|
Log-Analyse und Auswertung: WIN10: Beim Start öffnet sich Baidu SuchmaschineWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
28.09.2015, 10:22 | #1 |
| WIN10: Beim Start öffnet sich Baidu Suchmaschine Hey liebe Community, Kurz zum bisherigen Verlauf: Ich habe mir einen neuen Laptop zugelegt, hatte daher keine Anti-Malewareprogramme. Habe dann dummerweise versucht Programme herunterzuladen, die mir Windwos 10 aktivieren. Dabei habe ich mir etlich viel Maleware eingefangen. Mit Malewarebytes etc. habe ich (hoffentlich) fast (!) alle wieder runtergekriegt. Meine Probleme: 1. Wenn ich meinen Laptop neu starte, öffnet sich ganz kurz für max. 1 Sekunde die Website der chinesischen Suchmaschine "baidu". 2. Wenn ich im Taskmanager auf Prozesse rechtsklicke und auf "online suchen" klicke, öffnet sich jedes mal die Website von baidu. Im Taskmanager sind jedoch keine fremden Prozesse. Auch im Autostart ist nur das nötigste eingeschaltet. Die Alternative besteht, dass ich Windows 10 einfach neu installiere. Sprich das System komplett erneure. Jedoch würde ich zuvor gerne andere Wege bestreiten. Euer SchwarzArbeiter. Ist mein erstes Thema in einem Forum wie diesem, ich lade euch Logs etc. hoch. Falls was fehlt, sagt mir bitte einfach bescheid. Gmer kann ich euch leider nicht geben, während des Suchlaufs kam eine Fehlermeldung, dass der Laptop neugestartet werden muss. |
28.09.2015, 10:40 | #2 |
/// the machine /// TB-Ausbilder | WIN10: Beim Start öffnet sich Baidu Suchmaschine Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
28.09.2015, 10:59 | #3 |
| WIN10: Beim Start öffnet sich Baidu SuchmaschineCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-09-2015 01 durchgeführt von Ramon (Administrator) auf RAMON (28-09-2015 10:59:13) Gestartet von C:\Users\Ramon\Downloads Geladene Profile: Ramon (Verfügbare Profile: Ramon) Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3347688 2015-09-25] (ELAN Microelectronics Corp.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322712 2014-10-09] (Intel Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\Run: [Viber] => C:\Users\Ramon\AppData\Local\Viber\Viber.exe [776400 2015-02-25] () HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57864728 2015-09-17] (Skype Technologies S.A.) HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-19] (Piriform Ltd) HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4594552 2015-06-16] (Safer-Networking Ltd.) AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => Keine Datei AppInit_DLLs-x32: C:\ProgramData\LolliScan\LolliScan32.dll => Keine Datei ShellIconOverlayIdentifiers: [Fatlfn] -> {646BAAE7-7538-4866-8EEE-974C0AA910AB} => C:\ProgramData\aaaaaaaaaaaa.dll [2015-09-26] (xinfubaby) ShellIconOverlayIdentifiers-x32: [Fatlfn] -> {646BAAE7-7538-4866-8EEE-974C0AA910AB} => C:\ProgramData\aaaaaaaaaaaa.dll [2015-09-26] (xinfubaby) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-09-25] ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{5B62C353-75A3-463F-A52E-CC005846F3CE}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{4775908a-5761-4baa-8052-0b105db86b08}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{b0c0a5de-3357-4d9e-b718-d513725088ee}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{b0c0a5de-3357-4d9e-b718-d513725088ee}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge HomeButtonPage: [S-1-5-21-2350521397-4095467815-1910750544-1001] -> hxxp://www.oursurfing.com/?type=hp&ts=1443221196&z=189c3bffcd774a7611451cdgez1zcc1o5o8g9g2teq&from=2sq&uid=wdcxwd10jpvx-22jc3t0_wd-wx71a158aekf8aekf FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-26] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-26] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2350521397-4095467815-1910750544-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ramon\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation) Chrome: ======= CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1443224823&z=960d6d693c42be3d26260f9gbz2z4c8o7o6z0q9c9b&from=cmi&uid=WDCXWD10JPVX-22JC3T0_WD-WX71A158AEKF8AEKF CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shdefault&prd=smw&pid=s&shr=d&q={searchTerms}&s=F9Pzamobl08173,9e96501a-be2d-4ee6-817a-18e8b48de199, CHR DefaultSearchKeyword: Default -> www-searching.com CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms} CHR Profile: C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-25] CHR Extension: (Google Docs) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-25] CHR Extension: (Google Drive) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-25] CHR Extension: (YouTube) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Google-Suche) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-25] CHR Extension: (Google Tabellen) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-25] CHR Extension: (Google Text & Tabellen Offline) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-25] CHR Extension: (AdBlock) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-09-25] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-25] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-25] CHR Extension: (Google Mail) - C:\Users\Ramon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25] StartMenuInternet: Google Chrome - Chrome.exe ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S4 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-09-25] (BitRaider, LLC) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18584 2014-10-09] (Intel Corporation) S4 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [124520 2014-10-21] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-09-25] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation) S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-25] (Electronic Arts) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [360448 2014-08-18] (Qualcomm Atheros) [Datei ist nicht signiert] S4 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.) S4 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.) S4 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.) R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [971968 2015-02-02] (@ByELDI) [Datei ist nicht signiert] S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [97968 2014-08-13] (Qualcomm Atheros, Inc.) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation) S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [141624 2014-05-13] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1424184 2014-06-17] (Motorola Solutions, Inc.) R3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [41080 2015-09-28] () R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [225008 2014-10-21] (Intel Corporation) R3 Ke2200; C:\Windows\System32\drivers\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3496216 2015-07-10] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-02-21] (Realsil Semiconductor Corporation) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-28 10:59 - 2015-09-28 10:59 - 00380416 _____ C:\Users\Ramon\Downloads\Gmer-19357.exe 2015-09-28 10:59 - 2015-09-28 10:59 - 00018065 _____ C:\Users\Ramon\Downloads\FRST.txt 2015-09-28 10:59 - 2015-09-28 10:59 - 00000000 ____D C:\FRST 2015-09-28 10:58 - 2015-09-28 10:59 - 02192384 _____ (Farbar) C:\Users\Ramon\Downloads\FRST64.exe 2015-09-28 10:58 - 2015-09-28 10:58 - 00000472 _____ C:\Users\Ramon\Downloads\defogger_disable.log 2015-09-28 10:58 - 2015-09-28 10:58 - 00000000 _____ C:\Users\Ramon\defogger_reenable 2015-09-28 10:57 - 2015-09-28 10:57 - 00380416 _____ C:\Users\Ramon\Downloads\r2l1dge3.exe 2015-09-28 10:57 - 2015-09-28 10:57 - 00050477 _____ C:\Users\Ramon\Downloads\Defogger.exe 2015-09-28 10:47 - 2015-09-28 10:47 - 00016148 _____ C:\Windows\system32\RAMON_Ramon_HistoryPrediction.bin 2015-09-28 10:46 - 2015-09-28 10:46 - 00000320 _____ C:\Windows\system32\.crusader 2015-09-28 10:44 - 2015-09-28 10:44 - 00000275 _____ C:\Windows\WindowsUpdate.log 2015-09-28 10:43 - 2015-09-28 10:47 - 00041080 _____ C:\Windows\system32\Drivers\hitmanpro37.sys 2015-09-28 10:42 - 2015-09-28 10:46 - 00000000 ____D C:\ProgramData\HitmanPro 2015-09-28 10:42 - 2015-09-28 10:42 - 11350472 _____ (SurfRight B.V.) C:\Users\Ramon\Downloads\HitmanPro_x64.exe 2015-09-28 10:42 - 2015-09-28 10:42 - 00000000 ____D C:\AdwCleaner 2015-09-28 10:41 - 2015-09-28 10:42 - 10367880 _____ (SurfRight B.V.) C:\Users\Ramon\Downloads\HitmanPro.exe 2015-09-28 10:41 - 2015-09-28 10:41 - 01670656 _____ C:\Users\Ramon\Downloads\adwcleaner_5.009.exe 2015-09-28 10:34 - 2015-09-28 10:34 - 00001662 _____ C:\Windows\PFRO.log 2015-09-28 10:28 - 2015-09-28 10:28 - 00000000 ____D C:\Users\Ramon\Desktop\Anti-Malware 2015-09-28 09:48 - 2015-09-28 09:48 - 00259584 _____ (OldTimer Tools) C:\Users\Ramon\Downloads\OTH.scr 2015-09-28 09:38 - 2015-09-28 09:38 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Ramon\Downloads\SpyHunter-Installer.exe 2015-09-28 01:44 - 2015-09-28 01:44 - 00000000 ____D C:\Windows\system32\SleepStudy 2015-09-28 01:42 - 2015-09-28 10:13 - 00004152 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for RAMON-Ramon Ramon 2015-09-28 00:32 - 2015-09-28 00:32 - 00001260 _____ C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Origin.lnk 2015-09-28 00:26 - 2015-09-28 00:26 - 17113896 _____ (Electronic Arts, Inc.) C:\Users\Ramon\Downloads\OriginThinSetup (1).exe 2015-09-28 00:25 - 2015-09-28 00:26 - 17113896 _____ (Electronic Arts, Inc.) C:\Users\Ramon\Downloads\OriginThinSetup.exe 2015-09-27 23:32 - 2015-09-27 23:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA 2015-09-27 23:32 - 2015-09-27 23:32 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2015-09-27 23:32 - 2015-09-27 23:32 - 00000000 _____ C:\end 2015-09-27 23:18 - 2015-09-27 23:18 - 29720272 _____ C:\Users\Ramon\Downloads\SWTOR_setup.exe 2015-09-27 23:17 - 2015-09-27 23:29 - 00008094 _____ C:\Users\Ramon\Documents\Uninstall STAR WARS The Old Republic.log 2015-09-27 23:17 - 2015-09-27 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-09-27 