| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: amd treiber reagiert nicht!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
23.10.2015, 17:13
| #1 |
 |  amd treiber reagiert nicht! Hallo, Habe folgendes Problem: Wenn ich den Pc nutze funktioniert in der Regel alles normal. Aber wenn ich z.B Videos/Filme schaue fängt irgendwann an zu spinnen. Wie es ausschaut? Schaut so aus als ob die Grafikkarte spinnt ect. manchmal stürtz es ab und das Video läuft im Greenscreen weiter. Oft aber Stürtz der Bildschirm ganz ab ist entweder weis ect manchmal kommt auch der Bluescreen wo sachen draufstehen (was genau weis ich jetzt nicht). Falls mal der Pc dabei nicht abstürtzt steht da irgendwas von AMD treiber reagiert nicht .... Also was kann ich da machen, habe schon dran gedacht die GRAKA rauszunehmen und zu säubern, aber ich bin da kein Experte, wie man die rausnimmt ect. Hoffe jemand kann mir da helfen bin echt ratlos .... soweit ich weis habe ich eine radon hd 7800 series GRAKA falls es an der liegt müsst auch von gigabyte sein. |
|
23.10.2015, 18:28
| #2 |
| /// the machine /// TB-Ausbilder    |  amd treiber reagiert nicht! hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
23.10.2015, 21:45
| #3 |
| | amd treiber reagiert nicht!Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:21-10-2015 01 durchgeführt von BonZZai (Administrator) auf BONZZAI-PC (23-10-2015 22:42:32) Gestartet von C:\Users\BonZZai\Desktop Geladene Profile: BonZZai (Verfügbare Profile: BonZZai) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_226.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_226.exe () C:\Program Files (x86)\GameforgeLive\gfl_client.exe (Mozilla Corporation) C:\Users\BonZZai\Desktop\Tor Browser\Browser\firefox.exe () C:\Users\BonZZai\Desktop\Tor Browser\Browser\TorBrowser\Tor\tor.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HDAudDeck] => c:\program files (x86)\via\viaudioi\vdeck\vdeck.exe [5675184 2013-05-10] (VIA) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Driver Genius] => [X] HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKLM-x32\...\Run: [MalwareProtectionLive] => C:\Users\BonZZai\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-02-18] (Google Inc.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1562264 2014-07-25] (Samsung) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [Google Update] => C:\Users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53725200 2015-08-07] (Skype Technologies S.A.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [Wondershare Helper Compact.exe] => "C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelperSetup.exe" HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-437646761-135901211-47947868-1000\...\MountPoints2: {73a36747-4c66-11e2-97f0-806e6f6e6963} - D:\Bin\ASSETUP.exe IFEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2012-12-21] ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) ProxyEnable: [.DEFAULT] => Proxy ist aktiviert. ProxyServer: [.DEFAULT] => http=127.0.0.1:64859;https=127.0.0.1:64859 Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{9A226170-8866-46E0-B242-2F2E4042131D}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-437646761-135901211-47947868-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp URLSearchHook: HKLM-x32 -> Standard = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-437646761-135901211-47947868-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-18] (Google Inc.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-08-05] (DVDVideoSoft Ltd.) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08] (Adblock Plus) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-18] (Google Inc.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-08-05] (DVDVideoSoft Ltd.) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08] (Adblock Plus) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-18] (Google Inc.) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-18] (Google Inc.) Toolbar: HKU\S-1-5-21-437646761-135901211-47947868-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-18] (Google Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com/ FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2013-09-28] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-07-22] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-16] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-07-22] (Adobe Systems) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/O1DPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npo1d.dll [2013-07-02] (Google) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/O3DPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] () FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @tools.google.com/Google Update;version=3 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @tools.google.com/Google Update;version=9 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] () FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npo1d.dll [2013-07-02] (Google) FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\englische-ergebnisse.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\gmx-suche.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\google-images.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\google-maps.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\lastminute.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\webde-suche.xml [2014-08-15] FF Extension: WEB.DE MailCheck - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\mailcheck@web.de [2015-10-20] FF Extension: 4shared Desktop Plugin - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\4sharedCopyLinks.xpi.tmp [2013-03-14] [ist nicht signiert] FF Extension: Facebook Toolbar - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\firefox@facebook.com.xpi [2012-12-21] [ist nicht signiert] FF Extension: Mark Ads Sites In Search - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\jid1-LGBwZ7tVjRcfIg@jetpack.xpi [2015-05-29] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-08-05] [ist nicht signiert] FF Extension: Adblock Plus - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24] FF Extension: Tab Mix Plus - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-09-01] FF Extension: DownThemAll! - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2015-05-28] FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert] Chrome: ======= CHR Profile: C:\Users\BonZZai\AppData\Local\Google\Chrome\User Data\default CHR Extension: (Kein Name) - C:\Users\BonZZai\AppData\Local\Google\Chrome\User Data\default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf [2014-09-21] CHR HKLM-x32\...\Chrome\Extension: [hfikdpojhgckaejifppccjeedkjcndpp] - <kein Path/update_url> ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Dr.Fone für Android\DriverInstall.exe [103824 2015-08-17] (Wondershare) S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] () S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [Datei ist nicht signiert] R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-10-23] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13536 2015-05-27] () R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2013-12-19] (Synaptics Incorporated) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [Datei ist nicht signiert] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2087-01-13 02:31 - 2087-01-13 02:31 - 00000000 ____D C:\ProgramData\eSellerate 2087-01-13 02:31 - 2014-01-29 09:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue 2050-01-01 02:17 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2050-01-01 02:17 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2050-01-01 02:17 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2050-01-01 02:17 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2050-01-01 02:17 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2050-01-01 02:17 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2050-01-01 02:17 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2050-01-01 02:17 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2050-01-01 02:17 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2050-01-01 02:04 - 2050-01-01 02:04 - 00003218 _____ C:\Windows\System32\Tasks\{E5B542E3-C766-40FD-BDEE-1AA277504F6C} 2050-01-01 01:59 - 2050-01-01 02:12 - 00001686 _____ C:\Users\BonZZai\AppData\Local\Cracklock.settings 2015-10-23 22:41 - 2014-01-04 02:00 - 00000000 ____D C:\Users\BonZZai\Desktop\gpg4usb 2015-10-23 22:40 - 2015-10-23 22:42 - 00023770 _____ C:\Users\BonZZai\Desktop\FRST.txt 2015-10-23 22:40 - 2015-10-23 22:41 - 00000862 _____ C:\Users\BonZZai\Desktop\Addition.txt 2015-10-23 22:39 - 2015-10-23 22:39 - 02196480 _____ (Farbar) C:\Users\BonZZai\Desktop\FRST64.exe 2015-10-23 22:38 - 2015-10-23 22:38 - 24339124 _____ C:\Users\BonZZai\Desktop\gpg4usb-0.3.3-1.zip 2015-10-22 21:19 - 2015-10-22 21:20 - 00277536 _____ C:\Windows\Minidump\102215-11154-01.dmp 2015-10-21 19:00 - 2015-10-21 19:21 - 00000218 _____ C:\Users\BonZZai\Desktop\blockchainbdgpzk.oniondewallet.txt 2015-10-18 16:05 - 2015-10-18 16:07 - 315769312 _____ (AMD Inc.) C:\Users\BonZZai\Downloads\amd-catalyst-15.10beta-64bit-win10-win8.1-win7-oct12.exe 2015-10-18 16:05 - 2015-10-18 16:07 - 300806184 _____ (AMD Inc.) C:\Users\BonZZai\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-64bit.exe 2015-10-18 15:53 - 2015-10-18 15:53 - 00001098 _____ C:\Users\BonZZai\Desktop\EVEREST Home Edition.lnk 2015-10-18 15:53 - 2015-10-18 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2015-10-18 15:53 - 2015-10-18 15:53 - 00000000 ____D C:\Program Files (x86)\Lavalys 2015-10-18 15:51 - 2015-10-18 15:51 - 01461024 _____ C:\Users\BonZZai\Downloads\Everest Home Edition - CHIP-Installer.exe 2015-10-18 15:36 - 2015-10-18 15:36 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server 2015-10-18 15:35 - 2015-10-18 17:02 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner 2015-10-18 15:35 - 2015-10-18 15:36 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2015-10-18 15:35 - 2015-10-18 15:35 - 00001082 _____ C:\Users\BonZZai\Desktop\MSI Afterburner.lnk 2015-10-18 15:35 - 2015-10-18 15:35 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2015-10-18 15:33 - 2015-10-18 15:33 - 01461024 _____ C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer.exe 2015-10-18 15:33 - 2015-10-18 15:33 - 01461024 _____ C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer(1).exe 2015-10-15 00:29 - 2015-09-25 20:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-10-15 00:29 - 2015-09-25 20:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-10-15 00:29 - 2015-09-25 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-10-15 00:29 - 2015-09-25 20:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-10-15 00:29 - 2015-09-25 20:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-10-15 00:29 - 2015-09-25 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-10-15 00:29 - 2015-09-25 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-10-15 00:29 - 2015-09-25 20:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-10-15 00:29 - 2015-09-25 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-10-15 00:29 - 2015-09-25 20:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-10-15 00:29 - 2015-09-25 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-10-15 00:29 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-10-15 00:29 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-10-15 00:29 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-10-15 00:29 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-10-15 00:29 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-10-15 00:29 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-10-15 00:29 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-10-15 00:29 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-10-15 00:29 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-10-15 00:29 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-10-15 00:29 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-10-15 00:29 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-10-15 00:29 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-10-15 00:29 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-10-15 00:29 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-10-15 00:29 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-10-15 00:29 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-10-15 00:29 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-10-15 00:29 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-10-15 00:29 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-10-15 00:29 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-10-15 00:29 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-10-15 00:29 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-10-15 00:29 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-10-15 00:29 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-10-15 00:29 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-10-15 00:29 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-10-15 00:29 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-10-15 00:29 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-10-15 00:29 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-10-15 00:29 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-10-15 00:29 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-10-15 00:29 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-10-15 00:29 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-10-15 00:29 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-10-15 00:29 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-10-15 00:29 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-10-15 00:29 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-10-15 00:29 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-10-15 00:29 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-10-15 00:29 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-10-15 00:29 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-10-15 00:29 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-10-15 00:29 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-10-15 00:29 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-10-15 00:29 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-10-15 00:29 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-10-15 00:29 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-10-15 00:29 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-10-15 00:29 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-10-15 00:29 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-10-15 00:29 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-10-15 00:29 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-10-15 00:29 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-10-15 00:29 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-10-15 00:29 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-10-15 00:29 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-10-15 00:29 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-10-15 00:29 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-10-15 00:29 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-10-15 00:29 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-10-15 00:29 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-10-15 00:29 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-10-15 00:29 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-10-15 00:29 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-10-15 00:29 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-10-15 00:29 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-10-15 00:29 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-10-15 00:29 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-10-15 00:29 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-15 00:29 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-10-15 00:29 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-10-15 00:29 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2015-10-15 00:28 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-10-15 00:28 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-10-15 00:28 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-10-15 00:28 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-10-15 00:28 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-10-15 00:28 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-10-15 00:28 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-10-15 00:28 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-10-15 00:28 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-10-15 00:28 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-10-15 00:28 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-10-15 00:28 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-10-15 00:28 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-10-15 00:28 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-10-15 00:28 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-10-15 00:28 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-10-15 00:28 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-10-15 00:28 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-10-15 00:28 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-10-15 00:28 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-10-15 00:28 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-10-15 00:28 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-10-15 00:28 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-10-15 00:28 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-10-15 00:28 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-10-15 00:28 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-10-15 00:28 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-10-15 00:28 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-10-15 00:28 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-10-15 00:28 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-10-15 00:28 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-10-15 00:28 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-10-15 00:28 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-15 00:28 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-15 00:28 - 2015-09-18 21:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-10-15 00:28 - 2015-09-18 21:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-10-15 00:28 - 2015-09-18 21:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-10-15 00:28 - 2015-09-18 21:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-10-15 00:28 - 2015-09-18 21:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-10-15 00:28 - 2015-09-18 21:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-10-15 00:28 - 2015-09-18 21:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-10-15 00:28 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-10-15 00:28 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-10-15 00:28 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-10-15 00:28 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-10-15 00:28 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-10-15 00:28 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-10-15 00:28 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-10-15 00:28 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-10-15 00:28 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-10-15 00:28 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-10-15 00:28 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-10-15 00:28 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-10-15 00:28 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-10-15 00:26 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-10-15 00:26 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-10-15 00:26 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-10-15 00:26 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-10-15 00:26 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-10-15 00:26 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-10-15 00:26 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-10-15 00:26 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-10-15 00:26 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-10-15 00:23 - 2015-07-18 15:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-15 00:23 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-10-15 00:00 - 2015-10-15 00:00 - 00277536 _____ C:\Windows\Minidump\101515-14320-01.dmp 2015-10-05 18:27 - 2015-10-05 18:27 - 00506920 _____ C:\Windows\Minidump\100515-19422-01.dmp 2015-10-04 16:29 - 2015-10-04 16:29 - 00392248 _____ C:\Windows\Minidump\100415-22136-01.dmp 2015-10-02 23:27 - 2015-10-02 23:27 - 00277536 _____ C:\Windows\Minidump\100215-10342-01.dmp 2015-10-02 23:17 - 2015-10-02 23:17 - 00506920 _____ C:\Windows\Minidump\100215-18673-01.dmp 2015-10-02 23:04 - 2015-10-02 23:04 - 00508568 _____ C:\Windows\Minidump\100215-18813-01.dmp 2015-10-02 01:01 - 2015-10-02 01:01 - 371281476 _____ C:\Users\BonZZai\Documents\Metin2 DE Grünerwolfsfang+9_Runni9•Heili9,OPENPVP •THP+9•4FachQuiln,Alchemie,Königsgürtel_EQSHOW.mp4 2015-10-02 01:01 - 2015-10-02 01:01 - 371281476 _____ C:\Users\BonZZai\Desktop\Metin2 DE Grünerwolfsfang+9_Runni9•Heili9,OPENPVP •THP+9•4FachQuiln,Alchemie,Königsgürtel_EQSHOW.mp4 2015-10-02 00:57 - 2015-10-02 00:57 - 00001285 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2015-10-02 00:57 - 2015-10-02 00:57 - 00000000 ____D C:\ProgramData\YTD Video Downloader 2015-10-02 00:57 - 2015-10-02 00:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader 2015-10-02 00:56 - 2015-10-02 00:56 - 00113560 _____ (GreenTree Applications SRL) C:\Users\BonZZai\Downloads\YTDSetup.exe 2015-10-02 00:56 - 2015-10-02 00:56 - 00000000 ____D C:\Program Files (x86)\GreenTree Applications 2015-09-29 00:02 - 2015-09-29 00:02 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3BD23E06.sys 2015-09-25 21:15 - 2015-09-25 21:15 - 00015936 _____ C:\Users\BonZZai\Desktop\Ohne Titel.veg 2015-09-25 20:56 - 2015-09-25 20:51 - 130758413 _____ C:\Users\BonZZai\Desktop\SANUFFYl.wmv 2015-09-25 20:44 - 2015-08-14 01:41 - 244887529 _____ C:\Users\BonZZai\Desktop\camoraa.wmv 2015-09-25 20:43 - 2015-09-25 20:42 - 02223276 _____ C:\Users\BonZZai\Desktop\snuffyy.mp4 2015-09-25 20:07 - 2015-09-25 20:07 - 00376784 _____ C:\Windows\Minidump\092515-11122-01.dmp ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-23 22:42 - 2014-09-21 04:03 - 00000000 ____D C:\FRST 2015-10-23 22:21 - 2013-05-03 16:29 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000UA.job 2015-10-23 22:19 - 2012-12-22 03:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-23 22:03 - 2012-12-21 20:43 - 01086555 _____ C:\Windows\WindowsUpdate.log 2015-10-23 19:18 - 2014-04-21 22:04 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Skype 2015-10-23 16:19 - 2014-01-12 17:56 - 00000000 ____D C:\Users\BonZZai\Downloads\Gameforge Live 2015-10-23 16:05 - 2009-07-14 06:45 - 00047008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-23 16:05 - 2009-07-14 06:45 - 00047008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-23 15:58 - 2014-09-12 15:50 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-23 15:56 - 2013-12-07 22:43 - 00077926 _____ C:\Windows\setupact.log 2015-10-23 15:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-22 23:41 - 2013-03-01 00:01 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\TS3Client 2015-10-22 21:33 - 2014-09-19 19:40 - 00003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1411148449 2015-10-22 21:33 - 2014-09-19 19:40 - 00000000 ____D C:\Program Files (x86)\Opera 2015-10-22 21:19 - 2014-05-22 23:04 - 4245126298 _____ C:\Windows\MEMORY.DMP 2015-10-22 21:19 - 2013-06-27 04:38 - 00000000 ____D C:\Windows\Minidump 2015-10-22 21:04 - 2015-05-24 18:41 - 00000395 _____ C:\Users\BonZZai\Desktop\games.txt 2015-10-21 16:36 - 2013-12-07 22:43 - 03005618 _____ C:\Windows\PFRO.log 2015-10-21 16:36 - 2012-12-21 22:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-10-20 19:02 - 2013-10-30 19:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-10-20 17:38 - 2014-09-12 15:50 - 00001098 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-10-20 17:38 - 2014-09-12 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-20 17:38 - 2014-09-12 15:50 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-10-18 15:36 - 2013-03-10 17:14 - 00000000 ___HD C:\Windows\msdownld.tmp 2015-10-18 15:21 - 2013-05-03 16:29 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000Core.job 2015-10-18 13:39 - 2015-07-01 18:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-10-16 22:19 - 2012-12-22 03:09 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-10-16 22:19 - 2012-12-22 03:09 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-16 22:19 - 2012-12-22 03:09 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-10-15 21:54 - 2015-08-02 20:15 - 00000000 ____D C:\Users\BonZZai\Desktop\Tor Browser 2015-10-15 18:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-10-15 04:03 - 2014-12-12 18:35 - 00000000 ____D C:\Windows\system32\appraiser 2015-10-15 04:03 - 2014-05-07 01:11 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-10-15 03:09 - 2013-07-12 03:59 - 00000000 ____D C:\Windows\system32\MRT 2015-10-15 03:04 - 2012-12-21 22:36 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-15 00:58 - 2012-12-21 20:43 - 00000000 ____D C:\Users\BonZZai 2015-10-15 00:58 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2015-10-15 00:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2015-10-15 00:30 - 2015-07-01 18:50 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-15 00:17 - 2014-04-21 22:04 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-10-15 00:14 - 2013-03-16 06:48 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\vlc 2015-10-14 02:35 - 2014-08-01 12:48 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2015-10-14 00:07 - 2014-02-18 22:46 - 00000000 ____D C:\Users\BonZZai\AppData\LocalLow\Adblock Plus for IE 2015-10-09 00:56 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-10-09 00:56 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-05 09:50 - 2014-09-12 15:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-10-05 09:50 - 2014-09-12 15:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-10-05 09:50 - 2014-09-12 15:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-10-05 05:11 - 2013-03-07 19:16 - 00000000 ____D C:\Users\BonZZai\AppData\Local\CrashDumps 2015-10-04 16:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SchCache 2015-10-02 23:04 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-09-25 20:44 - 2013-05-02 01:56 - 00000000 ____D C:\Users\BonZZai\Desktop\YOUTUBE ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2013-07-15 02:58 - 2013-08-16 00:32 - 0000000 _____ () C:\Users\BonZZai\AppData\Roaming\bitlord_log.txt 2050-01-01 01:59 - 2050-01-01 02:12 - 0001686 _____ () C:\Users\BonZZai\AppData\Local\Cracklock.settings 2013-03-08 23:53 - 2015-08-14 00:24 - 0004608 _____ () C:\Users\BonZZai\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-11-18 21:29 - 2013-11-18 21:29 - 0000837 _____ () C:\Users\BonZZai\AppData\Local\recently-used.xbel 2014-09-19 23:03 - 2014-09-19 23:03 - 0007598 _____ () C:\Users\BonZZai\AppData\Local\Resmon.ResmonCfg Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\BonZZai\dpinst.exe C:\Users\BonZZai\Setup.exe Einige Dateien in TEMP: ==================== C:\Users\BonZZai\AppData\Local\Temp\RSPUpgradeInstaller.exe C:\Users\BonZZai\AppData\Local\Temp\sfamcc00001.dll C:\Users\BonZZai\AppData\Local\Temp\sfareca00001.dll C:\Users\BonZZai\AppData\Local\Temp\SkypeSetup.exe C:\Users\BonZZai\AppData\Local\Temp\vlc-2.1.5-win32.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-10-21 20:12 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:21-10-2015 01
durchgeführt von BonZZai (2015-10-23 22:42:48)
Gestartet von C:\Users\BonZZai\Desktop
Windows 7 Professional Service Pack 1 (X64) (2012-12-21 18:43:32)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-437646761-135901211-47947868-500 - Administrator - Disabled)
BonZZai (S-1-5-21-437646761-135901211-47947868-1000 - Administrator - Enabled) => C:\Users\BonZZai
Gast (S-1-5-21-437646761-135901211-47947868-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-437646761-135901211-47947868-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Data Android Recovery Version 1.1 (HKLM-x32\...\{2D32F845-CC8B-4521-8B99-E5D26665C0B6}_is1) (Version: 1.1 - SharpNight Co,Ltd)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20071 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.7.1.418 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AION Free-to-Play (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: - Gameforge)
AMD Catalyst Install Manager (HKLM\...\{13351E83-6DCD-4E97-2A8C-5D496259A47F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Atheros Communications Inc.)
