DC0DFA5DF79A0BB39F60636B7, FEDE900D991F1FB40BA0A44E05181A6A506DC8B5F365E78E523CB6DF2CDACC15 ] Avira.OE.ServiceHost C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
15:24:08.0706 0x1b38  Avira.OE.ServiceHost - ok
15:24:08.0708 0x1b38  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
15:24:08.0713 0x1b38  avkmgr - ok
15:24:08.0716 0x1b38  [ 13253E5E3B6BDF945B63B336A8C9489B, 671C716E43F89D4BDDAA2BE045CDEBBB569C85BC2BA334E1F550187B79A7740D ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
15:24:08.0721 0x1b38  avnetflt - ok
15:24:08.0726 0x1b38  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
15:24:08.0735 0x1b38  AxInstSV - ok
15:24:08.0743 0x1b38  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
15:24:08.0754 0x1b38  b06bdrv - ok
15:24:08.0761 0x1b38  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
15:24:08.0770 0x1b38  b57nd60a - ok
15:24:08.0774 0x1b38  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
15:24:08.0781 0x1b38  BDESVC - ok
15:24:08.0783 0x1b38  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
15:24:08.0800 0x1b38  Beep - ok
15:24:08.0813 0x1b38  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
15:24:08.0828 0x1b38  BFE - ok
15:24:08.0842 0x1b38  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
15:24:08.0871 0x1b38  BITS - ok
15:24:08.0874 0x1b38  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
15:24:08.0881 0x1b38  blbdrive - ok
15:24:08.0889 0x1b38  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
15:24:08.0899 0x1b38  Bonjour Service - ok
15:24:08.0902 0x1b38  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
15:24:08.0908 0x1b38  bowser - ok
15:24:08.0910 0x1b38  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
15:24:08.0917 0x1b38  BrFiltLo - ok
15:24:08.0919 0x1b38  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
15:24:08.0925 0x1b38  BrFiltUp - ok
15:24:08.0929 0x1b38  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
15:24:08.0937 0x1b38  Browser - ok
15:24:08.0942 0x1b38  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
15:24:08.0951 0x1b38  Brserid - ok
15:24:08.0954 0x1b38  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
15:24:08.0961 0x1b38  BrSerWdm - ok
15:24:08.0964 0x1b38  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
15:24:08.0970 0x1b38  BrUsbMdm - ok
15:24:08.0972 0x1b38  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
15:24:08.0978 0x1b38  BrUsbSer - ok
15:24:08.0980 0x1b38  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
15:24:08.0987 0x1b38  BTHMODEM - ok
15:24:08.0991 0x1b38  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
15:24:09.0010 0x1b38  bthserv - ok
15:24:09.0031 0x1b38  [ FECA9F830A5C6BAB9978E6781A26AE2B, CA1681A2F4FA849815B8E823805E078DB9C050CEE86E9E394B2A37B57CC474A6 ] c2cautoupdatesvc C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
15:24:09.0055 0x1b38  c2cautoupdatesvc - ok
15:24:09.0083 0x1b38  [ 5B33709F7FE59BB625F113EED86AFC5C, 8D29FE242D55526FDEB2CB4009B5DE19C93972E872BE6328AD3305E360A3D44B ] c2cpnrsvc       C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
15:24:09.0112 0x1b38  c2cpnrsvc - ok
15:24:09.0120 0x1b38  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
15:24:09.0139 0x1b38  cdfs - ok
15:24:09.0142 0x1b38  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
15:24:09.0150 0x1b38  cdrom - ok
15:24:09.0154 0x1b38  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
15:24:09.0172 0x1b38  CertPropSvc - ok
15:24:09.0174 0x1b38  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
15:24:09.0182 0x1b38  circlass - ok
15:24:09.0189 0x1b38  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
15:24:09.0199 0x1b38  CLFS - ok
15:24:09.0204 0x1b38  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:24:09.0209 0x1b38  clr_optimization_v2.0.50727_32 - ok
15:24:09.0214 0x1b38  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:24:09.0220 0x1b38  clr_optimization_v2.0.50727_64 - ok
15:24:09.0228 0x1b38  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:24:09.0235 0x1b38  clr_optimization_v4.0.30319_32 - ok
15:24:09.0238 0x1b38  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:24:09.0245 0x1b38  clr_optimization_v4.0.30319_64 - ok
15:24:09.0248 0x1b38  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
15:24:09.0253 0x1b38  CmBatt - ok
15:24:09.0255 0x1b38  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
15:24:09.0260 0x1b38  cmdide - ok
15:24:09.0268 0x1b38  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
15:24:09.0282 0x1b38  CNG - ok
15:24:09.0284 0x1b38  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
15:24:09.0289 0x1b38  Compbatt - ok
15:24:09.0291 0x1b38  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
15:24:09.0298 0x1b38  CompositeBus - ok
15:24:09.0300 0x1b38  COMSysApp - ok
15:24:09.0302 0x1b38  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
15:24:09.0307 0x1b38  crcdisk - ok
15:24:09.0309 0x1b38  [ C8BD651E13895B93ED9EC5B4F1DF42BC, D86D6BF0BA3C09B49B3A52C86A7F3B3856A27F79EDD86A8FFA469D9A5F196E8D ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
15:24:09.0312 0x1b38  Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
15:24:11.0669 0x1b38  Detect skipped due to KSN trusted
15:24:11.0669 0x1b38  Creative ALchemy AL6 Licensing Service - ok
15:24:11.0676 0x1b38  [ C0EAD9F8AB83D41FF07303C75589C2B8, C89CAC39BCD2FA2DCC56D7EE84FF66127BCECCAE400E119FE41BF4C4D769504B ] Creative Audio Engine Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
15:24:11.0679 0x1b38  Creative Audio Engine Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
15:24:14.0037 0x1b38  Detect skipped due to KSN trusted
15:24:14.0037 0x1b38  Creative Audio Engine Licensing Service - ok
15:24:14.0049 0x1b38  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
15:24:14.0057 0x1b38  CryptSvc - ok
15:24:14.0065 0x1b38  [ 51D43B57EA8EFFE5CB1E27E01C100A2F, 68995F291422F2C5A2C9C4C673272754E3AC49ED53D6197675EB9E19028163C5 ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
15:24:14.0073 0x1b38  CTAudSvcService - detected UnsignedFile.Multi.Generic ( 1 )
15:24:16.0427 0x1b38  Detect skipped due to KSN trusted
15:24:16.0427 0x1b38  CTAudSvcService - ok
15:24:16.0447 0x1b38  [ 8931FC44F1D9CFF0CC1557E4F762984B, 9A011556F7D6A5B29ECFD02474EF63A2F32D6815ACFE3EBAB58F21B6846E9864 ] cthda           C:\Windows\system32\drivers\cthda.sys
15:24:16.0466 0x1b38  cthda - ok
15:24:16.0490 0x1b38  [ DAC49922B75957F76310B8E5A6C2995E, 0F46E12054148C0949D0AA6D5FFD74A2CD04493A9799F1632FC3672469DA41B2 ] CtHdaSvc        C:\Windows\sysWow64\CtHdaSvc.exe
15:24:16.0497 0x1b38  CtHdaSvc - ok
15:24:16.0499 0x1b38  [ E74309AD2D54D98780B6B6018F41CAEB, 11F9B33679CEAB5D0BA38EB3B9DC26BA2EA18E4BD726DEF89FDB1DD3F369F467 ] cthdb           C:\Windows\system32\DRIVERS\cthdb.sys
15:24:16.0504 0x1b38  cthdb - ok
15:24:16.0514 0x1b38  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
15:24:16.0538 0x1b38  DcomLaunch - ok
15:24:16.0545 0x1b38  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
15:24:16.0566 0x1b38  defragsvc - ok
15:24:16.0570 0x1b38  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
15:24:16.0587 0x1b38  DfsC - ok
15:24:16.0594 0x1b38  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
15:24:16.0603 0x1b38  Dhcp - ok
15:24:16.0624 0x1b38  [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack       C:\Windows\system32\diagtrack.dll
15:24:16.0648 0x1b38  DiagTrack - ok
15:24:16.0651 0x1b38  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
15:24:16.0668 0x1b38  discache - ok
15:24:16.0671 0x1b38  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
15:24:16.0677 0x1b38  Disk - ok
15:24:16.0681 0x1b38  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
15:24:16.0689 0x1b38  Dnscache - ok
15:24:16.0695 0x1b38  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
15:24:16.0714 0x1b38  dot3svc - ok
15:24:16.0718 0x1b38  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
15:24:16.0736 0x1b38  DPS - ok
15:24:16.0739 0x1b38  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
15:24:16.0744 0x1b38  drmkaud - ok
15:24:16.0759 0x1b38  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
15:24:16.0776 0x1b38  DXGKrnl - ok
15:24:16.0778 0x1b38  EagleX64 - ok
15:24:16.0782 0x1b38  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
15:24:16.0800 0x1b38  EapHost - ok
15:24:16.0846 0x1b38  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
15:24:16.0894 0x1b38  ebdrv - ok
15:24:16.0902 0x1b38  [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] EFS             C:\Windows\System32\lsass.exe
15:24:16.0908 0x1b38  EFS - ok
15:24:16.0920 0x1b38  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
15:24:16.0935 0x1b38  ehRecvr - ok
15:24:16.0938 0x1b38  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
15:24:16.0946 0x1b38  ehSched - ok
15:24:16.0949 0x1b38  [ 2E6CE12D16B40DD96B4EBAFFAE79742D, E279713284279459671AEE7B86120BFA4C285A1ED721CFAEE2D6B8579518EA49 ] ElgatoGC656Y    C:\Windows\system32\Drivers\ElgatoGC656.sys
15:24:16.0955 0x1b38  ElgatoGC656Y - ok
15:24:16.0964 0x1b38  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
15:24:16.0975 0x1b38  elxstor - ok
15:24:16.0978 0x1b38  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
15:24:16.0983 0x1b38  ErrDev - ok
15:24:16.0992 0x1b38  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
15:24:17.0014 0x1b38  EventSystem - ok
15:24:17.0018 0x1b38  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
15:24:17.0037 0x1b38  exfat - ok
15:24:17.0042 0x1b38  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
15:24:17.0061 0x1b38  fastfat - ok
15:24:17.0077 0x1b38  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
15:24:17.0091 0x1b38  Fax - ok
15:24:17.0093 0x1b38  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
15:24:17.0099 0x1b38  fdc - ok
15:24:17.0101 0x1b38  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
15:24:17.0117 0x1b38  fdPHost - ok
15:24:17.0120 0x1b38  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
15:24:17.0137 0x1b38  FDResPub - ok
15:24:17.0140 0x1b38  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
15:24:17.0146 0x1b38  FileInfo - ok
15:24:17.0148 0x1b38  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
15:24:17.0165 0x1b38  Filetrace - ok
15:24:17.0245 0x1b38  [ 65A89589DD9FE02F6F71F8F3CCA51E7A, 65D2FE2553BA7B8B249AA9F389EE4ACBB547C2586C7DA99AEE140A2AA6021820 ] Fitbit Connect  C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe
15:24:17.0338 0x1b38  Fitbit Connect - detected UnsignedFile.Multi.Generic ( 1 )
15:24:19.0693 0x1b38  Detect skipped due to KSN trusted
15:24:19.0694 0x1b38  Fitbit Connect - ok
15:24:19.0700 0x1b38  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
15:24:19.0706 0x1b38  flpydisk - ok
15:24:19.0712 0x1b38  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
15:24:19.0720 0x1b38  FltMgr - ok
15:24:19.0738 0x1b38  [ D5A775990A7C202A037378FDBCDB6141, 27AD242914FAFB7A27B3045C0F0F6AFE6873FE331A51D8BB29A63B5D84C72EFB ] FontCache       C:\Windows\system32\FntCache.dll
15:24:19.0759 0x1b38  FontCache - ok
15:24:19.0763 0x1b38  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:24:19.0768 0x1b38  FontCache3.0.0.0 - ok
15:24:19.0771 0x1b38  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
15:24:19.0776 0x1b38  FsDepends - ok
15:24:19.0778 0x1b38  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
15:24:19.0783 0x1b38  Fs_Rec - ok
15:24:19.0788 0x1b38  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
15:24:19.0797 0x1b38  fvevol - ok
15:24:19.0800 0x1b38  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
15:24:19.0806 0x1b38  gagp30kx - ok
15:24:19.0808 0x1b38  gdrv - ok
15:24:19.0811 0x1b38  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
15:24:19.0815 0x1b38  GEARAspiWDM - ok
15:24:19.0827 0x1b38  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
15:24:19.0854 0x1b38  gpsvc - ok
15:24:19.0859 0x1b38  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:24:19.0864 0x1b38  gupdate - ok
15:24:19.0868 0x1b38  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:24:19.0873 0x1b38  gupdatem - ok
15:24:19.0875 0x1b38  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
15:24:19.0881 0x1b38  hcw85cir - ok
15:24:19.0888 0x1b38  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:24:19.0899 0x1b38  HdAudAddService - ok
15:24:19.0903 0x1b38  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
15:24:19.0911 0x1b38  HDAudBus - ok
15:24:19.0913 0x1b38  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
15:24:19.0919 0x1b38  HidBatt - ok
15:24:19.0922 0x1b38  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
15:24:19.0930 0x1b38  HidBth - ok
15:24:19.0932 0x1b38  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
15:24:19.0939 0x1b38  HidIr - ok
15:24:19.0941 0x1b38  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
15:24:19.0959 0x1b38  hidserv - ok
15:24:19.0961 0x1b38  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
15:24:19.0966 0x1b38  HidUsb - ok
15:24:19.0969 0x1b38  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
15:24:19.0987 0x1b38  hkmsvc - ok
15:24:19.0992 0x1b38  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:24:20.0001 0x1b38  HomeGroupListener - ok
15:24:20.0005 0x1b38  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:24:20.0013 0x1b38  HomeGroupProvider - ok
15:24:20.0016 0x1b38  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
15:24:20.0022 0x1b38  HpSAMD - ok
15:24:20.0033 0x1b38  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
15:24:20.0048 0x1b38  HTTP - ok
15:24:20.0051 0x1b38  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
15:24:20.0056 0x1b38  hwpolicy - ok
15:24:20.0059 0x1b38  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
15:24:20.0065 0x1b38  i8042prt - ok
15:24:20.0076 0x1b38  [ 6655615C7E4E29E6481F75A93ED99954, C7387D85DEC6BEF74DAD3B36398D1DA8914E9CF6F460D36E30088E3F6754E972 ] iaStorA         C:\Windows\system32\DRIVERS\iaStorA.sys
15:24:20.0090 0x1b38  iaStorA - ok
15:24:20.0093 0x1b38  [ F35FBCEB1B71BC20BBAFA526E203D6A1, F389B689B5DF0D204E3EA21B7201A89D29DE518716781BB390AC6E5CED64C790 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
15:24:20.0098 0x1b38  IAStorDataMgrSvc - ok
15:24:20.0100 0x1b38  [ ABE52EF9AF37C8D4FC67FDB9BE368142, 75B2787A0E45ED4801530D13381E596D1DB635D0A9C3FDFAB3951063048A5ECF ] iaStorF         C:\Windows\system32\DRIVERS\iaStorF.sys
15:24:20.0104 0x1b38  iaStorF - ok
15:24:20.0111 0x1b38  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
15:24:20.0122 0x1b38  iaStorV - ok
15:24:20.0136 0x1b38  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:24:20.0152 0x1b38  idsvc - ok
15:24:20.0155 0x1b38  IEEtwCollectorService - ok
15:24:20.0157 0x1b38  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
15:24:20.0163 0x1b38  iirsp - ok
15:24:20.0178 0x1b38  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
15:24:20.0195 0x1b38  IKEEXT - ok
15:24:20.0252 0x1b38  [ 067D63BC5A114FF0C4EF3404F0134625, F6CE79F0015F19B1B346815F769758F5FF6DCA663626DCE352682D93763CFFC0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
15:24:20.0308 0x1b38  IntcAzAudAddService - ok
15:24:20.0318 0x1b38  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
15:24:20.0323 0x1b38  intelide - ok
15:24:20.0326 0x1b38  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
15:24:20.0333 0x1b38  intelppm - ok
15:24:20.0336 0x1b38  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
15:24:20.0355 0x1b38  IPBusEnum - ok
15:24:20.0358 0x1b38  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:24:20.0377 0x1b38  IpFilterDriver - ok
15:24:20.0386 0x1b38  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
15:24:20.0400 0x1b38  iphlpsvc - ok
15:24:20.0403 0x1b38  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
15:24:20.0410 0x1b38  IPMIDRV - ok
15:24:20.0413 0x1b38  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
15:24:20.0432 0x1b38  IPNAT - ok
15:24:20.0443 0x1b38  [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
15:24:20.0456 0x1b38  iPod Service - ok
15:24:20.0459 0x1b38  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
15:24:20.0468 0x1b38  IRENUM - ok
15:24:20.0470 0x1b38  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
15:24:20.0475 0x1b38  isapnp - ok
15:24:20.0481 0x1b38  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
15:24:20.0490 0x1b38  iScsiPrt - ok
15:24:20.0492 0x1b38  [ 45392E76EE30DC9C8F0181C785F0BA48, 7FB522E1AA9B877B9FB1A29C2ADC42EA794E8864AD2411AD275F00F00547F8F3 ] iusb3hcs        C:\Windows\system32\drivers\iusb3hcs.sys
15:24:20.0498 0x1b38  iusb3hcs - ok
15:24:20.0505 0x1b38  [ C6E8FB7FF41877378CCB30DE6E9941DF, CA808A00C0CC21C1C7BE54F0D1E5D3F24C0032BE821C064E0A63901F20F3C6BC ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
15:24:20.0515 0x1b38  iusb3hub - ok
15:24:20.0528 0x1b38  [ 6FBA980433B2B21604CE990FBF542D3F, ACB35A5558DD9EF9A339C9D061207AF5527D3AEFC9AC99AB6CFBA1CE92F8B62D ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
15:24:20.0543 0x1b38  iusb3xhc - ok
15:24:20.0546 0x1b38  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
15:24:20.0552 0x1b38  kbdclass - ok
15:24:20.0555 0x1b38  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
15:24:20.0561 0x1b38  kbdhid - ok
15:24:20.0563 0x1b38  [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] KeyIso          C:\Windows\system32\lsass.exe
15:24:20.0569 0x1b38  KeyIso - ok
15:24:20.0572 0x1b38  [ A405647429DE231CD954D93F792CFBA2, EDE6095A20FE10EB26B3018457A44807A120508E6C514F2EAC12F5BA1F74841E ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
15:24:20.0579 0x1b38  KSecDD - ok
15:24:20.0583 0x1b38  [ E4DC0909B5EACB5BF50F6252095BCFF2, 18779648B7FD9D3DFFD8F314E2197962DF98884CC9F025BC5D884984C1C0759D ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
15:24:20.0590 0x1b38  KSecPkg - ok
15:24:20.0592 0x1b38  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
15:24:20.0610 0x1b38  ksthunk - ok
15:24:20.0618 0x1b38  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
15:24:20.0640 0x1b38  KtmRm - ok
15:24:20.0646 0x1b38  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
15:24:20.0667 0x1b38  LanmanServer - ok
15:24:20.0670 0x1b38  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:24:20.0690 0x1b38  LanmanWorkstation - ok
15:24:20.0693 0x1b38  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
15:24:20.0711 0x1b38  lltdio - ok
15:24:20.0718 0x1b38  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
15:24:20.0740 0x1b38  lltdsvc - ok
15:24:20.0742 0x1b38  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
15:24:20.0760 0x1b38  lmhosts - ok
15:24:20.0764 0x1b38  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