22:47 - 2015-09-27 22:47 - 00000358 _____ C:\Users\Ramon\Downloads\launcher.settings 2015-09-27 22:46 - 2015-09-27 22:46 - 00000000 ____D C:\Users\Ramon\Downloads\locales 2015-09-27 22:46 - 2015-09-27 22:46 - 00000000 ____D C:\Users\Ramon\Downloads\EULAs 2015-09-27 22:46 - 2015-09-27 22:46 - 00000000 ____D C:\Users\Ramon\Downloads\bitraider 2015-09-27 22:46 - 2012-03-14 20:39 - 00010560 _____ C:\Users\Ramon\Downloads\eualas.version 2015-09-27 22:44 - 2015-09-27 22:46 - 18021088 _____ C:\Users\Ramon\Downloads\LauncherRepairUtilityP1.78.3a.exe 2015-09-26 17:15 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2015-09-26 17:15 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2015-09-26 17:15 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2015-09-26 17:15 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2015-09-26 17:15 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2015-09-26 17:15 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2015-09-26 14:43 - 2015-09-26 14:43 - 00003456 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart 2015-09-26 14:43 - 2015-09-26 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico 2015-09-26 14:43 - 2010-12-06 04:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll 2015-09-26 03:54 - 2015-09-27 20:21 - 00000000 ____D C:\Users\Ramon\Documents\My Games 2015-09-26 02:11 - 2015-09-26 03:20 - 00051615 _____ C:\Windows\wininit.ini 2015-09-26 02:11 - 2015-09-26 02:11 - 00140332 ____R C:\Windows\system32\Drivers\etc\hosts.20150926-021108.backup 2015-09-26 01:56 - 2015-09-28 10:47 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-09-26 01:56 - 2015-09-26 01:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-09-26 01:56 - 2015-09-26 01:56 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-09-26 01:56 - 2015-09-26 01:56 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-09-26 01:56 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-09-26 01:56 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-09-26 01:56 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-09-26 01:55 - 2015-09-26 01:56 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Ramon\Downloads\mbam-setup-2.1.8.1057.exe 2015-09-26 01:48 - 2015-09-28 10:34 - 00001036 _____ C:\Windows\Tasks\4bcrx3RK5xSGU0fyyijKsmn6Qa.job 2015-09-26 01:48 - 2015-09-28 10:12 - 00003720 _____ C:\Windows\System32\Tasks\4bcrx3RK5xSGU0fyyijKsmn6Qa 2015-09-26 01:47 - 2015-09-26 02:10 - 00000000 ____D C:\Program Files (x86)\globalUpdate 2015-09-26 01:47 - 2015-09-26 01:47 - 00000292 _____ C:\task.vbs 2015-09-26 01:47 - 2015-09-26 01:47 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 2015-09-26 01:47 - 2015-09-26 01:47 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-09-26 01:47 - 2015-09-26 01:47 - 00000000 ____D C:\Users\Ramon\AppData\Local\globalUpdate 2015-09-26 01:45 - 2015-09-26 01:45 - 00000000 ____D C:\Program Files\Common Files\AV 2015-09-26 01:36 - 2015-09-28 10:47 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-09-26 01:36 - 2015-09-28 10:41 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-09-26 01:36 - 2015-09-26 01:36 - 00004178 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-26 01:36 - 2015-09-26 01:36 - 00003946 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-26 01:36 - 2015-09-26 01:36 - 00000000 ____D C:\Users\Ramon\AppData\Local\Deployment 2015-09-26 01:36 - 2015-09-26 01:36 - 00000000 ____D C:\Users\Ramon\AppData\Local\Apps\2.0 2015-09-26 01:33 - 2015-09-26 01:33 - 00000000 ____D C:\Program Files (x86)\predm 2015-09-26 01:26 - 2015-09-28 09:36 - 00004152 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9BCDDAC5-B889-44E3-B61F-E21581FF3FC4} 2015-09-26 01:23 - 2015-09-26 01:23 - 00002850 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-09-26 01:23 - 2015-09-26 01:23 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\WB_CFG 2015-09-26 01:23 - 2015-09-26 01:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-09-26 01:23 - 2015-09-26 01:23 - 00000000 ____D C:\Program Files\CCleaner 2015-09-26 01:22 - 2015-09-26 01:22 - 05431152 _____ (Piriform Ltd) C:\Users\Ramon\Downloads\ccsetup509_slim.exe 2015-09-26 01:22 - 2015-09-26 01:22 - 05431152 _____ (Piriform Ltd) C:\Users\Ramon\Downloads\ccsetup509_slim (1).exe 2015-09-26 01:05 - 2015-09-26 01:05 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\ppslog 2015-09-26 00:55 - 2015-09-28 10:13 - 00002282 _____ C:\Windows\System32\Tasks\ngs3012 2015-09-26 00:55 - 2015-09-26 00:55 - 00000354 ____H C:\Windows\Tasks\YYNIDDLIOXLYJEJB.job 2015-09-26 00:55 - 2015-09-26 00:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-09-26 00:55 - 2015-09-26 00:55 - 00000000 ____D C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066 2015-09-26 00:55 - 2015-09-26 00:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-09-26 00:55 - 2015-09-02 15:01 - 00140177 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-09-26 00:54 - 2015-09-26 00:54 - 00443200 _____ (xinfubaby) C:\ProgramData\aaaaaaaaaaaa.dll 2015-09-26 00:54 - 2015-09-26 00:54 - 00000000 _____ C:\ProgramData\inf.dat 2015-09-26 00:53 - 2015-09-26 02:10 - 00000000 ____D C:\ProgramData\uiksdl201592522 2015-09-26 00:53 - 2015-09-26 00:53 - 00000452 _____ C:\Windows\Tasks\Adobe Flash box Files Update Ver 2015925.job 2015-09-26 00:53 - 2015-09-26 00:53 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7k7k游戏盒子(925) 2015-09-26 00:53 - 2015-09-26 00:53 - 00000000 ____D C:\ProgramData\adb 2015-09-26 00:53 - 2015-09-26 00:53 - 00000000 ____D C:\ProgramData\4997GameBox_Data 2015-09-26 00:52 - 2015-09-26 00:52 - 00000000 ____D C:\Users\Ramon\AppData\Local\Unity 2015-09-26 00:52 - 2015-09-26 00:52 - 00000000 ____D C:\Users\Public\QiYi 2015-09-26 00:52 - 2015-09-26 00:52 - 00000000 ____D C:\ppsfile 2015-09-26 00:47 - 2015-09-28 10:47 - 00000312 _____ C:\Windows\Tasks\AOBFERUU.job 2015-09-26 00:46 - 2015-09-26 01:45 - 00000000 ____D C:\Program Files (x86)\RayDld 2015-09-26 00:45 - 2015-09-26 00:45 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\NVIDIA 2015-09-26 00:43 - 2015-09-26 02:10 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6 2015-09-25 22:07 - 2015-09-26 01:28 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-09-25 22:05 - 2015-09-26 02:11 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-09-25 22:05 - 2015-09-26 01:27 - 00000000 ____D C:\ProgramData\Adobe 2015-09-25 22:05 - 2015-09-25 22:05 - 00000000 ____D C:\Program Files (x86)\Adobe 2015-09-25 22:04 - 2015-09-28 10:24 - 00000000 ____D C:\Users\Ramon\AppData\Local\Adobe 2015-09-25 21:57 - 2015-09-25 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-09-25 21:57 - 2015-09-25 21:57 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2015-09-25 21:57 - 2015-09-25 21:57 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2015-09-25 21:56 - 2015-09-25 21:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2015-09-25 21:56 - 2015-09-25 21:56 - 00000000 ____D C:\Windows\PCHEALTH 2015-09-25 21:56 - 2015-09-25 21:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-09-25 21:55 - 2015-09-25 21:57 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-09-25 21:55 - 2015-09-25 21:56 - 00000000 ____D C:\Program Files\Microsoft Office 2015-09-25 21:55 - 2015-09-25 21:55 - 00000000 __RHD C:\MSOCache 2015-09-25 21:55 - 2015-09-25 21:55 - 00000000 ____D C:\Users\Ramon\AppData\Local\Microsoft Help 2015-09-25 21:55 - 2015-09-25 21:55 - 00000000 ____D C:\Program Files\Microsoft Analysis Services 2015-09-25 21:55 - 2015-09-25 21:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2015-09-25 21:55 - 2015-09-25 21:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services 2015-09-25 21:54 - 2015-09-14 02:24 - 42840184 _____ C:\Windows\system32\nvcompiler.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 37819000 _____ C:\Windows\SysWOW64\nvcompiler.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 22559352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 18569848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 17934400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 16646112 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 15631128 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 15336024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 14945040 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 13666840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 12611632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 12191856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 03077544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 02354808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 02105976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 01898104 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435598.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 01558832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435598.