AVS Image Converter 2.3.1.244 (HKLM-x32\...\AVS Image Converter_is1) (Version: - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.3.492 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Color Suite v11.1.4 (HKLM-x32\...\{99487911-8011-42BC-B594-8B02BFD32B1D}_is1) (Version: 11.1.4 - Red Giant, LLC)
Coolmuster Android SMS + Contacts Recovery (HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Coolmuster Android SMS + Contacts Recovery) (Version: 3.1.0.1 - Coolmuster)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Driver Genius Professional Edition (HKLM-x32\...\Driver Genius Professional Edition_is1) (Version: 11.0 - Driver-Soft Inc.)
Driver Operating Service (HKU\S-1-5-21-437646761-135901211-47947868-1000\...\9b8aaf488bf6380a) (Version: 1.0.0.86 - Driver Operating Service)
Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
FLV Media Player version 1.3 (HKLM-x32\...\{0E08BAC8-845B-4327-8CDB-4B0F8C9857A5}_is1) (Version: 1.3 - FLVMPlayer)
foobar2000 v1.3.4 beta 2 (HKLM-x32\...\foobar2000) (Version: 1.3.4 beta 2 - Peter Pawlowski)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Driver Scout (HKLM-x32\...\{36e136d1-209a-4733-9b4e-bcfa2797265a}) (Version: 1.0.0.101 - Covus Freemium)
Free Driver Scout (Version: 1.0.0.101 - Covus Freemium) Hidden
Free Window Registry Repair (HKLM-x32\...\Free Window Registry Repair) (Version: - )
Free YouTube Download version 3.2.61.805 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.61.805 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.8 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{5588D686-D23B-4C9D-BDFA-2A7875CD3722}) (Version: 1.20.0000 - GIGABYTE Technology Co.,Ltd.)
GIGABYTE OC_GURU II (x32 Version: 1.20.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
ISY USB Wireless Adapter (HKLM-x32\...\InstallShield_{549CE1BD-88E4-4C5E-BF75-B155624714CC}) (Version: 1.0.0.14 - ISY)
ISY USB Wireless Adapter (x32 Version: 1.0.0.14 - ISY) Hidden
JAP (HKLM-x32\...\JAP) (Version: 00.19.001 - JAP-Team)
Kingo ROOT version 1.4.0.2390 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.4.0.2390 - Kingosoft Technology Ltd.)
K-Lite Mega Codec Pack 10.2.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - )
Magic Bullet Looks Vegas (HKLM-x32\...\Magic Bullet Looks Vegas) (Version: - )
Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{7C419638-A20F-441A-8FE0-9D9724B1A793}) (Version: 11.4.3 - Red Giant Software)
Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{93488C33-D8D6-472A-83BB-F71603355CF0}) (Version: 11.1.0 - Red Giant Software)
Magic Bullet Suite 64-bit (Version: 11.1.0 - Red Giant Software) Hidden
Magic Bullet Suite 64-bit (Version: 11.4.3 - Red Giant Software) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Metin2 (HKLM-x32\...\Metin2_is1) (Version: - Gameforge 4D GmbH)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-437646761-135901211-47947868-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)
MyFreeCodec (HKU\S-1-5-21-437646761-135901211-47947868-1000\...\MyFreeCodec) (Version: - )
NewBlue 3D Explosions for Vegas (HKLM-x32\...\NewBlue 3D Explosions for Vegas) (Version: - )
NewBlue 3D Explosions for Windows (HKLM-x32\...\NewBlue 3D Explosions for Windows) (Version: - )
NewBlue 3D Transformations for Vegas (HKLM-x32\...\NewBlue 3D Transformations for Vegas) (Version: - )
NewBlue 3D Transformations for Windows (HKLM-x32\...\NewBlue 3D Transformations for Windows) (Version: - )
NewBlue Art Blends 2.0 for Vegas (HKLM-x32\...\NewBlue Art Blends 2.0 for Vegas) (Version: - )
NewBlue Art Blends for Windows (HKLM-x32\...\NewBlue Art Blends for Windows) (Version: - )
NewBlue Art Effects 2.0 for Vegas (HKLM-x32\...\NewBlue Art Effects 2.0 for Vegas) (Version: - )
NewBlue Art Effects for Windows (HKLM-x32\...\NewBlue Art Effects for Windows) (Version: - )
NewBlue Film Effects for Vegas (HKLM-x32\...\NewBlue Film Effects for Vegas) (Version: - )
NewBlue Film Effects for Windows (HKLM-x32\...\NewBlue Film Effects for Windows) (Version: - )
NewBlue Motion Blends 2.0 for Vegas (HKLM-x32\...\NewBlue Motion Blends 2.0 for Vegas) (Version: - )
NewBlue Motion Blends for Windows (HKLM-x32\...\NewBlue Motion Blends for Windows) (Version: - )
NewBlue Motion Effects 2.0 for Vegas (HKLM-x32\...\NewBlue Motion Effects 2.0 for Vegas) (Version: - )
NewBlue Motion Effects for Windows (HKLM-x32\...\NewBlue Motion Effects for Windows) (Version: - )
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: - )
NewBlue Video Essentials II for Windows (HKLM-x32\...\NewBlue Video Essentials II for Windows) (Version: - )
NewBlue Video Essentials III for Windows (HKLM-x32\...\NewBlue Video Essentials III for Windows) (Version: - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 32.0.1948.69 (HKLM-x32\...\Opera 32.0.1948.69) (Version: 32.0.1948.69 - Opera Software)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Preset Manager 2.0 (HKLM-x32\...\{FCFE3F81-C977-4D31-877B-2778BB2A02DE}) (Version: 2.0.114 - Sony)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.8.100.5 - Red Giant, LLC)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_16 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14044_16 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
SHARKOON Skiller (HKLM-x32\...\{91C25547-9534-41A5-823A-1E54BA16EA3F}) (Version: 1.00.0000 - )
Shutdown7 1.9 (HKLM-x32\...\Shutdown7 1.9) (Version: - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SmootherWeb (HKU\S-1-5-21-437646761-135901211-47947868-1000 Version: 1.0 - SmootherWeb LLC) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.143 - TuneUp Software) Hidden
TuneUp Utilities 2014 (x32 Version: 14.0.1000.143 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 12.0 (64-bit) (HKLM\...\{BE94768F-5232-11E3-BD78-F04DA23A5C58}) (Version: 12.0.770 - Sony)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
Virtual Audio Cable 4.9 (HKLM\...\Virtual Audio Cable 4.9) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Installer Clean Up (HKLM-x32\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
Wondershare Dr.Fone for Android(Build 5.4.0.48) (HKLM-x32\...\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 5.4.0.48 - Wondershare Software Co.,Ltd.)
YTD Video Downloader 4.9.2 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9.2 - GreenTree Applications SRL) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-437646761-135901211-47947868-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-437646761-135901211-47947868-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
==================== Wiederherstellungspunkte =========================
20-10-2015 18:04:32 Geplanter Prüfpunkt
21-10-2015 16:47:35 Windows Update
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {03F85640-708C-412B-B9C8-8B3EFB8F9F5C} - System32\Tasks\{E5B542E3-C766-40FD-BDEE-1AA277504F6C} => pcalua.exe -a "C:\Users\BonZZai\Desktop\Neuer Ordner (2)\NBFX Reloaded.exe" -d "C:\Users\BonZZai\Desktop\Neuer Ordner (2)"
Task: {069AA6CE-8008-4C0E-9311-A5BB5A5543E7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {0A84BFA0-E537-4691-B649-5C454BCDD6F0} - System32\Tasks\Driver Whiz-RTMScan => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
Task: {0B159648-241A-4EFC-A2EB-F90E964B9326} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16] (Adobe Systems Incorporated)
Task: {0EC81E02-CA59-4C98-871E-1D4C08E5681F} - System32\Tasks\DriverBoost-RTMRules => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
Task: {10F53218-170A-4439-9BB5-C797F9D84F04} - System32\Tasks\Opera scheduled Autoupdate 1411148449 => C:\Program Files (x86)\Opera\launcher.exe [2015-09-25] (Opera Software)
Task: {14ADD527-F516-48DB-86D5-D9D37FF15921} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000Core => C:\Users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {23EC4C4D-C257-4728-B5DF-71D20F60321F} - System32\Tasks\Driver Whiz-RTMUpdater => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
Task: {38EDEB92-7804-4FE4-B1BE-B6C8C3CD067F} - System32\Tasks\{FBB67B26-EADD-41C8-B6EF-6B883B96CD45} => C:\Program Files\Sony\Vegas Pro 12.0\vegas120.exe [2014-01-29] (Sony Creative Software Inc.)
Task: {39DF60BE-A0EC-4A1D-97AE-5B56F083DFA5} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
Task: {42F64D4E-A233-4C93-A050-B27C9F422903} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10] ()
Task: {48A09266-F648-49C7-878C-9AAFF04E537C} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
Task: {4E684193-0DE3-477E-9110-315DB359E44A} - System32\Tasks\DriverBoost-RTMUpdater => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
Task: {5CEE39FF-BB93-4091-841C-F3B92D51169F} - System32\Tasks\{BD89B9D9-99F1-4338-A36D-16178F23CA56} => pcalua.exe -a "C:\Users\BonZZai\AppData\Local\Temp\Temp2_Atheros AR81618165 PCI-E Gigabit Ethernet Controller (NDIS 6.20) 28381eea7a3e99819e68c88de51163af.zip\setup.exe"
Task: {5F6741D8-FA20-4934-971D-85D7FF8FD710} - System32\Tasks\{50705DB8-60C3-465D-979B-AF05371F6190} => pcalua.exe -a C:\Users\BonZZai\Downloads\wmp11-windowsxp-x86-DE-DE.exe -d C:\Users\BonZZai\Downloads
Task: {5F969B3A-0F06-4DFB-8941-AD17E17A67F2} - System32\Tasks\DriverBoost-RTMScan => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
Task: {65A5BB8D-6A65-47EC-B3A6-2DB8F914A4AF} - System32\Tasks\{B47738E6-CAB9-4D27-8792-7F391E18E440} => pcalua.exe -a "C:\Users\BonZZai\Desktop\newbluefx\NewBlueFX Crack by Priester\Press this and install\3D Explosions.exe" -d "C:\Users\BonZZai\Desktop\newbluefx\NewBlueFX Crack by Priester\Press this and install"
Task: {69E6FB03-7336-40B3-92BF-A3299C694A0F} - System32\Tasks\{EED37A36-6E99-4C7F-A2C5-E178B41DBFA5} => pcalua.exe -a C:\Users\BonZZai\Downloads\dxwebsetup(1).exe -d C:\Users\BonZZai\Downloads
Task: {7C037C83-624F-4E3B-884C-09806322F60B} - System32\Tasks\{FA4F038B-0301-425A-9AD5-D02F58BB4D4C} => pcalua.exe -a "C:\Program Files (x86)\HDCinemaPlus1.6\Uninstall.exe" -c /fcp=1
Task: {88FC76A0-F244-482F-919E-BB0983BC13DF} - System32\Tasks\Driver Whiz-RTMRules => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe
Task: {8D39A1C4-6CB5-4B95-AC98-6F495B918A22} - System32\Tasks\{63A91A78-AABA-448D-A614-3AC262D3BBAA} => pcalua.exe -a C:\Users\BonZZai\Downloads\epson374976eu.exe -d C:\Users\BonZZai\Downloads
Task: {9D0F8814-5B91-441E-B2EB-AE6CCAAA1F2A} - System32\Tasks\{B38E1A10-890B-4018-B715-3BFD9B9DEC29} => pcalua.exe -a C:\Users\BonZZai\AppData\Local\Temp\lui9706.tmp\setup.exe -d C:\Users\BonZZai\Downloads
Task: {A34E7C70-2BAD-42B7-8BC7-7367725B2171} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe
Task: {A701A61E-E000-4FA1-BF1F-237A8C75BF5D} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
Task: {AE4A772A-0C52-42E9-BE44-DD9A57F633C5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000UA => C:\Users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {BC96EE73-C683-4F1D-AF06-8FBD4144C138} - System32\Tasks\ParetoLogic Update Version3 Startup Task => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe
Task: {C0FFBCAA-3DCD-4019-9C8C-59C4DB6E9499} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
Task: {CA988209-9674-4A49-BBB7-0428DD9C0A5F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-21] (Google Inc.)