15:24:20.0771 0x1b38  LSI_FC - ok
15:24:20.0774 0x1b38  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
15:24:20.0780 0x1b38  LSI_SAS - ok
15:24:20.0783 0x1b38  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
15:24:20.0788 0x1b38  LSI_SAS2 - ok
15:24:20.0791 0x1b38  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
15:24:20.0798 0x1b38  LSI_SCSI - ok
15:24:20.0801 0x1b38  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
15:24:20.0820 0x1b38  luafv - ok
15:24:20.0823 0x1b38  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
15:24:20.0831 0x1b38  Mcx2Svc - ok
15:24:20.0833 0x1b38  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
15:24:20.0838 0x1b38  megasas - ok
15:24:20.0844 0x1b38  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
15:24:20.0852 0x1b38  MegaSR - ok
15:24:20.0856 0x1b38  [ 8751062F2F7EC78DE92D778A08099DDE, F10BE771FF9E02A51CF3A167BB967167DE4F66647D7F1508CB27D8FDD8623700 ] MEIx64          C:\Windows\system32\DRIVERS\TeeDriverx64.sys
15:24:20.0863 0x1b38  MEIx64 - ok
15:24:20.0866 0x1b38  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
15:24:20.0885 0x1b38  MMCSS - ok
15:24:20.0887 0x1b38  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
15:24:20.0904 0x1b38  Modem - ok
15:24:20.0907 0x1b38  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
15:24:20.0914 0x1b38  monitor - ok
15:24:20.0917 0x1b38  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
15:24:20.0922 0x1b38  mouclass - ok
15:24:20.0924 0x1b38  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
15:24:20.0930 0x1b38  mouhid - ok
15:24:20.0933 0x1b38  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
15:24:20.0940 0x1b38  mountmgr - ok
15:24:20.0944 0x1b38  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
15:24:20.0951 0x1b38  mpio - ok
15:24:20.0953 0x1b38  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
15:24:20.0971 0x1b38  mpsdrv - ok
15:24:20.0984 0x1b38  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
15:24:21.0012 0x1b38  MpsSvc - ok
15:24:21.0017 0x1b38  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
15:24:21.0024 0x1b38  MRxDAV - ok
15:24:21.0028 0x1b38  [ 43E1F4B0EFDC244D2A83995CCD7846F7, B8FB3CB6C736E20399AF3164197B14E977DDEC8FD164564501A328A8A3A30267 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
15:24:21.0036 0x1b38  mrxsmb - ok
15:24:21.0042 0x1b38  [ 62CEA59FF56B66154E08BD51D87392C2, 5DC63583E417659139FACD2365C2F8F3C9867E331F7374BD4F6C6E2386B5F746 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:24:21.0052 0x1b38  mrxsmb10 - ok
15:24:21.0055 0x1b38  [ 7D65B5E9573A26C204AA547457DBF544, CE88A733D031DEDBA6ADADB7D9911B3D151A2DDB566A65E0C9E1F07B1A4364AF ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:24:21.0063 0x1b38  mrxsmb20 - ok
15:24:21.0065 0x1b38  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
15:24:21.0071 0x1b38  msahci - ok
15:24:21.0074 0x1b38  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
15:24:21.0081 0x1b38  msdsm - ok
15:24:21.0087 0x1b38  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
15:24:21.0095 0x1b38  MSDTC - ok
15:24:21.0098 0x1b38  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
15:24:21.0116 0x1b38  Msfs - ok
15:24:21.0118 0x1b38  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
15:24:21.0136 0x1b38  mshidkmdf - ok
15:24:21.0138 0x1b38  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
15:24:21.0143 0x1b38  msisadrv - ok
15:24:21.0147 0x1b38  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
15:24:21.0165 0x1b38  MSiSCSI - ok
15:24:21.0167 0x1b38  msiserver - ok
15:24:21.0169 0x1b38  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
15:24:21.0186 0x1b38  MSKSSRV - ok
15:24:21.0188 0x1b38  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
15:24:21.0205 0x1b38  MSPCLOCK - ok
15:24:21.0206 0x1b38  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
15:24:21.0223 0x1b38  MSPQM - ok
15:24:21.0230 0x1b38  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
15:24:21.0240 0x1b38  MsRPC - ok
15:24:21.0243 0x1b38  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
15:24:21.0249 0x1b38  mssmbios - ok
15:24:21.0251 0x1b38  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
15:24:21.0268 0x1b38  MSTEE - ok
15:24:21.0270 0x1b38  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
15:24:21.0276 0x1b38  MTConfig - ok
15:24:21.0278 0x1b38  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
15:24:21.0284 0x1b38  Mup - ok
15:24:21.0292 0x1b38  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
15:24:21.0314 0x1b38  napagent - ok
15:24:21.0321 0x1b38  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
15:24:21.0333 0x1b38  NativeWifiP - ok
15:24:21.0349 0x1b38  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
15:24:21.0367 0x1b38  NDIS - ok
15:24:21.0370 0x1b38  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
15:24:21.0387 0x1b38  NdisCap - ok
15:24:21.0390 0x1b38  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
15:24:21.0408 0x1b38  NdisTapi - ok
15:24:21.0410 0x1b38  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
15:24:21.0428 0x1b38  Ndisuio - ok
15:24:21.0433 0x1b38  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
15:24:21.0452 0x1b38  NdisWan - ok
15:24:21.0455 0x1b38  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
15:24:21.0473 0x1b38  NDProxy - ok
15:24:21.0475 0x1b38  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl64.sys
15:24:21.0480 0x1b38  Netaapl - ok
15:24:21.0483 0x1b38  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
15:24:21.0501 0x1b38  NetBIOS - ok
15:24:21.0507 0x1b38  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
15:24:21.0528 0x1b38  NetBT - ok
15:24:21.0530 0x1b38  [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] Netlogon        C:\Windows\system32\lsass.exe
15:24:21.0536 0x1b38  Netlogon - ok
15:24:21.0543 0x1b38  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
15:24:21.0566 0x1b38  Netman - ok
15:24:21.0575 0x1b38  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:24:21.0583 0x1b38  NetMsmqActivator - ok
15:24:21.0586 0x1b38  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:24:21.0594 0x1b38  NetPipeActivator - ok
15:24:21.0602 0x1b38  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
15:24:21.0627 0x1b38  netprofm - ok
15:24:21.0631 0x1b38  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:24:21.0639 0x1b38  NetTcpActivator - ok
15:24:21.0642 0x1b38  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:24:21.0650 0x1b38  NetTcpPortSharing - ok
15:24:21.0653 0x1b38  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
15:24:21.0658 0x1b38  nfrd960 - ok
15:24:21.0664 0x1b38  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
15:24:21.0674 0x1b38  NlaSvc - ok
15:24:21.0697 0x1b38  [ 109338286793775088CB5A3A13C874DB, BAB7187980B7783618CBE721F71052C1A1C70DC7ADCF126ACDBE480D75393648 ] NPF             C:\Windows\syswow64\drivers\aztech_npf64.sys
15:24:21.0703 0x1b38  NPF - ok
15:24:21.0706 0x1b38  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
15:24:21.0724 0x1b38  Npfs - ok
15:24:21.0727 0x1b38  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
15:24:21.0745 0x1b38  nsi - ok
15:24:21.0747 0x1b38  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
15:24:21.0765 0x1b38  nsiproxy - ok
15:24:21.0791 0x1b38  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
15:24:21.0822 0x1b38  Ntfs - ok
15:24:21.0825 0x1b38  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
15:24:21.0842 0x1b38  Null - ok
15:24:21.0846 0x1b38  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
15:24:21.0853 0x1b38  nvraid - ok
15:24:21.0857 0x1b38  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
15:24:21.0864 0x1b38  nvstor - ok
15:24:21.0868 0x1b38  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
15:24:21.0875 0x1b38  nv_agp - ok
15:24:21.0877 0x1b38  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
15:24:21.0883 0x1b38  ohci1394 - ok
15:24:21.0913 0x1b38  [ 4F9FFCF12B6ED0B4DAC95427772C226E, 4A79AEC410ED1034366FAC1388FB29381EE6541AA17E3652BE86265D09541C56 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
15:24:21.0945 0x1b38  Origin Client Service - ok
15:24:21.0957 0x1b38  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
15:24:21.0967 0x1b38  p2pimsvc - ok
15:24:21.0974 0x1b38  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
15:24:21.0986 0x1b38  p2psvc - ok
15:24:21.0988 0x1b38  PAExec - ok
15:24:21.0991 0x1b38  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
15:24:21.0998 0x1b38  Parport - ok
15:24:22.0001 0x1b38  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
15:24:22.0007 0x1b38  partmgr - ok
15:24:22.0011 0x1b38  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
15:24:22.0019 0x1b38  PcaSvc - ok
15:24:22.0023 0x1b38  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
15:24:22.0031 0x1b38  pci - ok
15:24:22.0033 0x1b38  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
15:24:22.0037 0x1b38  pciide - ok
15:24:22.0042 0x1b38  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
15:24:22.0049 0x1b38  pcmcia - ok
15:24:22.0051 0x1b38  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
15:24:22.0057 0x1b38  pcw - ok
15:24:22.0067 0x1b38  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
15:24:22.0082 0x1b38  PEAUTH - ok
15:24:22.0085 0x1b38  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
15:24:22.0091 0x1b38  PerfHost - ok
15:24:22.0114 0x1b38  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
15:24:22.0148 0x1b38  pla - ok
15:24:22.0160 0x1b38  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
15:24:22.0170 0x1b38  PlugPlay - ok
15:24:22.0173 0x1b38  [ CD421DDB5C6E5458CE52EDC36DE7DC5B, 7B9C0A8B2B86BBF5D7E02F2620B0015A2530CBBC99724BE20313DE53EB31D62E ] PnkBstrA        C:\Windows\system32\PnkBstrA.exe
15:24:22.0179 0x1b38  PnkBstrA - ok
15:24:22.0181 0x1b38  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
15:24:22.0187 0x1b38  PNRPAutoReg - ok
15:24:22.0193 0x1b38  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
15:24:22.0202 0x1b38  PNRPsvc - ok
15:24:22.0211 0x1b38  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
15:24:22.0235 0x1b38  PolicyAgent - ok
15:24:22.0240 0x1b38  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
15:24:22.0260 0x1b38  Power - ok
15:24:22.0263 0x1b38  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
15:24:22.0281 0x1b38  PptpMiniport - ok
15:24:22.0284 0x1b38  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
15:24:22.0290 0x1b38  Processor - ok
15:24:22.0295 0x1b38  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
15:24:22.0303 0x1b38  ProfSvc - ok
15:24:22.0305 0x1b38  [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] ProtectedStorage C:\Windows\system32\lsass.exe
15:24:22.0312 0x1b38  ProtectedStorage - ok
15:24:22.0315 0x1b38  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
15:24:22.0333 0x1b38  Psched - ok
15:24:22.0356 0x1b38  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
15:24:22.0382 0x1b38  ql2300 - ok
15:24:22.0386 0x1b38  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
15:24:22.0393 0x1b38  ql40xx - ok
15:24:22.0398 0x1b38  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
15:24:22.0410 0x1b38  QWAVE - ok
15:24:22.0412 0x1b38  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
15:24:22.0421 0x1b38  QWAVEdrv - ok
15:24:22.0423 0x1b38  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
15:24:22.0441 0x1b38  RasAcd - ok
15:24:22.0444 0x1b38  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
15:24:22.0462 0x1b38  RasAgileVpn - ok
15:24:22.0465 0x1b38  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
15:24:22.0483 0x1b38  RasAuto - ok
15:24:22.0487 0x1b38  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
15:24:22.0505 0x1b38  Rasl2tp - ok
15:24:22.0511 0x1b38  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
15:24:22.0533 0x1b38  RasMan - ok
15:24:22.0536 0x1b38  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
15:24:22.0554 0x1b38  RasPppoe - ok
15:24:22.0557 0x1b38  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
15:24:22.0576 0x1b38  RasSstp - ok
15:24:22.0581 0x1b38  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
15:24:22.0602 0x1b38  rdbss - ok
15:24:22.0604 0x1b38  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
15:24:22.0611 0x1b38  rdpbus - ok
15:24:22.0613 0x1b38  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
15:24:22.0631 0x1b38  RDPCDD - ok
15:24:22.0634 0x1b38  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
15:24:22.0651 0x1b38  RDPENCDD - ok
15:24:22.0653 0x1b38  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
15:24:22.0670 0x1b38  RDPREFMP - ok
15:24:22.0675 0x1b38  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
15:24:22.0684 0x1b38  RDPWD - ok
15:24:22.0688 0x1b38  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
15:24:22.0696 0x1b38  rdyboost - ok
15:24:22.0700 0x1b38  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
15:24:22.0719 0x1b38  RemoteAccess - ok
15:24:22.0723 0x1b38  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
15:24:22.0743 0x1b38  RemoteRegistry - ok
15:24:22.0746 0x1b38  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
15:24:22.0764 0x1b38  RpcEptMapper - ok
15:24:22.0766 0x1b38  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
15:24:22.0773 0x1b38  RpcLocator - ok
15:24:22.0781 0x1b38  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
15:24:22.0805 0x1b38  RpcSs - ok
15:24:22.0808 0x1b38  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
15:24:22.0826 0x1b38  rspndr - ok
15:24:22.0841 0x1b38  [ D787F86566F6EA23053D9C5F401E33B7, 82B1952A57FB800425E12FEFF5B326C7B7815980646F5359673CBC8BBB4C46CF ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
15:24:22.0857 0x1b38  RTL8167 - ok
15:24:22.0860 0x1b38  [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] SamSs           C:\Windows\system32\lsass.exe
15:24:22.0866 0x1b38  SamSs - ok
15:24:22.0869 0x1b38  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
15:24:22.0875 0x1b38  sbp2port - ok
15:24:22.0880 0x1b38  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
15:24:22.0900 0x1b38  SCardSvr - ok
15:24:22.0903 0x1b38  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
15:24:22.0920 0x1b38  scfilter - ok
15:24:22.0936 0x1b38  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
15:24:22.0958 0x1b38  Schedule - ok
15:24:22.0962 0x1b38  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
15:24:22.0980 0x1b38  SCPolicySvc - ok
15:24:22.0982 0x1b38  [ AD7189E85A0801DE0507C610963A3CD0, 0AA9F3C9D252624CC62EC95FD910C6911E136DD3E66159CEB9857BC7AB70FAA2 ] ScpVBus         C:\Windows\system32\DRIVERS\ScpVBus.sys
15:24:22.0988 0x1b38  ScpVBus - ok
15:24:22.0992 0x1b38  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
15:24:23.0000 0x1b38  SDRSVC - ok
15:24:23.0002 0x1b38  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
15:24:23.0008 0x1b38  secdrv - ok
15:24:23.0011 0x1b38  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
15:24:23.0028 0x1b38  seclogon - ok
15:24:23.0031 0x1b38  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
15:24:23.0050 0x1b38  SENS - ok
15:24:23.0052 0x1b38  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
15:24:23.0059 0x1b38  SensrSvc - ok
15:24:23.0061 0x1b38  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
15:24:23.0067 0x1b38  Serenum - ok
15:24:23.0069 0x1b38  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
15:24:23.0076 0x1b38  Serial - ok
15:24:23.0078 0x1b38  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
15:24:23.0084 0x1b38  sermouse - ok
15:24:23.0096 0x1b38  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
15:24:23.0114 0x1b38  SessionEnv - ok
15:24:23.0117 0x1b38  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
15:24:23.0123 0x1b38  sffdisk - ok
15:24:23.0125 0x1b38  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
15:24:23.0132 0x1b38  sffp_mmc - ok
15:24:23.0134 0x1b38  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
15:24:23.0141 0x1b38  sffp_sd - ok
15:24:23.0143 0x1b38  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
15:24:23.0148 0x1b38  sfloppy - ok
15:24:23.0155 0x1b38  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
15:24:23.0176 0x1b38  SharedAccess - ok
15:24:23.0183 0x1b38  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:24:23.0205 0x1b38  ShellHWDetection - ok
15:24:23.0208 0x1b38  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
15:24:23.0213 0x1b38  SiSRaid2 - ok
15:24:23.0216 0x1b38  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
15:24:23.0221 0x1b38  SiSRaid4 - ok
15:24:23.0228 0x1b38  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
15:24:23.0238 0x1b38  SkypeUpdate - ok
15:24:23.0241 0x1b38  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
15:24:23.0259 0x1b38  Smb - ok
15:24:23.0262 0x1b38  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
15:24:23.0269 0x1b38  SNMPTRAP - ok
15:24:23.0271 0x1b38  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
15:24:23.0277 0x1b38  spldr - ok
15:24:23.0286 0x1b38  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
15:24:23.0300 0x1b38  Spooler - ok
15:24:23.0350 0x1b38  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
15:24:23.0412 0x1b38  sppsvc - ok
15:24:23.0421 0x1b38  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
15:24:23.0439 0x1b38  sppuinotify - ok
15:24:23.0448 0x1b38  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
15:24:23.0459 0x1b38  srv - ok
15:24:23.0466 0x1b38  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
15:24:23.0476 0x1b38  srv2 - ok
15:24:23.0480 0x1b38  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
15:24:23.0487 0x1b38  srvnet - ok
15:24:23.0492 0x1b38  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
15:24:23.0511 0x1b38  SSDPSRV - ok
15:24:23.0514 0x1b38  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
15:24:23.0532 0x1b38  SstpSvc - ok
15:24:23.0546 0x1b38  [ 2A6EDC2FBB4B9C11BB21BE3881C7A692, 74482CA4EC2B98C069A32C224BA5449AE10A8B41BFC053A4C23B6F65113A97A4 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
15:24:23.0560 0x1b38  Steam Client Service - ok
15:24:23.0563 0x1b38  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
15:24:23.0568 0x1b38  stexstor - ok
15:24:23.0578 0x1b38  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
15:24:23.0593 0x1b38  stisvc - ok
15:24:23.0596 0x1b38  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
15:24:23.0601 0x1b38  swenum - ok
15:24:23.0609 0x1b38  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
15:24:23.0633 0x1b38  swprv - ok