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 01075320 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 01064056 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00986416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00945272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00787384 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00632664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00408184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00387720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00364152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00316120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00177088 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-09-25 21:54 - 2015-09-14 02:24 - 00155792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-09-25 21:54 - 2015-08-11 06:52 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2015-09-25 21:54 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2015-09-25 21:54 - 2015-08-11 06:52 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2015-09-25 21:49 - 2015-09-25 21:53 - 304224616 _____ (NVIDIA Corporation) C:\Users\Ramon\Downloads\355.98-notebook-win10-64bit-international-whql.exe 2015-09-25 21:48 - 2015-09-25 21:48 - 00000000 ____D C:\Program Files\DIFX 2015-09-25 21:45 - 2015-09-26 01:25 - 00000000 ____D C:\Windows\Panther 2015-09-25 21:45 - 2015-09-25 21:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btmhsf_01011.Wdf 2015-09-25 21:45 - 2015-09-25 21:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf 2015-09-25 21:45 - 2015-09-25 21:45 - 00000000 ____D C:\Users\Ramon\Documents\Meine empfangenen Dateien 2015-09-25 21:44 - 2015-09-25 21:55 - 00000000 ____D C:\Windows\LastGood 2015-09-25 21:44 - 2013-08-21 09:16 - 00053248 ____R (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2015-09-25 21:42 - 2013-09-16 12:17 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll 2015-09-25 21:41 - 2015-09-25 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2015-09-25 21:40 - 2015-09-25 21:42 - 00000000 ____D C:\ProgramData\Intel 2015-09-25 21:40 - 2015-09-25 21:40 - 01819570 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2015-09-25 21:40 - 2015-09-25 21:40 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-09-25 21:40 - 2015-09-25 21:40 - 00000000 ____D C:\Users\Ramon\Intel 2015-09-25 21:40 - 2015-09-25 21:40 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Intel Corporation 2015-09-25 21:40 - 2015-09-25 21:40 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\InstallShield 2015-09-25 21:40 - 2013-09-16 12:17 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll 2015-09-25 21:40 - 2013-09-16 12:17 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2015-09-25 21:39 - 2015-09-26 01:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-09-25 21:38 - 2015-09-26 01:37 - 00000000 ____D C:\Program Files (x86)\Google 2015-09-25 21:38 - 2015-09-25 21:53 - 00000000 ____D C:\Users\Ramon\AppData\Local\Google 2015-09-25 21:37 - 2015-09-25 21:38 - 00929872 _____ (Google Inc.) C:\Users\Ramon\Downloads\ChromeSetup.exe 2015-09-25 21:37 - 2015-09-25 21:37 - 00000000 ____D C:\Windows\SysWOW64\sda 2015-09-25 21:37 - 2014-02-21 09:40 - 00466648 ____R (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsPer.sys 2015-09-25 21:37 - 2014-01-27 07:39 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll 2015-09-25 21:36 - 2015-09-25 21:36 - 00000000 ____D C:\ProgramData\Qualcomm 2015-09-25 21:36 - 2015-09-25 21:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros 2015-09-25 21:36 - 2015-09-25 21:36 - 00000000 ____D C:\Program Files\Qualcomm Atheros 2015-09-25 21:35 - 2015-09-25 21:35 - 00000000 ____D C:\ProgramData\Downloaded Installations 2015-09-25 21:35 - 2015-09-25 21:35 - 00000000 _____ C:\Users\Ramon\AppData\Local\Driver_LOM_8161Present.flag 2015-09-25 21:34 - 2015-09-25 21:34 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2015-09-25 21:34 - 2015-09-25 21:34 - 00000000 ____D C:\Program Files\Realtek 2015-09-25 21:34 - 2014-02-18 13:42 - 03867992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2015-09-25 21:34 - 2014-02-18 11:33 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2015-09-25 21:34 - 2014-02-18 10:56 - 00749977 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2015-09-25 21:34 - 2014-02-18 08:33 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2015-09-25 21:34 - 2014-02-18 04:35 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2015-09-25 21:34 - 2014-02-17 10:04 - 02788056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2015-09-25 21:34 - 2014-02-03 18:45 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2015-09-25 21:34 - 2014-01-28 05:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2015-09-25 21:34 - 2013-12-31 05:16 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2015-09-25 21:34 - 2013-12-04 10:27 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2015-09-25 21:34 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2015-09-25 21:34 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2015-09-25 21:34 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2015-09-25 21:34 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2015-09-25 21:34 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2015-09-25 21:34 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2015-09-25 21:34 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2015-09-25 21:34 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2015-09-25 21:34 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2015-09-25 21:34 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2015-09-25 21:34 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2015-09-25 21:34 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2015-09-25 21:34 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2015-09-25 21:34 - 2009-11-18 01:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys 2015-09-25 21:33 - 2015-09-25 21:36 - 00000000 ____D C:\Program Files (x86)\Realtek 2015-09-25 21:33 - 2015-09-25 21:35 - 00000000 ___HD C:\Program Files (x86)\Temp 2015-09-25 21:33 - 2014-02-18 11:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2015-09-25 21:33 - 2014-02-17 12:03 - 01999128 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll 2015-09-25 21:33 - 2014-02-17 12:03 - 01728280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll 2015-09-25 21:33 - 2014-02-03 18:45 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2015-09-25 21:33 - 2014-02-03 18:45 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2015-09-25 21:33 - 2014-01-20 13:11 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2015-09-25 21:33 - 2014-01-08 09:25 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll 2015-09-25 21:33 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2015-09-25 21:33 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2015-09-25 21:33 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2015-09-25 21:33 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2015-09-25 21:32 - 2015-09-26 15:01 - 00000000 ____D C:\Program Files\KMSpico 2015-09-25 21:32 - 2015-09-25 21:32 - 00004608 _____ C:\Windows\SECOH-QAD.exe 2015-09-25 21:32 - 2015-09-25 21:32 - 00003584 _____ C:\Windows\SECOH-QAD.dll 2015-09-25 21:31 - 2015-09-25 21:31 - 00000000 ____D C:\Users\Ramon\Desktop\activation 2015-09-25 21:30 - 2015-09-25 21:40 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-09-25 21:30 - 2015-09-25 21:30 - 00000000 ____D C:\Program Files (x86)\MSI 2015-09-25 21:29 - 2015-09-25 21:29 - 00000000 ____D C:\Users\Ramon\AppData\Local\NVIDIA 2015-09-25 21:28 - 2015-09-25 21:55 - 00000000 ____D C:\ProgramData\NVIDIA 2015-09-25 21:23 - 2015-09-25 21:44 - 00000000 ____D C:\Program Files\Elantech 2015-09-25 21:23 - 2014-08-28 03:56 - 00428808 _____ (ELAN Microelectronics Corp.) C:\Windows\system32\Drivers\ETD.sys 2015-09-25 21:23 - 2014-08-26 07:11 - 00041736 _____ (ELAN Microelectronics Corp.) C:\Windows\system32\ETDCoInstaller.dll 2015-09-25 21:22 - 2015-09-25 21:22 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435362.dll 2015-09-25 21:22 - 2015-09-25 21:22 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435362.dll 2015-09-25 21:22 - 2015-09-25 15:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-09-25 21:22 - 2015-09-25 15:53 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-09-25 21:22 - 2015-09-25 15:53 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-09-25 21:22 - 2015-09-22 00:55 - 11198080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-09-25 21:22 - 2015-09-14 02:24 - 03484216 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-09-25 21:22 - 2015-09-14 02:24 - 00034098 _____ C:\Windows\system32\nvinfo.pb 2015-09-25 21:22 - 2015-09-14 00:04 - 06885168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 03496056 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 02558584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 01062008 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 00937776 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-09-25 21:22 - 2015-09-14 00:04 - 00385144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 00074872 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-09-25 21:22 - 2015-09-11 14:17 - 05231082 _____ C:\Windows\system32\nvcoproc.bin 2015-09-25 21:17 - 2014-10-21 14:33 - 00225008 _____ (Intel Corporation) C:\Windows\system32\Drivers\ibtusb.sys 2015-09-25 21:07 - 2015-09-28 10:47 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-09-25 21:07 - 2015-09-25 21:45 - 00000000 ____D C:\Program Files (x86)\Intel 2015-09-25 21:07 - 2015-09-25 21:07 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2015-09-25 21:07 - 2015-09-25 21:07 - 00000000 ____D C:\Intel 2015-09-25 21:07 - 2015-09-25 21:06 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2015-09-25 21:07 - 2015-09-25 21:06 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2015-09-25 21:06 - 2015-09-25 21:41 - 00000000 ____D C:\Program Files\Intel 2015-09-25 21:06 - 2015-09-25 21:06 - 36681912 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 35768808 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 30404056 _____ (Intel Corporation) C:\Windows\system32\igd11dxva64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 29613040 _____ (Intel Corporation) C:\Windows\SysWOW64\igd11dxva32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 29084160 _____ (Intel Corporation) C:\Windows\system32\common_clang64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 19844096 _____ (Intel Corporation) C:\Windows\SysWOW64\common_clang32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 13727296 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 12880160 _____ (Intel Corporation) C:\Windows\system32\igc64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 11384832 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 11276968 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 10528136 _____ (Intel Corporation) C:\Windows\SysWOW64\igc32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 08507392 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 06741482 _____ C:\Windows\system32\igdclbif.bin 2015-09-25 21:06 - 2015-09-25 21:06 - 06389688 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2015-09-25 21:06 - 2015-09-25 21:06 - 06305696 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 05467648 _____ (Intel Corporation) C:\Windows\system32\igdmcl64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 05245440 _____ (Intel Corporation) C:\Windows\system32\GfxResources.