Task: {D007FAFD-88DD-4190-BC1A-D046EC746F72} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe
Task: {D328E5C3-B2A4-483B-9C70-34D3405433D1} - System32\Tasks\{F2D97FCA-E789-44B8-8C71-8384454F76C3} => pcalua.exe -a "C:\Program Files\TeamSpeak 3 Client\plugins\ts3overlay\InstallHook.exe" -d "C:\Program Files\TeamSpeak 3 Client\plugins\ts3overlay\" -c ts3overlay_hook_win32.dll 10000
Task: {D797B345-70D2-469D-8B18-F3BD082DF49F} - System32\Tasks\{0C982B7E-0D3B-414C-91AC-6C38281982FE} => pcalua.exe -a C:\Users\BonZZai\Downloads\dotnetfx2.exe -d C:\Users\BonZZai\Downloads
Task: {DCD007F2-0016-4788-B36A-34A0D28561EF} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {DDBCCF3E-DA7A-4F3D-B8A2-715FD11C9160} - System32\Tasks\{349064D0-FED6-4F74-A411-D4152092059A} => pcalua.exe -a C:\Users\BonZZai\AppData\Local\Temp\luiED.tmp\setup.exe -d C:\Users\BonZZai\Downloads
Task: {E089DB2A-D720-4E98-A761-C3DFA1DFB0F3} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {E451187D-C1BB-4779-9D4F-9393B23E7414} - System32\Tasks\Google Updater and Installer => C:\Users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {E4AFEAE3-C1B7-4C7D-B408-4717A4EF8A7E} - System32\Tasks\{A8276574-06D6-4AA5-9E88-6A4C0FC18B3F} => pcalua.exe -a C:\Users\BonZZai\Downloads\QuickTimeInstaller(3).exe -d C:\Users\BonZZai\Downloads
Task: {EDA874AA-0AC2-4BE1-94B7-C6D85DF1398D} - System32\Tasks\Red Giant Link => C:\Program Files (x86)\Red Giant Link\Red Giant Link.exe [2014-08-13] ()
Task: {EF16BFF5-81F0-4DD6-A3C3-4E486180A791} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-21] (Google Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000Core.job => C:\Users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000UA.job => C:\Users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-07-16 11:06 - 2014-07-16 11:06 - 00672416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2015-03-17 23:34 - 2015-05-27 17:14 - 03042352 _____ () C:\Program Files (x86)\GameforgeLive\gfl_client.exe
2000-01-01 02:00 - 2015-10-15 21:43 - 02034176 _____ () C:\Users\BonZZai\Desktop\Tor Browser\Browser\TorBrowser\Tor\tor.exe
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2015-10-16 22:19 - 2015-10-16 22:19 - 17599688 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 00088064 _____ () C:\Program Files (x86)\GameforgeLive\libgcc_s_sjlj-1.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 00863744 _____ () C:\Program Files (x86)\GameforgeLive\libstdc++-6.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 05686669 _____ () C:\Program Files (x86)\GameforgeLive\libtorrent.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 00097659 _____ () C:\Program Files (x86)\GameforgeLive\libboost_system-mgw47-mt-1_53.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 01765301 _____ () C:\Program Files (x86)\GameforgeLive\libgcrypt-11.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 00126959 _____ () C:\Program Files (x86)\GameforgeLive\libgpg-error-0.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 00530432 _____ () C:\Program Files (x86)\GameforgeLive\log4qt.dll
2015-03-17 23:34 - 2015-05-27 11:48 - 00141312 _____ () C:\Program Files (x86)\GameforgeLive\qjson.dll
2000-01-01 02:00 - 2015-10-15 21:43 - 00092599 _____ () C:\Users\BonZZai\Desktop\Tor Browser\Browser\libssp-0.dll
2000-01-01 02:00 - 2015-10-15 21:43 - 00718072 _____ () C:\Users\BonZZai\Desktop\Tor Browser\Browser\TorBrowser\Tor\libevent-2-0-5.dll
2000-01-01 02:00 - 2015-10-15 21:43 - 00092599 _____ () C:\Users\BonZZai\Desktop\Tor Browser\Browser\TorBrowser\Tor\libssp-0.dll
2000-01-01 02:00 - 2015-10-15 21:43 - 00523262 _____ () C:\Users\BonZZai\Desktop\Tor Browser\Browser\TorBrowser\Tor\libgcc_s_sjlj-1.dll
2000-01-01 02:00 - 2015-10-15 21:43 - 00107520 _____ () C:\Users\BonZZai\Desktop\Tor Browser\Browser\TorBrowser\Tor\zlib1.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-437646761-135901211-47947868-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{101C341F-6C20-4EDA-B80D-4EDC2BD075AF}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{448D1874-5EC0-44A2-8944-4C9E7B4CAE4C}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [{D2C3A58D-75C5-403C-AD42-31F4E07235CF}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{F73F5BD8-0327-4062-B329-41DAFC3B0EAB}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{446B2E44-77D9-4082-84FF-D638B56A7F4B}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{37D83A96-6CB5-421B-8FD0-3F6DFFA810BB}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [TCP Query User{B9FE370B-9000-4928-A9DA-836AB86C9B00}C:\program files (x86)\azureus\azureus.exe] => (Allow) C:\program files (x86)\azureus\azureus.exe
FirewallRules: [UDP Query User{9EF35B96-1F08-4043-8B55-F3F8D24860A4}C:\program files (x86)\azureus\azureus.exe] => (Allow) C:\program files (x86)\azureus\azureus.exe
FirewallRules: [{63373386-F28F-477C-998E-9108DF28FE39}] => (Allow) C:\Users\BonZZai\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{C0BED2C0-FB10-447D-88D5-9FA8832419BB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{51A2D165-A205-4F2A-B00F-E1F0D81C0854}] => (Allow) LPort=2869
FirewallRules: [{AF33348E-9513-482B-82F0-16E7800752D6}] => (Allow) LPort=1900
FirewallRules: [{79D740A4-1060-4726-9DB0-398192E590ED}] => (Allow) C:\Users\BonZZai\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{1881864A-F21B-4148-8711-DEA881B70C32}] => (Allow) C:\Users\BonZZai\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [TCP Query User{ACA15C86-DBF8-41B1-8F91-D58F50E7A845}C:\program files\sony\vegas pro 12.0\vegas120.exe] => (Allow) C:\program files\sony\vegas pro 12.0\vegas120.exe
FirewallRules: [UDP Query User{0EC14B9B-8FA8-4152-9A98-2B4FE3BDDD4B}C:\program files\sony\vegas pro 12.0\vegas120.exe] => (Allow) C:\program files\sony\vegas pro 12.0\vegas120.exe
FirewallRules: [TCP Query User{64E4F23F-EFF7-4F28-8639-2BAD6E1B87D6}C:\windows\syswow64\regsvr32.exe] => (Allow) C:\windows\syswow64\regsvr32.exe
FirewallRules: [UDP Query User{6D22C906-BB68-47C8-BB26-0910A082DF4D}C:\windows\syswow64\regsvr32.exe] => (Allow) C:\windows\syswow64\regsvr32.exe
FirewallRules: [{471EC402-4563-41FF-9E3C-66DA6E58C7C5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6FA685EF-F259-41FF-A11B-9BCAF8AD81A8}C:\users\bonzzai\desktop\materia\jucy\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe] => (Allow) C:\users\bonzzai\desktop\materia\jucy\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe
FirewallRules: [UDP Query User{0F33AC0D-2777-4059-BD2E-6EBEE1EC5987}C:\users\bonzzai\desktop\materia\jucy\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe] => (Allow) C:\users\bonzzai\desktop\materia\jucy\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe
FirewallRules: [{47A329D7-D741-4C95-9C4D-3F19ECF8DA04}] => (Allow) C:\Users\BonZZai\Downloads\VideoPerformerSetup.exe
FirewallRules: [{27DF2C6F-7A56-43E0-A29E-72A533DE37D7}] => (Allow) C:\Users\BonZZai\Downloads\VideoPerformerSetup.exe
FirewallRules: [TCP Query User{B3ABE2CA-78D0-4C1C-BFAD-F9B0E9B4F0D4}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{D5B9FF9B-E31C-4A25-A65D-08BA892E76ED}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [{C26295EB-C12C-4A5C-90BD-1A6C7A0E2334}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6759225D-9857-482B-A902-59BB1CA1DC58}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E646CCFD-6D1F-442E-AA30-D6C334CCCF9A}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/23/2015 09:21:54 PM) (Source: MsiInstaller) (EventID: 11714) (User: BonZZai-PC)
Description: Product: Google Talk Plugin -- Error 1714. The older version of Google Talk Plugin cannot be removed. Contact your technical support group. System Error 1612.
Error: (10/23/2015 04:21:10 PM) (Source: MsiInstaller) (EventID: 11714) (User: BonZZai-PC)
Description: Product: Google Talk Plugin -- Error 1714. The older version of Google Talk Plugin cannot be removed. Contact your technical support group. System Error 1612.
Error: (10/23/2015 03:56:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/23/2015 03:52:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/23/2015 12:58:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/22/2015 10:22:00 PM) (Source: MsiInstaller) (EventID: 11714) (User: BonZZai-PC)
Description: Product: Google Talk Plugin -- Error 1714. The older version of Google Talk Plugin cannot be removed. Contact your technical support group. System Error 1612.
Error: (10/22/2015 09:28:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/22/2015 09:20:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/22/2015 09:11:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 12.9.0.1001, Zeitstempel: 0x526ed2ab
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x03be4c0d
ID des fehlerhaften Prozesses: 0xf18
Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0
Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1
Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2
Berichtskennung: IAStorDataMgrSvc.exe3
Error: (10/22/2015 09:11:15 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Systemfehler:
=============
Error: (10/23/2015 04:06:23 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (10/23/2015 04:06:20 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (10/23/2015 04:00:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Management and Security Application Local Management Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/23/2015 04:00:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Management and Security Application Local Management Service erreicht.
Error: (10/23/2015 03:57:59 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Skype Click to Call PNR Service" wurde nicht richtig gestartet.
Error: (10/23/2015 03:56:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TuneUp Utilities Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/23/2015 03:56:16 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 23.10.2015 um 15:55:32 unerwartet heruntergefahren.
Error: (10/23/2015 03:53:28 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Skype Click to Call PNR Service" wurde nicht richtig gestartet.
Error: (10/23/2015 03:52:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TuneUp Utilities Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/23/2015 01:00:02 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Skype Click to Call PNR Service" wurde nicht richtig gestartet.
CodeIntegrity:
===================================
Date: 2015-10-18 15:53:32.395
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\BonZZai\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-10-18 15:53:32.354
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\BonZZai\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-10-18 15:53:32.154
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-10-18 15:53:32.113
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-10 11:54:05.313
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-10 11:54:05.188
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-09 18:16:12.856
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-09 18:16:12.731
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-08 20:48:30.472
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-09-08 20:48:30.347
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 38%
Installierter physikalischer RAM: 8144.43 MB
Verfügbarer physikalischer RAM: 5003.33 MB
Summe virtueller Speicher: 16587.07 MB
Verfügbarer virtueller Speicher: 13260.57 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:931.41 GB) (Free:531.33 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 667C083D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
24.10.2015, 17:52
| #4 |
| /// the machine /// TB-Ausbilder | amd treiber reagiert nicht! Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.10.2015, 11:42
| #5 |
| | amd treiber reagiert nicht!Code:
ATTFilter ComboFix 15-10-23.01 - BonZZai 25.10.2015 11:30:53.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.8144.5513 [GMT 1:00]
ausgeführt von:: c:\users\BonZZai\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Enabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\0.bak
c:\programdata\ntuser.pol
c:\windows\msdownld.tmp
c:\windows\security\logs\scecomp.log
c:\windows\SysWow64\NewBlue - Multikeygen 1.0.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-09-25 bis 2015-10-25 ))))))))))))))))))))))))))))))
.
.
2087-01-13 00:31 . 2087-01-13 00:31 -------- d-----w- c:\programdata\eSellerate
2087-01-13 00:31 . 2087-01-13 00:31 -------- d-----w- c:\program files (x86)\Common Files\eSellerate
2050-01-01 00:17 . 2013-10-04 02:28 190464 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2050-01-01 00:17 . 2013-10-04 02:25 197120 ----a-w- c:\windows\system32\credui.dll
2050-01-01 00:17 . 2013-10-04 01:58 152576 ----a-w- c:\windows\SysWow64\SmartcardCredentialProvider.dll
2050-01-01 00:17 . 2013-10-04 01:56 168960 ----a-w- c:\windows\SysWow64\credui.dll
2050-01-01 00:17 . 2013-10-12 02:30 830464 ----a-w- c:\windows\system32\nshwfp.dll
2050-01-01 00:17 . 2013-10-12 02:29 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2050-01-01 00:17 . 2013-10-12 02:29 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2050-01-01 00:17 . 2013-10-12 02:03 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2050-01-01 00:17 . 2013-10-12 02:01 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
2015-10-25 10:35 . 2015-10-25 10:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-10-23 23:09 . 2015-10-23 23:09 -------- d-----w- c:\users\BonZZai\AppData\Roaming\.kde
2015-10-23 23:07 . 2015-10-23 23:10 -------- d-----w- c:\users\BonZZai\AppData\Roaming\gnupg
2015-10-23 23:07 . 2015-10-23 23:07 -------- d-----w- c:\programdata\GNU
2015-10-23 23:07 . 2015-10-23 23:07 -------- d-----w- c:\program files (x86)\GNU
2015-10-18 13:53 . 2015-10-18 13:53 -------- d-----w- c:\program files (x86)\Lavalys
2015-10-18 13:35 . 2015-10-18 13:36 -------- d-----w- c:\program files (x86)\RivaTuner Statistics Server
2015-10-18 13:35 . 2015-10-18 15:02 -------- d-----w- c:\program files (x86)\MSI Afterburner
2015-10-14 22:28 . 2015-09-18 19:22 25432 ----a-w- c:\windows\system32\CompatTelRunner.exe
2015-10-14 22:26 . 2015-10-01 18:06 692672 ----a-w- c:\windows\system32\winload.efi
2015-10-14 22:26 . 2015-10-01 18:04 616360 ----a-w- c:\windows\system32\winresume.efi
2015-10-14 22:26 . 2015-10-01 18:00 63488 ----a-w- c:\windows\system32\setbcdlocale.dll
2015-10-14 22:26 . 2015-10-01 18:00 59392 ----a-w- c:\windows\system32\appidapi.dll
2015-10-14 22:26 . 2015-10-01 18:00 32768 ----a-w- c:\windows\system32\appidsvc.dll
2015-10-14 22:26 . 2015-10-01 18:00 17920 ----a-w- c:\windows\system32\appidcertstorecheck.exe
2015-10-14 22:26 . 2015-10-01 18:00 147456 ----a-w- c:\windows\system32\appidpolicyconverter.exe
2015-10-14 22:26 . 2015-10-01 17:50 50688 ----a-w- c:\windows\SysWow64\appidapi.dll
2015-10-14 22:26 . 2015-10-01 17:00 61440 ----a-w- c:\windows\system32\drivers\appid.sys
2015-09-30 20:47 . 2015-09-30 20:47 225976 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll
2015-09-30 20:47 . 2015-09-30 20:47 225976 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2015-09-28 22:02 . 2015-09-28 22:02 113880 ----a-w- c:\windows\system32\drivers\3BD23E06.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-25 10:36 . 2014-09-12 13:50 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-10-16 20:19 . 2012-12-22 01:09 780488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-10-16 20:19 . 2012-12-22 01:09 142536 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-10-15 01:04 . 2012-12-21 20:36 143481208 ----a-w- c:\windows\system32\MRT.exe
2015-10-05 07:50 . 2014-09-12 13:50 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-10-05 07:50 . 2014-09-12 13:50 109272 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-10-05 07:50 . 2014-09-12 13:50 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-09-29 02:58 . 2015-10-14 22:28 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-09-16 23:06 . 2015-09-16 23:06 113880 ----a-w- c:\windows\system32\drivers\5BF6457D.sys
2015-09-13 18:22 . 2015-09-13 18:22 113880 ----a-w- c:\windows\system32\drivers\69DD0192.sys
2015-09-06 12:26 . 2015-09-06 12:26 113880 ----a-w- c:\windows\system32\drivers\752E4E90.sys
2015-09-02 03:04 . 2015-09-08 21:46 41984 ----a-w- c:\windows\system32\lpk.dll
2015-09-02 03:04 . 2015-09-08 21:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-09-02 03:04 . 2015-09-08 21:46 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-09-02 03:04 . 2015-09-08 21:46 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-09-02 02:48 . 2015-09-08 21:46 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-09-02 02:48 . 2015-09-08 21:46 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-09-02 02:48 . 2015-09-08 21:46 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-09-02 02:47 . 2015-09-08 21:46 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-09-02 01:51 . 2015-09-08 21:46 3209216 ----a-w- c:\windows\system32\win32k.sys
2015-09-02 01:47 . 2015-09-08 21:46 372736 ----a-w- c:\windows\system32\atmfd.dll
2015-09-02 01:33 . 2015-09-08 21:46 299520 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-08-27 18:18 . 2015-09-08 21:46 2004480 ----a-w- c:\windows\system32\msxml6.dll
2015-08-27 18:18 . 2015-09-08 21:46 1887232 ----a-w- c:\windows\system32\msxml3.dll
2015-08-27 18:13 . 2015-09-08 21:46 2048 ----a-w- c:\windows\system32\msxml6r.dll
2015-08-27 18:13 . 2015-09-08 21:46 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-08-27 17:58 . 2015-09-08 21:46 1391104 ----a-w- c:\windows\SysWow64\msxml6.dll
2015-08-27 17:58 . 2015-09-08 21:46 1241088 ----a-w- c:\windows\SysWow64\msxml3.dll
2015-08-27 17:51 . 2015-09-08 21:46 2048 ----a-w- c:\windows\SysWow64\msxml6r.dll
2015-08-27 17:51 . 2015-09-08 21:46 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2015-08-22 19:15 . 2015-08-22 19:15 113880 ----a-w- c:\windows\system32\drivers\4B7D737D.sys
2015-08-21 19:08 . 2015-08-21 19:08 113880 ----a-w- c:\windows\system32\drivers\4A172020.sys
2015-08-05 17:56 . 2015-09-08 21:47 1110016 ----a-w- c:\windows\system32\schedsvc.dll
2015-08-05 17:56 . 2015-09-08 21:47 24576 ----a-w- c:\windows\system32\jnwmon.dll
2015-08-05 17:56 . 2015-09-08 21:47 275456 ----a-w- c:\windows\system32\InkEd.dll
2015-08-05 17:40 . 2015-09-08 21:47 216064 ----a-w- c:\windows\SysWow64\InkEd.dll
2015-07-30 18:06 . 2015-08-12 15:00 1648128 ----a-w- c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 15:00 1180160 ----a-w- c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 15:00 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 15:00 1251328 ----a-w- c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 15:00 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-12 23:35 103120 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-12 23:35 124624 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2015-08-05 01:46 297488 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-04-29 23:10 220632 ----a-w- c:\users\BonZZai\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-04-29 23:10 220632 ----a-w- c:\users\BonZZai\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-04-29 23:10 220632 ----a-w- c:\users\BonZZai\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2014-02-18 39408]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-07-25 1562264]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-08-07 53725200]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files (x86)\via\viaudioi\vdeck\vdeck.exe" [2013-05-10 5675184]
"Adobe Creative Cloud"="c:\program files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2014-07-22 2694040]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GIGABYTE OC_GURU.lnk - c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [2012-7-23 17432576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"DivXMediaServer"=c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"KiesTrayAgent"=c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe
"GamingKeyboard"="c:\program files (x86)\sharkoon skiller\gamemon.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 GameKB;SHARKOON Skiller;c:\windows\system32\drivers\GameKB.sys;c:\windows\SYSNATIVE\drivers\GameKB.sys [x]
R3 GPCIDrv;GPCIDrv;c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys;c:\program files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WsDrvInst;Wondershare Driver Install Service;c:\program files (x86)\Wondershare\Dr.Fone für Android\DriverInstall.exe;c:\program files (x86)\Wondershare\Dr.Fone für Android\DriverInstall.exe [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys;c:\windows\SYSNATIVE\DRIVERS\vrtaucbl.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2015-10-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-22 20:19]
.
2014-02-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-21 19:47]
.
2014-02-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-21 19:47]
.
2015-10-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000Core.job
- c:\users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-03 00:10]
.
