Guten Tag, habe allem Anschein nach ein Virus auf meinem Rechner.
Wenn ich zb Malwarebytes starte kommt diese Fehlermeldung, genauso wie bei diversen anderen Antivirus Softwares, welche ich installieren möchte bzw aufrufe.

mbam.exe - Ungültiges Bild
C:\WINDOWS\SYSTEM32\WININET.dll ist entweder nicht für die Ausführung unter Windows vorgesehen oder enthält einen Fehler. Istallieren Sie das Programm mit den Originalinstallationsmedien erneut, oder wenden Sie sich an den Systemadministrator oder Softwarelieferanten, um Unterstützung zu erhalten.
Fehlerstatus 0xc0000006

Bekomme diesen Fehler nur bei Antivirensoftware beim Startvorgang oder Installationsvorgang. Bitte helft mir.

Systemwiederherstellung nicht möglich.
Benutze Win10 64-bit Betriebssystem.

Vielen Dank & schöne Grüße, Tom

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:01-12-2015
durchgeführt von TOM WEIGANDT (Administrator) auf TOMWEIGANDT-PC (04-12-2015 13:36:34)
Gestartet von C:\Users\TOM WEIGANDT\Downloads
Geladene Profile: TOM WEIGANDT & DefaultAppPool (Verfügbare Profile: TOM WEIGANDT & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Farbar) C:\Users\TOM WEIGANDT\Downloads\FRST64 (1).exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8725248 2015-12-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-12-03] (Realtek Semiconductor)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [282288 2015-02-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [4002088 2013-11-12] (O&O Software GmbH)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2767664 2015-11-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe
HKLM-x32\...\Run: [ASUS ShellProcess Execute] => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-11-25] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782520 2015-09-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-10-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\Run: [Advanced SystemCare 9] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2010912 2015-11-17] (IObit)
HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
AppInit_DLLs: prio.dll => Keine Datei
BootExecute: autocheck autochk * OODBS

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 37.152.80.6 37.152.80.10
Tcpip\..\Interfaces\{1af59dbe-29eb-49a1-9d47-75aac806451b}: [DhcpNameServer] 37.152.80.6 37.152.80.10
Tcpip\..\Interfaces\{f57ff983-c474-4173-b0fc-a15a7df14860}: [DhcpNameServer] 192.168.1.2

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-20] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-20] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13] (Atheros Commnucations)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-20] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-1771388258-222888687-2504649837-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-12] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-12] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-30]
CHR Extension: (Google Docs) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-30]
CHR Extension: (Google Drive) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-09]
CHR Extension: (YouTube) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-09]
CHR Extension: (Google-Suche) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-09]
CHR Extension: (Google Tabellen) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-30]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR Extension: (Google Mail) - C:\Users\TOM WEIGANDT\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-30]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [827680 2015-11-04] (IObit)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [932912 2015-09-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-09-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-09-25] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1147720 2015-10-14] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [922240 2011-06-13] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [243968 2015-10-14] (Avira Operations GmbH & Co. KG)
R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [218776 2015-12-03] (DTS)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [20512 2014-03-13] (Micro-Star Int'l Co., Ltd.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-05] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-11-10] (IObit)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26624 2015-11-15] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-05] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8043312 2015-11-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5264176 2015-11-05] (NVIDIA Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [3301160 2013-11-12] (O&O Software GmbH)
S3 Origin Client Service; E:\Origin\OriginClientService.exe [2099720 2015-11-25] (Electronic Arts)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-09-23] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [129168 2015-11-13] (Razer Inc.)
R2 SamsungRapidSvc; C:\Windows\System32\RAPID\SamsungRapidSvc.exe [28848 2015-02-04] (Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4322440 2015-10-31] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [137800 2015-09-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [148632 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-04-16] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [74440 2015-09-25] (Avira Operations GmbH & Co. KG)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c65x64.sys [472048 2015-11-19] (Intel Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-05] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-11-05] (NVIDIA Corporation)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-09-23] (Razer, Inc.)