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 05121136 _____ (Intel Corporation) C:\Windows\system32\igd12umd64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 05092320 _____ (Intel Corporation) C:\Windows\SysWOW64\igd12umd32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 04841488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 04443136 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 03873280 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 03801600 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmcl32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 02813952 _____ C:\Windows\system32\iglhxa64.cpa 2015-09-25 21:06 - 2015-09-25 21:06 - 02028032 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01858632 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01767992 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01765408 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01565696 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01456408 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01216000 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01156608 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 01008016 _____ C:\Windows\system32\igfxSDK.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00970752 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00927120 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00923536 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00803113 _____ C:\Windows\system32\DisplayAudiox64.cab 2015-09-25 21:06 - 2015-09-25 21:06 - 00723456 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00641530 _____ C:\Windows\system32\FilmModeDetection.wmv 2015-09-25 21:06 - 2015-09-25 21:06 - 00624128 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00589712 _____ C:\Windows\system32\IntelCpHDCPSvc.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00519056 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00511260 _____ C:\Windows\system32\cp_resources.bin 2015-09-25 21:06 - 2015-09-25 21:06 - 00448912 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00425472 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00403671 _____ C:\Windows\system32\ImageStabilization.wmv 2015-09-25 21:06 - 2015-09-25 21:06 - 00397824 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00396688 _____ C:\Windows\system32\igfxTray.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00386048 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00375173 _____ C:\Windows\system32\ColorImageEnhancement.wmv 2015-09-25 21:06 - 2015-09-25 21:06 - 00373248 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00353280 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00351120 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00331808 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCComp64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00328080 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00313888 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00300032 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00284280 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00283024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00269360 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00256000 _____ C:\Windows\system32\igfxCPL.cpl 2015-09-25 21:06 - 2015-09-25 21:06 - 00249232 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00243200 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00220432 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00219024 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00214416 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00213904 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v4256.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00200856 _____ (Intel Corporation) C:\Windows\system32\igdde64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00184352 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00172032 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00163776 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00162752 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00160680 _____ (Intel Corporation) C:\Windows\SysWOW64\igdde32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00157072 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2015-09-25 21:06 - 2015-09-25 21:06 - 00153600 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00143904 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00141080 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00140056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00090112 _____ ( ) C:\Windows\system32\igfxSDKLibv2_0.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00086016 _____ C:\Windows\system32\igfxCUIServicePS.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00082944 _____ ( ) C:\Windows\system32\igfxSDKLib.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00073728 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00064512 _____ ( ) C:\Windows\system32\igfxDHLib.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00044025 _____ C:\Windows\system32\iglhxo64.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00043816 _____ C:\Windows\system32\iglhxc64_dev.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00043494 _____ C:\Windows\system32\iglhxc64.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00043298 _____ C:\Windows\system32\iglhxg64_dev.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00043256 _____ C:\Windows\system32\iglhxg64.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00042079 _____ C:\Windows\system32\iglhxo64_dev.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00036616 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00035328 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00011776 _____ ( ) C:\Windows\system32\igfxDILib.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00011264 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00004682 _____ C:\Windows\system32\iglhxs64.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00001125 _____ C:\Windows\system32\iglhxa64.vp 2015-09-25 21:06 - 2015-09-25 21:06 - 00000000 ____D C:\Windows\LastGood.Tmp 2015-09-25 21:04 - 2015-09-25 21:04 - 00193336 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8x64.sys 2015-09-25 21:04 - 2015-09-25 21:04 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\TeamViewer 2015-09-25 21:01 - 2015-09-25 21:37 - 00000000 ____D C:\Users\Ramon\AppData\Local\MicrosoftEdge 2015-09-25 21:00 - 2015-09-28 10:05 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\TS3Client 2015-09-25 21:00 - 2015-09-25 21:00 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Macromedia 2015-09-25 21:00 - 2015-09-25 21:00 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\LolClient 2015-09-25 20:59 - 2015-09-26 02:11 - 00002358 _____ C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-09-25 20:59 - 2015-09-25 20:59 - 00000000 ___RD C:\Users\Ramon\OneDrive 2015-09-25 20:59 - 2015-09-25 20:59 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2015-09-25 20:57 - 2015-09-28 10:58 - 00000000 ____D C:\Users\Ramon 2015-09-25 20:57 - 2015-09-28 10:24 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Adobe 2015-09-25 20:57 - 2015-09-25 20:57 - 00016148 _____ C:\Windows\system32\DESKTOP-7RPOL6E_defaultuser0_HistoryPrediction.bin 2015-09-25 20:57 - 2015-09-25 20:57 - 00000020 ___SH C:\Users\Ramon\ntuser.ini 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Vorlagen 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Startmenü 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Netzwerkumgebung 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Lokale Einstellungen 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Eigene Dateien 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Druckumgebung 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Documents\Eigene Musik 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Documents\Eigene Bilder 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\AppData\Local\Verlauf 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\AppData\Local\Anwendungsdaten 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 _SHDL C:\Users\Ramon\Anwendungsdaten 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 ___RD C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 ____D C:\Users\Ramon\AppData\Local\VirtualStore 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 ____D C:\Users\Ramon\AppData\Local\TileDataLayer 2015-09-25 20:57 - 2015-09-25 20:57 - 00000000 ____D C:\Users\Ramon\AppData\Local\Publishers 2015-09-25 20:57 - 2015-09-25 19:57 - 00000000 ____D C:\Users\Ramon\AppData\Local\Packages 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-09-25 20:56 - 2015-09-28 10:54 - 01793546 _____ C:\Windows\system32\PerfStringBackup.INI 2015-09-25 20:56 - 2015-07-28 10:59 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-09-25 20:53 - 2015-09-25 20:53 - 00000000 ____D C:\Windows\CSC 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Vorlagen 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Startmenü 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Programme 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\ProgramData\Vorlagen 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\ProgramData\Startmenü 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\ProgramData\Dokumente 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 _SHDL C:\Dokumente und Einstellungen 2015-09-25 