15:24:23.0659 0x1b38  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll
15:24:23.0688 0x1b38  SysMain - ok
15:24:23.0695 0x1b38  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:24:23.0705 0x1b38  TabletInputService - ok
15:24:23.0711 0x1b38  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
15:24:23.0731 0x1b38  TapiSrv - ok
15:24:23.0734 0x1b38  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
15:24:23.0752 0x1b38  TBS - ok
15:24:23.0780 0x1b38  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
15:24:23.0809 0x1b38  Tcpip - ok
15:24:23.0841 0x1b38  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
15:24:23.0870 0x1b38  TCPIP6 - ok
15:24:23.0878 0x1b38  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
15:24:23.0885 0x1b38  tcpipreg - ok
15:24:23.0888 0x1b38  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
15:24:23.0893 0x1b38  TDPIPE - ok
15:24:23.0895 0x1b38  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
15:24:23.0900 0x1b38  TDTCP - ok
15:24:23.0903 0x1b38  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
15:24:23.0910 0x1b38  tdx - ok
15:24:23.0959 0x1b38  [ 9F3E7CABE86BBDECA009DE291DB6D9E2, C85176BA98382C82178D682C5F91B5590201BF8C7335DF7ABCAB469367701106 ] TeamViewer8     C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
15:24:24.0009 0x1b38  TeamViewer8 - ok
15:24:24.0018 0x1b38  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
15:24:24.0024 0x1b38  TermDD - ok
15:24:24.0035 0x1b38  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
15:24:24.0050 0x1b38  TermService - ok
15:24:24.0052 0x1b38  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
15:24:24.0061 0x1b38  Themes - ok
15:24:24.0064 0x1b38  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
15:24:24.0082 0x1b38  THREADORDER - ok
15:24:24.0085 0x1b38  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
15:24:24.0104 0x1b38  TrkWks - ok
15:24:24.0108 0x1b38  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:24:24.0126 0x1b38  TrustedInstaller - ok
15:24:24.0130 0x1b38  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
15:24:24.0135 0x1b38  tssecsrv - ok
15:24:24.0138 0x1b38  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
15:24:24.0144 0x1b38  TsUsbFlt - ok
15:24:24.0146 0x1b38  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
15:24:24.0151 0x1b38  TsUsbGD - ok
15:24:24.0154 0x1b38  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
15:24:24.0172 0x1b38  tunnel - ok
15:24:24.0174 0x1b38  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
15:24:24.0180 0x1b38  uagp35 - ok
15:24:24.0187 0x1b38  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
15:24:24.0207 0x1b38  udfs - ok
15:24:24.0211 0x1b38  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
15:24:24.0218 0x1b38  UI0Detect - ok
15:24:24.0221 0x1b38  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
15:24:24.0227 0x1b38  uliagpkx - ok
15:24:24.0230 0x1b38  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
15:24:24.0236 0x1b38  umbus - ok
15:24:24.0238 0x1b38  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
15:24:24.0244 0x1b38  UmPass - ok
15:24:24.0250 0x1b38  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
15:24:24.0272 0x1b38  upnphost - ok
15:24:24.0275 0x1b38  [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
15:24:24.0282 0x1b38  USBAAPL64 - ok
15:24:24.0285 0x1b38  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
15:24:24.0292 0x1b38  usbaudio - ok
15:24:24.0295 0x1b38  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
15:24:24.0302 0x1b38  usbccgp - ok
15:24:24.0305 0x1b38  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
15:24:24.0312 0x1b38  usbcir - ok
15:24:24.0314 0x1b38  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
15:24:24.0320 0x1b38  usbehci - ok
15:24:24.0326 0x1b38  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
15:24:24.0336 0x1b38  usbhub - ok
15:24:24.0339 0x1b38  [ 58E546BBAF87664FC57E0F6081E4F609, 1DD99D57369A0069654432AB5325AFD8F7D422D531E053EA05FF664BA6BDAEF9 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
15:24:24.0345 0x1b38  usbohci - ok
15:24:24.0347 0x1b38  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
15:24:24.0354 0x1b38  usbprint - ok
15:24:24.0357 0x1b38  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:24:24.0363 0x1b38  USBSTOR - ok
15:24:24.0365 0x1b38  [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
15:24:24.0371 0x1b38  usbuhci - ok
15:24:24.0373 0x1b38  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
15:24:24.0391 0x1b38  UxSms - ok
15:24:24.0393 0x1b38  [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] VaultSvc        C:\Windows\system32\lsass.exe
15:24:24.0399 0x1b38  VaultSvc - ok
15:24:24.0401 0x1b38  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
15:24:24.0406 0x1b38  vdrvroot - ok
15:24:24.0415 0x1b38  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
15:24:24.0438 0x1b38  vds - ok
15:24:24.0441 0x1b38  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
15:24:24.0448 0x1b38  vga - ok
15:24:24.0450 0x1b38  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
15:24:24.0467 0x1b38  VgaSave - ok
15:24:24.0471 0x1b38  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
15:24:24.0479 0x1b38  vhdmp - ok
15:24:24.0481 0x1b38  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
15:24:24.0486 0x1b38  viaide - ok
15:24:24.0488 0x1b38  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
15:24:24.0494 0x1b38  volmgr - ok
15:24:24.0501 0x1b38  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
15:24:24.0510 0x1b38  volmgrx - ok
15:24:24.0516 0x1b38  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
15:24:24.0524 0x1b38  volsnap - ok
15:24:24.0529 0x1b38  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
15:24:24.0535 0x1b38  vsmraid - ok
15:24:24.0558 0x1b38  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
15:24:24.0596 0x1b38  VSS - ok
15:24:24.0603 0x1b38  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
15:24:24.0610 0x1b38  vwifibus - ok
15:24:24.0617 0x1b38  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
15:24:24.0639 0x1b38  W32Time - ok
15:24:24.0643 0x1b38  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
15:24:24.0649 0x1b38  WacomPen - ok
15:24:24.0652 0x1b38  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
15:24:24.0670 0x1b38  WANARP - ok
15:24:24.0672 0x1b38  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
15:24:24.0689 0x1b38  Wanarpv6 - ok
15:24:24.0711 0x1b38  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
15:24:24.0736 0x1b38  wbengine - ok
15:24:24.0742 0x1b38  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
15:24:24.0752 0x1b38  WbioSrvc - ok
15:24:24.0759 0x1b38  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
15:24:24.0772 0x1b38  wcncsvc - ok
15:24:24.0774 0x1b38  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:24:24.0781 0x1b38  WcsPlugInService - ok
15:24:24.0783 0x1b38  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
15:24:24.0788 0x1b38  Wd - ok
15:24:24.0800 0x1b38  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
15:24:24.0816 0x1b38  Wdf01000 - ok
15:24:24.0819 0x1b38  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
15:24:24.0826 0x1b38  WdiServiceHost - ok
15:24:24.0829 0x1b38  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
15:24:24.0835 0x1b38  WdiSystemHost - ok
15:24:24.0840 0x1b38  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll
15:24:24.0849 0x1b38  WebClient - ok
15:24:24.0855 0x1b38  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
15:24:24.0874 0x1b38  Wecsvc - ok
15:24:24.0878 0x1b38  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
15:24:24.0896 0x1b38  wercplsupport - ok
15:24:24.0899 0x1b38  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
15:24:24.0917 0x1b38  WerSvc - ok
15:24:24.0919 0x1b38  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
15:24:24.0936 0x1b38  WfpLwf - ok
15:24:24.0938 0x1b38  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
15:24:24.0944 0x1b38  WIMMount - ok
15:24:24.0945 0x1b38  WinDefend - ok
15:24:24.0948 0x1b38  WinHttpAutoProxySvc - ok
15:24:24.0955 0x1b38  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
15:24:24.0976 0x1b38  Winmgmt - ok
15:24:25.0004 0x1b38  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
15:24:25.0037 0x1b38  WinRM - ok
15:24:25.0046 0x1b38  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
15:24:25.0053 0x1b38  WinUsb - ok
15:24:25.0066 0x1b38  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
15:24:25.0086 0x1b38  Wlansvc - ok
15:24:25.0129 0x1b38  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:24:25.0162 0x1b38  wlidsvc - ok
15:24:25.0169 0x1b38  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
15:24:25.0175 0x1b38  WmiAcpi - ok
15:24:25.0180 0x1b38  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
15:24:25.0188 0x1b38  wmiApSrv - ok
15:24:25.0190 0x1b38  WMPNetworkSvc - ok
15:24:25.0192 0x1b38  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
15:24:25.0198 0x1b38  WPCSvc - ok
15:24:25.0201 0x1b38  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
15:24:25.0209 0x1b38  WPDBusEnum - ok
15:24:25.0211 0x1b38  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
15:24:25.0227 0x1b38  ws2ifsl - ok
15:24:25.0231 0x1b38  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
15:24:25.0240 0x1b38  wscsvc - ok
15:24:25.0242 0x1b38  WSearch - ok
15:24:25.0280 0x1b38  [ 39D604E190DFE2E483B637D6796ABAFF, 52DCCEA0DB59F00C615D94CC2B70FC1C335E553E8FC79AAC8C8C7D9EE1F6111D ] wuauserv        C:\Windows\system32\wuaueng.dll
15:24:25.0319 0x1b38  wuauserv - ok
15:24:25.0328 0x1b38  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
15:24:25.0334 0x1b38  WudfPf - ok
15:24:25.0339 0x1b38  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
15:24:25.0347 0x1b38  WUDFRd - ok
15:24:25.0350 0x1b38  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
15:24:25.0357 0x1b38  wudfsvc - ok
15:24:25.0363 0x1b38  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
15:24:25.0372 0x1b38  WwanSvc - ok
15:24:25.0376 0x1b38  [ 2C6BC21B2D5B58D8B1D638C1704CB494, 0AABCEB627E274E338DDD9BA664BAA128D7C00AF04C95C776C2AFFA6BB17F680 ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys
15:24:25.0381 0x1b38  xusb21 - ok
15:24:25.0383 0x1b38  ================ Scan global ===============================
15:24:25.0384 0x1b38  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
15:24:25.0389 0x1b38  [ 8927015C999D55D9B4AC66000EE5343D, 2AC4896880BAD44192822063A31785F4A716D992201B3E6A590A2D75D9729A4A ] C:\Windows\system32\winsrv.dll
15:24:25.0396 0x1b38  [ 8927015C999D55D9B4AC66000EE5343D, 2AC4896880BAD44192822063A31785F4A716D992201B3E6A590A2D75D9729A4A ] C:\Windows\system32\winsrv.dll
15:24:25.0401 0x1b38  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
15:24:25.0407 0x1b38  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
15:24:25.0412 0x1b38  [ Global ] - ok
15:24:25.0412 0x1b38  ================ Scan MBR ==================================
15:24:25.0413 0x1b38  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:24:25.0480 0x1b38  \Device\Harddisk0\DR0 - ok
15:24:25.0481 0x1b38  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
15:24:25.0535 0x1b38  \Device\Harddisk1\DR1 - ok
15:24:25.0536 0x1b38  ================ Scan VBR ==================================
15:24:25.0540 0x1b38  [ 2430FA62F1744F54F6A1FC06C5BE1AD2 ] \Device\Harddisk0\DR0\Partition1
15:24:25.0541 0x1b38  \Device\Harddisk0\DR0\Partition1 - ok
15:24:25.0542 0x1b38  [ 1A1D6CFF90DEEF202E4D9F21F116300D ] \Device\Harddisk0\DR0\Partition2
15:24:25.0543 0x1b38  \Device\Harddisk0\DR0\Partition2 - ok
15:24:25.0544 0x1b38  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1
15:24:25.0544 0x1b38  \Device\Harddisk1\DR1\Partition1 - ok
15:24:25.0546 0x1b38  [ 9F092995C0A482D9E8E96CC6E24EB646 ] \Device\Harddisk1\DR1\Partition2
15:24:25.0595 0x1b38  \Device\Harddisk1\DR1\Partition2 - ok
15:24:25.0595 0x1b38  ================ Scan generic autorun ======================
15:24:25.0786 0x1b38  [ 493ABE82E781DC998DCA299CE0CA9F50, 9FA0FBC03058802848B6D73B609C14C80F4764A79EB305D2CC0D76F3EDC88765 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
15:24:25.0992 0x1b38  RTHDVCPL - ok
15:24:26.0005 0x1b38  [ C9900177A954E22C84A696075A40A173, 33E32173FF811DF1B687916CB3CADAE2907DAF5AC4B80F559039D3B61553C48F ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
15:24:26.0012 0x1b38  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
15:24:28.0367 0x1b38  Detect skipped due to KSN trusted
15:24:28.0367 0x1b38  IAStorIcon - ok
15:24:28.0383 0x1b38  [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
15:24:28.0400 0x1b38  XboxStat - ok
15:24:28.0406 0x1b38  [ E4E7B29D050F5480071984FE6543C311, 9A4D8D1702AE74AB4FE4367EAF4AD6500F59D4F25B3CCACE3EF07613B7B5853C ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
15:24:28.0414 0x1b38  USB3MON - ok
15:24:28.0431 0x1b38  [ 27F8A7A78773427E5D931628F89D6839, 61A312590322109BEA9EA70345E6FB40435D9BACE2B9CFF3ADF68C7B3D6FA163 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
15:24:28.0447 0x1b38  avgnt - ok
15:24:28.0452 0x1b38  [ 845EB283583BD3C89F09636A10114EF3, BCB3002B867052FB381B1E44D31E381200751E1AD3F991EB4233B73E3E034A0E ] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
15:24:28.0458 0x1b38  Avira Systray - ok
15:24:28.0461 0x1b38  [ C419DF63E0121D72411285780C2FC6CC, F47F854D327C589D174D3BB5B55D5C05F5ACA73DF52A6BEF47596B9010190291 ] C:\Windows\UpdReg.EXE
15:24:28.0465 0x1b38  UpdReg - detected UnsignedFile.Multi.Generic ( 1 )
15:24:30.0815 0x1b38  Detect skipped due to KSN trusted
15:24:30.0815 0x1b38  UpdReg - ok
15:24:30.0831 0x1b38  [ 7389FE13F97605BFC1C18E6073BD3BE2, 5EC5BDD2AEFBC40FB55CA9BD623DCD5A79028657E2555839D04F9859D36DF03D ] C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe
15:24:30.0845 0x1b38  Sound Blaster Z-Series Control Panel - detected UnsignedFile.Multi.Generic ( 1 )
15:24:33.0200 0x1b38  Detect skipped due to KSN trusted
15:24:33.0200 0x1b38  Sound Blaster Z-Series Control Panel - ok
15:24:33.0230 0x1b38  [ ECD70DC099936918D97DD18D26F48A3D, 19133E2A53B7BEA461966661136B274494BB238321A757201FD96B5748659BB6 ] C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
15:24:33.0260 0x1b38  ApnTBMon - ok
15:24:33.0323 0x1b38  [ 3B95D79E0342130CCC2704E0DC4CF306, A7D5D9485931FA2F1F9554E11453DF8EDEC54D445644C2184C1F34B5AE9CA01D ] C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe
15:24:33.0403 0x1b38  Fitbit Connect - detected UnsignedFile.Multi.Generic ( 1 )
15:24:35.0767 0x1b38  Detect skipped due to KSN trusted
15:24:35.0767 0x1b38  Fitbit Connect - ok
15:24:35.0775 0x1b38  [ 299EDE8BBC229B7FA0BC0369BAE8CA2E, 788C06C7EDDDC0687A4137BDA00D320146425768960066FCBE0391BE7DBC2280 ] C:\Program Files (x86)\Raptr\raptrstub.exe
15:24:35.0780 0x1b38  Raptr - ok
15:24:35.0784 0x1b38  [ 0EF0822810009D58118CCDFD098FA9F4, 9FAA263057898BCDBCB0A064C463F48D149474AA339A3C4C47626CC118750D2D ] C:\Program Files (x86)\iTunes\iTunesHelper.exe
15:24:35.0789 0x1b38  iTunesHelper - ok
15:24:35.0795 0x1b38  [ 4F9DD96AECDC12373D4203253D665C6D, 871FF2367ACD5F9A378FED53574BF28A8129224C4B7C4AF074809ED7CF870904 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
15:24:35.0804 0x1b38  SunJavaUpdateSched - ok
15:24:35.0811 0x1b38  [ 271B0D188430670509CB9943D5229205, 74CB5A9D8B5988AE08C0F65C601FC54F8745BAB6825B6FEEFBA8F068D656D8D7 ] C:\Program Files (x86)\QuickTime\QTTask.exe
15:24:35.0820 0x1b38  QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
15:24:38.0250 0x1b38  Detect skipped due to KSN trusted
15:24:38.0250 0x1b38  QuickTime Task - ok
15:24:38.0269 0x1b38  [ D5DDC3EC0BF960389E9A964D7CC8CC30, 02C06CF596B33B1883C371EA9B61B1EC41319EFF853A54864329129699534769 ] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe
15:24:38.0284 0x1b38  StartCCC - ok
15:24:38.0303 0x1b38  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:24:38.0325 0x1b38  Sidebar - ok
15:24:38.0329 0x1b38  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:24:38.0338 0x1b38  mctadmin - ok
15:24:38.0356 0x1b38  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:24:38.0376 0x1b38  Sidebar - ok
15:24:38.0380 0x1b38  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:24:38.0389 0x1b38  mctadmin - ok
15:24:38.0401 0x1b38  [ 83946783D86BEB7A898BC6B562F1F189, FD9CDC3DEDC132C6499257C4ADC089F1A550DFF968AB584813A5AB55523C03C0 ] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
15:24:38.0416 0x1b38  GoogleChromeAutoLaunch_2A449E69A85980F7931D61A86EB5A808 - ok
15:24:38.0477 0x1b38  [ 3B95D79E0342130CCC2704E0DC4CF306, A7D5D9485931FA2F1F9554E11453DF8EDEC54D445644C2184C1F34B5AE9CA01D ] C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe
15:24:38.0547 0x1b38  Fitbit Connect - detected UnsignedFile.Multi.Generic ( 1 )
15:24:38.0547 0x1b38  Detect skipped due to KSN trusted
15:24:38.0547 0x1b38  Fitbit Connect - ok
15:24:38.0601 0x1b38  [ A733475CBD8E68419DCA837BF8585BB7, D434273D35E63413617768B3DBA9F431630B3FDD5E97AE7874492625D1BDDCF6 ] C:\Program Files (x86)\Origin\Origin.exe
15:24:38.0658 0x1b38  EADM - ok
15:24:38.0673 0x1b38  [ 42CD0245D2BE7184E774BC89DAA4F6C2, EDF4942E9A27478241CB33ECC8F75239AD0E294D1CD2202DB9F707BD6873B2FC ] C:\Program Files (x86)\puush\puush.exe
15:24:38.0684 0x1b38  puush - ok
15:24:38.0715 0x1b38  [ DC6BA936E1DE11E648FB85A817C5182F, F1C27C08F84EEAC9DC5C26E57B9559F6006870E540CB2968494A3D34BAD109A7 ] C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe
15:24:38.0749 0x1b38  Spotify Web Helper - ok
15:24:38.0751 0x1b38  Skype - ok
15:24:38.0755 0x1b38  [ 406E7DF08CE79BE3016CC6D15E2ED956, 9DA8D10AE642B9411A3EB253F97918A6F470F1772F0057964267497CE0BDA53A ] C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe
15:24:38.0758 0x1b38  Dxtory Update Checker 2.0 - detected UnsignedFile.Multi.Generic ( 1 )
15:24:41.0116 0x1b38  Detect skipped due to KSN trusted
15:24:41.0116 0x1b38  Dxtory Update Checker 2.0 - ok
15:24:41.0116 0x1b38  Waiting for KSN requests completion. In queue: 9
15:24:42.0116 0x1b38  Waiting for KSN requests completion. In queue: 9
15:24:43.0116 0x1b38  Waiting for KSN requests completion. In queue: 9
15:24:44.0134 0x1b38  AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.12.420 ), 0x41000 ( enabled : updated )
15:24:44.0137 0x1b38  Win FW state via NFP2: enabled ( trusted )
15:24:46.0509 0x1b38  ============================================================
15:24:46.0509 0x1b38  Scan finished
15:24:46.0509 0x1b38  ============================================================
15:24:46.0513 0x1a38  Detected object count: 0
15:24:46.0513 0x1a38  Actual detected object count: 0