2015-10-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000UA.job
- c:\users\BonZZai\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-03 00:10]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2015-08-05 00:01 357376 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2014-07-16 09:06 672416 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2014-07-16 09:06 672416 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2014-07-16 09:06 672416 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-04-29 23:10 244696 ----a-w- c:\users\BonZZai\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-04-29 23:10 244696 ----a-w- c:\users\BonZZai\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-04-29 23:10 244696 ----a-w- c:\users\BonZZai\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-02-27 558496]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
uDefault_Search_URL = www.google.com
mDefault_Search_URL = www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com
uCustomizeSearch = hxxp://www.google.com
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: {{92808042-fb78-4fa0-bb4f-c9a95e0e9c10} - {ba696155-d96e-4281-b467-0367a0456474} -
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-Wondershare Helper Compact.exe - c:\program files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelperSetup.exe
Wow6432Node-HKLM-Run-Driver Genius - (no file)
Wow6432Node-HKLM-Run-MalwareProtectionLive - c:\users\BonZZai\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-Free Window Registry Repair - c:\progra~2\FREEWI~1\UNWISE.EXE
AddRemove-{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1 - c:\program files (x86)\GameforgeLive\Games\DEU_deu\AION\unins000.exe
AddRemove-SmootherWeb - c:\smootherweb\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=hex:51,66,7a,6c,4c,1d,38,12,11,7f,11,
d0,78,5b,08,05,de,bb,01,03,dd,4c,30,54
"{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}"=hex:51,66,7a,6c,4c,1d,38,12,95,dc,03,
c1,cc,44,22,0d,c5,56,8d,95,b2,12,0a,fb
"{5018CFD2-804D-4C99-9F81-25EAEA2769DE}"=hex:51,66,7a,6c,4c,1d,38,12,bc,cc,0b,
54,7f,ce,f7,09,e0,97,66,aa,ef,79,2d,ca
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{DFF9B2DA-EF99-4B26-83CB-7058299999D8}"=hex:51,66,7a,6c,4c,1d,38,12,b4,b1,ea,
db,ab,a1,48,0e,fc,dd,33,18,2c,c7,dd,cc
"{E87806B5-E908-45FD-AF5E-957D83E58E68}"=hex:51,66,7a,6c,4c,1d,38,12,db,05,6b,
ec,3a,a7,93,00,d0,48,d6,3d,86,bb,ca,7c
"{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}"=hex:51,66,7a,6c,4c,1d,38,12,27,28,80,
ea,f2,9b,77,08,dc,cc,8d,48,4c,7b,c9,f2
"{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}"=hex:51,66,7a,6c,4c,1d,38,12,70,05,61,
f9,ec,d1,23,0d,da,9c,48,eb,44,0f,8e,cc
.
[HKEY_USERS\S-1-5-21-437646761-135901211-47947868-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-437646761-135901211-47947868-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_19_0_0_226_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_19_0_0_226_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_226.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.19"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_226.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_226.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_226.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\018647013AAD3BC41860311C4741396B\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SilentUpdater.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="56972"
"PatchAttributes"="0"
"PatchSequence"="10042"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\04746129646274C4B939D6FC71EF4F2A\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUUtilitiesLauncherExe64bit"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="852"
"PatchAttributes"="0"
"PatchSequence"="10092"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0C25C3CE0B60FB54D89CE2B9D56ED9C4\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DuplicateFinder.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="13625"
"PatchAttributes"="0"
"PatchSequence"="10024"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0F3E84C4789ECA948A6040F9981CF2F1\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RegistryDefrag.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5415"
"PatchAttributes"="0"
"PatchSequence"="10029"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\106C0329EB6F96F4B820D25C40407183\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SettingCenter.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8204"
"PatchAttributes"="0"
"PatchSequence"="10033"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\16290A0D96554E14E990F7399848038E\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxBarExtItemsD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4505"
"PatchAttributes"="0"
"PatchSequence"="10100"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1AA7821C95CDFE34297B90AB31AB752A\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="cefcomponent.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="2098"
"PatchAttributes"="0"
"PatchSequence"="10125"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1CC1DF8FB58E47448B91333BDFD4D571\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="PowerModeManager.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5673"
"PatchAttributes"="0"
"PatchSequence"="10005"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\20AE8B36FE07E2D4892FF146FB5770AC\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxGDIPlusD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1373"
"PatchAttributes"="0"
"PatchSequence"="10103"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\20B9A0EC9E8112349BFFD4E24AE7B2F3\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUTransl.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1867"
"PatchAttributes"="0"
"PatchSequence"="10078"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\22DCFA0F2E56E314990836E436D5B6A1\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUIECacheClass.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3480"
"PatchAttributes"="0"
"PatchSequence"="10053"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\231772B44EC27C245949C7100D8598AF\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Indicators.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3495"
"PatchAttributes"="0"
"PatchSequence"="10054"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2464177FA2DE5E74498637068DA3C7BA\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUBasic.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1165"
"PatchAttributes"="0"
"PatchSequence"="10066"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2634A0CE5AEDB4346AFAD1186E49C1C1\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DiskDoctor.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5945"
"PatchAttributes"="0"
"PatchSequence"="10008"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2642BF6F76E577243945F5E888376DEE\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="IECacheWinInetLdrExe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3512"
"PatchAttributes"="0"
"PatchSequence"="10126"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\28C6229FCA8CD194590905C2F31680B2\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUShredder.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4427"
"PatchAttributes"="0"
"PatchSequence"="10075"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\30319372162210F419BA849293BE91D0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="authuitu_x64.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="828"
"PatchAttributes"="0"
"PatchSequence"="10116"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\30593ADC15C18A44BB756AEBB3722912\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUBase.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1794"
"PatchAttributes"="0"
"PatchSequence"="10065"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\310054E6F94C1264F9020F69B693A103\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TURatingSynch.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4921"
"PatchAttributes"="0"
"PatchSequence"="10016"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3309675AD51EAB340BFCFD0FDA86E4DC\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="uxtuneupx86.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1685"
"PatchAttributes"="0"
"PatchSequence"="10109"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3A6887691BFBD384FBB63B00B90B8859\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="uxtuneupx64.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="836"
"PatchAttributes"="0"
"PatchSequence"="10110"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3A891C71A03BC544582D1370DCAA37B3\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="PMLauncher.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4147"
"PatchAttributes"="0"
"PatchSequence"="10041"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3D374B1AC9E6BED4CA4295CE27BB6C72\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TuneUpUtilitiesServiceExe64bit"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="112637"
"PatchAttributes"="0"
"PatchSequence"="10088"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3E4C57BC19292C74BA9467E8B656BEB6\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUDiskCleanerClass.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9784"
"PatchAttributes"="0"
"PatchSequence"="10068"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3EB9A9FF0F75DB74F83B0118FC675D25\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUAnalyzeInfo.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7754"
"PatchAttributes"="0"
"PatchSequence"="10117"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\420AD3DC0342B5E4E8DC01A70AE7625C\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Integrator.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="22568"
"PatchAttributes"="0"
"PatchSequence"="10001"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\42F75296D7067B54AAD40227A7F1F02F\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUInstallHelper.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="6710"
"PatchAttributes"="0"
"PatchSequence"="10096"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4329F0B9F3594FA438356B1CE6BE3A25\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Undelete.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="6051"
"PatchAttributes"="0"
"PatchSequence"="10038"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4472B8E0BE525B74685181A3708E31D2\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Internet.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4268"
"PatchAttributes"="0"
"PatchSequence"="10055"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\49EB20E14F01B95489AB758F12C71782\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="ProcessManager.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8012"
"PatchAttributes"="0"
"PatchSequence"="10019"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4A2F2139191A0C24F819D7C545691D05\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUAnalyzeInfo64.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="902"
"PatchAttributes"="0"
"PatchSequence"="10118"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5065CB0F9D055944C8A8640132BDF2E3\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="ProcessManager64.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="876"
"PatchAttributes"="0"
"PatchSequence"="10020"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5204F549D5956D245A8609622211BEB0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="C_DefragBackend64"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="936"
"PatchAttributes"="0"
"PatchSequence"="10015"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\53237B88B40119144A152B114CA917ED\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TuneUpRPCDll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8092"
"PatchAttributes"="0"
"PatchSequence"="10094"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\57EE8392BC95B4847AE5F024E378D6D0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUTuningIndex64.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1032"
"PatchAttributes"="0"
"PatchSequence"="10120"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5851AEBD604EC86498F02CB69DCFE10A\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Html.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5225"
"PatchAttributes"="0"
"PatchSequence"="10049"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\58BC2AA780ECC59439760F908B4EE512\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUHTMLTabbedNavPkg.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5584"
"PatchAttributes"="0"
"PatchSequence"="10052"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\593F28AC1DDADC64A9AAC2DC62167560\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SystemControl.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="15667"
"PatchAttributes"="0"
"PatchSequence"="10011"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5AD81B067A79E1F469386A5A2DAC5414\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="MSI_D6.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4374"
"PatchAttributes"="0"
"PatchSequence"="10058"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5BE314CD606D6FF43BBF4E21AA81DC39\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxSkinsCoreD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4346"
"PatchAttributes"="0"
"PatchSequence"="10104"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\65250F0ED68B7C147AEEF9D90B096EFD\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="MsStyles.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="22625"
"PatchAttributes"="0"
"PatchSequence"="10123"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\68B3A5EFC4C1DE14FBB104EC4F318E80\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="VisControls.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9345"
"PatchAttributes"="0"
"PatchSequence"="10077"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6C72C4B8AAF022D49AEFC8C55D1ABCC5\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUApplicationsBpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3077"
"PatchAttributes"="0"
"PatchSequence"="10086"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6EFB6C20ED4E12E4C87FDCC648CE75C0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUMessages.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7029"
"PatchAttributes"="0"
"PatchSequence"="10043"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\74261C5C907F4264CA786B802A9BD5D5\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Report.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5943"
"PatchAttributes"="0"
"PatchSequence"="10006"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\762C4092A59A24343997D269ABE9BA11\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RegCleaner.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5245"
"PatchAttributes"="0"
"PatchSequence"="10057"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\76FBDDE6E1FB75B49BFDE42EBD79472D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="ntrtl60.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="2916"
"PatchAttributes"="0"
"PatchSequence"="10059"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\78CAAFAB319609F4B90E926AF17E4D0B\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUSqlDB32.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="82239"
"PatchAttributes"="0"
"PatchSequence"="10121"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\794A9CF6C0A028E409CA94BE15D59E6E\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="GR32_D6.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4566"
"PatchAttributes"="0"
"PatchSequence"="10047"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B580854A8BD8A448A17F4DB53BB3D7A\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUDefragClient.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3859"
"PatchAttributes"="0"
"PatchSequence"="10051"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7CF216552A2643C48B3B73E8C7168390\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUUnInstallHelper.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5314"
"PatchAttributes"="0"
"PatchSequence"="10097"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\81DF1190C00D2B445AC2946B1990C3E0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUOperaClass.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3374"
"PatchAttributes"="0"
"PatchSequence"="10072"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8453B91AEE3AA4245BF5B7D09C2A11CE\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="BrowserCleaner.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5546"
"PatchAttributes"="0"
"PatchSequence"="10026"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8521CBD769651A8488A89D388A78F01F\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="tux64thk.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="823"
"PatchAttributes"="0"
"PatchSequence"="10044"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8CCA42DEFD70AA14BAAF818AA6346DA4\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DseShExtx64.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="828"
"PatchAttributes"="0"
"PatchSequence"="10114"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8E1FF55D50CEBD748A4684E5D4655B7E\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RescueCenter.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7745"
"PatchAttributes"="0"
"PatchSequence"="10032"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8EBBDED43492E7F41BAB2B59EC7E7212\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Traces.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="6176"
"PatchAttributes"="0"
"PatchSequence"="10064"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8F17458D795978B4594EB0C96389A6C3\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUAutoUpdateCheck.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5225"
"PatchAttributes"="0"
"PatchSequence"="10002"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\93442F26E6193F344ACA61E56B63AF93\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SDShelEx86.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1831"
"PatchAttributes"="0"
"PatchSequence"="10111"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\937732AC7230BFE40ACAE58899EF4BB5\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxBarD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="10077"
"PatchAttributes"="0"
"PatchSequence"="10099"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\97AADAB00AEA9F5448CA9471B7EFA10B\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="EnergyOptimizer.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7954"
"PatchAttributes"="0"
"PatchSequence"="10004"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9B20961489CDA6D43A01BB544E09C045\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxRibbonD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8839"
"PatchAttributes"="0"
"PatchSequence"="10106"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9B765335767F2164A9E3DBFD635F1211\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUPSAPIDll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="107434"
"PatchAttributes"="0"
"PatchSequence"="10093"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9BC05D135F451C44F94BD870489413EB\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Stiderc.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8369"
"PatchAttributes"="0"
"PatchSequence"="10122"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9C6EB587006F9274CB35421CA25A4C2B\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SystemInformation.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7620"
"PatchAttributes"="0"
"PatchSequence"="10035"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9D31FBF27B68F174AA19B952C4F2C78C\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUAppsBpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4133"
"PatchAttributes"="0"
"PatchSequence"="10084"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9D3582A760DC1C54990C95AA0CD623AC\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUIcoEngineerDirTree.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5592"
"PatchAttributes"="0"
"PatchSequence"="10083"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9ECF20D0246959E4493EAB432DB608BA\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DriveDefrag.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5969"
"PatchAttributes"="0"
"PatchSequence"="10007"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9EE651545CD5D644BA5BAD9AD8F8F72D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DseShExtx86.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1454"
"PatchAttributes"="0"
"PatchSequence"="10113"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A24755BBFCD0E3C44AE59617A2D6F8FA\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SDShelEx64.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="830"
"PatchAttributes"="0"
"PatchSequence"="10112"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A65B2826376FDED43A35A7114D53A682\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="PowerManagerBpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="6574"
"PatchAttributes"="0"
"PatchSequence"="10127"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A724CACFB59D2E7418C2CD99FF1239D1\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxCoreD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1754"
"PatchAttributes"="0"
"PatchSequence"="10107"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A7E04CD373226E1439E4F8BEFBE7C005\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DiskCleaner.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5626"
"PatchAttributes"="0"
"PatchSequence"="10023"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A827772DACF666B40870ACA546CDAAA7\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="PerformanceOptimizer.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9532"
"PatchAttributes"="0"
"PatchSequence"="10036"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A8AA4D1E6B2905B449F8619B2FA8C1C3\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Styler.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="30339"
"PatchAttributes"="0"
"PatchSequence"="10010"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AA42B59EDCF31C14CBA3F68F944F6E9C\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="StartUpManager.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="12192"
"PatchAttributes"="0"
"PatchSequence"="10034"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AEC29866530EA5F4899D4C22C0C6B326\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="UpdateWizard.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7473"
"PatchAttributes"="0"
"PatchSequence"="10040"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B42EBC9474D6DA942AA355878D564B94\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SchedAgent_2007.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="2582"
"PatchAttributes"="0"
"PatchSequence"="10069"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B452099877599854295262B1FAB9A44B\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUSafariClass.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3088"
"PatchAttributes"="0"
"PatchSequence"="10073"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B4C18902FC89BD242AA118AD0E292895\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DEC.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1328"
"PatchAttributes"="0"
"PatchSequence"="10081"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B53D3EE0691580B4B8197C50BCB7DD19\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUShell.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1812"
"PatchAttributes"="0"
"PatchSequence"="10071"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B727E02BCF4821249902C1B105C3615B\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="IEControl.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1140"
"PatchAttributes"="0"
"PatchSequence"="10050"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B90A5B697A1E3CA40A82CF622EC8F29D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="AvgdiagexExe"
"ComponentVersion"="2013.0.0.3000"
"ProductVersion"="14.0.1000"
"PatchSize"="967"
"PatchAttributes"="0"
"PatchSequence"="10130"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\B915940A997FEF04CBA5F7F29D18772E\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUIEInstVerBpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3415"
"PatchAttributes"="0"
"PatchSequence"="10085"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\BC7C09865DE3D3D49BFF377B7E8B98FC\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="OneClickStarter.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4482"
"PatchAttributes"="0"
"PatchSequence"="10018"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\BE0E6688D4B46CA448D1D680AC2A29CE\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RegWiz.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9390"
"PatchAttributes"="0"
"PatchSequence"="10030"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C05467401A9125643BC46B07F796E3BB\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SysInfo.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7852"
"PatchAttributes"="0"
"PatchSequence"="10063"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1CE2FBB11FEE104CAD9E523CA0D4B83\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="AppInitialization.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="6909"
"PatchAttributes"="0"
"PatchSequence"="10079"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1F6C2B634F50324195F297F041A0F44\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="SysControls.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="3801"
"PatchAttributes"="0"
"PatchSequence"="10062"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C30A26845A82CA340B087B665F46124D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="PerlRegEx.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1179"
"PatchAttributes"="0"
"PatchSequence"="10061"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C5A71FEDEC6C24B41A1038CA397AEFB1\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUCompression.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="2409"
"PatchAttributes"="0"
"PatchSequence"="10067"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C5C0D5776267F764B94307DC98586F16\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="DiskExplorer.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8831"
"PatchAttributes"="0"
"PatchSequence"="10009"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C9134FC31AC61F742A5A1EBEFCA7662C\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="Shredder.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5728"
"PatchAttributes"="0"
"PatchSequence"="10003"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\D8C9004D824A64E46A8928E56E8565C6\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="XMLComponents.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1998"
"PatchAttributes"="0"
"PatchSequence"="10082"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\D93C08663E49C274EAA2C25524F4294C\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RegistryEditor.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9606"
"PatchAttributes"="0"
"PatchSequence"="10028"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DC202D53591178548BA58A4C327A91BA\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUUtilitiesClientExe64bit"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1252"
"PatchAttributes"="0"
"PatchSequence"="10090"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E1DF29178066AB448A87F30B5B4917B0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="CommonForms.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5549"
"PatchAttributes"="0"
"PatchSequence"="10080"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E2B17EE021576AE42BA931E776DBEFBD\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUKernel.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5357"
"PatchAttributes"="0"
"PatchSequence"="10070"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E44AE4BE0C485E84F8A316D61B255D32\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="StartupOptimizer.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9495"
"PatchAttributes"="0"
"PatchSequence"="10037"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E4692DFA04D3E9740AEF41D64DD38027\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUlicDll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="43905"
"PatchAttributes"="0"
"PatchSequence"="10095"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E48E42685AE42CC4EAC153958AE8C32D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TuneUpSystemStatusCheck.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="7682"
"PatchAttributes"="0"
"PatchSequence"="10045"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E615018751FF1F74DA0E34C0D866047F\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TURar.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="2004"
"PatchAttributes"="0"
"PatchSequence"="10074"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E6457078E8B3D244D811FC9363453D83\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RepairWizard.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5303"
"PatchAttributes"="0"
"PatchSequence"="10031"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E8D288CD8FD8A2349BD81A0ED48AAD0D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="UninstallManager.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8024"
"PatchAttributes"="0"
"PatchSequence"="10039"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\EBD8BE1FFDACCF947BB47076EC0A17A6\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxComnD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1049"
"PatchAttributes"="0"
"PatchSequence"="10101"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\EC55D1AF26C29B046B3F0F2DA424E6B7\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="MainControls.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="15688"
"PatchAttributes"="0"
"PatchSequence"="10056"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F0306CB437D2591489F5F5FFB1E90FB0\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="HexEdit.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="2594"
"PatchAttributes"="0"
"PatchSequence"="10048"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F156E634F2955154DB106B7F977F589D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TuningWizard.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9080"
"PatchAttributes"="0"
"PatchSequence"="10108"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F2041205A868DB544961100B7A1B319D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="ShortcutCleaner.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5296"
"PatchAttributes"="0"
"PatchSequence"="10022"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F30768324B90A5448A03A8E84002A220\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUParams.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="6527"
"PatchAttributes"="0"
"PatchSequence"="10124"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F390639AC7B79C04FABF466DC779696D\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="ProgramDeactivator.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="9249"
"PatchAttributes"="0"
"PatchSequence"="10027"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F436B169A6332784AB34F33FFC4ACDBE\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="RegistryCleaner.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8870"
"PatchAttributes"="0"
"PatchSequence"="10021"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F5627656FF0D69845BFB4C75B52C4FC6\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="VirtualTreesR.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8317"
"PatchAttributes"="0"
"PatchSequence"="10076"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F62CF862776900D41847C5958000CFF4\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="authuitu_x86.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1706"
"PatchAttributes"="0"
"PatchSequence"="10115"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F63BC76C8D5660C4A9D9517504B05D02\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="C_TURegOpt.exe64"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="816"
"PatchAttributes"="0"
"PatchSequence"="10013"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F735FFB166EB2DD47BB765BA191F4904\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxDockingD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="4525"
"PatchAttributes"="0"
"PatchSequence"="10102"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F78CA130741688A4594ADEF4FDF458B2\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="OneClick.exe"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="12756"
"PatchAttributes"="0"
"PatchSequence"="10017"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F7CDD49CE743404498B63F676C061032\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="cxLibraryD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="8305"
"PatchAttributes"="0"
"PatchSequence"="10098"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FA8FEDA97A156AE4CA221AD128E5927E\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="dxThemeD12.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="1613"
"PatchAttributes"="0"
"PatchSequence"="10105"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FCB20C5589C6F184F90CB60C36702C8E\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="TUTuningIndex.dll"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="98723"
"PatchAttributes"="0"
"PatchSequence"="10119"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FE524D92676A9514DB5D755703BFEFAC\A374D8EF60F699F45B4FEB7DB2A230C8]
@DACL=(02 0000)
"PatchGUID"="{401708C8-AEC7-43D9-AFC3-8F1A598ACA7E}"
"MediaCabinet"="PCW_CAB_TUU2014"
"File"="ProgramRating.bpl"
"ComponentVersion"="14.0.1000.169"
"ProductVersion"="14.0.1000"
"PatchSize"="5660"
"PatchAttributes"="0"
"PatchSequence"="10060"
"SharedComponent"="0"
"IsFullFile"="0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\ Malwarebytes Anti-Malware \mbam.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-10-25 11:41:09 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2015-10-25 10:41
.