R0 SamsungRapidDiskFltr; C:\Windows\System32\DRIVERS\SamsungRapidDiskFltr.sys [271024 2015-02-04] (Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\Windows\System32\DRIVERS\SamsungRapidFSFltr.sys [111280 2015-02-04] (Samsung Electronics Co., Ltd.)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16056 2015-08-25] (SlimWare Utilities, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-04 13:35 - 2015-12-04 13:35 - 00113052 _____ C:\Users\TOM WEIGANDT\Desktop\FRST.txt
2015-12-04 13:30 - 2015-12-04 13:31 - 02350080 _____ (Farbar) C:\Users\TOM WEIGANDT\Downloads\FRST64 (1).exe
2015-12-04 12:32 - 2015-12-04 12:32 - 00000000 ____D C:\Program Files (x86)\ESET
2015-12-04 12:31 - 2015-12-04 12:32 - 02870984 _____ (ESET) C:\Users\TOM WEIGANDT\Downloads\esetsmartinstaller_deu.exe
2015-12-04 12:19 - 2015-12-04 12:54 - 660373480 _____ (Avira GmbH) C:\Users\TOM WEIGANDT\Downloads\rescue-system.exe
2015-12-04 12:05 - 2015-12-04 12:06 - 00000000 ____D C:\KVRT_Data
2015-12-04 12:05 - 2015-12-04 12:05 - 00478392 ____N (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\43B32C29.sys
2015-12-04 12:05 - 2015-12-04 12:05 - 00085600 ____N (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\43733458.sys
2015-12-04 12:02 - 2015-12-04 12:05 - 95855784 _____ (Kaspersky Lab ZAO) C:\Users\TOM WEIGANDT\Downloads\KVRT.exe
2015-12-04 12:02 - 2015-12-04 12:02 - 10079720 _____ (Symantec Corporation) C:\Users\TOM WEIGANDT\Downloads\NPE.exe
2015-12-04 11:30 - 2015-12-04 11:36 - 136627984 _____ (Microsoft Corporation) C:\Users\TOM WEIGANDT\Downloads\msert.exe
2015-12-04 02:55 - 2015-12-04 03:00 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\ElevatedDiagnostics
2015-12-04 01:57 - 2015-12-04 01:57 - 00001187 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-04 01:57 - 2015-12-04 01:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-04 01:57 - 2015-12-04 01:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-04 01:57 - 2015-12-04 01:57 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-04 01:57 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-04 01:57 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-04 01:57 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-04 01:55 - 2015-12-04 01:56 - 22908888 _____ (Malwarebytes ) C:\Users\TOM WEIGANDT\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-04 01:51 - 2015-12-04 01:52 - 00050415 _____ C:\Users\TOM WEIGANDT\Downloads\Addition.txt
2015-12-04 01:50 - 2015-12-04 13:36 - 00019779 _____ C:\Users\TOM WEIGANDT\Downloads\FRST.txt
2015-12-04 01:50 - 2015-12-04 13:36 - 00000000 ____D C:\FRST
2015-12-04 01:49 - 2015-12-04 01:49 - 02350080 _____ (Farbar) C:\Users\TOM WEIGANDT\Downloads\FRST64.exe
2015-12-04 01:45 - 2015-12-04 01:45 - 05084256 _____ (AVAST Software) C:\Users\TOM WEIGANDT\Downloads\avast_free_antivirus_setup_online.exe
2015-12-04 01:45 - 2015-12-04 01:45 - 05084256 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online.exe
2015-12-04 01:45 - 2015-12-04 01:45 - 00000000 ____D C:\ProgramData\AVAST Software
2015-12-04 01:35 - 2015-12-04 01:35 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-12-04 01:29 - 2015-12-04 01:29 - 04588512 _____ (Avira Operations GmbH & Co. KG) C:\Users\TOM WEIGANDT\Downloads\avira_de_av_5660de46ab31d__ws.exe
2015-12-04 01:29 - 2015-12-04 01:29 - 04588512 _____ (Avira Operations GmbH & Co. KG) C:\Users\TOM WEIGANDT\Downloads\avira_de_av_5660de46ab31d__ws (1).exe
2015-12-03 22:07 - 2015-12-03 22:07 - 00483025 _____ C:\Users\TOM WEIGANDT\Desktop\Update-Fix.rar
2015-12-03 22:06 - 2015-12-03 22:06 - 03859388 _____ () C:\Users\TOM WEIGANDT\Downloads\Sweet FX 2.0.1.exe
2015-12-03 18:41 - 2015-12-03 18:41 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-12-03 18:40 - 2015-12-03 18:40 - 72203792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-12-03 18:40 - 2015-12-03 18:40 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 12986520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 09997848 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 05774632 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 05338936 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 05289952 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 04628736 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-12-03 18:40 - 2015-12-03 18:40 - 04005405 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-12-03 18:40 - 2015-12-03 18:40 - 03299832 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 03278408 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 03271912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02997504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02965120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02893568 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-12-03 18:40 - 2015-12-03 18:40 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02610208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02437136 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02110600 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 02028664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01601944 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01435152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01395760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01351992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01211832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01186160 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01121864 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00965032 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00961848 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00952984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00933640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00923752 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00888480 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00873464 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00749000 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00716104 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00678184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00677672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00618192 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00596120 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00589072 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2015-12-03 18:40 - 2015-12-03 18:40 - 00574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00467160 