M-K-D-B · 19.09.2015, 15:33

Servus,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

AdmiralE · 19.09.2015, 16:20

Servus,
habe alles nach Anleitung gemacht. Am Ende kam das Problem ["Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde."], dies habe ich durch einen Neustart behoben. Hier der Log von Combofix:

Code:

ATTFilter

ComboFix 15-09-07.01 - 302- 19.09.2015  17:13:18.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.16287.13055 [GMT 2:00]
ausgeführt von:: c:\users\302-\Desktop\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Fitbit Connect\Fitbit Connect.exe
c:\users\302-\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\windows\SysWow64\DEBUG.log
c:\windows\SysWow64\tmpE262.tmp
c:\windows\SysWow64\tmpE263.tmp
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-08-19 bis 2015-09-19  ))))))))))))))))))))))))))))))
.
.
2015-09-19 15:15 . 2015-09-19 15:15	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-09-19 13:04 . 2015-09-19 13:05	--------	d-----w-	C:\FRST
2015-09-14 18:01 . 2015-09-14 18:01	--------	d-----w-	c:\users\302-\AppData\Local\webkit
2015-09-10 17:21 . 2015-09-10 17:21	--------	d-----w-	c:\windows\rescache
2015-09-09 21:34 . 2015-09-09 21:34	--------	d-----w-	c:\users\302-\AppData\Roaming\ATI
2015-09-09 21:34 . 2015-09-09 21:34	--------	d-----w-	c:\users\302-\AppData\Local\ATI
2015-09-09 21:34 . 2015-09-09 21:34	--------	d-----w-	c:\programdata\ATI
2015-09-09 21:33 . 2015-09-09 21:33	0	----a-w-	c:\windows\ativpsrm.bin
2015-09-09 21:33 . 2015-09-09 21:33	--------	d-----w-	c:\program files (x86)\Common Files\ATI Technologies
2015-09-09 21:32 . 2015-09-09 21:32	--------	d-----w-	c:\program files (x86)\AMD
2015-09-09 21:32 . 2015-09-09 21:32	--------	d-----w-	c:\program files\Common Files\ATI Technologies
2015-09-09 21:32 . 2015-09-09 21:32	--------	d-----w-	c:\program files\AMD
2015-09-09 21:29 . 2015-09-09 21:30	207872	----a-w-	c:\windows\PAExec.exe
2015-09-09 10:24 . 2015-07-23 00:06	5568960	----a-w-	c:\windows\system32\ntoskrnl.exe
2015-09-09 10:23 . 2015-08-27 18:18	1887232	----a-w-	c:\windows\system32\msxml3.dll
2015-09-06 00:09 . 2015-09-06 00:09	--------	d-----w-	c:\program files\Blender Foundation
2015-09-05 22:18 . 2015-09-05 22:31	--------	d-----w-	c:\users\302-\AppData\Roaming\Minecraft Skin Viewer
2015-09-05 15:11 . 2015-09-05 15:11	--------	d-----w-	c:\program files\GIMP 2
2015-09-02 15:44 . 2015-09-02 15:44	--------	d-----w-	c:\users\302-\AppData\Local\Ubisoft Game Launcher
2015-09-02 15:44 . 2015-09-02 15:44	--------	d-----w-	c:\program files (x86)\Ubisoft
2015-08-31 20:18 . 2015-08-31 20:18	--------	d-----w-	c:\users\302-\AppData\Roaming\MPEG Streamclip
2015-08-31 20:12 . 2015-08-31 20:12	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2015-08-31 20:12 . 2015-08-31 20:12	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2015-08-31 20:12 . 2015-08-31 20:12	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2015-08-31 20:12 . 2015-08-31 20:12	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2015-08-31 20:12 . 2015-08-31 20:12	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2015-08-31 20:12 . 2015-08-31 20:12	--------	d-----w-	c:\program files (x86)\QuickTime
2015-08-31 18:50 . 2015-08-31 18:50	--------	d-----w-	c:\program files (x86)\free-mp4-mp3-converter
2015-08-29 12:11 . 2015-08-29 12:11	715038	----a-w-	c:\windows\unins000.exe
2015-08-29 12:10 . 2011-12-07 17:37	148992	----a-w-	c:\windows\system32\lagarith.dll
2015-08-29 12:10 . 2011-12-07 17:32	216064	----a-w-	c:\windows\SysWow64\lagarith.dll
2015-08-25 11:19 . 2015-08-25 11:19	--------	d-----w-	c:\users\302-\AppData\Local\Dxtory Software
2015-08-25 11:19 . 2015-08-25 11:19	--------	d-----w-	c:\program files (x86)\ExKode
2015-08-25 11:19 . 2014-06-08 20:14	2508336	----a-w-	c:\windows\SysWow64\DxtoryCodec.dll
2015-08-25 11:19 . 2014-06-08 20:14	2610736	----a-w-	c:\windows\system32\DxtoryCodec.dll
2015-08-24 20:46 . 2015-08-24 20:46	--------	d-----w-	c:\users\302-\AppData\Roaming\Publish Providers
2015-08-24 20:43 . 2015-08-24 20:46	--------	d-----w-	c:\users\302-\AppData\Local\Sony
2015-08-24 20:43 . 2015-08-24 20:44	--------	d-----w-	c:\programdata\Sony
2015-08-24 20:43 . 2015-08-24 20:44	--------	d-----w-	c:\program files (x86)\Sony
2015-08-24 20:43 . 2015-08-24 20:43	--------	d-----w-	c:\program files\Sony
2015-08-24 20:41 . 2015-08-24 21:50	--------	d-----w-	c:\users\302-\AppData\Roaming\Sony
2015-08-21 22:14 . 2009-05-04 12:55	40208	----a-w-	c:\windows\SysWow64\drivers\aztech_npf64.sys
2015-08-21 22:13 . 2002-07-25 15:07	614532	----a-w-	c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2015-08-21 22:13 . 2001-09-05 03:18	77824	----a-w-	c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2015-08-21 22:13 . 2001-09-05 03:18	225280	----a-w-	c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2015-08-21 22:13 . 2001-09-05 03:14	176128	----a-w-	c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2015-08-21 22:13 . 2001-09-05 03:13	32768	----a-w-	c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-26 16:37 . 2015-04-14 20:31	134753440	----a-w-	c:\windows\system32\MRT.exe
2015-08-19 00:49 . 2015-08-20 12:49	40	---h--w-	c:\program files (x86)\2fe72cf2.tmp
2015-08-05 23:59 . 2012-07-17 12:37	24288	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2015-08-04 06:29 . 2015-08-04 06:29	107784	----a-w-	c:\windows\system32\amdave64.dll
2015-08-04 06:29 . 2015-08-04 06:29	100568	----a-w-	c:\windows\SysWow64\amdave32.dll
2015-08-04 06:28 . 2015-08-04 06:28	141792	----a-w-	c:\windows\system32\amdhcp64.dll
2015-08-04 06:28 . 2015-08-04 06:28	128384	----a-w-	c:\windows\SysWow64\amdhcp32.dll
2015-08-04 06:28 . 2015-08-04 06:28	78432	----a-w-	c:\windows\system32\atimpc64.dll
2015-08-04 06:28 . 2015-08-04 06:28	78432	----a-w-	c:\windows\system32\amdpcom64.dll
2015-08-04 06:28 . 2015-08-04 06:28	71704	----a-w-	c:\windows\SysWow64\atimpc32.dll
2015-08-04 06:28 . 2015-08-04 06:28	71704	----a-w-	c:\windows\SysWow64\amdpcom32.dll
2015-08-04 06:28 . 2015-08-04 06:28	152056	----a-w-	c:\windows\system32\atiuxp64.dll
2015-08-04 06:28 . 2015-08-04 06:28	133016	----a-w-	c:\windows\SysWow64\atiuxpag.dll
2015-08-04 06:28 . 2015-08-04 06:28	120144	----a-w-	c:\windows\system32\atiu9p64.dll
2015-08-04 06:28 . 2015-08-04 06:28	102616	----a-w-	c:\windows\SysWow64\atiu9pag.dll
2015-08-04 06:28 . 2015-08-04 06:28	1445224	----a-w-	c:\windows\system32\aticfx64.dll
2015-08-04 06:28 . 2015-08-04 06:28	1193904	----a-w-	c:\windows\SysWow64\aticfx32.dll
2015-08-04 06:28 . 2015-08-04 06:28	11948704	----a-w-	c:\windows\system32\atidxx64.dll
2015-08-04 06:28 . 2015-08-04 06:28	10094152	----a-w-	c:\windows\SysWow64\atidxx32.dll
2015-08-04 06:28 . 2015-08-04 06:28	7929616	----a-w-	c:\windows\SysWow64\atiumdva.dll
2015-08-04 06:28 . 2015-08-04 06:28	7408936	----a-w-	c:\windows\SysWow64\atiumdag.dll
2015-08-04 06:27 . 2015-08-04 06:27	8893160	----a-w-	c:\windows\system32\atiumd6a.dll
2015-08-04 06:27 . 2015-08-04 06:27	8779872	----a-w-	c:\windows\system32\atiumd64.dll
2015-08-04 06:25 . 2015-08-04 06:25	297672	----a-w-	c:\windows\system32\drivers\amdacpksd.sys
2015-08-04 06:23 . 2015-08-04 06:23	21622784	----a-w-	c:\windows\system32\drivers\atikmdag.sys
2015-08-04 06:19 . 2015-08-04 06:19	235008	----a-w-	c:\windows\system32\clinfo.exe
2015-08-04 06:19 . 2015-08-04 06:19	995342	----a-w-	c:\windows\SysWow64\amdocl_as32.exe
2015-08-04 06:19 . 2015-08-04 06:19	798734	----a-w-	c:\windows\SysWow64\amdocl_ld32.exe
2015-08-04 06:19 . 2015-08-04 06:19	1187342	----a-w-	c:\windows\system32\amdocl_as64.exe
2015-08-04 06:19 . 2015-08-04 06:19	1061902	----a-w-	c:\windows\system32\amdocl_ld64.exe
2015-08-04 06:18 . 2015-08-04 06:18	47785472	----a-w-	c:\windows\system32\amdocl64.dll
2015-08-04 06:14 . 2015-08-04 06:14	39714304	----a-w-	c:\windows\SysWow64\amdocl.dll
2015-08-04 06:09 . 2015-08-04 06:09	65024	----a-w-	c:\windows\system32\OpenCL.dll
2015-08-04 06:09 . 2015-08-04 06:09	59392	----a-w-	c:\windows\SysWow64\OpenCL.dll
2015-08-04 05:58 . 2015-08-04 05:58	27535872	----a-w-	c:\windows\system32\amdocl12cl64.dll
2015-08-04 05:57 . 2015-08-04 05:57	22318592	----a-w-	c:\windows\SysWow64\amdocl12cl.dll
2015-08-04 04:12 . 2015-08-04 04:12	127488	----a-w-	c:\windows\system32\mantle64.dll
2015-08-04 04:12 . 2015-08-04 04:12	113664	----a-w-	c:\windows\SysWow64\mantle32.dll
2015-08-04 04:11 . 2015-08-04 04:11	6477312	----a-w-	c:\windows\system32\amdmantle64.dll
2015-08-04 03:43 . 2015-08-04 03:43	5068288	----a-w-	c:\windows\SysWow64\amdmantle32.dll
2015-08-04 03:21 . 2015-08-04 03:21	93696	----a-w-	c:\windows\system32\mantleaxl64.dll
2015-08-04 03:21 . 2015-08-04 03:21	86528	----a-w-	c:\windows\SysWow64\mantleaxl32.dll
2015-08-04 02:55 . 2015-08-04 02:55	30752256	----a-w-	c:\windows\system32\atio6axx.dll
2015-08-04 02:32 . 2015-08-04 02:32	25299968	----a-w-	c:\windows\SysWow64\atioglxx.dll
2015-08-04 02:25 . 2015-08-04 02:25	367104	----a-w-	c:\windows\system32\atiapfxx.exe
2015-08-04 02:25 . 2015-08-04 02:25	62464	----a-w-	c:\windows\system32\aticalrt64.dll
2015-08-04 02:25 . 2015-08-04 02:25	52224	----a-w-	c:\windows\SysWow64\aticalrt.dll
2015-08-04 02:24 . 2015-08-04 02:24	55808	----a-w-	c:\windows\system32\aticalcl64.dll
2015-08-04 02:24 . 2015-08-04 02:24	49152	----a-w-	c:\windows\SysWow64\aticalcl.dll
2015-08-04 02:24 . 2015-08-04 02:24	15716864	----a-w-	c:\windows\system32\aticaldd64.dll
2015-08-04 02:21 . 2015-08-04 02:21	14302208	----a-w-	c:\windows\SysWow64\aticaldd.dll
2015-08-04 02:21 . 2015-08-04 02:21	50688	----a-w-	c:\windows\system32\amdmmcl6.dll
2015-08-04 02:21 . 2015-08-04 02:21	39424	----a-w-	c:\windows\SysWow64\amdmmcl.dll
2015-08-04 02:07 . 2015-08-04 02:07	442368	----a-w-	c:\windows\system32\atidemgy.dll
2015-08-04 02:07 . 2015-08-04 02:07	160256	----a-w-	c:\windows\system32\atieah64.exe
2015-08-04 02:07 . 2015-08-04 02:07	143872	----a-w-	c:\windows\SysWow64\atieah32.exe
2015-08-04 02:07 . 2015-08-04 02:07	204800	----a-w-	c:\windows\system32\amdgfxinfo64.dll
2015-08-04 02:07 . 2015-08-04 02:07	189952	----a-w-	c:\windows\SysWow64\amdgfxinfo32.dll
2015-08-04 02:07 . 2015-08-04 02:07	29696	----a-w-	c:\windows\system32\atimuixx.dll
2015-08-04 02:07 . 2015-08-04 02:07	672768	----a-w-	c:\windows\system32\atieclxx.exe
2015-08-04 02:06 . 2015-08-04 02:06	246784	----a-w-	c:\windows\system32\atiesrxx.exe
2015-08-04 02:05 . 2015-08-04 02:05	190976	----a-w-	c:\windows\system32\atitmm64.dll
2015-08-04 01:48 . 2015-08-04 01:48	865792	----a-w-	c:\windows\system32\coinst_15.20.dll
2015-08-04 01:48 . 2015-08-04 01:48	89088	----a-w-	c:\windows\system32\atisamu64.dll
2015-08-04 01:47 . 2015-08-04 01:47	80896	----a-w-	c:\windows\SysWow64\atisamu32.dll
2015-08-04 01:43 . 2015-08-04 01:43	1247744	----a-w-	c:\windows\system32\atiadlxx.dll
2015-08-04 01:43 . 2015-08-04 01:43	926720	----a-w-	c:\windows\SysWow64\atiadlxy.dll
2015-08-04 01:43 . 2015-08-04 01:43	926720	----a-w-	c:\windows\SysWow64\atiadlxx.dll
2015-08-04 01:43 . 2015-08-04 01:43	75264	----a-w-	c:\windows\system32\atig6pxx.dll
2015-08-04 01:43 . 2015-08-04 01:43	69632	----a-w-	c:\windows\SysWow64\atiglpxx.dll
2015-08-04 01:43 . 2015-08-04 01:43	69632	----a-w-	c:\windows\system32\atiglpxx.dll
2015-08-04 01:42 . 2015-08-04 01:42	156672	----a-w-	c:\windows\system32\atig6txx.dll
2015-08-04 01:42 . 2015-08-04 01:42	141824	----a-w-	c:\windows\SysWow64\atigktxx.dll
2015-08-04 01:42 . 2015-08-04 01:42	665088	----a-w-	c:\windows\system32\drivers\atikmpag.sys
2015-08-04 01:37 . 2015-08-04 01:37	102912	----a-w-	c:\windows\system32\hsa-thunk64.dll
2015-08-04 01:37 . 2015-08-04 01:37	102400	----a-w-	c:\windows\SysWow64\hsa-thunk.dll
2015-08-04 01:35 . 2015-08-04 01:35	43520	----a-w-	c:\windows\system32\drivers\ati2erec.dll
2015-07-30 18:06 . 2015-08-12 12:39	1648128	----a-w-	c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 12:39	1180160	----a-w-	c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 12:39	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 12:39	1251328	----a-w-	c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 12:39	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-13 01:04	103120	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-13 01:04	124624	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-28 20:09 . 2015-08-12 12:42	17344	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-07-28 20:05 . 2015-08-12 12:42	774656	----a-w-	c:\windows\system32\invagent.dll
2015-07-28 20:05 . 2015-08-12 12:42	743424	----a-w-	c:\windows\system32\generaltel.dll
2015-07-28 20:05 . 2015-08-12 12:42	437760	----a-w-	c:\windows\system32\devinv.dll
2015-07-28 20:05 . 2015-08-12 12:42	1116672	----a-w-	c:\windows\system32\appraiser.dll
2015-07-28 20:05 . 2015-08-12 12:42	69120	----a-w-	c:\windows\system32\acmigration.dll
2015-07-28 20:05 . 2015-08-12 12:42	227328	----a-w-	c:\windows\system32\aepdu.dll
2015-07-28 19:55 . 2015-08-12 12:42	1148416	----a-w-	c:\windows\system32\aeinv.dll
2015-07-23 12:05 . 2015-07-23 12:05	0	----a-w-	c:\windows\SysWow64\REN95AA.tmp
2015-07-23 12:04 . 2015-05-29 11:09	110688	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2015-07-23 11:31 . 2014-08-26 22:19	162528	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2015-07-23 11:31 . 2014-08-26 22:19	141416	----a-w-	c:\windows\system32\drivers\avipbb.sys
2015-07-22 17:53 . 2015-09-09 10:24	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-07-15 18:15 . 2015-08-12 12:42	94656	----a-w-	c:\windows\system32\drivers\mountmgr.sys
2015-07-15 18:10 . 2015-08-12 12:42	1743360	----a-w-	c:\windows\system32\sysmain.dll
2015-07-15 18:10 . 2015-08-12 12:42	11264	----a-w-	c:\windows\system32\msmmsp.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{4F524A2D-5350-4500-76A7-7A786E7484D7}]
2015-08-26 07:34	11152	----a-w-	c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{4F524A2D-5350-4500-76A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll" [2015-08-26 11152]
.
[HKEY_CLASSES_ROOT\clsid\{4f524a2d-5350-4500-76a7-7a786e7484d7}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_2A449E69A85980F7931D61A86EB5A808"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2015-09-12 815944]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-09-02 3638256]
"puush"="c:\program files (x86)\puush\puush.exe" [2015-08-04 568904]
"Spotify Web Helper"="c:\users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-09-17 2025016]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-08-07 53737488]
"Dxtory Update Checker 2.0"="c:\program files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe" [2010-10-17 93696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2014-02-21 292848]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-08-26 782008]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-27 164656]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
"Sound Blaster Z-Series Control Panel"="c:\program files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe" [2013-02-27 735744]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2015-08-26 1843088]
"Raptr"="c:\program files (x86)\Raptr\raptrstub.exe" [2015-07-27 56080]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-06-08 334896]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2015-08-04 767176]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 PAExec;PAExec;c:\windows\PAExec.exe;c:\windows\PAExec.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 CtHdaSvc;Sound Blaster Audio Service;c:\windows\sysWow64\CtHdaSvc.exe;c:\windows\sysWow64\CtHdaSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 Fitbit Connect;Fitbit Connect Service;c:\program files (x86)\Fitbit Connect\FitbitConnectService.exe;c:\program files (x86)\Fitbit Connect\FitbitConnectService.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 cthda;Sound Blaster Audio Driver;c:\windows\system32\drivers\cthda.sys;c:\windows\SYSNATIVE\drivers\cthda.sys [x]
S3 cthdb;Sound Blaster Audio Controller Driver;c:\windows\system32\DRIVERS\cthdb.sys;c:\windows\SYSNATIVE\DRIVERS\cthdb.sys [x]
S3 ElgatoGC656Y;Elgato Game Capture HD60;c:\windows\system32\Drivers\ElgatoGC656.sys;c:\windows\SYSNATIVE\Drivers\ElgatoGC656.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 ScpVBus;Scp Virtual Bus Driver;c:\windows\system32\DRIVERS\ScpVBus.sys;c:\windows\SYSNATIVE\DRIVERS\ScpVBus.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-09-16 01:22	997704	----a-w-	c:\program files (x86)\Google\Chrome\Application\45.0.2454.93\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25 22:09]
.
2015-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25 22:09]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4F524A2D-5350-4500-76A7-7A786E7484D7}]
2015-08-26 07:34	12688	----a-w-	c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4F524A2D-5350-4500-76A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll" [2015-08-26 12688]
.
[HKEY_CLASSES_ROOT\CLSID\{4F524A2D-5350-4500-76A7-7A786E7484D7}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2014-03-14 13671792]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2014-04-11 36352]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-Fitbit Connect - c:\program files (x86)\Fitbit Connect\Fitbit Connect.exe
Wow6432Node-HKLM-Run-Fitbit Connect - c:\program files (x86)\Fitbit Connect\Fitbit Connect.exe
Toolbar-Locked - (no file)
AddRemove-Afterburner - c:\program files (x86)\MSI Afterburner\uninstall.exe
AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe
AddRemove-Heroes & Generals - c:\program files (x86)\Heroes & Generals\Uninstall.exe
AddRemove-Metin2_is1 - c:\program files (x86)\GameforgeLive\Games\DEU_deu\Metin2\unins000.exe
AddRemove-PunkBusterSvc - e:\origin\Battlefield 4 CTE\pbsvc.exe
AddRemove-{08234a0d-cf39-4dca-99f0-0c5cb496da81} - c:\program files (x86)\Bing Bar Installer\InstallManager.exe
AddRemove-{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1 - c:\program files (x86)\GameforgeLive\unins000.exe
AddRemove-{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1 - c:\program files (x86)\WarThunder\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\PnkBstrA.exe
c:\progra~2\Raptr\raptr.exe
c:\progra~2\Raptr\raptr_im.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-09-19  17:17:15 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-09-19 15:17
.
Vor Suchlauf: 11 Verzeichnis(se), 14.862.090.240 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 17.729.867.776 Bytes frei
.
- - End Of File - - 3DD2255939DD4A62432CDAD0B03D7AC7
A36C5E4F47E84449FF07ED3517B43A31