20:51 - 2015-09-25 20:51 - 00000000 __SHD C:\Recovery 2015-09-25 20:48 - 2015-07-10 12:59 - 02718208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2015-09-25 20:47 - 2015-09-25 20:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2015-09-25 20:34 - 2015-09-25 20:34 - 00000000 ____D C:\Users\Ramon\AppData\Local\Skype 2015-09-25 20:33 - 2015-09-25 21:32 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Skype 2015-09-25 20:33 - 2015-09-25 20:33 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-09-25 20:33 - 2015-09-25 20:33 - 00000000 ____D C:\ProgramData\Skype 2015-09-25 20:33 - 2015-09-25 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-09-25 20:32 - 2015-09-28 10:26 - 00000000 ____D C:\Users\Ramon\Desktop\Netto 2015-09-25 20:32 - 2015-09-28 00:58 - 00000000 ____D C:\Users\Ramon\Desktop\Bilder 2015-09-25 20:32 - 2015-09-27 23:44 - 00000000 ____D C:\Users\Ramon\Desktop\Musik 2015-09-25 20:32 - 2015-09-25 20:32 - 00000000 ____D C:\Users\Ramon\Desktop\Bewerbungen 2015-09-25 20:31 - 2015-09-25 20:31 - 01505304 _____ (Skype Technologies S.A.) C:\Users\Ramon\Downloads\SkypeSetup.exe 2015-09-25 20:26 - 2015-09-25 20:27 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Battle.net 2015-09-25 20:26 - 2015-09-25 20:27 - 00000000 ____D C:\Users\Ramon\AppData\Local\Battle.net 2015-09-25 20:26 - 2015-09-25 20:26 - 00001063 _____ C:\Battle.net.lnk 2015-09-25 20:26 - 2015-09-25 20:26 - 00000000 ____D C:\Users\Ramon\AppData\Local\Blizzard Entertainment 2015-09-25 20:26 - 2015-09-25 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2015-09-25 20:26 - 2015-09-25 20:26 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2015-09-25 20:25 - 2015-09-25 20:26 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-09-25 20:24 - 2015-09-25 20:24 - 00000000 ____D C:\ProgramData\Battle.net 2015-09-25 20:23 - 2015-09-26 02:11 - 00001073 _____ C:\Users\Ramon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber.lnk 2015-09-25 20:23 - 2015-09-25 20:25 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\ViberPC 2015-09-25 20:22 - 2015-09-25 21:29 - 00000000 ____D C:\Users\Ramon\AppData\Local\Viber 2015-09-25 20:21 - 2015-09-25 20:21 - 00000000 ____D C:\Users\Public\Documents\BitRaider 2015-09-25 20:21 - 2015-09-25 20:21 - 00000000 ____D C:\ProgramData\BitRaider 2015-09-25 20:20 - 2015-09-25 20:20 - 00000000 ____D C:\Users\Ramon\AppData\Local\SWTORPerf 2015-09-25 20:05 - 2015-09-25 20:05 - 00000000 ____D C:\Users\Ramon\AppData\Local\PeerDistRepub 2015-09-25 19:53 - 2015-09-28 00:27 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Origin 2015-09-25 19:53 - 2015-09-25 19:53 - 00000000 ____D C:\Users\Ramon\AppData\Local\Origin 2015-09-25 19:53 - 2015-09-25 19:53 - 00000000 ____D C:\ProgramData\Package Cache 2015-09-25 19:50 - 2015-09-28 00:32 - 00000000 ____D C:\ProgramData\Origin 2015-09-25 19:50 - 2015-09-28 00:26 - 00000000 ____D C:\Program Files (x86)\Origin 2015-09-25 19:50 - 2015-09-25 19:50 - 00000000 ____D C:\ProgramData\Electronic Arts 2015-09-25 19:49 - 2015-09-26 02:59 - 00001464 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2015-09-25 19:49 - 2015-09-26 02:59 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-09-25 19:49 - 2015-09-26 02:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2015-09-25 19:49 - 2015-09-26 02:59 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-09-25 19:49 - 2015-09-25 19:49 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2015-09-25 19:49 - 2015-06-16 17:32 - 00020760 _____ (Safer-Networking Ltd.) C:\Windows\system32\sdnclean64.exe 2015-09-25 19:48 - 2015-09-26 02:11 - 00001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-09-25 19:48 - 2015-09-25 19:48 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2015-09-25 19:47 - 2015-09-27 23:32 - 00013814 _____ C:\Users\Ramon\Documents\Install STAR WARS The Old Republic.log 2015-09-25 19:46 - 2015-09-25 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2015-09-25 19:46 - 2015-09-25 19:46 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2015-09-25 19:44 - 2015-09-25 19:44 - 00000000 ____D C:\ProgramData\Riot Games 2015-09-25 19:44 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2015-09-25 19:44 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-09-25 19:44 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2015-09-25 19:44 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2015-09-25 19:44 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-09-25 19:44 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2015-09-25 19:44 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-09-25 19:44 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2015-09-25 19:44 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2015-09-25 19:44 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-09-25 19:44 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-09-25 19:44 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2015-09-25 19:44 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2015-09-25 19:44 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2015-09-25 19:44 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2015-09-25 19:44 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2015-09-25 19:44 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2015-09-25 19:44 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2015-09-25 19:44 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2015-09-25 19:44 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2015-09-25 19:44 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2015-09-25 19:44 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2015-09-25 19:44 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2015-09-25 19:44 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2015-09-25 19:44 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2015-09-25 19:44 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2015-09-25 19:44 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2015-09-25 19:44 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2015-09-25 19:44 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2015-09-25 19:44 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-09-25 19:44 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-09-25 19:44 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-09-25 19:44 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-09-25 19:44 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-09-25 19:44 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-09-25 19:44 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-09-25 19:44 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-09-25 19:44 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-09-25 19:44 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-09-25 19:44 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-09-25 19:44 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-09-25 19:44 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-09-25 19:44 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-09-25 19:44 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2015-09-25 19:44 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2015-09-25 19:44 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2015-09-25 19:44 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2015-09-25 19:44 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2015-09-25 19:44 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2015-09-25 19:44 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2015-09-25 19:44 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2015-09-25 19:44 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2015-09-25 19:44 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2015-09-25 19:44 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2015-09-25 19:44 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2015-09-25 19:44 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2015-09-25 19:44 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2015-09-25 19:44 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2015-09-25 19:44 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2015-09-25 19:44 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2015-09-25 19:44 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2015-09-25 19:44 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2015-09-25 19:44 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2015-09-25 19:44 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2015-09-25 19:44 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2015-09-25 19:44 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2015-09-25 19:44 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2015-09-25 19:44 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2015-09-25 19:44 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2015-09-25 19:44 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2015-09-25 19:44 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2015-09-25 19:44 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2015-09-25 19:44 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2015-09-25 19:44 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2015-09-25 19:44 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2015-09-25 19:44 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2015-09-25 19:44 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2015-09-25 19:44 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2015-09-25 19:44 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2015-09-25 19:44 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2015-09-25 19:44 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2015-09-25 19:44 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2015-09-25 19:44 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2015-09-25 19:44 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2015-09-25 19:44 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2015-09-25 