Vor Suchlauf: 16 Verzeichnis(se), 618.412.830.720 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 622.465.142.784 Bytes frei
.
- - End Of File - - 6CC706DBAEBADD6713201369D8ACE8C0
A36C5E4F47E84449FF07ED3517B43A31
|
|
26.10.2015, 08:43
| #6 |
| /// the machine /// TB-Ausbilder | amd treiber reagiert nicht! Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> amd treiber reagiert nicht! |
|
27.10.2015, 00:35
| #7 |
| | amd treiber reagiert nicht!Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Professional x64
Ran by BonZZai on 27.10.2015 at 0:23:38,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully deleted: [Service] drvagent64 [Reboot required]
~~~ Tasks
Successfully deleted: [Task] C:\Windows\system32\tasks\TuneUpUtilities_Task_BkGndMaintenance2013
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\TuneUp Undelete
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\TuneUp Disk Space Explorer Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Jotzey
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\Program Files (x86)\driver-soft
Successfully deleted: [Folder] C:\ProgramData\drivergenius
Successfully deleted: [Folder] C:\ProgramData\esellerate
Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driver genius
Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free window registry repair
Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tuneup utilities 2014
Successfully deleted: [Folder] C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\free window registry repair
~~~ FireFox
Successfully deleted the following from C:\Users\BonZZai\AppData\Roaming\mozilla\firefox\profiles\bq41gjvj.default\prefs.js
user_pref(extensions.AMAZONNEW_NS_PH.toolbarXMLText, <?xml version=\1.0\ encoding=\utf-8\?>\n<toolbar>\n <replacements>\n <replacement>\n <key><![CDATA[__REGIO
Emptied folder: C:\Users\BonZZai\AppData\Roaming\mozilla\firefox\profiles\bq41gjvj.default\minidumps [439 files]
~~~ Chrome
[C:\Users\BonZZai\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\BonZZai\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\BonZZai\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\BonZZai\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.10.2015 at 0:26:25,27
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan, 27.10.2015 00:06, SYSTEM, BONZZAI-PC, Manual, Start: 26.10.2015 23:57, Dauer: 8 Min. 54 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 0 Nicht-Malware-Erkennungen, (end) Code:
ATTFilter # AdwCleaner v5.015 - Bericht erstellt am 27/10/2015 um 00:20:00
# Aktualisiert am 26/10/2015 von Xplode
# Datenbank : 2015-10-26.2 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : BonZZai - BONZZAI-PC
# Gestartet von : C:\Users\BonZZai\Downloads\AdwCleaner_5.015.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner Gelöscht : C:\Program Files (x86)\Jotzey
[-] Ordner Gelöscht : C:\Program Files (x86)\myfree codec
[-] Ordner Gelöscht : C:\ProgramData\driver whiz
[-] Ordner Gelöscht : C:\ProgramData\Fighters
[-] Ordner Gelöscht : C:\ProgramData\DriverBoost
[-] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Ordner Gelöscht : C:\Users\BonZZai\AppData\Local\Guard
[-] Ordner Gelöscht : C:\Users\BonZZai\AppData\Roaming\BitLord
[-] Ordner Gelöscht : C:\Users\BonZZai\Documents\BitLord
***** [ Dateien ] *****
[-] Datei Gelöscht : C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi
***** [ DLLs ] *****
***** [ Verknüpfungen ] *****
***** [ Geplante Tasks ] *****
[-] Task Gelöscht : Driver Whiz-RTMRules
[-] Task Gelöscht : Driver Whiz-RTMScan
[-] Task Gelöscht : Driver Whiz-RTMUpdater
[-] Task Gelöscht : DriverBoost-RTMRules
[-] Task Gelöscht : DriverBoost-RTMUpdater
[-] Task Gelöscht : DriverBoost-RTMScan
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PCSU.SysUtils
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PCSU.SysUtils.1
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\uus3url-pl
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\ForeceRemove
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [Plus-HD-2.4-bg.exe]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [Plus-HD-1.3-bg.exe]
[-] Schlüssel Gelöscht : HKCU\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6FA0479B-417C-4317-B7CD-64B238930796}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF02E7D2-E73D-468C-9BBC-87367E8A4FAF}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{59C0C5BD-2579-433A-BBB8-AFFD59642BAF}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{DAEB9E85-4694-4F9B-85CB-2F28987872D7}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{FED6A736-129B-49C7-857E-25FC91E87DB3}]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d3d05b4-2b98-4869-8027-a69a80796262}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1e994269-d6f3-4465-8906-967c775f96c3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7c712b3e-eabe-405c-bdcb-d2397d8cd515}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e5721267-2b6d-4332-8730-81789f11e57a}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d3d05b4-2b98-4869-8027-a69a80796262}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1e994269-d6f3-4465-8906-967c775f96c3}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7c712b3e-eabe-405c-bdcb-d2397d8cd515}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e5721267-2b6d-4332-8730-81789f11e57a}
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\GetPrivate
[-] Schlüssel Gelöscht : HKCU\Software\foxydeal
[-] Schlüssel Gelöscht : HKCU\Software\2.6.1339.144
[-] Schlüssel Gelöscht : HKCU\Software\Reg\Clean
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Settings Manager
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Driver-Soft
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Taronja
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Reg\Clean
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\SiteFinder
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius Professional Edition_is1
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0E08BAC8-845B-4327-8CDB-4B0F8C9857A5}_is1
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\GetPrivate
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\foxydeal
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\2.6.1339.144
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Reg\Clean
[!] Schlüssel Nicht Gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-437646761-135901211-47947868-1000\Software\AppDataLow\Software\Settings Manager
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
***** [ Internetbrowser ] *****
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.ClearSearchHistoryOnClose", "false");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.CurrentLanguageSelection", "English");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.CurrentNavigationSelection", "Current window");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.CurrentSearchEngineSelection", "US: United States of America");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.DisplayRecentSearches", "true");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.ShowButtonText2", "true");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.UpdateTime", "1381063748089");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.setupExtension", "true");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.userEnable", true);
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("HomeTab_3869.global.userID", "45883ba114e1f5dc3b6618390f452db4");
[-] [C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\prefs.js] [Preference] Gelöscht : user_pref("browser.newtab.url", "chrome://unitedtb/content/newtab/newtab-page.xhtml");
*************************
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [9316 Bytes] ##########
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02 durchgeführt von BonZZai (Administrator) auf BONZZAI-PC (27-10-2015 00:34:24) Gestartet von C:\Users\BonZZai\Desktop Geladene Profile: BonZZai (Verfügbare Profile: BonZZai) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HDAudDeck] => c:\program files (x86)\via\viaudioi\vdeck\vdeck.exe [5675184 2013-05-10] (VIA) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-02-18] (Google Inc.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1562264 2014-07-25] (Samsung) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53725200 2015-08-07] (Skype Technologies S.A.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2012-12-21] ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{9A226170-8866-46E0-B242-2F2E4042131D}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-437646761-135901211-47947868-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: HKLM-x32 -> Standard = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-437646761-135901211-47947868-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-17] (Google Inc.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08] (Adblock Plus) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-17] (Google Inc.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08] (Adblock Plus) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-17] (Google Inc.) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-17] (Google Inc.) Toolbar: HKU\S-1-5-21-437646761-135901211-47947868-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-17] (Google Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com/ FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2013-09-28] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-07-22] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-07-22] (Adobe Systems) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/O1DPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npo1d.dll [2013-07-02] (Google) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/O3DPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] () FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @tools.google.com/Google Update;version=3 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @tools.google.com/Google Update;version=9 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] () FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npo1d.dll [2013-07-02] (Google) FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\englische-ergebnisse.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\gmx-suche.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\google-images.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\google-maps.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\lastminute.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\webde-suche.xml [2014-08-15] FF Extension: WEB.DE MailCheck - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\mailcheck@web.de [2015-10-20] FF Extension: 4shared Desktop Plugin - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\4sharedCopyLinks.xpi.tmp [2013-03-14] [ist nicht signiert] FF Extension: Facebook Toolbar - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\firefox@facebook.com.xpi [2012-12-21] [ist nicht signiert] FF Extension: Mark Ads Sites In Search - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\jid1-LGBwZ7tVjRcfIg@jetpack.xpi [2015-05-29] FF Extension: Adblock Plus - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24] FF Extension: Tab Mix Plus - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-09-01] FF Extension: DownThemAll! - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2015-05-28] FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert] Chrome: ======= CHR Profile: C:\Users\BonZZai\AppData\Local\Google\Chrome\User Data\default CHR Extension: (Kein Name) - C:\Users\BonZZai\AppData\Local\Google\Chrome\User Data\default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf [2014-09-21] CHR HKLM-x32\...\Chrome\Extension: [hfikdpojhgckaejifppccjeedkjcndpp] - <kein Path/update_url> ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) S2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-09-09] () [Datei ist nicht signiert] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert] S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Dr.Fone für Android\DriverInstall.exe [103824 2015-08-17] (Wondershare) S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] () S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [Datei ist nicht signiert] R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-10-27] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13536 2015-05-27] () R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2013-12-19] (Synaptics Incorporated) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [Datei ist nicht signiert] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2087-01-13 01:31 - 2014-01-29 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue 2050-01-01 01:17 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2050-01-01 01:17 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2050-01-01 01:17 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2050-01-01 01:17 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2050-01-01 01:17 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2050-01-01 01:17 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2050-01-01 01:17 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2050-01-01 01:17 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2050-01-01 01:17 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2050-01-01 01:04 - 2050-01-01 01:04 - 00003218 _____ C:\Windows\System32\Tasks\{E5B542E3-C766-40FD-BDEE-1AA277504F6C} 2050-01-01 00:59 - 2050-01-01 01:12 - 00001686 _____ C:\Users\BonZZai\AppData\Local\Cracklock.settings 2015-10-27 00:34 - 2015-10-27 00:34 - 00000000 ____D C:\Users\BonZZai\Desktop\FRST-OlderVersion 2015-10-27 00:34 - 2015-10-27 00:34 - 00000000 ____D C:\8f17f07fcef262b27cdc4f28ffd4e89e 2015-10-27 00:31 - 2015-10-27 00:31 - 00000000 ____D C:\Users\BonZZai\AppData\Local\GWX 2015-10-27 00:26 - 2015-10-27 00:26 - 00003589 _____ C:\Users\BonZZai\Desktop\JRT.txt 2015-10-27 00:24 - 2015-10-27 00:24 - 00000000 ____D C:\3aac4d064594d4f542d520 2015-10-27 00:23 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\BonZZai\Desktop\JRT.exe 2015-10-27 00:21 - 2015-10-27 00:21 - 00009443 _____ C:\Users\BonZZai\Desktop\AdwCleaner[C2].txt 2015-10-27 00:14 - 2015-10-27 00:14 - 01798976 _____ (Malwarebytes) C:\Users\BonZZai\Downloads\JRT.exe 2015-10-27 00:10 - 2015-10-27 00:10 - 01694208 _____ C:\Users\BonZZai\Downloads\AdwCleaner_5.015.exe 2015-10-27 00:10 - 2015-10-27 00:10 - 00000247 _____ C:\Users\BonZZai\Desktop\bwm.txt 2015-10-26 23:48 - 2015-10-26 23:48 - 00508488 _____ C:\Windows\Minidump\102615-21231-01.dmp 2015-10-26 23:42 - 2015-10-27 00:21 - 00000022 _____ C:\Windows\S.dirmngr 2015-10-25 16:33 - 2015-10-25 16:33 - 00000000 ____D C:\Users\BonZZai\AppData\Local\GNU 2015-10-25 16:32 - 2015-10-25 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gpg4win 2015-10-25 16:30 - 2015-10-25 16:30 - 07902470 _____ C:\Users\BonZZai\Desktop\pgp658.zip 2015-10-25 16:23 - 2015-10-25 16:23 - 01461024 _____ C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(3).exe 2015-10-25 16:22 - 2015-10-25 16:23 - 01461024 _____ C:\Users\BonZZai\Downloads\PGP letzte Freeware Version - CHIP-Installer(1).exe 2015-10-25 15:19 - 2015-10-25 15:19 - 01461024 _____ C:\Users\BonZZai\Downloads\PGP letzte Freeware Version - CHIP-Installer.exe 2015-10-25 15:19 - 2015-10-25 15:19 - 01461024 _____ C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(2).exe 2015-10-25 11:41 - 2015-10-25 11:41 - 00090332 _____ C:\ComboFix.txt 2015-10-25 11:29 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2015-10-25 11:29 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2015-10-25 11:29 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2015-10-25 11:27 - 2015-10-25 11:41 - 00000000 ____D C:\Qoobox 2015-10-25 11:27 - 2015-10-25 11:40 - 00000000 ____D C:\Windows\erdnt 2015-10-25 11:27 - 2015-10-25 11:27 - 05637412 ____R (Swearware) C:\Users\BonZZai\Downloads\ComboFix.exe 2015-10-25 11:23 - 2015-10-25 11:23 - 00001260 _____ C:\Users\BonZZai\Desktop\Revo Uninstaller.lnk 2015-10-25 11:21 - 2015-10-25 11:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\BonZZai\Downloads\revosetup95(1).exe 2015-10-24 00:09 - 2015-10-25 16:35 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\.kde 2015-10-24 00:09 - 2015-10-24 00:09 - 00000218 _____ C:\Users\BonZZai\AppData\Local\recently-used.xbel 2015-10-24 00:07 - 2015-10-25 16:34 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\gnupg 2015-10-24 00:07 - 2015-10-24 00:07 - 00000000 ____D C:\ProgramData\GNU 2015-10-24 00:07 - 2015-10-24 00:07 - 00000000 ____D C:\Program Files (x86)\GNU 2015-10-24 00:05 - 2015-10-24 00:05 - 01461024 _____ C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(1).exe 2015-10-24 00:05 - 2015-10-24 00:05 - 01461024 _____ C:\Users\BonZZai\Downloads\GNU Privacy Guard GnuPG - CHIP-Installer(1).exe 2015-10-23 23:10 - 2015-10-23 23:10 - 01461024 _____ C:\Users\BonZZai\Downloads\GNU Privacy Guard GnuPG - CHIP-Installer.exe 2015-10-23 23:09 - 2015-10-23 23:09 - 01461024 _____ C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer.exe 2015-10-23 21:41 - 2015-10-23 22:56 - 00000000 ____D C:\Users\BonZZai\Desktop\gpg4usb 2015-10-23 21:40 - 2015-10-27 00:34 - 00020918 _____ C:\Users\BonZZai\Desktop\FRST.txt 2015-10-23 21:40 - 2015-10-23 21:42 - 00047069 _____ C:\Users\BonZZai\Desktop\Addition.txt 2015-10-23 21:39 - 2015-10-27 00:34 - 02197504 _____ (Farbar) C:\Users\BonZZai\Desktop\FRST64.exe 2015-10-23 21:38 - 2015-10-23 21:38 - 24339124 _____ C:\Users\BonZZai\Desktop\gpg4usb-0.3.3-1.zip 2015-10-22 20:19 - 2015-10-22 20:20 - 00277536 _____ C:\Windows\Minidump\102215-11154-01.dmp 2015-10-21 18:00 - 2015-10-21 18:21 - 00000218 _____ C:\Users\BonZZai\Desktop\blockchainbdgpzk.oniondewallet.txt 2015-10-18 15:05 - 2015-10-18 15:07 - 315769312 _____ (AMD Inc.) C:\Users\BonZZai\Downloads\amd-catalyst-15.10beta-64bit-win10-win8.1-win7-oct12.exe 2015-10-18 15:05 - 2015-10-18 15:07 - 300806184 _____ (AMD Inc.) C:\Users\BonZZai\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-64bit.exe 2015-10-18 14:53 - 2015-10-18 14:53 - 00001098 _____ C:\Users\BonZZai\Desktop\EVEREST Home Edition.lnk 2015-10-18 14:53 - 2015-10-18 14:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2015-10-18 14:53 - 2015-10-18 14:53 - 00000000 ____D C:\Program Files (x86)\Lavalys 2015-10-18 14:51 - 2015-10-18 14:51 - 01461024 _____ C:\Users\BonZZai\Downloads\Everest Home Edition - CHIP-Installer.exe 2015-10-18 14:36 - 2015-10-18 14:36 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server 2015-10-18 14:35 - 2015-10-18 16:02 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner 2015-10-18 14:35 - 2015-10-18 14:36 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2015-10-18 14:35 - 2015-10-18 14:35 - 00001082 _____ C:\Users\BonZZai\Desktop\MSI Afterburner.lnk 2015-10-18 14:35 - 2015-10-18 14:35 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2015-10-18 14:33 - 2015-10-18 14:33 - 01461024 _____ C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer.exe 2015-10-18 14:33 - 2015-10-18 14:33 - 01461024 _____ C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer(1).exe 2015-10-14 23:29 - 2015-09-25 19:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-10-14 23:29 - 2015-09-25 19:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-10-14 23:29 - 2015-09-25 19:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-10-14 23:29 - 2015-09-25 19:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-10-14 23:29 - 2015-09-25 19:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-10-14 23:29 - 2015-09-25 18:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-10-14 23:29 - 2015-09-18 20:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-10-14 23:29 - 2015-09-18 19:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-10-14 23:29 - 2015-09-16 05:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-10-14 23:29 - 2015-09-16 05:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-10-14 23:29 - 2015-09-16 05:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-10-14 23:29 - 2015-09-16 05:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-10-14 23:29 - 2015-09-16 05:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-10-14 23:29 - 2015-09-16 05:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-10-14 23:29 - 2015-09-16 05:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-10-14 23:29 - 2015-09-16 05:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-10-14 23:29 - 2015-09-16 05:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-10-14 23:29 - 2015-09-16 05:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-10-14 23:29 - 2015-09-16 05:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-10-14 23:29 - 2015-09-16 05:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-10-14 23:29 - 2015-09-16 05:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-10-14 23:29 - 2015-09-16 05:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-10-14 23:29 - 2015-09-16 04:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-10-14 23:29 - 2015-09-16 04:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-10-14 23:29 - 2015-09-16 04:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-10-14 23:29 - 2015-09-16 04:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-10-14 23:29 - 2015-09-16 04:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-10-14 23:29 - 2015-09-16 04:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-10-14 23:29 - 2015-09-16 04:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-10-14 23:29 - 2015-09-16 04:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-10-14 23:29 - 2015-09-16 04:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-10-14 23:29 - 2015-09-16 04:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-10-14 23:29 - 2015-09-16 04:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-10-14 23:29 - 2015-09-16 04:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-10-14 23:29 - 2015-09-16 04:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-10-14 23:29 - 2015-09-16 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-10-14 23:29 - 2015-09-16 04:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-10-14 23:29 - 2015-09-16 04:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-10-14 23:29 - 2015-09-16 04:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-10-14 23:29 - 2015-09-16 04:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-10-14 23:29 - 2015-09-16 04:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-10-14 23:29 - 2015-09-16 04:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-10-14 23:29 - 2015-09-16 04:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-10-14 23:29 - 2015-09-16 04:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-10-14 23:29 - 2015-09-16 04:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-10-14 23:29 - 2015-09-16 04:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-10-14 23:29 - 2015-09-16 04:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-10-14 23:29 - 2015-09-16 04:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-10-14 23:29 - 2015-09-16 04:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-10-14 23:29 - 2015-09-16 04:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-10-14 23:29 - 2015-09-16 04:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-10-14 23:29 - 2015-09-16 04:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-10-14 23:29 - 2015-09-16 04:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-10-14 23:29 - 2015-09-16 04:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-10-14 23:29 - 2015-09-16 04:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-10-14 23:29 - 2015-09-16 04:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-10-14 23:29 - 2015-09-16 03:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-10-14 23:29 - 2015-09-16 03:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-10-14 23:29 - 2015-09-16 03:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-10-14 23:29 - 2015-09-16 03:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-10-14 23:29 - 2015-09-16 03:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-10-14 23:29 - 2015-09-16 03:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-10-14 23:29 - 2015-09-16 03:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-10-14 23:29 - 2015-09-16 03:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-10-14 23:29 - 2015-09-16 03:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-10-14 23:29 - 2015-09-16 03:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-10-14 23:29 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-14 23:29 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-10-14 23:29 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-10-14 23:29 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2015-10-14 23:28 - 2015-09-29 04:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-10-14 23:28 - 2015-09-29 04:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-10-14 23:28 - 2015-09-29 04:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-10-14 23:28 - 2015-09-29 04:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-10-14 23:28 - 2015-09-29 04:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-10-14 23:28 - 2015-09-29 04:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-10-14 23:28 - 2015-09-29 04:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-10-14 23:28 - 2015-09-29 04:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-10-14 23:28 - 2015-09-29 04:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-10-14 23:28 - 2015-09-29 04:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-10-14 23:28 - 2015-09-29 04:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-10-14 23:28 - 2015-09-29 03:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-10-14 23:28 - 2015-09-29 03:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-10-14 23:28 - 2015-09-29 03:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-10-14 23:28 - 2015-09-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-10-14 23:28 - 2015-09-29 03:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-10-14 23:28 - 2015-09-29 03:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-10-14 23:28 - 2015-09-29 02:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-10-14 23:28 - 2015-09-29 02:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-10-14 23:28 - 2015-09-29 02:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-10-14 23:28 - 2015-09-29 02:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-10-14 23:28 - 2015-09-29 02:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-14 23:28 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-10-14 23:28 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-10-14 23:28 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-10-14 23:28 - 2015-09-15 19:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-10-14 23:28 - 2015-09-15 19:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-10-14 23:28 - 2015-09-15 19:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-10-14 23:28 - 2015-09-15 19:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-10-14 23:28 - 2015-09-15 18:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-10-14 23:28 - 2015-09-15 18:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-10-14 23:28 - 2015-09-15 18:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-10-14 23:28 - 2015-09-15 18:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-10-14 23:26 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-10-14 23:26 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-10-14 23:26 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-10-14 23:26 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-10-14 23:26 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-10-14 23:26 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-10-14 23:26 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-10-14 23:26 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-10-14 23:26 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-10-14 23:23 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-10-14 23:00 - 2015-10-14 23:00 - 00277536 _____ C:\Windows\Minidump\101515-14320-01.dmp 2015-10-05 17:27 - 2015-10-05 17:27 - 00506920 _____ C:\Windows\Minidump\100515-19422-01.dmp 2015-10-04 15:29 - 2015-10-04 15:29 - 00392248 _____ C:\Windows\Minidump\100415-22136-01.dmp 2015-10-02 22:27 - 2015-10-02 22:27 - 00277536 _____ C:\Windows\Minidump\100215-10342-01.dmp 2015-10-02 22:17 - 2015-10-02 22:17 - 00506920 _____ C:\Windows\Minidump\100215-18673-01.dmp 2015-10-02 22:04 - 2015-10-02 22:04 - 00508568 _____ C:\Windows\Minidump\100215-18813-01.dmp 2015-10-02 00:01 - 2015-10-02 00:01 - 371281476 _____ C:\Users\BonZZai\Documents\Metin2 DE Grünerwolfsfang+9_Runni9•Heili9,OPENPVP •THP+9•4FachQuiln,Alchemie,Königsgürtel_EQSHOW.mp4 2015-10-02 00:01 - 2015-10-02 00:01 - 371281476 _____ C:\Users\BonZZai\Desktop\Metin2 DE Grünerwolfsfang+9_Runni9•Heili9,OPENPVP •THP+9•4FachQuiln,Alchemie,Königsgürtel_EQSHOW.mp4 2015-10-01 23:56 - 2015-10-01 23:56 - 00113560 _____ (GreenTree Applications SRL) C:\Users\BonZZai\Downloads\YTDSetup.exe 2015-09-28 23:02 - 2015-09-28 23:02 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3BD23E06.sys ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-27 00:34 - 2014-09-21 03:03 - 00000000 ____D C:\FRST 2015-10-27 00:33 - 2012-12-21 19:43 - 01293682 _____ C:\Windows\WindowsUpdate.log 2015-10-27 00:29 - 2014-09-12 14:50 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-27 00:26 - 2011-04-12 08:43 - 14315886 _____ C:\Windows\system32\perfh007.dat 2015-10-27 00:26 - 2011-04-12 08:43 - 04433682 _____ C:\Windows\system32\perfc007.dat 2015-10-27 00:26 - 2009-07-14 06:13 - 00006260 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-27 00:24 - 2012-12-21 19:43 - 00000000 ____D C:\Users\BonZZai 2015-10-27 00:24 - 2009-07-14 05:45 - 00047008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-27 00:24 - 2009-07-14 05:45 - 00047008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-27 00:22 - 2014-04-21 21:04 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Skype 2015-10-27 00:21 - 2013-12-07 21:43 - 00078430 _____ C:\Windows\setupact.log 2015-10-27 00:21 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-27 00:20 - 2014-09-21 16:16 - 00000000 ____D C:\AdwCleaner 2015-10-27 00:19 - 2012-12-22 02:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-26 23:52 - 2014-05-22 22:04 - 4245217934 _____ C:\Windows\MEMORY.DMP 2015-10-26 23:52 - 2013-06-27 03:38 - 00000000 ____D C:\Windows\Minidump 2015-10-25 17:01 - 2013-03-16 05:48 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\vlc 2015-10-25 16:21 - 2013-05-03 15:29 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000UA.job 2015-10-25 15:21 - 2013-05-03 15:29 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000Core.job 2015-10-25 11:41 - 2014-01-24 20:36 - 00000000 ____D C:\Users\Hayda_000 2015-10-25 11:41 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2015-10-25 11:36 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2015-10-25 11:35 - 2013-12-07 21:43 - 03009814 _____ C:\Windows\PFRO.log 2015-10-25 11:29 - 2013-06-27 15:50 - 00001912 _____ C:\Windows\epplauncher.mif 2015-10-24 00:09 - 2013-11-18 20:27 - 00000000 ____D C:\Users\BonZZai\AppData\Local\gtk-2.0 2015-10-23 23:18 - 2013-03-07 18:16 - 00000000 ____D C:\Users\BonZZai\AppData\Local\CrashDumps 2015-10-23 15:19 - 2014-01-12 16:56 - 00000000 ____D C:\Users\BonZZai\Downloads\Gameforge Live 2015-10-22 22:41 - 2013-02-28 23:01 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\TS3Client 2015-10-22 20:33 - 2014-09-19 18:40 - 00003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1411148449 2015-10-22 20:33 - 2014-09-19 18:40 - 00000000 ____D C:\Program Files (x86)\Opera 2015-10-22 20:04 - 2015-05-24 17:41 - 00000395 _____ C:\Users\BonZZai\Desktop\games.txt 2015-10-21 15:36 - 2012-12-21 21:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-10-20 18:02 - 2013-10-30 18:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-10-20 16:38 - 2014-09-12 14:50 - 00001098 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-10-20 16:38 - 2014-09-12 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-20 16:38 - 2014-09-12 14:50 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-10-18 12:39 - 2015-07-01 17:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-10-16 21:19 - 2012-12-22 02:09 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-10-16 21:19 - 2012-12-22 02:09 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-16 21:19 - 2012-12-22 02:09 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-10-15 20:54 - 2015-08-02 19:15 - 00000000 ____D C:\Users\BonZZai\Desktop\Tor Browser 2015-10-15 17:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2015-10-15 03:03 - 2014-12-12 17:35 - 00000000 ____D C:\Windows\system32\appraiser 2015-10-15 03:03 - 2014-05-07 00:11 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-10-15 02:09 - 2013-07-12 02:59 - 00000000 ____D C:\Windows\system32\MRT 2015-10-15 02:04 - 2012-12-21 21:36 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-14 23:58 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2015-10-14 23:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2015-10-14 23:30 - 2015-07-01 17:50 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-14 23:17 - 2014-04-21 21:04 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-10-14 01:35 - 2014-08-01 11:48 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2015-10-13 23:07 - 2014-02-18 21:46 - 00000000 ____D C:\Users\BonZZai\AppData\LocalLow\Adblock Plus for IE 2015-10-08 23:56 - 2015-04-05 02:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-10-08 23:56 - 2015-04-05 02:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-05 08:50 - 2014-09-12 14:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-10-05 08:50 - 2014-09-12 14:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-10-05 08:50 - 2014-09-12 14:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-10-04 15:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SchCache 2015-10-02 22:04 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2013-07-15 01:58 - 2013-08-15 23:32 - 0000000 _____ () C:\Users\BonZZai\AppData\Roaming\bitlord_log.txt 2050-01-01 00:59 - 2050-01-01 01:12 - 0001686 _____ () C:\Users\BonZZai\AppData\Local\Cracklock.settings 2013-03-08 22:53 - 2015-08-13 23:24 - 0004608 _____ () C:\Users\BonZZai\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-10-24 00:09 - 2015-10-24 00:09 - 0000218 _____ () C:\Users\BonZZai\AppData\Local\recently-used.xbel 2014-09-19 22:03 - 2014-09-19 22:03 - 0007598 _____ () C:\Users\BonZZai\AppData\Local\Resmon.ResmonCfg Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\BonZZai\dpinst.exe C:\Users\BonZZai\Setup.exe Einige Dateien in TEMP: ==================== C:\Users\BonZZai\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-10-21 19:12 ==================== Ende von FRST.txt ============================ |
|
27.10.2015, 19:44
| #8 |
| /// the machine /// TB-Ausbilder | amd treiber reagiert nicht!ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.10.2015, 01:26
| #9 |
| | amd treiber reagiert nicht!Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=baa6c7e527ac0c498740b6e046840bd2
# end=init
# utc_time=2015-10-27 11:06:39
# local_time=2015-10-28 12:06:39 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 26441
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=baa6c7e527ac0c498740b6e046840bd2
# end=updated
# utc_time=2015-10-27 11:08:09
# local_time=2015-10-28 12:08:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=baa6c7e527ac0c498740b6e046840bd2
# engine=26441
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-28 12:13:27
# local_time=2015-10-28 01:13:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 92531 197621057 0 0
# scanned=263594
# found=70
# cleaned=70
# scan_time=3917
sh=272C54D881640B6385AFF828957D43FA9B3E13E7 ft=1 fh=ee0b8dcb5319564f vn="Win32/Toolbar.Montiera.J evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.16.16\escortShld.dll.vir"
sh=9B825CB5C57DF0C16FDBF777993D2F709D988EBA ft=1 fh=c6b55bd17df6dcb7 vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.16.16\uninstall.exe.vir"
sh=7A3CCB4F096121FD70E96A0063F46425E4122849 ft=1 fh=cd39d6f9f6c36cf6 vn="Variante von Win32/Speedchecker.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\pc speed up\PCSUService.exe.vir"
sh=5FB95D21BE8CF2753FD8A42398ADD26E2B21409F ft=1 fh=0f2c5f177050d203 vn="Variante von Win32/Toolbar.Conduit.AJ evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\Conduit\Multi\CT3322950\UninstallerUI.exe.vir"
sh=8A5F09604C64AF042B3B39901F51186F792BA705 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\background.js.vir"
sh=DC8040948EFAB56C1B5F7858DB7EE0ACF54ECA5E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\api\chrome.js.vir"
sh=159E57B9F0EE41F82829AF4353AE146339592D7B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\api\cookie.js.vir"
sh=3E60A78959E14927C01EAB668A41FCAAC25F9376 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\api\message.js.vir"
sh=7EFC31C349C63F11909481825B9240F7C51E4E09 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\app\background.js.vir"
sh=8AC318CCD2B22FA8329CA445726C4CF3239570FA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\app\extension.js.vir"
sh=8F2DEB4894FE0456513D83D467EF2C7FA5E2C79D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\bg_app_api.js.vir"
sh=93C6F4C27F02EBD3EFB52325D4CEE29D88C9ECD9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.H evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\cookie_store.js.vir"
sh=49E9BC8F2AF35650A6D1126128A99C5D84B3CC9D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.H evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\data_store.js.vir"
sh=6F42F6E427A964E425BA66C2F50A01632F489B23 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\events.js.vir"
sh=632BDF594B0BBB5742129320E1ECF93CFE9B6B38 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\onBGDocumentLoad.js.vir"
sh=638E7ECDDB345767E0499DF7252FE7BE4D6ED892 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\reports.js.vir"
sh=3F3E6A6E44060CF5EC1F3B977926477E4E0666CA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\js\lib\xhr.js.vir"
sh=65DBF1D094F3C63AD12C8F034D8D132A962FA46E ft=1 fh=073c304ffb9fa3a8 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\aapt.exe.vir"
sh=B7832A1BC15B67EEA01C25B6C688021372FB4656 ft=1 fh=217f6af847730ddc vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\CrashReport.exe.vir"
sh=85CC7149AE9F5B9C345C6E4291159EDB1E6D4AA2 ft=1 fh=28079c1ecc971f93 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\CrashRpt.dll.vir"
sh=95826B332BD1AC0543C2BA4DB637D082A994B1E5 ft=1 fh=f3159d8e366dd55a vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir"
sh=9E2C3D7CDEDE2543CC0F7960D9837D1B6D2BE75F ft=1 fh=7a481a0f621bd9cc vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\devcon_x64.exe.vir"
sh=E54955407B312B936C2873446E59355F0EA5CA73 ft=1 fh=d287fe18b11aa882 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\devcon_x86.exe.vir"
sh=77FF724EA6530E24FBD9EA8C2D59B1B291796874 ft=1 fh=d2ee2046d07ae837 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DriverInstall_x64.exe.vir"
sh=1A8B4BA11E613DE010E51F03D89B513527846AA4 ft=1 fh=95b4c8bc1ea46e9e vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DriverInstall_x86.exe.vir"
sh=8EE77C3EA732059837B316BEEE37A0809CD68F0B ft=1 fh=77f6a6fe09a20461 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\lsusb.exe.vir"
sh=F62E24423D06DDAF273DFFBA831C25EBC13B82EE ft=1 fh=9b120be6f077dc20 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\mgadb.exe.vir"