M-K-D-B · 19.09.2015, 17:59

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

AdmiralE · 19.09.2015, 18:41

AdwCleaner:

Code:

ATTFilter

# AdwCleaner v5.008 - Bericht erstellt am 19/09/2015 um 19:23:42
# Aktualisiert am 18/09/2015 von Xplode
# Datenbank : 2015-09-17.3 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : 302- - KUNDEN-6P3VFCVU
# Gestartet von : C:\Users\302-\Desktop\AdwCleaner_5.008.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****

[-] Dienst Gelöscht : APNMCP

***** [ Ordner ] *****

[#] Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
[-] Ordner Gelöscht : C:\ProgramData\apn
[-] Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
[-] Ordner Gelöscht : C:\Users\302-\AppData\Local\AskPartnerNetwork
[-] Ordner Gelöscht : C:\Users\302-\AppData\Local\Temp\apn

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.azlyrics.com_0.localstorage
[-] Datei Gelöscht : C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.azlyrics.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage
[-] Datei Gelöscht : C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage-journal

***** [ Verknüpfungen ] *****


***** [ Geplante Tasks ] *****


***** [ Registrierungsdatenbank ] *****

[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahaeginbdcckocjkhbciadcafnep
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahaeginbdcckocjkhbciadcafnep
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaahlfahldnilidgnlikdckbfehhca
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4F524A2D-5350-4500-76A7-7A786E7484D7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5350-4500-76A7-7A786E7484D7}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F524A2D-5350-4500-76A7-7A786E7484D7}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4F524A2D-5350-4500-76A7-7A786E7484D7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4F524A2D-5350-4500-76A7-7A786E7484D7}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4F524A2D-5350-4500-76A7-7A786E7484D7}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5350-4500-76A7-7A786E7484D7}
[-] Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4F524A2D-5350-4500-76A7-7A786E7484D7}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\AskPartnerNetwork
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5354-2D53-5045-A758B70C1C01}
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\AskPartnerNetwork
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{37A091F5-7A12-4D4C-9193-B1CD432C6693}
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{37A091F5-7A12-4D4C-9193-B1CD432C6693}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\SearchScopes\{37A091F5-7A12-4D4C-9193-B1CD432C6693}

***** [ Internetbrowser ] *****

[-] [C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : aaaaahaeginbdcckocjkhbciadcafnep
[-] [C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : aaaaahlfahldnilidgnlikdckbfehhca
[-] [C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : aaaaaiabcopkplhgaedhbloeejhhankf

*************************

:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [6106 Bytes] ##########

Mbam:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 19.09.2015
Suchlaufzeit: 19:29
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.09.19.05
Rootkit-Datenbank: v2015.09.18.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: 302-

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 376069
Abgelaufene Zeit: 4 Min., 30 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.ASK.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4F524A2D-5350-4500-76A7-A758B70C2201}, In Quarantäne, [f9c8cb6607843afc486a94382bd9b749], 

Registrierungswerte: 2
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|ApnTBMon, "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe", In Quarantäne, [9b26ed440c7f6acc178476ba29da08f8]
PUP.Optional.ASK.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4F524A2D-5350-4500-76A7-A758B70C2201}|InstallSource, C:\ProgramData\APN\APN-Stub\ORJ-SPE\, In Quarantäne, [f9c8cb6607843afc486a94382bd9b749]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

JRT:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.2 (09.14.2015:1)
OS: Windows 7 Home Premium x64
Ran by 302- on 19.09.2015 at 19:37:50,80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_2A449E69A85980F7931D61A86EB5A808



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer



~~~ Files

Successfully deleted: [File] C:\Windows\SysWOW64\REN95AA.tmp