19:44 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2015-09-25 19:44 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2015-09-25 19:44 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2015-09-25 19:44 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2015-09-25 19:44 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2015-09-25 19:44 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2015-09-25 19:44 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2015-09-25 19:44 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2015-09-25 19:44 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2015-09-25 19:44 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2015-09-25 19:44 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2015-09-25 19:44 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2015-09-25 19:44 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2015-09-25 19:44 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2015-09-25 19:44 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2015-09-25 19:44 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2015-09-25 19:44 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2015-09-25 19:44 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2015-09-25 19:43 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2015-09-25 19:43 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2015-09-25 19:43 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2015-09-25 19:43 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2015-09-25 19:43 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2015-09-25 19:43 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2015-09-25 19:43 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2015-09-25 19:43 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2015-09-25 19:43 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2015-09-25 19:43 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2015-09-25 19:43 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2015-09-25 19:43 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2015-09-25 19:43 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2015-09-25 19:43 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2015-09-25 19:43 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2015-09-25 19:43 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2015-09-25 19:43 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2015-09-25 19:43 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2015-09-25 19:43 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2015-09-25 19:43 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2015-09-25 19:43 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2015-09-25 19:43 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2015-09-25 19:43 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2015-09-25 19:43 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2015-09-25 19:43 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2015-09-25 19:43 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2015-09-25 19:43 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2015-09-25 19:43 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2015-09-25 19:43 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2015-09-25 19:43 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2015-09-25 19:43 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2015-09-25 19:43 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2015-09-25 19:43 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2015-09-25 19:43 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2015-09-25 19:43 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2015-09-25 19:43 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2015-09-25 19:43 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2015-09-25 19:43 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2015-09-25 19:43 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2015-09-25 19:43 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2015-09-25 19:43 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2015-09-25 19:43 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2015-09-25 19:43 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2015-09-25 19:43 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2015-09-25 19:42 - 2015-09-25 19:44 - 00000000 ____D C:\Windows\SysWOW64\directx 2015-09-25 19:42 - 2015-09-25 19:43 - 00000000 ___HD C:\Windows\msdownld.tmp 2015-09-25 19:42 - 2015-09-25 19:42 - 00000000 ____D C:\Riot Games 2015-09-25 19:42 - 2015-09-25 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks 2015-09-25 19:42 - 2015-09-25 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2015-09-25 19:41 - 2015-09-28 01:32 - 00000000 ____D C:\Games 2015-09-25 19:41 - 2015-09-25 19:43 - 00000000 ____D C:\Users\Ramon\AppData\Roaming\Riot Games 2015-09-25 19:41 - 2015-09-25 19:41 - 00000000 ____D C:\Users\Ramon\AppData\Local\Steam 2015-09-25 19:41 - 2015-09-25 19:41 - 00000000 ____D C:\Users\Ramon\AppData\Local\CEF 2015-09-25 19:40 - 2015-09-25 19:41 - 30668968 _____ (Riot Games) C:\Users\Ramon\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe 2015-09-25 19:38 - 2015-09-28 10:05 - 00000000 ____D C:\Program Files (x86)\Steam 2015-09-25 19:38 - 2015-09-25 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2015-09-25 15:58 - 2015-09-25 15:58 - 00000000 ____D C:\Users\Ramon\AppData\Local\MSIOnlineRegister 2015-09-25 15:55 - 2015-09-25 15:55 - 00016148 _____ C:\Windows\system32\DESKTOP-7RPOL6E_Ramon_HistoryPrediction.bin 2015-09-25 15:53 - 2015-09-25 15:53 - 00000000 ____D C:\Users\Ramon\AppData\Local\NVIDIA Corporation 2015-09-25 15:53 - 2015-09-25 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-09-25 15:53 - 2015-08-27 02:37 - 01423120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-09-25 15:53 - 2015-08-27 02:37 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-09-25 15:53 - 2015-08-27 02:36 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-09-25 15:53 - 2015-08-27 02:36 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-09-25 15:53 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2015-09-25 15:53 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2015-09-25 15:53 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2015-09-25 15:53 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2015-09-25 15:53 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2015-09-25 15:53 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2015-09-17 13:21 - 2015-09-17 13:21 - 00186880 _____ (TODO: <Company name>) C:\Windows\system32\rsrcs.dll 2015-09-09 14:33 - 2015-09-09 14:33 - 00000226 _____ C:\Windows\system32\cpuminer-conf.json 2015-09-02 17:06 - 2015-09-02 17:06 - 22324656 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 21875200 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 20857848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 18806272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 08019296 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-09-02 17:06 - 2015-09-02 17:06 - 02498808 _____ C:\Windows\system32\CoreUIComponents.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 02235904 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 02178560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01771592 _____ C:\Windows\SysWOW64\CoreUIComponents.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01396064 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-09-02 17:06 - 2015-09-02 17:06 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00963920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00929280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-09-02 17:06 - 2015-09-02 17:06 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2015-09-02 17:06 - 2015-09-02 17:06 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe 2015-09-02 17:06 - 2015-09-02 17:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00077400 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 00008847 _____ C:\Windows\system32\ResPriHMImageList ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-09-28 10:54 - 2015-07-10 18:34 - 00773380 _____ C:\Windows\system32\perfh007.dat 2015-09-28 10:54 - 2015-07-10 18:34 - 00154706 _____ C:\Windows\system32\perfc007.dat 2015-09-28 10:47 - 2015-07-10 14:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-09-28 10:46 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\sru 2015-09-28 10:46 - 2015-07-10 11:05 - 00065536 ___SH C:\Windows\system32\config\BBI 2015-09-27 23:30 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\Performance 2015-09-27 20:16 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\AppReadiness 2015-09-26 04:40 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\appcompat 2015-09-26 02:11 - 2015-07-10 13:04 - 00139969 _____ C:\Windows\system32\Drivers\etc\hosts.hitmanpro 2015-09-26 01:09 - 2015-07-10 14:20 - 00341408 _____ C:\Windows\system32\FNTCACHE.DAT 2015-09-25 21:57 - 2015-07-10 18:44 - 00000000 ____D C:\Windows\ShellNew 2015-09-25 21:57 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-09-25 21:55 - 2015-07-10 13:04 - 00000167 _____ C:\Windows\win.ini 2015-09-25 21:55 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\System 2015-09-25 21:45 - 2015-07-10 13:04 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2015-09-25 21:30 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\restore 2015-09-25 21:22 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\Help 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PurchaseDialog 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\PrintDialog 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\MiracastView 2015-09-25 20:57 - 2015-07-10 13:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2015-09-25 20:56 - 2015-07-10 13:06 - 00000000 ____D C:\Windows\Setup 2015-09-25 20:54 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\rescache 