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00448584 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00447720 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00381416 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00362056 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00357528 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00310424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00258504 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00224264 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00221976 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00214840 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00209536 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00195192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00172584 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00158704 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00122328 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00084624 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2015-12-03 18:40 - 2015-12-03 18:40 - 00023704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-12-03 18:24 - 2015-11-22 11:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-03 18:24 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-03 18:24 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-03 18:24 - 2015-11-22 11:41 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-03 18:24 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-03 18:24 - 2015-11-22 11:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-03 18:24 - 2015-11-22 11:34 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-03 18:24 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-03 18:24 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-03 18:24 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-03 18:24 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-03 18:24 - 2015-11-22 11:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-03 18:24 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-03 18:24 - 2015-11-22 11:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-03 18:24 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-03 18:24 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-03 18:24 - 2015-11-22 11:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-03 18:24 - 2015-11-22 11:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-03 18:24 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-03 18:24 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-03 18:24 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-03 18:24 - 2015-11-22 10:57 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-03 18:24 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-03 18:24 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-03 18:24 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-03 18:24 - 2015-11-22 10:57 - 00009728 _____ C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-03 18:24 - 2015-11-22 10:56 - 22394880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-03 18:24 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-03 18:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-03 18:24 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-03 18:24 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-03 18:24 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-03 18:24 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-03 18:24 - 2015-11-22 10:55 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-03 18:24 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-03 18:24 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-03 18:24 - 2015-11-22 10:52 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-03 18:24 - 2015-11-22 10:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-03 18:24 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-03 18:24 - 2015-11-22 10:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-03 18:24 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-03 18:24 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-03 18:24 - 2015-11-22 10:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-03 18:24 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-03 18:24 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-03 18:24 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-03 18:24 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-03 18:24 - 2015-11-22 10:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-03 18:24 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-03 18:24 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-03 18:24 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-03 18:24 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-03 18:24 - 2015-11-22 10:47 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-03 18:24 - 2015-11-22 10:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-03 18:24 - 2015-11-22 10:46 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-03 18:24 - 2015-11-22 10:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-03 18:24 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-03 18:24 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-03 18:24 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-03 18:24 - 2015-11-22 10:44 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-03 18:24 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-03 18:24 - 2015-11-22 10:43 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-03 18:24 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-03 18:24 - 2015-11-22 10:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-03 18:24 - 2015-11-22 10:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-03 18:24 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-03 18:24 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-03 18:24 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-03 18:24 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-03 18:24 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-03 18:24 - 2015-11-22 10:41 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-03 18:24 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-03 18:24 - 2015-11-22 10:40 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-03 18:24 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-03 18:24 - 2015-11-22 10:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-03 18:24 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-03 18:24 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-03 18:24 - 2015-11-22 10:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-03 18:24 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-03 18:24 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-03 18:24 - 2015-11-22 10:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-03 18:24 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-03 18:24 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-03 18:24 - 2015-11-22 10:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-03 18:24 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-03 18:24 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-03 18:24 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-03 18:24 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-03 18:24 - 2015-11-22 10:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-03 18:24 - 2015-11-22 10:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-03 18:24 - 2015-11-22 10:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-03 18:24 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-03 18:24 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-03 18:24 - 2015-11-22 10:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-03 18:24 - 2015-11-22 10:33 - 13380608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-03 18:24 - 2015-11-22 10:33 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-03 18:24 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-03 18:24 - 2015-11-22 10:32 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-03 18:24 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-03 18:24 - 2015-11-22 10:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-03 18:24 - 2015-11-22 10:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-03 18:24 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-03 18:24 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-03 18:24 - 2015-11-22 10:30 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-03 18:24 - 2015-11-22 10:30 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-03 18:24 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-03 18:24 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-03 18:24 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-03 18:24 - 2015-11-22 10:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-03 18:24 - 2015-11-22 10:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-03 18:24 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-03 18:24 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-03 18:24 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-03 18:24 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-03 18:24 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-03 18:24 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-03 18:24 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-03 18:24 - 2015-11-22 10:25 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-03 18:24 - 2015-11-22 10:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-03 18:24 - 2015-11-22 10:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-03 18:24 - 2015-11-22 10:24 - 12124672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-03 18:24 - 2015-11-22 10:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-03 18:24 - 2015-11-22 10:24 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-03 18:24 - 2015-11-22 10:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-03 18:24 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-03 18:24 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-03 18:24 - 2015-11-22 10:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-03 18:24 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-03 18:24 - 2015-11-22 10:19 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-03 18:24 - 2015-11-22 10:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-03 18:24 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-03 18:24 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-03 18:24 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-03 18:24 - 2015-11-22 10:17 - 02121216 _____ C:\WINDOWS\SysWOW64\wininet.dll
2015-12-03 18:24 - 2015-11-22 10:16 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-03 18:24 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-02 05:25 - 2015-12-02 05:25 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\NVIDIA
2015-12-02 05:09 - 2015-12-04 11:27 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-02 05:09 - 2015-12-02 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-02 05:09 - 2015-11-25 00:07 - 00112760 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-12-02 05:09 - 2015-11-25 00:07 - 00105080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-12-02 05:09 - 2015-11-24 20:32 - 06358648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-12-02 05:09 - 2015-11-24 20:32 - 02983032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-12-02 05:09 - 2015-11-24 20:32 - 02554672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-12-02 05:09 - 2015-11-24 20:32 - 00938616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-12-02 05:09 - 2015-11-24 20:32 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-12-02 05:09 - 2015-11-24 20:32 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-12-02 05:09 - 2015-11-24 19:42 - 00102704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-12-02 05:09 - 2015-11-23 21:35 - 06049858 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-12-02 05:08 - 2015-11-26 01:34 - 11228488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-02 05:08 - 2015-11-25 00:07 - 42913912 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 37882672 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 22345336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 18487360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 18389624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 16561320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 15933400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 15839392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 13533416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 12870384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 03540360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 03126800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 02876536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 02496816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435906.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435906.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 01016360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 01013960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00877872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00820856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00601424 _____ C:\WINDOWS\system32\nvmcumd.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00539464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00501056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00446768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00445400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00422752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00413816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00369272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-12-02 05:08 - 2015-11-25 00:07 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-12-02 05:08 - 2015-11-25 00:07 - 00034494 _____ C:\WINDOWS\system32\nvinfo.pb