~~~ Folders



~~~ Chrome


[C:\Users\302-\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\302-\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\302-\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\302-\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.09.2015 at 19:39:18,40
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
durchgeführt von 302- (Administrator) auf KUNDEN-6P3VFCVU (19-09-2015 19:40:37)
Gestartet von C:\Users\302-\Desktop
Geladene Profile: 302- (Verfügbare Profile: 302-)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [735744 2013-02-27] (Creative Technology Ltd)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638256 2015-09-02] (Electronic Arts)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-08-05] ()
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Spotify Web Helper] => C:\Users\302-\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2025016 2015-09-18] (Spotify Ltd)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53737488 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1D4920EC-6CB7-4635-8A61-89687EE6ACAE}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{44F3AFEE-D438-4A5F-A52D-A77C72C530FF}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
hxxp://www.tecstore.net
SearchScopes: HKLM -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> DefaultScope {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {34967B44-CCED-4AF4-863B-BE4A81A9732D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-570197401-3978400442-3683679341-1000 -> {571503CC-1BD6-463E-9EE0-2C1F4E8E8399} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox -> C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\302-\AppData\Roaming\Mozilla\Firefox\Profiles\qsNAI5es.default\Extensions\abs@avira.com [2014-08-26]

Chrome: 
=======
CHR Profile: C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\302-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-25]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-26] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-02] (Creative Labs) [Datei ist nicht signiert]
S2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2012-10-08] (Creative Technology Ltd) [Datei ist nicht signiert]
S2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [112640 2013-05-22] (Creative Technology Ltd)
R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5738528 2014-12-12] (Fitbit, Inc.) [Datei ist nicht signiert]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-02] (Electronic Arts)
S3 PAExec; C:\Windows\PAExec.exe [207872 2015-09-09] (Power Admin LLC) [Datei ist nicht signiert]
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-02-17] ()
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-16] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
R3 cthda; C:\Windows\System32\drivers\cthda.sys [1060632 2013-05-22] (Creative Technology Ltd)
R3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [33560 2013-05-22] (Creative Technology Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ElgatoGC656Y; C:\Windows\System32\Drivers\ElgatoGC656.sys [94440 2014-07-07] (UB658)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-19 19:39 - 2015-09-19 19:39 - 00001389 _____ C:\Users\302-\Desktop\JRT.txt
2015-09-19 19:37 - 2015-09-19 19:37 - 01798976 _____ (Malwarebytes) C:\Users\302-\Desktop\JRT.exe
2015-09-19 19:35 - 2015-09-19 19:35 - 00001769 _____ C:\Users\302-\Desktop\mbam.txt
2015-09-19 19:28 - 2015-09-19 19:34 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-19 19:28 - 2015-09-19 19:28 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-19 19:28 - 2015-09-19 19:28 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-09-19 19:28 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-09-19 19:28 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-09-19 19:28 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-09-19 19:26 - 2015-09-19 19:27 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\302-\Desktop\mbam-setup-2.1.8.1057 (1).exe
2015-09-19 19:22 - 2015-09-19 19:23 - 00000000 ____D C:\AdwCleaner
2015-09-19 19:21 - 2015-09-19 19:22 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\302-\Desktop\mbam-setup-2.1.8.1057.exe
2015-09-19 19:21 - 2015-09-19 19:21 - 01662976 _____ C:\Users\302-\Desktop\AdwCleaner_5.008.exe
2015-09-19 18:05 - 2015-09-19 18:05 - 04006981 _____ C:\Users\302-\Desktop\Mw1.xcf
2015-09-19 18:05 - 2015-09-19 18:05 - 00073565 _____ C:\Users\302-\AppData\Local\recently-used.xbel
2015-09-19 17:26 - 2015-09-19 17:26 - 02083157 _____ C:\Users\302-\Desktop\Masterbuilders.xcf
2015-09-19 17:17 - 2015-09-19 17:17 - 00026677 _____ C:\ComboFix.txt
2015-09-19 17:12 - 2015-09-19 17:17 - 00000000 ____D C:\Qoobox
2015-09-19 17:12 - 2015-09-19 17:16 - 00000000 ____D C:\Windows\erdnt
2015-09-19 17:12 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-09-19 17:12 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-09-19 17:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-09-19 17:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-09-19 17:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-09-19 17:12 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-09-19 17:12 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-09-19 17:12 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-09-19 17:10 - 2015-09-19 17:10 - 05635119 ____R (Swearware) C:\Users\302-\Desktop\ComboFix.exe
2015-09-19 16:24 - 2015-09-19 17:08 - 02261752 _____ C:\Users\302-\Desktop\mw1.ogg.sfk
2015-09-19 16:24 - 2015-09-19 16:24 - 25655906 _____ C:\Users\302-\Desktop\mw1.ogg
2015-09-19 16:21 - 2015-09-19 16:24 - 00087295 _____ C:\Users\302-\Desktop\mw1.aup
2015-09-19 16:21 - 2015-09-19 16:21 - 00000000 ____D C:\Users\302-\Desktop\mw1_data
2015-09-19 15:09 - 2015-09-19 15:09 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\302-\Desktop\tdsskiller.exe
2015-09-19 15:04 - 2015-09-19 19:40 - 00017380 _____ C:\Users\302-\Desktop\FRST.txt
2015-09-19 15:04 - 2015-09-19 19:40 - 00000000 ____D C:\FRST
2015-09-19 15:04 - 2015-09-19 15:05 - 00052580 _____ C:\Users\302-\Desktop\Addition.txt
2015-09-19 15:03 - 2015-09-19 15:03 - 02191360 _____ (Farbar) C:\Users\302-\Desktop\FRST64.exe
2015-09-19 15:02 - 2015-09-19 15:02 - 02191360 _____ (Farbar) C:\Users\302-\Downloads\FRST64.exe
2015-09-19 14:45 - 2015-09-19 14:52 - 00981770 _____ C:\Users\302-\Documents\Captive4.xcf
2015-09-19 14:37 - 2015-09-19 14:37 - 00000772 _____ C:\Users\302-\Documents\Ereignisse.txt
2015-09-19 14:20 - 2015-09-19 14:20 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller (1).msi
2015-09-19 14:16 - 2015-09-19 14:16 - 02314240 _____ C:\Users\302-\Downloads\MinecraftInstaller.msi
2015-09-19 00:41 - 2015-09-19 00:42 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4.sfk
2015-09-18 21:37 - 2015-09-18 21:37 - 07076424 _____ C:\Users\302-\Downloads\Smaug.rar
2015-09-18 17:32 - 2015-09-18 17:32 - 00105362 _____ C:\Users\302-\Documents\JWSchrift2.xcf
2015-09-18 17:24 - 2015-09-18 17:24 - 00023870 _____ C:\Users\302-\Downloads\ventilla_script.zip
2015-09-18 17:24 - 2015-09-18 17:24 - 00000000 ____D C:\Users\302-\Downloads\JW_files
2015-09-18 15:42 - 2015-09-18 15:42 - 13668628 _____ C:\Users\302-\Downloads\sbs.xcf
2015-09-18 14:24 - 2015-09-18 14:24 - 10973286 _____ C:\Users\302-\Downloads\tntop10.xcf
2015-09-18 03:11 - 2015-09-18 03:11 - 00100458 _____ C:\Users\302-\Downloads\the_minion.zip
2015-09-18 02:08 - 2015-09-18 02:08 - 00000000 ____D C:\Users\302-\Documents\OFX Presets
2015-09-18 02:01 - 2015-09-18 02:01 - 00109651 _____ C:\Users\302-\Downloads\old_london.zip
2015-09-18 00:24 - 2015-09-18 00:24 - 101167727 _____ C:\Users\302-\Downloads\DuKannstVerkaufenGehn.rar
2015-09-17 14:59 - 2015-09-17 15:01 - 00038368 _____ C:\Users\302-\Downloads\Allahu Akbar Sound Effect.mp3.sfk
2015-09-16 22:00 - 2015-09-16 22:00 - 00918328 _____ C:\Windows\Minidump\091615-6786-01.dmp
2015-09-16 03:23 - 2015-09-16 03:23 - 00007016 _____ C:\Users\302-\Downloads\Diamanten!!! - Captive Minecraft 2 #6 - DieBuddiesZocken.mp3.sfk
2015-09-16 01:53 - 2015-09-16 01:53 - 15488826 _____ C:\Users\302-\Downloads\Killduell324141.rar
2015-09-16 01:24 - 2015-09-16 01:24 - 04235110 _____ C:\Users\302-\Downloads\TNSchaf.xcf
2015-09-16 01:15 - 2015-09-16 01:15 - 00108443 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrundk.xcf
2015-09-16 01:06 - 2015-09-16 01:06 - 00518160 _____ C:\Users\302-\Downloads\Fertig ohne Hintergrund.xcf
2015-09-16 00:14 - 2015-09-16 00:16 - 157760736 _____ C:\Users\302-\Downloads\AufdieNahme.rar
2015-09-15 22:00 - 2015-09-15 22:01 - 02853166 _____ C:\Users\302-\Downloads\Tourismusterroristen.xcf
2015-09-15 21:47 - 2015-09-15 21:49 - 02445994 _____ C:\Users\302-\Downloads\mw3.xcf
2015-09-15 21:15 - 2015-09-15 21:29 - 02178366 _____ C:\Users\302-\Downloads\sir.xcf
2015-09-15 21:14 - 2015-09-15 21:14 - 00029442 _____ C:\Users\302-\Downloads\cartoon.zip
2015-09-15 20:59 - 2015-09-15 21:00 - 02343327 _____ C:\Users\302-\Downloads\GK2F.xcf
2015-09-15 20:57 - 2015-09-15 20:57 - 06360873 _____ C:\Users\302-\Downloads\GK2R.xcf
2015-09-15 20:53 - 2015-09-15 20:53 - 06368456 _____ C:\Users\302-\Downloads\GK2H.xcf
2015-09-15 20:37 - 2015-09-15 20:37 - 05428462 _____ C:\Users\302-\Downloads\GK2.xcf
2015-09-15 20:36 - 2015-09-15 20:36 - 00176676 _____ C:\Users\302-\Downloads\plane_crash.zip
2015-09-15 20:31 - 2015-09-15 20:31 - 00815586 _____ C:\Users\302-\Downloads\Me262.jpeg
2015-09-15 20:23 - 2015-09-15 20:23 - 02812464 _____ C:\Users\302-\Downloads\GK1H.xcf
2015-09-15 20:17 - 2015-09-15 20:18 - 02774868 _____ C:\Users\302-\Downloads\GK1R.xcf
2015-09-15 20:12 - 2015-09-15 20:21 - 02793449 _____ C:\Users\302-\Downloads\GK1.xcf
2015-09-15 20:03 - 2015-09-15 20:03 - 00487638 _____ C:\Users\302-\Downloads\cf_nuclear_war.zip
2015-09-15 19:58 - 2015-09-15 20:03 - 07830183 _____ C:\Users\302-\Downloads\tiger.xcf
2015-09-15 19:58 - 2015-09-15 19:58 - 00399765 _____ C:\Users\302-\Downloads\defused.zip
2015-09-15 01:16 - 2015-09-15 01:16 - 00009112 _____ C:\Users\302-\Downloads\badaboom_bb.zip
2015-09-15 01:07 - 2015-09-15 01:07 - 00327869 _____ C:\Users\302-\Documents\DÖ2.xcf
2015-09-15 01:01 - 2015-09-15 01:01 - 00136904 _____ C:\Users\302-\Downloads\DÖ.pdn
2015-09-15 00:51 - 2015-09-15 00:51 - 00194676 _____ C:\Users\302-\Downloads\Flagge Ö.pdn
2015-09-14 23:32 - 2015-09-14 23:37 - 00012504 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4.sfk
2015-09-14 23:32 - 2015-09-14 23:32 - 00655235 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp4
2015-09-14 23:31 - 2015-09-14 23:31 - 00012520 _____ C:\Users\302-\Downloads\Spongebob Time Cards.mp3.sfk
2015-09-14 20:10 - 2015-09-14 20:10 - 00064857 _____ C:\Users\302-\Downloads\bad_grunge.zip
2015-09-14 20:01 - 2015-09-14 20:01 - 00000000 ____D C:\Users\302-\AppData\Local\webkit
2015-09-14 19:56 - 2015-09-14 20:23 - 00959668 _____ C:\Users\302-\Downloads\Bands.xcf
2015-09-14 19:56 - 2015-09-14 19:56 - 00132321 _____ C:\Users\302-\Downloads\germanica_family.zip
2015-09-14 18:04 - 2015-09-14 18:04 - 00176072 _____ C:\Users\302-\Downloads\Pomade.mp3.sfk
2015-09-14 18:04 - 2015-09-14 18:04 - 00161632 _____ C:\Users\302-\Downloads\Dude_Bro.mp3.sfk
2015-09-14 18:04 - 2015-09-14 18:04 - 00161600 _____ C:\Users\302-\Downloads\Fire_Breather.mp3.sfk
2015-09-14 17:51 - 2015-09-14 17:51 - 21414792 _____ C:\Users\302-\Downloads\Aufnahme.rar
2015-09-13 21:25 - 2015-09-13 21:42 - 74100176 _____ C:\Users\302-\Downloads\§4Mercury§c Pack §4Animated.zip
2015-09-13 20:32 - 2015-09-17 16:34 - 00617883 _____ C:\Users\302-\Documents\Captive.xcf
2015-09-13 18:02 - 2015-09-13 18:02 - 101426665 _____ C:\Users\302-\Downloads\Captive.rar
2015-09-13 17:05 - 2015-09-13 17:05 - 09605800 _____ C:\Users\302-\Downloads\Captive-Minecraft-Beta1_6.zip
2015-09-13 16:22 - 2015-09-13 16:22 - 09706665 _____ C:\Users\302-\Downloads\Captive-Minecraft-III-Beta1_3_1.zip
2015-09-13 00:50 - 2015-09-17 21:01 - 00529671 _____ C:\Users\302-\Downloads\DdnTN.xcf
2015-09-13 00:49 - 2015-09-13 00:49 - 00198034 _____ C:\Users\302-\Downloads\28_days_later.zip
2015-09-12 17:18 - 2015-09-12 17:21 - 00358552 _____ C:\Users\302-\Downloads\Alan Walker - Fade [NCS Release].mp3.sfk
2015-09-12 17:17 - 2015-09-12 17:17 - 00353048 _____ C:\Users\302-\Downloads\Tobu - Infectious [NCS Release].mp3.sfk
2015-09-12 17:17 - 2015-09-12 17:17 - 00252392 _____ C:\Users\302-\Downloads\Tobu - Life [NCS Release].mp3.sfk
2015-09-12 16:04 - 2015-09-12 16:04 - 66872007 _____ C:\Users\302-\Downloads\MC Killduell.rar
2015-09-10 19:21 - 2015-09-10 19:21 - 00000000 ____D C:\Windows\rescache
2015-09-10 17:47 - 2015-09-10 17:50 - 00288248 _____ C:\Users\302-\Downloads\Krys Talk - Fly Away (JPB Remix) [NCS Release].mp3.sfk
2015-09-10 17:47 - 2015-09-10 17:50 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release] (1).mp3.sfk
2015-09-10 17:47 - 2015-09-10 17:47 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release] (1).mp3.sfk
2015-09-10 17:30 - 2015-09-10 17:30 - 30264527 _____ C:\Users\302-\Downloads\CalleFicktGerneTiere.rar
2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Roaming\ATI
2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\Users\302-\AppData\Local\ATI
2015-09-09 23:34 - 2015-09-09 23:34 - 00000000 ____D C:\ProgramData\ATI
2015-09-09 23:33 - 2015-09-09 23:33 - 00053615 _____ C:\Windows\SysWOW64\CCCInstall_201509092333135219.log
2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-09-09 23:33 - 2015-09-09 23:33 - 00000000 _____ C:\Windows\ativpsrm.bin
2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files\AMD
2015-09-09 23:32 - 2015-09-09 23:32 - 00000000 ____D C:\Program Files (x86)\AMD
2015-09-09 23:31 - 2015-09-09 23:31 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility (1).exe
2015-09-09 23:29 - 2015-09-09 23:30 - 00207872 _____ (Power Admin LLC) C:\Windows\PAExec.exe
2015-09-09 23:29 - 2015-09-09 23:29 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1 (1).zip
2015-09-09 23:28 - 2015-09-09 23:28 - 01427043 _____ C:\Users\302-\Downloads\DDU v15.4.1.1.zip
2015-09-09 23:10 - 2015-09-09 23:10 - 00782824 _____ C:\Windows\Minidump\090915-8642-01.dmp
2015-09-09 23:01 - 2015-09-09 23:01 - 04944608 _____ (Advanced Micro Devices, Inc.) C:\Users\302-\Downloads\autodetectutility.exe
2015-09-09 22:51 - 2015-09-09 22:51 - 01046528 _____ C:\Users\302-\Downloads\MicrosoftFixit50848.msi
2015-09-09 22:49 - 2015-09-09 22:49 - 00918352 _____ C:\Windows\Minidump\090915-8876-01.dmp
2015-09-09 22:21 - 2015-09-09 22:21 - 00782856 _____ C:\Windows\Minidump\090915-16239-01.dmp
2015-09-09 19:19 - 2015-09-09 19:19 - 00782968 _____ C:\Windows\Minidump\090915-21574-01.dmp
2015-09-09 18:57 - 2015-09-09 18:57 - 00271864 _____ C:\Users\302-\Downloads\e-dubble - Let Me Oh (Freestyle Friday #9).mp3.sfk
2015-09-09 18:55 - 2015-09-09 18:55 - 00416480 _____ C:\Users\302-\Downloads\e-dubble - Be A King.mp3.sfk
2015-09-09 18:55 - 2015-09-09 18:55 - 00220672 _____ C:\Users\302-\Downloads\Otis McMusic - Otis McDonald.mp3.sfk
2015-09-09 17:45 - 2015-09-09 17:46 - 25470651 _____ C:\Users\302-\Downloads\SchwarzeSchwänze.rar
2015-09-09 16:32 - 2015-09-09 16:33 - 03595280 _____ C:\Users\302-\Downloads\Top 10 NoCopyRightSounds [NCS].mp3.sfk
2015-09-09 12:26 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-09 12:26 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-09 12:26 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 12:26 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-09 12:26 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 12:26 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-09 12:26 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-09 12:26 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 12:26 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 12:26 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-09 12:26 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-09 12:26 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-09 12:26 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-09 12:26 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 12:26 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-09 12:26 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 12:26 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-09 12:26 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-09 12:26 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-09 12:26 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-09 12:26 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 12:26 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-09-09 12:26 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-09 12:26 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 12:26 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-09 12:26 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-09 12:26 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 12:26 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-09-09 12:26 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-09 12:26 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-09 12:26 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-09-09 12:26 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-09-09 12:26 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 12:26 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-09-09 12:26 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-09-09 12:26 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-09 12:26 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 12:26 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-09-09 12:26 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-09-09 12:26 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-09 12:26 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-09 12:26 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-09 12:26 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-09 12:26 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-09-09 12:26 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 12:26 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-09 12:26 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-09-09 12:26 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-09-09 12:26 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-09-09 12:26 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-09 12:26 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-09 12:26 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 12:26 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-09 12:26 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-09 12:26 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-09-09 12:26 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-09 12:26 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-09 12:26 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-09 12:26 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-09 12:26 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-09 12:26 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 12:26 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-09 12:26 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-09 12:26 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-09 12:26 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-09 12:26 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-09 12:26 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-09 12:26 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-09 12:26 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-09 12:26 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-09 12:24 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-09 12:24 - 2015-07-23 02:06 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-09 12:24 - 2015-07-23 02:06 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-09 12:24 - 2015-07-23 02:06 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-09 12:24 - 2015-07-23 02:03 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-09-09 12:24 - 2015-07-23 02:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-09 12:24 - 2015-07-23 02:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-09 12:24 - 2015-07-23 02:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-09 12:24 - 2015-07-23 02:02 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-09-09 12:24 - 2015-07-23 02:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-09-09 12:24 - 2015-07-23 02:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-09 12:24 - 2015-07-23 02:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-09 12:24 - 2015-07-23 01:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-09 12:24 - 2015-07-23 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-09 12:24 - 2015-07-23 01:51 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-09 12:24 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-09-09 12:24 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-09-09 12:24 - 2015-07-22 19:54 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-09-09 12:24 - 2015-07-22 19:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-09-09 12:24 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-09-09 12:24 - 2015-07-22 19:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-09-09 12:24 - 2015-07-22 19:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-09-09 12:24 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-09-09 12:24 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-09 12:24 - 2015-07-22 18:45 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-09 12:24 - 2015-07-22 18:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-09 12:24 - 2015-07-22 18:44 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-09 12:24 - 2015-07-22 18:34 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-09-09 12:24 - 2015-07-22 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-09-09 12:24 - 2015-07-22 18:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-09 12:24 - 2015-07-22 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-09 12:24 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-09 12:24 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-09 12:24 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-09 12:24 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-09 12:23 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-09 12:23 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-09 12:23 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-09 12:23 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-09 12:23 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-09 12:23 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 12:23 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 12:23 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 12:23 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-09 12:23 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-09 12:23 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-09 12:23 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-09 12:23 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-09 12:23 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-09 12:23 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-09 12:23 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-09 12:23 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-09 12:23 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-09 12:23 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-09-09 12:23 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-09 12:23 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-09-09 12:23 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-09-09 12:23 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-09 12:23 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-09 12:23 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-09 12:23 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 12:23 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 12:23 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-09 12:23 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-08 23:26 - 2015-09-08 23:26 - 00266216 _____ C:\Users\302-\Downloads\K-391 - Everybody [NCS Release].mp3.sfk
2015-09-08 23:24 - 2015-09-08 23:24 - 00353080 _____ C:\Users\302-\Downloads\Jim Yosef - Firefly [NCS Release].mp3.sfk
2015-09-08 23:24 - 2015-09-08 23:24 - 00263408 _____ C:\Users\302-\Downloads\William Ekh - Adventures (feat. Alexa Lusader) [NCS Release].mp3.sfk
2015-09-08 22:17 - 2015-09-08 22:20 - 00219664 _____ C:\Users\302-\Downloads\Your_Voice_Is_American.mp3.sfk
2015-09-08 22:17 - 2015-09-08 22:20 - 00115304 _____ C:\Users\302-\Downloads\Burnt.mp3.sfk
2015-09-07 22:28 - 2015-09-07 22:38 - 02073750 _____ C:\Users\302-\Downloads\SETN2.xcf
2015-09-07 22:04 - 2015-09-07 22:10 - 00228920 _____ C:\Users\302-\Downloads\Different Heaven - Nekozilla [NCS Release].mp3.sfk
2015-09-07 19:31 - 2015-09-07 19:31 - 90479094 _____ C:\Users\302-\Downloads\Revo Aufnahme.rar
2015-09-07 17:52 - 2015-09-07 17:52 - 27599935 _____ C:\Users\302-\Downloads\Sphax Max Edit.zip
2015-09-06 23:02 - 2015-09-06 23:06 - 00002408 _____ C:\Users\302-\Downloads\Censor Beep Sound Effect.mp3.sfk
2015-09-06 22:57 - 2015-09-06 23:01 - 03080840 _____ C:\Users\302-\Downloads\Best of No Copyright Sounds - February 2015 - Gaming Mix - NCS PixelMusic.mp3.sfk
2015-09-06 22:36 - 2015-09-06 22:36 - 00001904 _____ C:\Users\302-\Downloads\WINDOWS XP ERROR SOUND.wmv.mp3.sfk
2015-09-06 22:30 - 2015-09-06 22:33 - 00020800 _____ C:\Users\302-\Downloads\Whoosh Hits Sound Effect In High Quality.mp3.sfk
2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2015-09-06 02:09 - 2015-09-06 02:09 - 00000000 ____D C:\Program Files\Blender Foundation
2015-09-06 02:08 - 2015-09-06 02:09 - 83956748 _____ C:\Users\302-\Downloads\blender-2.75a-windows64.msi
2015-09-06 01:28 - 2015-09-06 01:28 - 04382072 _____ C:\Users\302-\Downloads\Blender_Minecraft_Rig.rar
2015-09-06 00:18 - 2015-09-06 00:31 - 00000000 ____D C:\Users\302-\AppData\Roaming\Minecraft Skin Viewer
2015-09-06 00:18 - 2015-09-06 00:18 - 00155858 _____ C:\Users\302-\Downloads\Minecraft Skin Viewer.zip
2015-09-06 00:17 - 2015-09-06 00:17 - 00889416 _____ (Microsoft Corporation) C:\Users\302-\Downloads\dotNetFx40_Full_setup.exe
2015-09-05 23:10 - 2015-09-05 23:10 - 06103007 _____ C:\Users\302-\Downloads\SETN.xcf
2015-09-05 23:08 - 2015-09-05 23:08 - 00120462 _____ C:\Users\302-\Downloads\war_is_over.zip
2015-09-05 23:08 - 2015-09-05 23:08 - 00000000 ____D C:\Users\302-\Downloads\war_is_over
2015-09-05 21:59 - 2015-09-05 22:00 - 00308800 _____ C:\Users\302-\Downloads\Pride_Before_the_Fall.mp3.sfk
2015-09-05 18:32 - 2015-09-05 18:32 - 00431408 _____ C:\Users\302-\Downloads\FACEPALM [HD] (1).mp4
2015-09-05 18:32 - 2015-09-05 18:32 - 00002880 _____ C:\Users\302-\Downloads\FACEPALM [HD].mp4.sfk
2015-09-05 18:26 - 2015-09-05 18:29 - 00388904 _____ C:\Users\302-\Downloads\Ahrix - Nova [NCS Release].mp3.sfk
2015-09-05 17:11 - 2015-09-05 17:12 - 00001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-09-05 17:11 - 2015-09-05 17:11 - 00000000 ____D C:\Program Files\GIMP 2
2015-09-05 17:09 - 2015-09-05 17:10 - 91931728 _____ (The GIMP Team ) C:\Users\302-\Downloads\gimp-2.8.14-setup-1.exe
2015-09-05 17:03 - 2015-09-05 17:03 - 00254887 _____ C:\Users\302-\Downloads\teb.xcf
2015-09-05 16:34 - 2015-09-05 16:34 - 00782840 _____ C:\Windows\Minidump\090515-17284-01.dmp
2015-09-04 19:48 - 2015-09-04 19:52 - 00368200 _____ C:\Users\302-\Downloads\Different Heaven & EH!DE - My Heart [NCS Release].mp3.sfk
2015-09-04 18:50 - 2015-09-04 19:01 - 00004744 _____ C:\Users\302-\Downloads\Ba Dum Tss!.mp3.sfk
2015-09-04 18:39 - 2015-09-04 18:41 - 00095248 _____ C:\Users\302-\Downloads\Ditch_Diggin.mp3.sfk
2015-09-04 18:13 - 2015-09-04 18:13 - 32596498 _____ C:\Users\302-\Downloads\Österreichische Begriffe.rar
2015-09-04 15:06 - 2015-03-27 18:50 - 04938520 _____ (Piriform Ltd) C:\Users\302-\Desktop\recuva64.exe
2015-09-04 15:05 - 2015-09-04 15:05 - 04000946 _____ C:\Users\302-\Downloads\rcsetup1.5.2_slim.zip
2015-09-03 22:09 - 2015-09-03 22:21 - 00006472 _____ C:\Users\302-\Downloads\Sad Trombone Wah Wah Wah Fail Sound Effect.mp3.sfk
2015-09-03 22:01 - 2015-09-03 22:01 - 108800816 _____ (Apple Inc.) C:\Users\302-\Downloads\iTunesSetup.exe
2015-09-03 20:42 - 2015-09-03 21:21 - 00181720 _____ C:\Users\302-\Downloads\Drop_and_Roll.mp3.sfk
2015-09-03 15:45 - 2015-09-03 15:45 - 00918336 _____ C:\Windows\Minidump\090315-18564-01.dmp
2015-09-03 01:56 - 2015-09-03 01:57 - 00013864 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4.sfk