2015-09-25 20:53 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\spool 2015-09-25 20:51 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows NT 2015-09-25 20:51 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default 2015-09-25 20:49 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\FxsTmp 2015-09-25 20:48 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\Recovery 2015-09-25 20:48 - 2015-07-10 11:05 - 00000000 ____D C:\Windows\system32\Sysprep 2015-09-02 17:07 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\oobe 2015-09-02 17:07 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\appraiser 2015-09-02 17:07 - 2015-07-10 12:55 - 00000000 ____D C:\Windows\CbsTemp ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Ramon\AppData\Roaming\4bcrx3RK5xSGU0fyyijKsmn6Qa 2015-09-25 21:35 - 2015-09-25 21:35 - 0000000 _____ () C:\Users\Ramon\AppData\Local\Driver_LOM_8161Present.flag 2015-09-26 00:54 - 2015-09-26 00:54 - 0443200 _____ (xinfubaby) C:\ProgramData\aaaaaaaaaaaa.dll 2015-09-26 00:54 - 2015-09-26 00:54 - 0000000 _____ () C:\ProgramData\inf.dat 2015-09-26 01:47 - 2015-09-26 01:47 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\aaaaaaaaaaaa.dll C:\ProgramData\inf.dat C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Einige Dateien in TEMP: ==================== C:\Users\Ramon\AppData\Local\Temp\BRSVC_158324593_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_158504234_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_158683453_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_158730593_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_158977875_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_159398812_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_159521015_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_159561500_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_159617468_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_159692000_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_159794484_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_160058421_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_160186000_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_160597031_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_160650984_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_160814625_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_160927218_hlp.exe C:\Users\Ramon\AppData\Local\Temp\BRSVC_7326921_hlp.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-09-25 20:05 ==================== Ende von FRST.txt ============================ |
28.09.2015, 11:01 | #4 |
| WIN10: Beim Start öffnet sich Baidu SuchmaschineCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-09-2015 01 durchgeführt von Ramon (2015-09-28 10:59:57) Gestartet von C:\Users\Ramon\Downloads Windows 10 Pro (X64) (2015-09-25 18:56:14) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2350521397-4095467815-1910750544-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2350521397-4095467815-1910750544-503 - Limited - Disabled) Gast (S-1-5-21-2350521397-4095467815-1910750544-501 - Limited - Disabled) Ramon (S-1-5-21-2350521397-4095467815-1910750544-1001 - Administrator - Enabled) => C:\Users\Ramon ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated) Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC) Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software) CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) ELAN Touchpad 11.13.11.4_X64_WHQL (HKLM\...\Elantech) (Version: 11.13.11.4 - ELAN Microelectronic Corp.) globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ACHTUNG Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.) Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.5.0.1056 - Intel Corporation) Intel(R) Wireless Bluetooth(R)(patch version 17.1.1440.2) (HKLM\...\{302600C1-6BDF-4FD1-1409-148929CC1385}) (Version: 17.1.1409.0486 - Intel Corporation) KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - ) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) MSI Remind Manager (HKLM-x32\...\InstallShield_{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.0.1412.1801 - Micro-Star International Co., Ltd.) MSI Remind Manager (x32 Version: 1.0.1412.1801 - Micro-Star International Co., Ltd.) Hidden NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation) NVIDIA Grafiktreiber 355.98 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.98 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.) Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.1.46.1056 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer E220x Drivers (Version: 1.1.46.1056 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.46.1056 - Qualcomm Atheros) Qualcomm Atheros Network Manager (Version: 1.1.46.1056 - Qualcomm Atheros) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21249 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7179 - Realtek Semiconductor Corp.) Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix) Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden Skype™ 7.11 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.11.102 - Skype Technologies S.A.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.5.43 - Safer-Networking Ltd.) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer) Unity Web Player (HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS) Viber (HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\Viber) (Version: 5.0.1.42 - Viber Media Inc) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Wiederherstellungspunkte ========================= 25-09-2015 15:53:12 DirectX wurde installiert 25-09-2015 21:30:27 Installed MSI Remind Manager 27-09-2015 20:20:07 Microsoft Visual C++ 2005 Redistributable wird installiert ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2015-07-10 13:04 - 2015-09-28 10:46 - 00000019 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {008612CB-96BB-4CE9-84B4-1784F8A31EEF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-26] (Google Inc.) Task: {34B37A0A-12F6-4898-B8FF-46303E7AD8C3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-26] (Google Inc.) Task: {3F1F7143-69CA-448A-8944-25015CB5541D} - \WordWizard Auto Updater 1.10.0.24 Pending Update -> Keine Datei <==== ACHTUNG Task: {48B3E8FE-30E0-44C9-A744-29CF727691C1} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-02-02] (@ByELDI) Task: {67C81254-10DE-484D-A397-57E4C6962483} - System32\Tasks\Microsoft Office 15 Sync Maintenance for RAMON-Ramon Ramon => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2012-10-01] (Microsoft Corporation) Task: {6E56BBB9-B350-4A2C-960E-61DB7482E987} - \Inst_Rep -> Keine Datei <==== ACHTUNG Task: {785249D4-EAAD-4B85-B6AA-50A67FE45418} - System32\Tasks\ngs3012 => C:\PROGRA~2\FAST-S~1\ngs3012.exe Task: {7DD04DAA-E135-4351-AD57-147B8B3A52A9} - \SmartWeb Upgrade Trigger Task -> Keine Datei <==== ACHTUNG Task: {8A6D1276-7649-48CA-B6D8-97445E61F112} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-19] (Piriform Ltd) Task: {926F5295-3A11-47BE-B79C-CB991F181C58} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2015-06-16] (Safer-Networking Ltd.) Task: {A375A1D0-5E27-4604-9147-942239ED3B66} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {A90BD831-0645-48B7-A63A-CA7387D03998} - \AOBFERUU -> Keine Datei <==== ACHTUNG Task: {A90C0C25-1EE1-4887-A602-451181F55D25} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.) Task: {A96FBBEF-1DE4-4D75-9086-10419AF1BB3E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {BB896D12-4F04-497D-8B81-0819563433F1} - \bvxvexvbg -> Keine Datei <==== ACHTUNG Task: {BCDE7E1B-6F55-4CB4-B33A-E43578F54D31} - \WordWizard Auto Updater 1.10.0.24 Core -> Keine Datei <==== ACHTUNG Task: {C98E100D-D41B-4FED-928A-7EF25B41F283} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {D57398D8-533C-46BE-A8F1-2620A806F9CB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {DDD7950C-D21F-445E-AC6E-7E78A5A82649} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2015-06-16] (Safer-Networking Ltd.) Task: {E7E21AE5-EAA9-4E92-939E-3169BC281B12} - System32\Tasks\4bcrx3RK5xSGU0fyyijKsmn6Qa => C:\Users\Ramon\AppData\Roaming\4bcrx3RK5xSGU0fyyijKsmn6Qa.exe <==== ACHTUNG (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\4bcrx3RK5xSGU0fyyijKsmn6Qa.job => C:\Users\Ramon\AppData\Roaming\4bcrx3RK5xSGU0fyyijKsmn6Qa.exe <==== ACHTUNG Task: C:\Windows\Tasks\Adobe Flash box Files Update Ver 2015925.job => C:\ProgramData\uiksdl201592522\ElTaces.exe/check_update C:\ProgramData\uiksdl201592522\RAMON\Ramon6This task detect has update for box files.Ver Task: C:\Windows\Tasks\AOBFERUU.job => C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\C_1258I.dll Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\YYNIDDLIOXLYJEJB.job => C:\ProgramData\Service7609\Service7609.exe <==== ACHTUNG ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-08-23 17:09 - 2015-08-23 17:09 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll 2015-09-25 21:22 - 2015-09-14 00:04 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-08-23 17:09 - 2015-08-23 17:09 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 02498808 _____ () C:\Windows\system32\CoreUIComponents.dll 2015-09-02 17:06 - 2015-09-02 17:06 - 02498808 _____ () C:\Windows\System32\CoreUIComponents.dll 2015-09-25 21:06 - 2015-09-25 21:06 - 00396688 _____ () C:\Windows\system32\igfxTray.exe 2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-08-23 17:09 - 2015-08-23 17:09 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-07-10 13:00 - 2015-07-10 18:43 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-08-23 17:09 - 2015-08-23 17:09 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-08-23 17:09 - 2015-08-23 17:09 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2014-08-18 11:40 - 2014-08-18 11:40 - 00330240 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe 2015-09-25 15:53 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-09-26 01:37 - 2015-09-24 04:34 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\libglesv2.dll 2015-09-26 01:37 - 2015-09-24 04:34 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\libegl.dll 2015-09-25 21:41 - 2013-09-16 12:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2015-09-28 10:59 - 2015-09-28 10:59 - 00380416 _____ () C:\Users\Ramon\Downloads\Gmer-19357.exe ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\acengine => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\acwfp => ""="Driver" ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\Services: Bluetooth Device Monitor => 2 MSCONFIG\Services: Bluetooth OBEX Service => 2 MSCONFIG\Services: BRSptStub => 3 MSCONFIG\Services: iBtSiva => 2 MSCONFIG\Services: MBAMScheduler => 2 MSCONFIG\Services: MBAMService => 2 MSCONFIG\Services: Origin Client Service => 3 MSCONFIG\Services: SDScannerService => 2 MSCONFIG\Services: SDUpdateService => 2 MSCONFIG\Services: SDWSCService => 2 MSCONFIG\Services: Service KMSELDI => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: TeamViewer => 2 HKLM\...