sh=1503B18C3E4331E8277CB0C50EAC5BECCF6D1456 ft=1 fh=e8cfb57dbdf4c9f0 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MgAssist.exe.vir"
sh=02D365A799FDCBF8C8A507FCFC69946B402FEA53 ft=1 fh=92f3782890b0d44b vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\mgusb.exe.vir"
sh=749E0C6D85971204E397EAE65ED10A9A4AEF40AB ft=1 fh=ef830199de104882 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir"
sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\nengine.dll.vir"
sh=93AD648467F47DC2708810D169F26F4A814778C5 ft=1 fh=e589ccabe231da4b vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir"
sh=8C6F55634ADBCA6FAA8101C1B2FB024B4855499D ft=1 fh=2876557c9c75ac21 vn="Variante von Win32/Adware.Mobogenie.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\OutlookOperatorC.exe.vir"
sh=9818FE23A2C33609A3088B1E4B346FC15CC0845E ft=1 fh=a5ce0c8be77cb07c vn="Variante von Win32/ELEX.CK evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Roaming\eIntaller\27145D9FCD574a8fB8E9CA642BFC2435\Desk365.exe.vir"
sh=9818FE23A2C33609A3088B1E4B346FC15CC0845E ft=1 fh=a5ce0c8be77cb07c vn="Variante von Win32/ELEX.CK evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Roaming\eIntaller\E674944B10C747c78A1A9C8860B2CD9F\Desk365.exe.vir"
sh=9B6E835826F4E17651784A8759A1FB272C7497C7 ft=1 fh=a6caf9f735e198e8 vn="Variante von Win32/RiskWare.Astori.C Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Roaming\InetStat\inetstat.exe.vir"
sh=108A500E4A188882CBA720723607F417A6501924 ft=1 fh=5c9da47200740b7c vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{afa59d4f-18ec-4866-949b-f406270e15cb}\ctypes\FirefoxCtype.dll.vir"
sh=C015E890715621E6FF97D3BF893BC75E8E27DE77 ft=1 fh=3ad6b33bccff1099 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{afa59d4f-18ec-4866-949b-f406270e15cb}\Plugins\npFirefoxPlugin.dll.vir"
sh=0C53AD8C5815EC193F269B7F4225526331F55560 ft=1 fh=428351b47f1227d5 vn="Win32/SmootherWeb.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\BonZZai\AppData\Roaming\SmootherWeb\SmootherWeb-Installer.exe.vir"
sh=1053BD55B081761A72314E07CD33C43DD1A5188B ft=1 fh=e329eb77e237c8a1 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Desktop\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe.xBAD"
sh=D338CBCB2BC58B79AD278FFE7E91A04E776C45CF ft=1 fh=c71c00111cfc575b vn="Variante von Win32/Injector.Autoit.DR Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Desktop\Neuer Ordner (7)\Launcher_Premium(7).exe.xBAD"
sh=D338CBCB2BC58B79AD278FFE7E91A04E776C45CF ft=1 fh=c71c00111cfc575b vn="Variante von Win32/Injector.Autoit.DR Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Desktop\Splitter - Kopie - Kopie\Splitter - Kopie - Kopie - Kopie\Launcher_Premium(7).exe.xBAD"
sh=F51E88794ED4CB4B2268F163C7E2A3CEB5E9AD76 ft=1 fh=310d86b4e12d1319 vn="Variante von Win32/SlowPCfighter evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\CLEANPC365_1.12.0Full.exe.xBAD"
sh=00370ADF187FB552D580DB7BCC078AA1A1DC85AA ft=1 fh=cd8610a6eb0d3f87 vn="Variante von Win32/DownloadGuide.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\download_firefox(1).exe.xBAD"
sh=4D33923E2CD6088B0183E3DE4561EDE0BCBEFB5A ft=1 fh=e158f0d8f78c312f vn="Variante von Win32/DownloadGuide.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\download_firefox.exe.xBAD"
sh=41405384441917A39C8629B673BFE3F2F3CD4E6D ft=1 fh=9c8daf544118ecf2 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\K Lite Mega Codec Pack - CHIP-Downloader.exe.xBAD"
sh=A65AAC74B4A831BDE92BF2C5970E9229C230D51B ft=1 fh=c71c001123fe01af vn="Variante von Win32/Injector.Autoit.DR Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\Launcher_Premium(5).exe.xBAD"
sh=1D35A58C8FB9D1F253EDF4596905D286204BFB36 ft=1 fh=c71c0011cce9e771 vn="Variante von Win32/Injector.Autoit.DR Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\Launcher_Premium(6).exe.xBAD"
sh=D338CBCB2BC58B79AD278FFE7E91A04E776C45CF ft=1 fh=c71c00111cfc575b vn="Variante von Win32/Injector.Autoit.DR Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\Launcher_Premium(7).exe.xBAD"
sh=1EE10CA51E059A7082E104CFEE4C0A98B3EE3DC0 ft=1 fh=12dd0005eb20a3fd vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\Microsoft Maus und Tastatur Center 64 Bit - CHIP-Downloader.exe.xBAD"
sh=ADA65AB8EC8324DA7626784AF37A398C4D00BC72 ft=1 fh=258a14aa4fe451e5 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\OpenOffice - CHIP-Downloader.exe.xBAD"
sh=2D5C81A6A4ED2D020D27E400AD85801E39B88A62 ft=1 fh=e889f36b2977e0dd vn="Variante von Win32/DownloadGuide.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\samsung-kies.exe.xBAD"
sh=B8752608AB6D91B40FBD4BB50253F5350DDB85C3 ft=1 fh=833f3b4699158639 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\Skype - CHIP-Downloader.exe.xBAD"
sh=30A981CDA0A9B3D1801C5BCBAAB9CAD9E7C9238C ft=1 fh=0db056e1351d494e vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Users\BonZZai\Downloads\SpeedFan - CHIP-Installer.exe.xBAD"
sh=F43DC2757D89158E061EB109C3D4B450C9EDA155 ft=1 fh=f0ef89835c075e10 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\AppData\Local\Temp\DMR\dmr_72.exe"
sh=96BCF7B81CE304D064C3BB13D7BC3FB2AA37DE7D ft=1 fh=969a2949d4637ad3 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\7 Data Android Recovery - CHIP-Installer.exe"
sh=789BA691528025E602350326CD04A3575591CEC7 ft=1 fh=631adbf41f9028a9 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\Android Data Recovery - CHIP-Installer.exe"
sh=23B050563A81A1C57DABA7805B1E3E6B4C874F2B ft=1 fh=b4fe666c57930953 vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\cbsidlm-cbsi183-Yet_Another_Cleaner-BP-75959789.exe"
sh=6D284F44E6A9575D7B089AACABAE6A3CB438D59B ft=1 fh=f41ba000607330e7 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\Everest Home Edition - CHIP-Installer.exe"
sh=F5B0B0568A3FA7110A0754A468D36BE640682E8F ft=1 fh=6cbda371ccc3fd32 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\GNU Privacy Guard GnuPG - CHIP-Installer(1).exe"
sh=527DC10D0C163E6DB0FC7D907F661FCF05D6BF15 ft=1 fh=a40213d19392fcef vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\GNU Privacy Guard GnuPG - CHIP-Installer.exe"
sh=DE242D955CA87F81E05EB9D74B4AB0CC6F03055F ft=1 fh=db701b77aff9bb70 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(1).exe"
sh=E1AA8A08AF718EE01FD55FAB5988852D7BF37599 ft=1 fh=10df7bec3e2a9f72 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(2).exe"
sh=4C990F6052C4E976988D3FBE8D21A20DF9F3FEE1 ft=1 fh=a6da39d6bac3bd8b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(3).exe"
sh=923CB0EB449C848BC684EBBABFFBD050B722EE32 ft=1 fh=9715bb3294e2a010 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer.exe"
sh=A4E8A69340064667709A76C1CB0D58F162089830 ft=1 fh=31b7ae1ff0b8304a vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer(1).exe"
sh=E4DE0B67726DDF042F008144D373914B97FDDEC0 ft=1 fh=9cfe320793ffea5b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer.exe"
sh=2E61BC489A64C0B059F69FFEB927AA29F6D11CB0 ft=1 fh=2693814e4bc63d5d vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\PGP letzte Freeware Version - CHIP-Installer(1).exe"
sh=1223AAC9112BC32DAD18CA41929A88CE3B18B324 ft=1 fh=d516215273204935 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\PGP letzte Freeware Version - CHIP-Installer.exe"
sh=2D179BA42FA305313AAB31DC77C6E1F3CD5E59F9 ft=1 fh=23c7f393770180e9 vn="Variante von Win32/DepoDownloader.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\BonZZai\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp"
Code:
ATTFilter Results of screen317's Security Check version 1.009
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities Language Pack (de-DE)
TuneUp Utilities 2014 (de-DE)
TuneUp Utilities 2014
Adobe Flash Player 19.0.0.226
Mozilla Firefox (41.0.2)
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02 durchgeführt von BonZZai (Administrator) auf BONZZAI-PC (28-10-2015 01:23:12) Gestartet von C:\Users\BonZZai\Desktop Geladene Profile: BonZZai (Verfügbare Profile: BonZZai) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HDAudDeck] => c:\program files (x86)\via\viaudioi\vdeck\vdeck.exe [5675184 2013-05-10] (VIA) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-02-18] (Google Inc.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1562264 2014-07-25] (Samsung) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53725200 2015-08-07] (Skype Technologies S.A.) HKU\S-1-5-21-437646761-135901211-47947868-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2012-12-21] ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{9A226170-8866-46E0-B242-2F2E4042131D}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-437646761-135901211-47947868-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: HKLM-x32 -> Standard = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-437646761-135901211-47947868-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-17] (Google Inc.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08] (Adblock Plus) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-17] (Google Inc.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08] (Adblock Plus) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-17] (Google Inc.) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-17] (Google Inc.) Toolbar: HKU\S-1-5-21-437646761-135901211-47947868-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-08-17] (Google Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com/ FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2013-09-28] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-07-22] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-07-22] (Adobe Systems) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/O1DPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npo1d.dll [2013-07-02] (Google) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @talk.google.com/O3DPlugin -> C:\Users\BonZZai\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] () FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @tools.google.com/Google Update;version=3 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin HKU\S-1-5-21-437646761-135901211-47947868-1000: @tools.google.com/Google Update;version=9 -> C:\Users\BonZZai\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] () FF Plugin ProgramFiles/Appdata: C:\Users\BonZZai\AppData\Roaming\mozilla\plugins\npo1d.dll [2013-07-02] (Google) FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\englische-ergebnisse.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\gmx-suche.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\google-images.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\google-maps.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\lastminute.xml [2014-08-15] FF SearchPlugin: C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\searchplugins\webde-suche.xml [2014-08-15] FF Extension: WEB.DE MailCheck - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\mailcheck@web.de [2015-10-20] FF Extension: 4shared Desktop Plugin - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\4sharedCopyLinks.xpi.tmp [2013-03-14] [ist nicht signiert] FF Extension: Facebook Toolbar - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\firefox@facebook.com.xpi [2012-12-21] [ist nicht signiert] FF Extension: Mark Ads Sites In Search - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\jid1-LGBwZ7tVjRcfIg@jetpack.xpi [2015-05-29] FF Extension: Adblock Plus - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24] FF Extension: Tab Mix Plus - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-09-01] FF Extension: DownThemAll! - C:\Users\BonZZai\AppData\Roaming\Mozilla\Firefox\Profiles\bq41gjvj.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2015-05-28] FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert] Chrome: ======= CHR Profile: C:\Users\BonZZai\AppData\Local\Google\Chrome\User Data\default CHR Extension: (Kein Name) - C:\Users\BonZZai\AppData\Local\Google\Chrome\User Data\default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf [2014-09-21] CHR HKLM-x32\...\Chrome\Extension: [hfikdpojhgckaejifppccjeedkjcndpp] - <kein Path/update_url> ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-09-09] () [Datei ist nicht signiert] S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Dr.Fone für Android\DriverInstall.exe [103824 2015-08-17] (Wondershare) S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] () S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [Datei ist nicht signiert] R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-10-28] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13536 2015-05-27] () R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2013-12-19] (Synaptics Incorporated) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [Datei ist nicht signiert] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2087-01-13 01:31 - 2014-01-29 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue 2050-01-01 01:17 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2050-01-01 01:17 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2050-01-01 01:17 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2050-01-01 01:17 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2050-01-01 01:17 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2050-01-01 01:17 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2050-01-01 01:17 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2050-01-01 01:17 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2050-01-01 01:17 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2050-01-01 01:04 - 2050-01-01 01:04 - 00003218 _____ C:\Windows\System32\Tasks\{E5B542E3-C766-40FD-BDEE-1AA277504F6C} 2050-01-01 00:59 - 2050-01-01 01:12 - 00001686 _____ C:\Users\BonZZai\AppData\Local\Cracklock.settings 2015-10-28 01:18 - 2015-10-28 01:18 - 00852720 _____ C:\Users\BonZZai\Downloads\SecurityCheck.exe 2015-10-28 00:06 - 2015-10-28 00:06 - 02870984 _____ (ESET) C:\Users\BonZZai\Downloads\esetsmartinstaller_deu.exe 2015-10-28 00:06 - 2015-10-28 00:06 - 00000000 ____D C:\Program Files (x86)\ESET 2015-10-27 23:51 - 2015-10-27 23:51 - 00277536 _____ C:\Windows\Minidump\102715-67064-01.dmp 2015-10-27 23:46 - 2015-10-27 23:46 - 00508488 _____ C:\Windows\Minidump\102715-61557-01.dmp 2015-10-27 00:40 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2015-10-27 00:40 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-10-27 00:40 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-10-27 00:40 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2015-10-27 00:40 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2015-10-27 00:40 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2015-10-27 00:40 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-10-27 00:40 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-10-27 00:40 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2015-10-27 00:40 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2015-10-27 00:40 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-10-27 00:40 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2015-10-27 00:40 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2015-10-27 00:40 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2015-10-27 00:40 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-10-27 00:40 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2015-10-27 00:40 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-10-27 00:40 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-10-27 00:34 - 2015-10-27 00:34 - 00000000 ____D C:\Users\BonZZai\Desktop\FRST-OlderVersion 2015-10-27 00:33 - 2015-09-14 20:45 - 03210240 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-10-27 00:33 - 2015-08-05 18:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2015-10-27 00:33 - 2015-08-05 18:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2015-10-27 00:31 - 2015-10-27 00:31 - 00000000 ____D C:\Users\BonZZai\AppData\Local\GWX 2015-10-27 00:26 - 2015-10-27 00:26 - 00003589 _____ C:\Users\BonZZai\Desktop\JRT.txt 2015-10-27 00:24 - 2015-10-27 00:24 - 00000000 ____D C:\3aac4d064594d4f542d520 2015-10-27 00:23 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\BonZZai\Desktop\JRT.exe 2015-10-27 00:21 - 2015-10-27 00:21 - 00009443 _____ C:\Users\BonZZai\Desktop\AdwCleaner[C2].txt 2015-10-27 00:14 - 2015-10-27 00:14 - 01798976 _____ (Malwarebytes) C:\Users\BonZZai\Downloads\JRT.exe 2015-10-27 00:10 - 2015-10-27 00:10 - 01694208 _____ C:\Users\BonZZai\Downloads\AdwCleaner_5.015.exe 2015-10-27 00:10 - 2015-10-27 00:10 - 00000247 _____ C:\Users\BonZZai\Desktop\bwm.txt 2015-10-26 23:48 - 2015-10-26 23:48 - 00508488 _____ C:\Windows\Minidump\102615-21231-01.dmp 2015-10-26 23:42 - 2015-10-28 01:22 - 00000022 _____ C:\Windows\S.dirmngr 2015-10-25 16:33 - 2015-10-25 16:33 - 00000000 ____D C:\Users\BonZZai\AppData\Local\GNU 2015-10-25 16:32 - 2015-10-25 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gpg4win 2015-10-25 16:30 - 2015-10-25 16:30 - 07902470 _____ C:\Users\BonZZai\Desktop\pgp658.zip 2015-10-25 11:41 - 2015-10-25 11:41 - 00090332 _____ C:\ComboFix.txt 2015-10-25 11:29 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2015-10-25 11:29 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2015-10-25 11:29 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2015-10-25 11:29 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2015-10-25 11:27 - 2015-10-25 11:41 - 00000000 ____D C:\Qoobox 2015-10-25 11:27 - 2015-10-25 11:40 - 00000000 ____D C:\Windows\erdnt 2015-10-25 11:27 - 2015-10-25 11:27 - 05637412 ____R (Swearware) C:\Users\BonZZai\Downloads\ComboFix.exe 2015-10-25 11:23 - 2015-10-25 11:23 - 00001260 _____ C:\Users\BonZZai\Desktop\Revo Uninstaller.lnk 2015-10-25 11:21 - 2015-10-25 11:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\BonZZai\Downloads\revosetup95(1).exe 2015-10-24 00:09 - 2015-10-25 16:35 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\.kde 2015-10-24 00:09 - 2015-10-24 00:09 - 00000218 _____ C:\Users\BonZZai\AppData\Local\recently-used.xbel 2015-10-24 00:07 - 2015-10-25 16:34 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\gnupg 2015-10-24 00:07 - 2015-10-24 00:07 - 00000000 ____D C:\ProgramData\GNU 2015-10-24 00:07 - 2015-10-24 00:07 - 00000000 ____D C:\Program Files (x86)\GNU 2015-10-23 21:41 - 2015-10-23 22:56 - 00000000 ____D C:\Users\BonZZai\Desktop\gpg4usb 2015-10-23 21:40 - 2015-10-28 01:23 - 00021384 _____ C:\Users\BonZZai\Desktop\FRST.txt 2015-10-23 21:40 - 2015-10-23 21:42 - 00047069 _____ C:\Users\BonZZai\Desktop\Addition.txt 2015-10-23 21:39 - 2015-10-27 00:34 - 02197504 _____ (Farbar) C:\Users\BonZZai\Desktop\FRST64.exe 2015-10-23 21:38 - 2015-10-23 21:38 - 24339124 _____ C:\Users\BonZZai\Desktop\gpg4usb-0.3.3-1.zip 2015-10-22 20:19 - 2015-10-22 20:20 - 00277536 _____ C:\Windows\Minidump\102215-11154-01.dmp 2015-10-21 18:00 - 2015-10-21 18:21 - 00000218 _____ C:\Users\BonZZai\Desktop\blockchainbdgpzk.oniondewallet.txt 2015-10-18 15:05 - 2015-10-18 15:07 - 315769312 _____ (AMD Inc.) C:\Users\BonZZai\Downloads\amd-catalyst-15.10beta-64bit-win10-win8.1-win7-oct12.exe 2015-10-18 15:05 - 2015-10-18 15:07 - 300806184 _____ (AMD Inc.) C:\Users\BonZZai\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-64bit.exe 2015-10-18 14:53 - 2015-10-18 14:53 - 00001098 _____ C:\Users\BonZZai\Desktop\EVEREST Home Edition.lnk 2015-10-18 14:53 - 2015-10-18 14:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2015-10-18 14:53 - 2015-10-18 14:53 - 00000000 ____D C:\Program Files (x86)\Lavalys 2015-10-18 14:36 - 2015-10-18 14:36 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server 2015-10-18 14:35 - 2015-10-18 16:02 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner 2015-10-18 14:35 - 2015-10-18 14:36 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2015-10-18 14:35 - 2015-10-18 14:35 - 