2015-09-03 01:56 - 2015-09-03 01:56 - 03551842 _____ C:\Users\302-\Downloads\Guerilla-Krieg #1 [Rückrunde] -- Black Ops 1 -- Admiral E -- gegen fifasuchtla [German - HD].mp4
2015-09-02 17:44 - 2015-09-02 17:44 - 00001201 _____ C:\Users\302-\Desktop\Uplay.lnk
2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Users\302-\AppData\Local\Ubisoft Game Launcher
2015-09-02 17:44 - 2015-09-02 17:44 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2015-09-01 22:15 - 2015-09-01 22:15 - 00276728 _____ C:\Windows\Minidump\090115-23150-01.dmp
2015-08-31 22:18 - 2015-08-31 22:18 - 00000000 ____D C:\Users\302-\AppData\Roaming\MPEG Streamclip
2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-08-31 22:12 - 2015-08-31 22:12 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-08-31 21:37 - 2015-08-31 21:46 - 03223256 _____ C:\Users\Public\Viele Hacker, gutes Gameplay am Ende 36 Kills - Kopie.mp3.sfk
2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free MP4 MP3 Converter
2015-08-31 20:50 - 2015-08-31 20:50 - 00000000 ____D C:\Program Files (x86)\free-mp4-mp3-converter
2015-08-29 14:18 - 2015-08-29 14:18 - 00001216 _____ C:\Users\302-\Desktop\Movie Studio Platinum 12.0 (64-bit).lnk
2015-08-29 14:11 - 2015-08-29 14:11 - 00715038 _____ C:\Windows\unins000.exe
2015-08-29 14:10 - 2015-08-29 14:11 - 00003448 _____ C:\Windows\unins000.dat
2015-08-29 14:10 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2015-08-29 14:10 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2015-08-27 15:30 - 2015-08-27 15:30 - 00782872 _____ C:\Windows\Minidump\082715-18002-01.dmp
2015-08-26 03:00 - 2015-08-26 03:00 - 00000222 _____ C:\Users\302-\Desktop\Call of Duty Black Ops III Beta.url
2015-08-26 01:51 - 2015-08-26 01:51 - 00781856 _____ C:\Windows\Minidump\082615-33774-01.dmp
2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Users\302-\AppData\Local\Dxtory Software
2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0
2015-08-25 13:19 - 2015-08-25 13:19 - 00000000 ____D C:\Program Files (x86)\ExKode
2015-08-25 13:19 - 2014-06-08 22:14 - 02610736 _____ (ExKode Co. Ltd.) C:\Windows\system32\DxtoryCodec.dll
2015-08-25 13:19 - 2014-06-08 22:14 - 02508336 _____ (ExKode Co. Ltd.) C:\Windows\SysWOW64\DxtoryCodec.dll
2015-08-24 22:46 - 2015-09-19 17:27 - 00000000 ____D C:\Users\302-\Documents\Movie Studio Platinum 12.0 Projekte
2015-08-24 22:46 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Roaming\Publish Providers
2015-08-24 22:43 - 2015-08-24 22:46 - 00000000 ____D C:\Users\302-\AppData\Local\Sony
2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Sony
2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-08-24 22:43 - 2015-08-24 22:44 - 00000000 ____D C:\Program Files (x86)\Sony
2015-08-24 22:43 - 2015-08-24 22:43 - 00000000 ____D C:\Program Files\Sony
2015-08-24 22:41 - 2015-08-24 23:50 - 00000000 ____D C:\Users\302-\AppData\Roaming\Sony
2015-08-22 00:14 - 2009-05-04 14:55 - 00040208 _____ (CACE Technologies) C:\Windows\SysWOW64\Drivers\aztech_npf64.sys
2015-08-22 00:13 - 2015-08-22 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomePlugAV Utility
2015-08-20 14:49 - 2015-08-20 14:49 - 00000000 ____D C:\Users\302-\AppData\Roaming\Downloaded Installations
2015-08-20 14:49 - 2015-08-20 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PingPlotter
2015-08-20 14:49 - 2015-08-19 02:49 - 00000040 ____H C:\Program Files (x86)\2fe72cf2.tmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-19 19:38 - 2010-11-21 08:50 - 00700130 _____ C:\Windows\system32\perfh007.dat
2015-09-19 19:38 - 2010-11-21 08:50 - 00149768 _____ C:\Windows\system32\perfc007.dat
2015-09-19 19:38 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-19 19:38 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-19 19:38 - 2009-07-14 06:45 - 00028704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-19 19:37 - 2014-08-22 18:30 - 01965562 _____ C:\Windows\WindowsUpdate.log
2015-09-19 19:34 - 2015-02-16 22:07 - 00000000 ____D C:\ProgramData\Origin
2015-09-19 19:34 - 2015-01-04 17:57 - 00000000 ____D C:\Users\302-\AppData\Roaming\Raptr
2015-09-19 19:34 - 2014-12-24 23:57 - 00000000 ____D C:\Users\302-\AppData\Local\CrashDumps
2015-09-19 19:34 - 2014-08-25 22:42 - 00000000 ____D C:\Users\302-\AppData\Roaming\Skype
2015-09-19 19:34 - 2014-08-25 16:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-19 19:34 - 2010-11-21 09:00 - 00000000 ____D C:\Windows\ShellNew
2015-09-19 19:34 - 2010-11-21 05:47 - 00594948 _____ C:\Windows\PFRO.log
2015-09-19 19:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-19 19:34 - 2009-07-14 06:51 - 00086685 _____ C:\Windows\setupact.log
2015-09-19 19:22 - 2014-08-31 16:05 - 00000000 ____D C:\Users\302-\AppData\Roaming\TS3Client
2015-09-19 19:21 - 2014-08-25 16:31 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-19 18:05 - 2015-05-12 16:23 - 00000000 ____D C:\Users\302-\AppData\Local\gtk-2.0
2015-09-19 18:05 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.gimp-2.8
2015-09-19 17:16 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-09-19 17:15 - 2014-12-31 17:53 - 00000000 ____D C:\Program Files (x86)\Fitbit Connect
2015-09-19 16:24 - 2015-08-04 20:16 - 00000000 ____D C:\Users\302-\AppData\Roaming\Audacity
2015-09-19 15:46 - 2014-11-15 22:29 - 00000000 ____D C:\Fraps
2015-09-19 14:57 - 2014-08-26 23:59 - 00000000 ____D C:\Users\302-\Desktop\Shepherd of Fire
2015-09-19 14:23 - 2015-01-30 16:21 - 00000000 ____D C:\Program Files (x86)\Minecraft
2015-09-19 13:49 - 2014-08-25 22:41 - 00000000 ____D C:\Users\302-\AppData\Local\Spotify
2015-09-19 13:48 - 2014-08-25 22:40 - 00000000 ____D C:\Users\302-\AppData\Roaming\Spotify
2015-09-19 13:17 - 2009-07-14 06:45 - 00309464 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-18 21:38 - 2015-04-24 18:28 - 00000000 ____D C:\Users\302-\Desktop\saves
2015-09-18 17:26 - 2014-08-25 16:20 - 00070064 _____ C:\Users\302-\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-18 03:02 - 2014-11-15 23:11 - 00000000 ____D C:\Users\302-\AppData\Roaming\vlc
2015-09-16 22:00 - 2014-08-27 00:21 - 00000000 ____D C:\Windows\Minidump
2015-09-16 07:52 - 2014-08-26 17:12 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-16 00:41 - 2014-08-25 16:20 - 00000000 ____D C:\Users\302-
2015-09-14 20:16 - 2014-08-25 16:31 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-14 20:16 - 2014-08-25 16:31 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-13 22:12 - 2015-04-24 18:28 - 00000000 ____D C:\Users\302-\Desktop\resourcepacks
2015-09-13 01:17 - 2015-05-12 16:20 - 00000000 ____D C:\Users\302-\.thumbnails
2015-09-10 13:53 - 2014-08-25 16:31 - 00000000 ____D C:\Users\302-\AppData\Local\Google
2015-09-09 23:07 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 23:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-09 23:05 - 2015-04-14 22:31 - 00000000 ____D C:\Windows\system32\MRT
2015-09-02 14:00 - 2015-02-16 22:07 - 00000000 ____D C:\Program Files (x86)\Origin
2015-09-01 11:46 - 2014-08-22 18:36 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-31 22:14 - 2014-10-06 19:52 - 00000000 ____D C:\Users\302-\AppData\Local\Apple Computer
2015-08-31 00:38 - 2015-04-25 21:41 - 00000080 _____ C:\Users\302-\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-08-31 00:31 - 2015-04-25 19:43 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-08-31 00:31 - 2015-04-25 19:42 - 00000000 ____D C:\Program Files\Rockstar Games
2015-08-30 23:09 - 2015-02-16 22:08 - 00000000 ____D C:\Users\302-\AppData\Roaming\Origin
2015-08-29 16:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-26 18:37 - 2015-04-14 22:31 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-26 17:13 - 2015-08-08 00:01 - 00001134 _____ C:\Users\Public\Desktop\Game Capture HD.lnk
2015-08-26 14:20 - 2014-08-26 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-08-26 03:00 - 2014-08-26 17:19 - 00000000 ____D C:\Users\302-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-25 12:26 - 2014-08-31 16:05 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-24 18:46 - 2015-08-06 01:58 - 00000000 ____D C:\Users\302-\AppData\Local\Windows Live
2015-08-22 02:14 - 2015-08-19 21:33 - 00000000 ____D C:\Users\302-\AppData\Local\FluxSoftware
2015-08-22 00:13 - 2014-08-22 18:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-20 14:49 - 2015-08-19 02:49 - 0000040 ____H () C:\Program Files (x86)\2fe72cf2.tmp
2015-09-19 18:05 - 2015-09-19 18:05 - 0073565 _____ () C:\Users\302-\AppData\Local\recently-used.xbel
2014-08-22 18:39 - 2014-08-22 18:39 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\302-\worldpainter_64_1.11.1.exe


Einige Dateien in TEMP:
====================
C:\Users\302-\AppData\Local\Temp\avgnt.exe
C:\Users\302-\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-11 00:53

==================== Ende von FRST.txt ============================

AdmiralE · 19.09.2015, 18:42

Addition (Antivir ist jetzt wieder eingeschaltet, hatte es nach JRT vergessen wieder anzustellen, daher steht es in diesem Log noch als "disabled" :P)

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von 302- (2015-09-19 19:40:50)
Gestartet von C:\Users\302-\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-08-25 14:20:23)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

302- (S-1-5-21-570197401-3978400442-3683679341-1000 - Administrator - Enabled) => C:\Users\302-
Administrator (S-1-5-21-570197401-3978400442-3683679341-500 - Administrator - Disabled)
Gast (S-1-5-21-570197401-3978400442-3683679341-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avira (HKLM-x32\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)
Battlefield 4™ CTE (HKLM-x32\...\{551A08D1-B60E-4DED-9B67-C3B38258CCA3}) (Version: 1.0.2.33598 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Besiege (HKLM-x32\...\Steam App 346010) (Version:  - Spiderling Studios)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.0.2282.0 - Microsoft Corporation)
Blender (HKLM\...\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - Treyarch)
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Black Ops III Beta (HKLM-x32\...\Steam App 388520) (Version:  - Treyarch)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
DVD Architect Studio 5.0 (HKLM-x32\...\{E42939AE-9660-11E2-9A0D-F04DA23A5C58}) (Version: 5.0.178 - Sony)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elgato Game Capture HD (HKLM-x32\...\{BB567603-AAA6-4AAA-BFC7-5C8EC0971650}) (Version: 2.11.43.962 - Elgato Systems GmbH)
Fitbit Connect (HKLM-x32\...\{08002BE6-6476-4012-8D4B-CF0AE7C71F29}) (Version: 2.0.0.6518 - Fitbit Inc.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free MP4 MP3 Converter 3.0.1 (HKLM-x32\...\Free MP4 MP3 Converter) (Version: 3.0.1 - ZISUN Freeware)
Game Capture HD v2.3.3.38 (HKLM-x32\...\Software_Elgato_Game Capture HD) (Version: 2.3.3.38 - Elgato Systems)
Gameforge Live 2.0.7 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.7 - Gameforge)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.6.1 - Reto-Moto)
HomePlug AV Ethernet Adapter (HKLM-x32\...\{2DFC446B-8A6E-4EF3-99DF-C89E37DB156D}) (Version:  - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Metin2 (HKLM-x32\...\Metin2_is1) (Version:  - Gameforge 4D GmbH)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{6C3C3A70-958D-11E2-B0E5-F04DA23A5C58}) (Version: 12.0.896 - Sony)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.3 - Notepad++ Team)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
PingPlotter 4.01.2 (HKLM-x32\...\{7C20D443-1352-49AB-90D8-71CC34C50917}) (Version: 4.1.2.14 - Pingman Tools, LLC)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Sound Blaster Z-Series (HKLM-x32\...\{E48EE8B8-1CD6-4F60-AB93-7C398DAAE08E}) (Version: 1.00.21 - Creative Technology Limited)
Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{75B7DF80-925B-11E2-94F5-F04DA23A5C58}) (Version: 10.0.245 - Sony)
Spotify (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\Spotify) (Version: 1.0.14.124.g4dfabc51 - Spotify AB)
Startfenster (HKLM-x32\...\Startfenster) (Version:  - Startfenster)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Evil Within (HKLM-x32\...\Steam App 268050) (Version:  - Tango Gameworks)
The Witcher 3: Wild Hunt (HKLM-x32\...\Steam App 292030) (Version:  - CD PROJEKT RED)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.9.6 - Electronic Arts)
Uplay (HKLM-x32\...\Uplay) (Version: 7.4 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder Launcher 1.0.1.397 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warships (HKU\S-1-5-21-570197401-3978400442-3683679341-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
WorldPainter 1.11.1 (HKLM\...\4144-4862-0472-7103) (Version: 1.11.1 - pepsoft.org)
Worms Ultimate Mayhem (HKLM-x32\...\Steam App 70600) (Version:  - Team17 Software Ltd.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

19-09-2015 17:12:47 ComboFix created restore point
19-09-2015 19:37:51 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-09-19 17:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1B4C5D0A-96AC-4DC6-8FCE-70B47C7D3C0D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2A7C7229-544E-4E0D-A68E-81A6F296FE6C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {44D533B7-9979-4838-91D5-B9948CEDB889} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {504D497B-CDB8-4686-ABBD-EE02DDEB12F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {71596BB6-953D-4B48-845A-BC95605F571C} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {778A3B73-50D3-4D60-872B-5A2F7239F585} - System32\Tasks\{05266ED9-F493-426B-9A0D-787DD87292F2} => pcalua.exe -a C:\Users\302-\Desktop\forge-1.7.2-10.12.2.1121-installer-win.exe -d C:\Users\302-\Desktop

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-09-19 17:16 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\302-\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-09-16 03:22 - 2015-09-12 02:22 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libglesv2.dll
2015-09-16 03:22 - 2015-09-12 02:22 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.93\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows\Temp:$DATA

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-570197401-3978400442-3683679341-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\302-\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{A21238D4-6021-4579-9743-65D460373C02}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{B86369D1-7369-43F7-8FB8-9DC16EF5136F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{13EAD04A-BF46-4FAB-922E-BDA20453D36D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{307A1DD2-E22F-4C72-B4EE-03A5C1937828}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{41561678-51CD-4CCF-AB49-1562FB9B997C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AE499744-5198-4AB8-BB00-C38151141BCA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F2767255-905A-418B-850E-9C52D994230E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{60D25865-1D5E-49A0-8D2C-73E550BCF002}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{DAB37258-4657-4F53-B6C4-E3639E692683}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5AE2ECF8-941E-49A7-9CA0-8D15C3C17D60}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [{0D49A9F8-89B1-4B94-96C0-E6BF08C2ED57}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{F65B0709-096C-4A94-A461-A27192A87ED4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{15A6CF55-7638-46BB-B54F-450A4AFDFD7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{1D48A4DB-E10D-4645-872C-2CE3BCDF0CB2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [TCP Query User{9D600FEE-CAFD-4754-AAD6-6B3AB085B767}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{43EDB761-C6B5-4748-9980-A446F92B2068}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{45119345-79B6-498A-90A7-344CAF6A20FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{5C006A65-1280-4025-93EB-B2A2C042BC65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{76842799-2953-4434-A3D3-D017F0719E4A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{0175E2FD-788F-4E30-AA80-A4E1F809868C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{C0DDBE2B-617A-4B19-8BD7-FF5209D29F79}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{F93EDCC5-E716-44A6-A8EF-4DEE31FC1EB0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{CEA18D57-EF55-4981-9BAE-8707A793DF02}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{2782807F-CC9A-4CFE-B1C2-59B020EA75BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{E255702F-89DE-4911-ADC4-58A78FB9423A}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [{9167B2A4-11E3-4DE3-A0DE-FC77A71D54C8}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [TCP Query User{6C274B12-97C1-4099-AFE2-01895FF260C3}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [UDP Query User{0D2A8895-8B18-454C-B943-CA8B22578C77}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [{79DAC04E-562A-464E-A824-2E7E82B7A41B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9415316C-69B8-462E-8595-770E6C74A357}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{61116760-18BD-4EE7-9E44-10961F78C21C}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D08BCAAA-BAFA-4DD8-BF3E-BC9190825F05}C:\users\302-\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\302-\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{17ADCC1C-7487-4E69-A446-FFE9BD9962BF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{2FA126F1-D8B5-4F01-8E44-0B231934133C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{016D8929-7329-47B7-BA08-40DC0B6A82E4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{15183706-446C-44F8-8CCC-ED3448622337}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6032C9D7-502D-4525-8C1C-457DBE8475F9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{72214781-06BE-42B5-8E66-A7AEA3237EF6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8501085A-5C8F-4024-B2EF-ABF10A3B9C1E}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{C7E75C1E-0E6A-4943-8E41-F309FF3C8B32}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5DB5A6FB-5A93-4C1D-B745-DAABE9210D6D}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{8A3975EF-F4A5-4AEC-9BDB-8718E5C9E853}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{66ED9E23-85C9-4E48-95BF-60119ACF20BB}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{54E08AA1-59BD-41EB-A6DB-20DC8CD49255}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{A4F286DC-D5AE-444B-9FB4-63B3C0B6AD6A}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{25B7039E-DA45-45C9-8282-F5F244C0CE0D}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{DCB93497-B86A-42B9-BDBB-17D363C84229}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{A76A7F8E-F6CC-4134-813C-04E23C6406F1}] => (Allow) E:\SteamLibrary\SteamApps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{243D456B-E571-453A-92AF-E6A96D7A824B}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe
FirewallRules: [{6094A5AA-8170-486B-B97B-80C3507CE55D}] => (Allow) E:\SteamLibrary\SteamApps\common\WormsXHD\Launcher.exe
FirewallRules: [{5E344668-DBA8-4C92-9C2E-8B7D0FD20797}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{21442C22-988F-4C99-ACD4-6C9376033077}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{EECDBAF8-19F8-4E95-9311-9EBE04A12827}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{A65C09E5-ECAB-47CA-9FF0-F3073C98DC9C}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{4CA6BA93-539A-475B-957F-C2F999D80C34}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{5A3DF4B6-D156-4FC3-AD9B-738907A205B9}] => (Allow) E:\SteamLibrary\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{34383B4E-A683-4140-9426-CEF18C00D2CD}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{06BAFC08-2A00-47EA-8177-8D7B1BDE20C4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{D1F6DD60-EB3D-4BE9-B175-AD10D27BC3A1}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{2489C84C-FA21-49C1-AF37-7E4EB8F7C8B1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{428FCB94-A049-4F25-B1F1-F18F4CB41BF9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B6507A59-9E5D-407C-A71C-1903E250D391}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D0C168F1-460D-45A8-B5AE-39D037371059}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{015D2BDE-64B1-4564-A82A-1F6D941DF2C7}] => (Allow) E:\Origin\Titanfall\Titanfall.exe
FirewallRules: [{F5A492B6-57E0-4AA9-8CF2-AF3FDBDAAA13}] => (Allow) E:\Origin\Titanfall\Titanfall.exe
FirewallRules: [{875CCF35-EEEF-46D4-8E95-B3D6A3317E47}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{480840CB-70A7-42E8-BE64-414F132E161A}] => (Allow) E:\SteamLibrary\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [TCP Query User{5BB423DA-3B7F-4F80-BFF0-0FC05C4A8160}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{0F40E0F6-D55A-4558-B10F-ADAD53FE4C50}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{65A64F62-4486-4E17-9AA7-660C4772DE79}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{DD2A2D18-917D-4314-B600-7F9F461D03F2}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{26ECAD15-EDB3-4FB0-8377-69C1608957C4}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{DE7E784A-07C1-4173-AB7D-ED5031F26EC2}] => (Allow) E:\SteamLibrary\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{68CDA800-ACA5-4CC0-862F-3845B267907A}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [{9B239324-9FC5-46A8-82BD-3AB8302FF638}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe
FirewallRules: [{BA216860-CE6A-41E6-9CCE-DA6759D1AA1A}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte_x86.exe
FirewallRules: [{DCC78CCB-6E90-4EDA-A798-BCDE507287BD}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe
FirewallRules: [{AE067506-477C-4C87-85D9-BF2ECFE0C20C}] => (Allow) E:\Origin\Battlefield 4 CTE\bf4cte.exe
FirewallRules: [TCP Query User{827E3664-75CA-4867-9595-52E7C12FF220}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{F6F402DB-0380-47E5-A950-44A98123AB2E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{DF295CD8-9679-4EF2-9B51-8DEE969B5FCC}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe
FirewallRules: [UDP Query User{190C28F9-A638-4F9B-A9FF-0339EF9E04D3}E:\wows\wowslauncher.exe] => (Allow) E:\wows\wowslauncher.exe
FirewallRules: [{279F74AD-E7DA-4E3D-B2AE-47AD3AC4E7DE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{032FEBD4-5B37-4C6D-964B-166CD1782410}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{56EE51A9-7D98-4690-9375-FD0EF2802358}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3D661413-EEC8-4372-B531-42FB21C4983B}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe
FirewallRules: [{1368E948-28E1-40D2-809A-889138CE8C27}] => (Allow) C:\Program Files (x86)\Heroes & Generals\live\hng.exe
FirewallRules: [{386B31F2-6240-4E82-A4A0-3718CC79177C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{127DCA54-266E-4C8F-97F5-640A8A86AD5C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{F71DA277-258C-4E02-8FB9-4CA70DF4C42B}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{6C0C0A8B-D3FF-462E-B931-EE196C3E3C3E}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{34215F91-2C28-4732-8855-200DDA463699}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8418F0EF-339C-4BC5-B4E1-AAA18825A1CC}] => (Allow) LPort=2869
FirewallRules: [{2AC34B33-1E7E-4E78-86BB-0C2D05335003}] => (Allow) LPort=1900
FirewallRules: [{23E683D5-512D-4597-B316-D15F22128713}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe
FirewallRules: [{FE4F5940-082F-4004-83D8-D7F9431B1B83}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEX86WebHelper.exe
FirewallRules: [{6CE4C917-117B-4B1D-BF6A-8D46B0B892A1}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe
FirewallRules: [{38FFD8AA-165E-43EB-BEC6-201A4D177243}] => (Allow) E:\Origin\Battlefield 4 CTE\BF4CTEWebHelper.exe
FirewallRules: [{845269B4-F0BF-4418-877D-E5E1D125F304}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{60B8867F-8714-4DA9-B3C1-2FD73EC2F264}] => (Allow) E:\SteamLibrary\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{DE4D4459-6701-4D89-864F-B02EBD793A23}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe
FirewallRules: [{16001459-A2B5-48B2-876C-AF6FD5F61A72}] => (Allow) E:\SteamLibrary\SteamApps\common\Call of Duty Black Ops III Beta\BlackOps3.exe
FirewallRules: [{A79A0BA9-4198-480F-839F-1E2C58FE52CF}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{20581424-7ACC-49FA-9607-0073E2049728}] => (Allow) E:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{D514A8B0-EF32-49FF-8CFF-10336D781803}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/19/2015 07:34:50 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 07:34:40 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 07:34:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0xdec
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3

Error: (09/19/2015 07:34:29 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.Systray.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Configuration.ConfigurationErrorsException
Stack:
   at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(System.String, Boolean, Boolean, Boolean, Boolean, System.Object ByRef, System.Object ByRef)
   at System.Configuration.BaseConfigurationRecord.GetSection(System.String)
   at System.Configuration.ClientConfigurationSystem.System.Configuration.Internal.IInternalConfigSystem.GetSection(System.String)
   at System.Configuration.ConfigurationManager.GetSection(System.String)
   at System.Configuration.ConfigurationManager.get_AppSettings()
   at Avira.OE.WinCore.OeProductInfo.get_Culture()
   at Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   at Avira.OE.Systray.Program.Main(System.String[])

Error: (09/19/2015 07:34:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2015 07:34:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 07:25:12 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 07:25:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.TypeInitializationException
Stack:
   at NLog.Common.InternalLogger.Debug(System.String, System.Object[])
   at NLog.LogFactory.get_Configuration()
   at NLog.LogFactory.GetLogger(LoggerCacheKey)
   at NLog.LogFactory.GetLogger(System.String)
   at NLog.LogManager.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetLogger(System.String)
   at Avira.OE.WinCore.Utility.LoggerFacade.GetCurrentClassLogger()
   at Avira.OE.WinCore.Lazy`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Value()
   at Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   at Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (09/19/2015 07:24:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.21.25189, Zeitstempel: 0x53fdd63b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd8e7
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0xe18
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3

Error: (09/19/2015 07:24:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (09/19/2015 07:38:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 07:38:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 07:38:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/19/2015 07:38:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 07:38:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 07:38:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/19/2015 07:38:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/19/2015 07:38:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/19/2015 07:38:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Fitbit Connect Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 07:38:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Sound Blaster Audio Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2015-09-19 17:15:16.391
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-09-19 17:15:16.371
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Prozentuale Nutzung des RAM: 17%
Installierter physikalischer RAM: 16287 MB
Verfügbarer physikalischer RAM: 13403.96 MB
Summe virtueller Speicher: 32572.2 MB
Verfügbarer virtueller Speicher: 29396.19 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:16.07 GB) NTFS
Drive d: (MSP120Suite) (CDROM) (Total:2.94 GB) (Free:0 GB) CDFS
Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:327.67 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: E8D2D00F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

M-K-D-B · 20.09.2015, 12:33

Servus,

Starte FRST erneut. Kopiere den Inhalt der folgenden Code-Box oben in die Zeile:
Code:
ATTFilter
```
AskPartnerNetwork;APN, LLC;Search App by Ask;Shopping App by Ask;
         