\StartupApproved\Run: => "BTMTrayAgent" HKLM\...\StartupApproved\Run: => "ETDCtrl" HKLM\...\StartupApproved\Run: => "cpuminer" HKLM\...\StartupApproved\Run: => "gpuminer" HKLM\...\StartupApproved\Run32: => "SDTray" HKLM\...\StartupApproved\Run32: => "smallbox" HKLM\...\StartupApproved\Run32: => "ETDCtrl" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "Viber" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "apphide" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall" HKU\S-1-5-21-2350521397-4095467815-1910750544-1001\...\StartupApproved\Run: => "Spybot-S&D Cleaning" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{96551CF9-CAFA-41C4-9029-965D95F6FE4C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{270B6950-64B1-4F6F-AA69-DD266E7E09DF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{EBE2228F-D90E-4A57-9557-AE6199500650}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{CD03ACA2-31A6-4632-8B6B-A77E6CBD80DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{D098839E-25C7-4824-983A-E693F0650AE0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{4C4ABE7D-17D3-4E89-B389-8EBBCCC65D2D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{6032E7B7-A280-400F-AF6C-6E3E341F1FCB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{E055E6A1-3EE4-46F2-BF2C-13D396BCA697}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{A37A6696-6156-4326-8C7E-F7BC58F69E4B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{F53C0CD9-EDFB-4759-84A6-1C024DECB128}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{FB28BF56-6740-4965-B9D5-DBD17A28896E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{26721336-E563-404F-BC0E-D799E5F8F16E}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{DDC3ED0D-F758-4388-AEFC-AAB330403228}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [{F09F2C59-637A-48A0-B823-D91031CE9E7F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{C5334C6F-FF2C-4252-8CDB-023F5E089C52}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{33064166-36C6-40F0-A75A-7FEAD3D9C015}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{47D32378-7913-4E54-B1D2-ACC6641DF360}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{195C5C46-D16B-4733-9038-112EC9824297}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{649EF772-4BE3-4512-ACDB-F764231A784D}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{3E72DC7B-7288-4751-8439-E01FA2B2F921}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{BA2ECF02-DF61-470E-A7BC-549739B85BEA}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{2382D43F-D414-430E-A00D-FB193E16D8C4}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{A1B1B20B-F6E4-402F-9A54-2D7055E35E82}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{0B096A1D-AC01-4A3E-9EBB-839FD47A934B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{1C578E01-B2EA-4BFB-BC93-5D2A5E0DB5F9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{20342F80-F905-4A19-AD58-C2C50488D116}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{5308BDCE-F344-4279-B5A6-7183018262A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{20BDB9B8-D690-4D45-B40B-135E15C992D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe FirewallRules: [{02E5DA79-3516-432A-B73E-93C0DFA74B01}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe FirewallRules: [{00C2A0A5-FE85-4227-8BEA-0DCE6B21400A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{AD142EBE-BCDB-4970-BE1B-C215B5F441E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{914781C9-5833-4F18-ACCF-A8E6BAE79BDA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe FirewallRules: [{6036F253-7026-46AA-B00E-DFD6A20D0315}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe FirewallRules: [{30755C93-1625-48CF-97E1-3AB355356231}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{C2EFB71A-09CF-4647-B98A-DB26A879249A}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{95B6BD99-B456-4FFB-9202-E5AEFAA5DEAE}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{D712E4E4-F7D6-49A1-B9DC-8A02257456A1}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (09/27/2015 11:29:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: RAMON) Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (09/27/2015 11:07:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.10240.16431, Zeitstempel: 0x55c9bd76 Name des fehlerhaften Moduls: aaaaaaaaaaaa.dll_unloaded, Version: 1.0.0.2, Zeitstempel: 0x5604df11 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000016590 ID des fehlerhaften Prozesses: 0xad0 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5 Error: (09/27/2015 08:20:10 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (09/26/2015 05:31:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: RAMON) Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (09/26/2015 02:50:44 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0xC004F074 Befehlszeilenargumente: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent Error: (09/26/2015 02:48:00 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: ) Description: Fehler bei der Installation des Kaufnachweises. 0xC004E016 Teil-Pkey=9D6T9 ACID=? Genauer Fehler[?] Error: (09/26/2015 02:48:00 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: ) Description: Fehler bei der Installation des Kaufnachweises. 0xC004E016 Teil-Pkey=9D6T9 ACID=? Genauer Fehler[?] Error: (09/26/2015 02:48:00 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: ) Description: Fehler bei der Installation des Kaufnachweises. 0xC004E016 Teil-Pkey=9D6T9 ACID=? Genauer Fehler[?] Error: (09/26/2015 02:47:59 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: ) Description: Fehler bei der Installation des Kaufnachweises. 0xC004E016 Teil-Pkey=9D6T9 ACID=? Genauer Fehler[?] Error: (09/26/2015 02:45:36 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: ) Description: Fehler bei der Installation des Kaufnachweises. 0xC004E016 Teil-Pkey=9D6T9 ACID=? Genauer Fehler[?] Systemfehler: ============= Error: (09/28/2015 10:47:39 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "HitmanPro 3.7 Crusader (Boot)" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%0 Error: (09/28/2015 10:46:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/28/2015 10:33:35 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/28/2015 09:49:42 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/28/2015 01:49:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/27/2015 11:29:59 PM) (Source: DCOM) (EventID: 10010) (User: RAMON) Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca Error: (09/27/2015 11:29:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/27/2015 11:11:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/27/2015 08:22:12 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Spybot-S&D 2 Scanner Service" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: %%1058 Error: (09/27/2015 08:22:10 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Spybot-S&D 2 Updating Service" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: %%1058 ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz Prozentuale Nutzung des RAM: 12% Installierter physikalischer RAM: 16302.58 MB Verfügbarer physikalischer RAM: 14328.94 MB Summe virtueller Speicher: 19246.58 MB Verfügbarer virtueller Speicher: 17240.93 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:931.02 GB) (Free:856.7 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 8EB65C05) Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 28.09.2015 Suchlaufzeit: 09:51 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.09.28.01 Rootkit-Datenbank: v2015.09.22.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: Ramon Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 346385 Abgelaufene Zeit: 11 Min., 16 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 3 PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\ihpmserver, In Quarantäne, [fb46a095028985b1d6516278dd2732ce], PUP.Optional.Crossrider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, In Quarantäne, [97aaf63f7615d56142e3855525df2ed2], PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\RAYDLD, In Quarantäne, [31106bcacbc01c1a56d29b3f798b19e7], Registrierungswerte: 1 PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\RAYDLD|dir, C:\Program Files (x86)\RayDld, In Quarantäne, [31106bcacbc01c1a56d29b3f798b19e7] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
29.09.2015, 12:03 | #5 |
/// the machine /// TB-Ausbilder | WIN10: Beim Start öffnet sich Baidu Suchmaschine Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
MBAM updaten, scannen, Funde löschen. Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu WIN10: Beim Start öffnet sich Baidu Suchmaschine |
alter, alternative, autostart, baidu, einfach, fehlermeldung, forum, fremde, fremden, komplett, laptop, neue, neuen, online, probleme, prozesse, start, suche, suchmaschine, system, taskmanager, thema, verlauf, win, win10, windows, windwos 10, öffnet |