00001082 _____ C:\Users\BonZZai\Desktop\MSI Afterburner.lnk 2015-10-18 14:35 - 2015-10-18 14:35 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner 2015-10-14 23:29 - 2015-09-25 19:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-10-14 23:29 - 2015-09-25 19:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-10-14 23:29 - 2015-09-25 19:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-10-14 23:29 - 2015-09-25 19:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-10-14 23:29 - 2015-09-25 19:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-10-14 23:29 - 2015-09-25 19:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-10-14 23:29 - 2015-09-25 18:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-10-14 23:29 - 2015-09-25 18:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-10-14 23:29 - 2015-09-18 20:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-10-14 23:29 - 2015-09-18 19:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-10-14 23:29 - 2015-09-16 05:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-10-14 23:29 - 2015-09-16 05:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-10-14 23:29 - 2015-09-16 05:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-10-14 23:29 - 2015-09-16 05:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-10-14 23:29 - 2015-09-16 05:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-10-14 23:29 - 2015-09-16 05:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-10-14 23:29 - 2015-09-16 05:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-10-14 23:29 - 2015-09-16 05:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-10-14 23:29 - 2015-09-16 05:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-10-14 23:29 - 2015-09-16 05:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-10-14 23:29 - 2015-09-16 05:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-10-14 23:29 - 2015-09-16 05:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-10-14 23:29 - 2015-09-16 05:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-10-14 23:29 - 2015-09-16 05:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-10-14 23:29 - 2015-09-16 05:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-10-14 23:29 - 2015-09-16 04:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-10-14 23:29 - 2015-09-16 04:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-10-14 23:29 - 2015-09-16 04:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-10-14 23:29 - 2015-09-16 04:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-10-14 23:29 - 2015-09-16 04:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-10-14 23:29 - 2015-09-16 04:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-10-14 23:29 - 2015-09-16 04:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-10-14 23:29 - 2015-09-16 04:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-10-14 23:29 - 2015-09-16 04:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-10-14 23:29 - 2015-09-16 04:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-10-14 23:29 - 2015-09-16 04:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-10-14 23:29 - 2015-09-16 04:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-10-14 23:29 - 2015-09-16 04:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-10-14 23:29 - 2015-09-16 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-10-14 23:29 - 2015-09-16 04:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-10-14 23:29 - 2015-09-16 04:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-10-14 23:29 - 2015-09-16 04:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-10-14 23:29 - 2015-09-16 04:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-10-14 23:29 - 2015-09-16 04:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-10-14 23:29 - 2015-09-16 04:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-10-14 23:29 - 2015-09-16 04:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-10-14 23:29 - 2015-09-16 04:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-10-14 23:29 - 2015-09-16 04:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-10-14 23:29 - 2015-09-16 04:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-10-14 23:29 - 2015-09-16 04:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-10-14 23:29 - 2015-09-16 04:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-10-14 23:29 - 2015-09-16 04:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-10-14 23:29 - 2015-09-16 04:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-10-14 23:29 - 2015-09-16 04:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-10-14 23:29 - 2015-09-16 04:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-10-14 23:29 - 2015-09-16 04:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-10-14 23:29 - 2015-09-16 04:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-10-14 23:29 - 2015-09-16 04:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-10-14 23:29 - 2015-09-16 04:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-10-14 23:29 - 2015-09-16 03:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-10-14 23:29 - 2015-09-16 03:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-10-14 23:29 - 2015-09-16 03:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-10-14 23:29 - 2015-09-16 03:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-10-14 23:29 - 2015-09-16 03:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-10-14 23:29 - 2015-09-16 03:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-10-14 23:29 - 2015-09-16 03:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-10-14 23:29 - 2015-09-16 03:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-10-14 23:29 - 2015-09-16 03:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-10-14 23:29 - 2015-09-16 03:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-10-14 23:29 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-14 23:29 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-10-14 23:29 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-10-14 23:29 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2015-10-14 23:28 - 2015-09-29 04:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-10-14 23:28 - 2015-09-29 04:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-10-14 23:28 - 2015-09-29 04:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-10-14 23:28 - 2015-09-29 04:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-10-14 23:28 - 2015-09-29 04:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-10-14 23:28 - 2015-09-29 04:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-10-14 23:28 - 2015-09-29 04:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-10-14 23:28 - 2015-09-29 04:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-10-14 23:28 - 2015-09-29 04:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-10-14 23:28 - 2015-09-29 04:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-10-14 23:28 - 2015-09-29 04:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-10-14 23:28 - 2015-09-29 04:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-10-14 23:28 - 2015-09-29 04:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-10-14 23:28 - 2015-09-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-10-14 23:28 - 2015-09-29 03:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-10-14 23:28 - 2015-09-29 03:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-10-14 23:28 - 2015-09-29 03:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-10-14 23:28 - 2015-09-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-10-14 23:28 - 2015-09-29 03:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-10-14 23:28 - 2015-09-29 03:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-10-14 23:28 - 2015-09-29 03:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-10-14 23:28 - 2015-09-29 02:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-10-14 23:28 - 2015-09-29 02:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-10-14 23:28 - 2015-09-29 02:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-10-14 23:28 - 2015-09-29 02:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-10-14 23:28 - 2015-09-29 02:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 23:28 - 2015-09-29 02:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-14 23:28 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-10-14 23:28 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-10-14 23:28 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-10-14 23:28 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-10-14 23:28 - 2015-09-15 19:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-10-14 23:28 - 2015-09-15 19:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-10-14 23:28 - 2015-09-15 19:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-10-14 23:28 - 2015-09-15 19:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-10-14 23:28 - 2015-09-15 19:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-10-14 23:28 - 2015-09-15 18:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-10-14 23:28 - 2015-09-15 18:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-10-14 23:28 - 2015-09-15 18:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-10-14 23:28 - 2015-09-15 18:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-10-14 23:26 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-10-14 23:26 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-10-14 23:26 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-10-14 23:26 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-10-14 23:26 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-10-14 23:26 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-10-14 23:26 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-10-14 23:26 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-10-14 23:26 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-10-14 23:23 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-14 23:23 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-10-14 23:00 - 2015-10-14 23:00 - 00277536 _____ C:\Windows\Minidump\101515-14320-01.dmp 2015-10-05 17:27 - 2015-10-05 17:27 - 00506920 _____ C:\Windows\Minidump\100515-19422-01.dmp 2015-10-04 15:29 - 2015-10-04 15:29 - 00392248 _____ C:\Windows\Minidump\100415-22136-01.dmp 2015-10-02 22:27 - 2015-10-02 22:27 - 00277536 _____ C:\Windows\Minidump\100215-10342-01.dmp 2015-10-02 22:17 - 2015-10-02 22:17 - 00506920 _____ C:\Windows\Minidump\100215-18673-01.dmp 2015-10-02 22:04 - 2015-10-02 22:04 - 00508568 _____ C:\Windows\Minidump\100215-18813-01.dmp 2015-10-02 00:01 - 2015-10-02 00:01 - 371281476 _____ C:\Users\BonZZai\Documents\Metin2 DE Grünerwolfsfang+9_Runni9•Heili9,OPENPVP •THP+9•4FachQuiln,Alchemie,Königsgürtel_EQSHOW.mp4 2015-10-02 00:01 - 2015-10-02 00:01 - 371281476 _____ C:\Users\BonZZai\Desktop\Metin2 DE Grünerwolfsfang+9_Runni9•Heili9,OPENPVP •THP+9•4FachQuiln,Alchemie,Königsgürtel_EQSHOW.mp4 2015-10-01 23:56 - 2015-10-01 23:56 - 00113560 _____ (GreenTree Applications SRL) C:\Users\BonZZai\Downloads\YTDSetup.exe 2015-09-28 23:02 - 2015-09-28 23:02 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3BD23E06.sys ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-28 01:23 - 2014-09-21 03:03 - 00000000 ____D C:\FRST 2015-10-28 01:23 - 2014-04-21 21:04 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\Skype 2015-10-28 01:22 - 2014-09-12 14:50 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-28 01:21 - 2013-12-07 21:43 - 00078710 _____ C:\Windows\setupact.log 2015-10-28 01:21 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-28 00:05 - 2011-04-12 08:43 - 14330596 _____ C:\Windows\system32\perfh007.dat 2015-10-28 00:05 - 2011-04-12 08:43 - 04438368 _____ C:\Windows\system32\perfc007.dat 2015-10-28 00:05 - 2009-07-14 06:13 - 00006260 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-27 23:51 - 2013-06-27 03:38 - 00000000 ____D C:\Windows\Minidump 2015-10-27 23:50 - 2014-05-22 22:04 - 4245126298 _____ C:\Windows\MEMORY.DMP 2015-10-27 23:43 - 2009-07-14 05:45 - 00047008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-27 23:43 - 2009-07-14 05:45 - 00047008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-27 23:43 - 2009-07-14 04:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-27 23:42 - 2013-12-07 21:43 - 04933592 _____ C:\Windows\system32\FNTCACHE.DAT 2015-10-27 00:41 - 2012-12-21 19:43 - 01303780 _____ C:\Windows\WindowsUpdate.log 2015-10-27 00:24 - 2012-12-21 19:43 - 00000000 ____D C:\Users\BonZZai 2015-10-27 00:20 - 2014-09-21 16:16 - 00000000 ____D C:\AdwCleaner 2015-10-27 00:19 - 2012-12-22 02:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-25 17:01 - 2013-03-16 05:48 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\vlc 2015-10-25 16:21 - 2013-05-03 15:29 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000UA.job 2015-10-25 15:21 - 2013-05-03 15:29 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-437646761-135901211-47947868-1000Core.job 2015-10-25 11:41 - 2014-01-24 20:36 - 00000000 ____D C:\Users\Hayda_000 2015-10-25 11:41 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2015-10-25 11:36 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2015-10-25 11:35 - 2013-12-07 21:43 - 03009814 _____ C:\Windows\PFRO.log 2015-10-25 11:29 - 2013-06-27 15:50 - 00001912 _____ C:\Windows\epplauncher.mif 2015-10-24 00:09 - 2013-11-18 20:27 - 00000000 ____D C:\Users\BonZZai\AppData\Local\gtk-2.0 2015-10-23 23:18 - 2013-03-07 18:16 - 00000000 ____D C:\Users\BonZZai\AppData\Local\CrashDumps 2015-10-23 15:19 - 2014-01-12 16:56 - 00000000 ____D C:\Users\BonZZai\Downloads\Gameforge Live 2015-10-22 22:41 - 2013-02-28 23:01 - 00000000 ____D C:\Users\BonZZai\AppData\Roaming\TS3Client 2015-10-22 20:33 - 2014-09-19 18:40 - 00003852 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1411148449 2015-10-22 20:33 - 2014-09-19 18:40 - 00000000 ____D C:\Program Files (x86)\Opera 2015-10-22 20:04 - 2015-05-24 17:41 - 00000395 _____ C:\Users\BonZZai\Desktop\games.txt 2015-10-21 15:36 - 2012-12-21 21:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-10-20 18:02 - 2013-10-30 18:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-10-20 16:38 - 2014-09-12 14:50 - 00001098 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-10-20 16:38 - 2014-09-12 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-20 16:38 - 2014-09-12 14:50 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-10-18 12:39 - 2015-07-01 17:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-10-16 21:19 - 2012-12-22 02:09 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-10-16 21:19 - 2012-12-22 02:09 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-16 21:19 - 2012-12-22 02:09 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-10-15 20:54 - 2015-08-02 19:15 - 00000000 ____D C:\Users\BonZZai\Desktop\Tor Browser 2015-10-15 17:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2015-10-15 03:03 - 2014-12-12 17:35 - 00000000 ____D C:\Windows\system32\appraiser 2015-10-15 03:03 - 2014-05-07 00:11 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-10-15 02:09 - 2013-07-12 02:59 - 00000000 ____D C:\Windows\system32\MRT 2015-10-15 02:04 - 2012-12-21 21:36 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-14 23:58 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2015-10-14 23:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2015-10-14 23:30 - 2015-07-01 17:50 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-14 23:17 - 2014-04-21 21:04 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-10-14 01:35 - 2014-08-01 11:48 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2015-10-13 23:07 - 2014-02-18 21:46 - 00000000 ____D C:\Users\BonZZai\AppData\LocalLow\Adblock Plus for IE 2015-10-08 23:56 - 2015-04-05 02:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-10-08 23:56 - 2015-04-05 02:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-05 08:50 - 2014-09-12 14:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-10-05 08:50 - 2014-09-12 14:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-10-05 08:50 - 2014-09-12 14:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-10-04 15:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SchCache 2015-10-02 22:04 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2013-07-15 01:58 - 2013-08-15 23:32 - 0000000 _____ () C:\Users\BonZZai\AppData\Roaming\bitlord_log.txt 2050-01-01 00:59 - 2050-01-01 01:12 - 0001686 _____ () C:\Users\BonZZai\AppData\Local\Cracklock.settings 2013-03-08 22:53 - 2015-08-13 23:24 - 0004608 _____ () C:\Users\BonZZai\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-10-24 00:09 - 2015-10-24 00:09 - 0000218 _____ () C:\Users\BonZZai\AppData\Local\recently-used.xbel 2014-09-19 22:03 - 2014-09-19 22:03 - 0007598 _____ () C:\Users\BonZZai\AppData\Local\Resmon.ResmonCfg Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\BonZZai\dpinst.exe C:\Users\BonZZai\Setup.exe Einige Dateien in TEMP: ==================== C:\Users\BonZZai\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-10-21 19:12 ==================== Ende von FRST.txt ============================ |
|
28.10.2015, 20:21
| #10 |
| /// the machine /// TB-Ausbilder | amd treiber reagiert nicht! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\BonZZai\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\BonZZai\Downloads\7 Data Android Recovery - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\Android Data Recovery - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\cbsidlm-cbsi183-Yet_Another_Cleaner-BP-75959789.exe
C:\Users\BonZZai\Downloads\Everest Home Edition - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\GNU Privacy Guard GnuPG - CHIP-Installer(1).exe
C:\Users\BonZZai\Downloads\GNU Privacy Guard GnuPG - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(1).exe
C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(2).exe
C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer(3).exe
C:\Users\BonZZai\Downloads\Gpg4win - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer(1).exe
C:\Users\BonZZai\Downloads\MSI Afterburner - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\PGP letzte Freeware Version - CHIP-Installer(1).exe
C:\Users\BonZZai\Downloads\PGP letzte Freeware Version - CHIP-Installer.exe
C:\Users\BonZZai\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Downloadverhalten überdenken: CHIP-Installer - was ist das? - Anleitungen Bitte Windows Repair laufen lassen: Windows reparieren - so geht's - Anleitungen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
01.11.2015, 16:29
| #11 |
| | amd treiber reagiert nicht! danke für die hilfe aber ich habe meinen pc abgegeben und habe im moment einen Laptop als kurzzeitigen ersatz. Kannst du mir evt. helfen da bei dem auch einiges nicht stimmt ich wollte den formatieren aber ich kann das nicht. soweit ich weis ist der laptop hier 32bit /windows Xp) würde gerne den auf Wind 7 64 bIT machen. Kann ich das irgendwie tuen? |
|
02.11.2015, 20:19
| #12 |
| /// the machine /// TB-Ausbilder | amd treiber reagiert nicht! Hast Du ne Windows 7 64bit DVD?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.11.2015, 22:09
| #13 |
| | amd treiber reagiert nicht! ja aber das geht nicht da steht dann irgendwas von flascher version denke mal der laptop ist 32bit. geht das trotzdem? |
|
04.11.2015, 20:20
| #14 |
| /// the machine /// TB-Ausbilder | amd treiber reagiert nicht! Installiert ist bei dir 64Bit. Was genau hast Du für eine DVD?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu amd treiber reagiert nicht! |
| amd, bildschirm, bluescreen, entweder, experte, folge, folgendes, funktionier, funktioniert, fängt, grafikkarte, graka, müsst, nutze, problem, ratlos, reagiert, sache, sachen, screen, series, spinne, spinnt, säubern, treiber |
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
Linear-Darstellung