```
Drücke auf Registry-Suche.
FRST beginnt mit dem Suchlauf. Dies kann einige Zeit dauern.
Am Ende erstellt FRST eine Textdatei Search.txt.
Poste mir deren Inhalt mit deiner nächsten Antwort.

AdmiralE · 20.09.2015, 13:32

Code:

ATTFilter

Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von 302- (2015-09-20 14:32:29)
Gestartet von C:\Users\302-\Desktop
Start-Modus: Normal

================== Registry-Suche: "AskPartnerNetwork;APN, LLC;Search App by Ask;Shopping App by Ask" ===========


===================== Suchergebnis für "AskPartnerNetwork" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210\SourceList\Net]
"2"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Source"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F4453535D205547A857BC0C110\SourceList\Net]
"2"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Source"

[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahlfahldnilidgnlikdckbfehhca]
""="C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaaahlfahldnilidgnlikdckbfehhca.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-SPE\Updater\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\AskPartnerNetwork\Toolbar\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Source\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\IDC\"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\ORJ-ST-SPE\"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-SPE\CRX\115.3\"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0A5AC497E6BBC8D45BE8AD6619DA8217]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\Shutdown\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\VersionCompareDigits"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\17B41397C4D32387E427F8A36224A357]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\PlatformVersion"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\InvokePath"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22A78C977EC431247B2ECECC374DFE13]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\toolbar_x64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CCA446A92700E64B8BFD9C1C622AE2E]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\PackageService\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4724E387144393B7E457C4B493645A55]
"D2A425F4453535D205547A857BC0C110"="C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahaeginbdcckocjkhbciadcafnep.crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\576433C7A45343873427D4246364CA44]
"D2A425F4453535D205547A857BC0C110"="C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahlfahldnilidgnlikdckbfehhca.crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\UpdateManager.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36]
"D2A425F4453535D205547A857BC0C110"="01:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\TotalTBEverLanded"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89EA4F1B8FBCDEF47AE328E455E28AA0]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub_x64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\CheckInterval"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\LastCheckTimestamp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\APNNativeMsgHost.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A08449608E3Ca1f4ABF236256A256754]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A8CB937199A57E748B6AC433DA453EE2]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4]
"D2A425F405350054677A7A857BC02210"="01:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\EnableSA"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4A0F1727D5FA054EA812CDF2DDD1D27]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB9AD9C4759E4D24E940AD04A0AF85F9]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\osDetail"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6A54B56C58C82a4688AFB93F42EA17B]
"D2A425F4453535D205547A857BC0C110"="01:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\hpgdisable"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\ask-search.xml"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\UpdateAllSubPackageToVersion"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0850AB4748E4]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\timeinstalled_ie"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0850AB477508]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\lastInstallOperation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0850AB47877E]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\ProductVersion"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0850AB47F670]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0850ABC7977A]
"D2A425F405350054677A7A857BC02210"="C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-SPE\CRX\115.3\Toolbar.crx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0C760877A6E5]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ComStorage\{4F524A2D-5350-4500-76A7-7A786E7484D7}\PartnerName"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A0C7678479D46]
"D2A425F405350054677A7A857BC02210"="22:\SOFTWARE\AskPartnerNetwork\Toolbar\ComStorage\{4F524A2D-5350-4500-76A7-7A786E7484D7}\PartnerID"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A7777D8556974]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677A7B7987A75C7A]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\Browsers"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677AA75CE8770476]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\ORJ-SPE\Version"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677AB8640F7C7477]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\hpr_cr"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677AB8640FD798E7]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\ProductType"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F405350054677AB8640FE4A77A]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-SPE\Info\sa_ie"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D205540850AB47487C]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\timeinstalled_cr"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D205540850AB477508]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\lastInstallOperation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D205540850AB47877E]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\ProductVersion"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D205540850AB47F670]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D205540CF64469657A]
"D2A425F4453535D205547A857BC0C110"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\ORJ-ST-SPE\config.xml"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D205547B7987A75C7A]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\Browsers"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D20554A75CE8770476]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\ORJ-ST-SPE\Version"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D20554B8640F7CA77A]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\sa_cr"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2A425F4453535D20554B8646F7C7C79]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Info\Cr_Crx_Ids"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D538E650623CB2C43AD5FBF587227D55]
"D2A425F405350054677A7A857BC02210"="C:\Program Files (x86)\AskPartnerNetwork\Toolbar\toolbar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48]
"D2A425F405350054677A7A857BC02210"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\Version"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFF85BE02C628C348AE2B40EACDA218B]
"D2A425F4453535D205547A857BC0C110"="02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\osArchitecture"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahaeginbdcckocjkhbciadcafnep]
""="C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaaahaeginbdcckocjkhbciadcafnep.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf]
""="C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf.json"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe"="1"

===================== Suchergebnis für "APN, LLC" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210\InstallProperties]
"Publisher"="APN, LLC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F4453535D205547A857BC0C110\InstallProperties]
"Publisher"="APN, LLC"


===================== Suchergebnis für "Search App by Ask" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210]
"ProductName"="Search App by Ask"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210\InstallProperties]
"DisplayName"="Search App by Ask"


===================== Suchergebnis für "Shopping App by Ask" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F4453535D205547A857BC0C110]
"ProductName"="Shopping App by Ask"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F4453535D205547A857BC0C110\InstallProperties]
"DisplayName"="Shopping App by Ask"

====== Ende von Suche ======

M-K-D-B · 20.09.2015, 13:43

Wir entfernen noch die letzten Reste und kontrollieren anschließend nochmal alles, damit dein Rechner auch sauber ist.
Hinweis: Die Suchläufe mit EEK und ESET können länger dauern.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahlfahldnilidgnlikdckbfehhca
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahaeginbdcckocjkhbciadcafnep
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210
RemoveProxy:
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Lade Dir bitte von hier

Emsisoft Emergency Kit herunter.

Bitte installiere das Programm in den vorgegebenen Pfad.
Starte das Programm durch Doppelklick der Desktopverknüpfung.
Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.

Schritt 3
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Schritt 4

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von EEK,
die Logdatei von HitmanPro,
die Logdatei von ESET.

AdmiralE · 20.09.2015, 17:18

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von 302- (2015-09-20 17:12:25) Run:1
Gestartet von C:\Users\302-\Desktop
Geladene Profile: 302- (Verfügbare Profile: 302-)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahlfahldnilidgnlikdckbfehhca
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahaeginbdcckocjkhbciadcafnep
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210
RemoveProxy:
EmptyTemp:
end
*****************

Prozess erfolgreich geschlossen.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210 => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210 => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahlfahldnilidgnlikdckbfehhca => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaahaeginbdcckocjkhbciadcafnep => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210 => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210 => Schlüssel erfolgreich entfernt

========= RemoveProxy: =========

HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========

EmptyTemp: => 557 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.. 

==== Ende von Fixlog 17:12:29 ====

Code:

ATTFilter

Emsisoft Emergency Kit - Version 10.0
Letztes Update: 20.09.2015 17:19:06
Benutzerkonto: KUNDEN-6P3VFCVU\302-

Scan-Einstellungen:

Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	20.09.2015 17:20:13
Value: HKEY_USERS\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR 	Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS 	Gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS 	Gefunden: Setting.DisableRegistryTools (A)

Gescannt:	78787
Gefunden	3

Scan-Ende:	20.09.2015 17:20:58
Scan-Zeit:	0:00:45

Value: HKEY_USERS\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS	Gelöscht Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS	Gelöscht Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-570197401-3978400442-3683679341-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR	Gelöscht Setting.DisableTaskMgr (A)

Gelöscht	3

Code:

ATTFilter


	Code: 

 ATTFilter

  
	HitmanPro 3.7.9.245
www.hitmanpro.com

   Computer name . . . . : KUNDEN-6P3VFCVU
   Windows . . . . . . . : 6.1.1.7601.X64/8
   User name . . . . . . : KUNDEN-6P3VFCVU\302-
   UAC . . . . . . . . . : Disabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2015-09-20 17:23:16
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 1m 24s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 102

   Objects scanned . . . : 1.772.471
   Files scanned . . . . : 45.367
   Remnants scanned  . . : 351.098 files / 1.376.006 keys

Suspicious files ____________________________________________________________

   C:\Users\302-\AppData\Local\PunkBuster\BF4\pb\PnkBstrK.sys
      Size . . . . . . . : 139.208 bytes
      Age  . . . . . . . : 215.7 days (2015-02-17 00:35:11)
      Entropy  . . . . . : 7.8
      SHA-256  . . . . . : A64F3FC517760D44E844601709A02914F57CCE243A2D8FAA4FD1D30D353B584F
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\302-\Desktop\FRST64.exe
      Size . . . . . . . : 2.191.360 bytes
      Age  . . . . . . . : 1.1 days (2015-09-19 15:03:40)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 3DFD4A9CE96E4FAC6D2BE1485E3C3AB8EFE87F0B2692616FA70B56D8F454C7A8
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Users\302-\Downloads\FRST64.exe
      Size . . . . . . . : 2.191.360 bytes
      Age  . . . . . . . : 1.1 days (2015-09-19 15:02:28)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 3DFD4A9CE96E4FAC6D2BE1485E3C3AB8EFE87F0B2692616FA70B56D8F454C7A8
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Windows\PEV.exe
      Size . . . . . . . : 256.000 bytes
      Age  . . . . . . . : 1.0 days (2015-09-19 17:12:46)
      Entropy  . . . . . : 8.0
      SHA-256  . . . . . : AE0F5CC54E4B133DF66A54572A7CE52FAFF11F8FD0CAEAB088AAD3699D6EC924
      Fuzzy  . . . . . . : 22.0
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         The .rsrc (resources) section in this program is set to executable. This is an indication of malware infection.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
         Program contains PE structure anomalies. This is not typical for most programs.
      Forensic Cluster
         -4.4s C:\Qoobox\Quarantine\Registry_backups\
         -4.4s C:\Qoobox\
         -4.4s C:\Qoobox\Quarantine\
         -0.7s C:\Qoobox\BackEnv\
         -0.7s C:\Qoobox\Quarantine\catchme.log
         -0.0s C:\Windows\SWXCACLS.exe
         -0.0s C:\Windows\SWSC.exe
          0.0s C:\Windows\sed.exe
          0.0s C:\Windows\grep.exe
          0.0s C:\Windows\zip.exe
          0.0s C:\Windows\SWREG.exe
          0.0s C:\Windows\PEV.exe
          0.0s C:\Windows\NIRCMD.exe
          0.0s C:\Windows\MBR.exe
          2.6s C:\System Volume Information\SPP\OnlineMetadataCache\{6e0a89e6-67be-4717-9826-316dbc8084b2}_OnDiskSnapshotProp
          9.7s C:\Qoobox\BackEnv\AppData.folder.dat
          9.7s C:\Qoobox\BackEnv\Cache.folder.dat
          9.7s C:\Qoobox\BackEnv\Cookies.folder.dat
          9.7s C:\Qoobox\BackEnv\Desktop.folder.dat
          9.7s C:\Qoobox\BackEnv\Favorites.folder.dat
          9.7s C:\Qoobox\BackEnv\History.folder.dat
          9.7s C:\Qoobox\BackEnv\LocalAppData.folder.dat
          9.7s C:\Qoobox\BackEnv\LocalSettings.folder.dat
          9.7s C:\Qoobox\BackEnv\Music.folder.dat
          9.7s C:\Qoobox\BackEnv\NetHood.folder.dat
          9.7s C:\Qoobox\BackEnv\Personal.folder.dat
          9.7s C:\Qoobox\BackEnv\Pictures.folder.dat
          9.7s C:\Qoobox\BackEnv\PrintHood.folder.dat
          9.7s C:\Qoobox\BackEnv\Profiles.Folder.dat
          9.7s C:\Qoobox\BackEnv\Profiles.Folder.folder.dat
          9.7s C:\Qoobox\BackEnv\Profiles_wo_ntuser.Folder.dat
          9.7s C:\Qoobox\BackEnv\Programs.folder.dat
          9.7s C:\Qoobox\BackEnv\Recent.folder.dat
          9.7s C:\Qoobox\BackEnv\SendTo.folder.dat
          9.7s C:\Qoobox\BackEnv\StartMenu.folder.dat
          9.7s C:\Qoobox\BackEnv\StartUp.folder.dat
          9.7s C:\Qoobox\BackEnv\Templates.folder.dat
          9.8s C:\Qoobox\BackEnv\SysPath.dat
          9.8s C:\Qoobox\BackEnv\SetPath.bat
          9.8s C:\Qoobox\BackEnv\VikPev00
         10.0s C:\Qoobox\Quarantine\C\


Potential Unwanted Programs _________________________________________________

   C:\Program Files (x86)\Startfenster\ (Startfenster)
   C:\Program Files (x86)\Startfenster\startfenster.ico (Startfenster)
   C:\Program Files (x86)\Startfenster\uninst.exe (Startfenster)
      Size . . . . . . . : 131.500 bytes
      Age  . . . . . . . : 308.8 days (2014-11-15 23:10:12)
      Entropy  . . . . . : 5.1
      SHA-256  . . . . . : C37D4C5D750AD19850F7CA01FE765409FC0240AB24C2E0AE62FFC3AAD9CAFF62
      Fuzzy  . . . . . . : -6.0

   HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF\ (AskBar)
   HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}\ (AskBar)
   HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06B42F08F6F40FA4F83EA94EF9F03F63\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06FCEE940712E4B4C8A7362CD8D249A1\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\085CE460BADC1D14EA94D8A62E517577\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0A5AC497E6BBC8D45BE8AD6619DA8217\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B2690283E07C9B4085B3B794202E7F7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12D3738E79C70C74E9D808E162BD6691\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\189F6D048E923EA48B11D15B30CDAC81\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F0968491626AD249A2A6CBAC4DE352D\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22A78C977EC431247B2ECECC374DFE13\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CAC1D959B4188B4F8E8C251A25DA9DB\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33990057697C62f47BB9FFD59CB4AEEB\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\41BF64DDE5C2457478691CB0675759BA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42F5B13BF4BAD8D409578286A354E360\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4374E71C5355C4B4AACC93BBBF40E99F\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4410C9B6FF0094C418865CD2B243B258\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45B0A4620F799834C82DE0BD4E90E40B\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4859A93046C917F408248F3C16F75E77\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A3D29BA507550f4F87F6F33D42B24D6\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4E28C30B25E21BF4C9418857AEB2AF7C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50390A9E27AD04A4698BF297EF564973\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D5D3B13CCBA08C479F107E50BD81C8A\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\661134B612233374391C95E8AC373BA3\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\734F787B99D52824EAB6CA1A89F801F7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73A172B6C18A3594A9FA363311A187A3\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A0CF0C6A9F9B8642A392A1896DCCCF2\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE43E6BAE0DC0B43883C669D8DCE8B1\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7EC46CC5C43127A45A99762BF7A9C9E5\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFDE7BEC9977ac46B41B0A2BF7D88CD\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8011A895DAAC4CC45AF1397E3CE9CA16\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81EE804DA9066C64A859E01A38075C59\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\879DDA62492E58A40898AD146BBB572E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88761D7BAC02ccc428CD5EF352BB933C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89EA4F1B8FBCDEF47AE328E455E28AA0\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CB53AD495D2C5443B95C9EE29E47902\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F85A4D374D5bf245B8722C062C2D00E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9516FC331A505934FA76C22DCFFEC47E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97ECFF59EE08D4F47BB1464DEC37DA87\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A08449608E3Ca1f4ABF236256A256754\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A431C8F3F57D7844B89242F5F7A5F62C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A66E2D84F93A9E94FBA6AB3524D85958\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A8CB937199A57E748B6AC433DA453EE2\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA27FE018F87f5e4F97F31C09E7C5370\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC049320EE27170499EC0B6124142ED7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B448F401EF39C8346BF7BE9B8D1C7060\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4E78E12704AFCE408C7FBE501F1AA0A\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5211271DD585A740AA28576B137D09D\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B58469E2C54833741B90BAD9CE5A1159\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6DA77032731EEE40B463A325128D613\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCC2BCA248E19F74F9AEDE4D1EFEFBC9\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6A54B56C58C82a4688AFB93F42EA17B\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C70C6F53DEE245249956FC291D801A71\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7C0052DD04CBC84C81C0AC586485E50\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C879DCC3D00BE8E4282F02F1735E78DF\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9FBD8E8A2691564FA012512BCC3748C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB3AEBFFA9E907145906294AB669B1F2\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE142BFA81B72674892EB318BD603CB0\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE90A73A5D5A01a43A2EDCCF04BA9487\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D05B2B3F5629f9d41A7E57FB534168CA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D158B0E5D051EA046B8E08BF6B004842\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D45A81F48EF19334EABB33FF8871C4F5\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D538E650623CB2C43AD5FBF587227D55\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8D06C15BF8AFCD449EFF90B935AEF7C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB1AE396B3BBfe940922C55C6EEF740A\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDF89DEE0C7E9A5448382117C4436818\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E55AA93871A0fde4490A708053AC6501\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E954A03F45EC92B419A55A0D4815C0A3\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E97C12D46BF588241856422D760336B4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EA1332016439DD54C840C7D45CFB2705\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EFBB6B0872B0DBB4D912A0F52986399D\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F0390A76D28822743A68D7F1AB22E6D0\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646\ (AskBar)
   HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster\ (Startfenster)

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2d23e94e79298c46973fea90b39a8324
# end=init
# utc_time=2015-09-20 03:27:04
# local_time=2015-09-20 05:27:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 25853
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2d23e94e79298c46973fea90b39a8324
# end=updated
# utc_time=2015-09-20 03:28:25
# local_time=2015-09-20 05:28:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=2d23e94e79298c46973fea90b39a8324
# engine=25853
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-09-20 03:56:24
# local_time=2015-09-20 05:56:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 33658030 194394434 0 0
# scanned=324724
# found=0
# cleaned=0
# scan_time=1679

Alle Suchläufe abgeschlossen.

M-K-D-B · 21.09.2015, 13:35

Da wurde ja doch noch was gefunden.

Es könnte sein, dass die Meldung von Avira ein Fehlalarm ist.
Könntest du bitte Mincraft nochmal deinstallieren und anschließend neu herunterladen (nicht installieren).
Überprüfe die heruntergeladene Datei bei VirusTotal:
Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.

Klicke auf Wählen Sie eine
Kopiere nun folgendes in die Suchleiste
Code:
ATTFilter
```
<Pfad zu der Datei>\<Dateiname.exe>
         
```
und klicke auf Öffnen.
Klicke auf Scannen!.
Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen

Zitat:

Diese Datei wurde bereits von VirusTotal analysiert...

klicke auf Neu analysieren.
Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
C:\Program Files (x86)\Startfenster
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster
DeleteKey: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}
DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
RemoveProxy:
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Schritt 3
Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei desSecurityCheck,
die Logdatei von FSS,
die beiden neuen Logdateien von FRST.

Avira - Minecraft.exe enthält TR/agent?

Plagegeister aller Art und deren Bekämpfung: Avira - Minecraft.exe enthält TR/agent?