2015-12-02 03:25 - 2015-11-05 02:41 - 01842080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-12-02 03:25 - 2015-11-05 02:41 - 01526120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-12-02 01:58 - 2015-12-02 01:58 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\NVIDIA Corporation
2015-12-02 01:58 - 2015-12-02 01:58 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\NVIDIA
2015-12-02 01:58 - 2015-11-05 02:41 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-12-02 01:58 - 2015-11-05 02:41 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-12-02 01:58 - 2015-11-05 02:41 - 00111704 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2015-12-02 01:57 - 2015-12-02 05:09 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-02 01:57 - 2015-12-02 05:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-02 01:57 - 2015-12-02 05:09 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-11-30 01:21 - 2015-11-30 01:23 - 16910839 _____ C:\Users\TOM WEIGANDT\Desktop\MBO530-Hotfix.7z
2015-11-26 20:57 - 2015-11-26 20:57 - 00000000 ____D C:\dde13052d5d45b14c992f5fe7320
2015-11-26 01:18 - 2015-11-26 01:18 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-26 01:06 - 2015-12-04 01:29 - 00000282 _____ C:\WINDOWS\Tasks\ASC9_SkipUac_TOM WEIGANDT.job
2015-11-26 01:06 - 2015-11-26 01:06 - 00002482 _____ C:\WINDOWS\System32\Tasks\ASC9_SkipUac_TOM WEIGANDT
2015-11-26 01:06 - 2015-11-26 01:06 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2015-11-26 01:05 - 2015-11-26 01:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2015-11-25 01:33 - 2015-09-23 00:36 - 00037184 _____ (Razer, Inc.) C:\WINDOWS\system32\Drivers\rzpmgrk.sys
2015-11-25 01:29 - 2015-11-25 01:30 - 00003426 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2015-11-25 01:29 - 2015-11-25 01:30 - 00003088 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (TOM WEIGANDT)
2015-11-25 01:29 - 2015-11-25 01:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-11-25 01:29 - 2015-11-21 07:21 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-11-25 01:29 - 2015-11-21 07:02 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-11-25 01:29 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-25 01:29 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-11-25 01:29 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-11-20 22:01 - 2015-11-20 22:01 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-11-19 00:53 - 2015-11-19 00:53 - 00472048 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\e1c65x64.sys
2015-11-19 00:53 - 2015-11-19 00:53 - 00125728 _____ (Intel Corporation) C:\WINDOWS\system32\NicCo4.dll
2015-11-19 00:53 - 2015-11-19 00:53 - 00089144 _____ (Intel Corporation) C:\WINDOWS\system32\NicInstC.dll
2015-11-19 00:53 - 2015-11-19 00:53 - 00076048 _____ (Intel Corporation) C:\WINDOWS\system32\e1cmsg.dll
2015-11-19 00:53 - 2015-11-19 00:53 - 00003113 _____ C:\WINDOWS\system32\e1c65x64.din
2015-11-19 00:35 - 2015-11-13 07:55 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-11-19 00:35 - 2015-11-13 07:51 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-11-19 00:35 - 2015-11-13 07:51 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-11-19 00:35 - 2015-11-13 07:51 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-11-19 00:35 - 2015-11-13 07:43 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-11-19 00:35 - 2015-11-13 07:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-11-19 00:35 - 2015-11-13 07:43 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-11-19 00:35 - 2015-11-13 07:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-11-19 00:35 - 2015-11-13 07:43 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-11-19 00:35 - 2015-11-13 07:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-11-19 00:35 - 2015-11-13 07:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-11-19 00:35 - 2015-11-13 07:42 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-11-19 00:35 - 2015-11-13 07:42 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-19 00:35 - 2015-11-13 07:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-19 00:35 - 2015-11-13 07:41 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-11-19 00:35 - 2015-11-13 07:41 - 03670832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-19 00:35 - 2015-11-13 07:33 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-11-19 00:35 - 2015-11-13 07:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-11-19 00:35 - 2015-11-13 07:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-11-19 00:35 - 2015-11-13 07:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-11-19 00:35 - 2015-11-13 07:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-11-19 00:35 - 2015-11-13 07:19 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-19 00:35 - 2015-11-13 07:18 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-11-19 00:35 - 2015-11-13 07:09 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-11-19 00:35 - 2015-11-13 07:07 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-19 00:35 - 2015-11-13 07:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-19 00:35 - 2015-11-13 07:05 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-11-19 00:35 - 2015-11-13 07:05 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-19 00:35 - 2015-11-13 07:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-19 00:35 - 2015-11-13 07:05 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-19 00:35 - 2015-11-13 07:04 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-19 00:35 - 2015-11-13 07:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-19 00:35 - 2015-11-13 07:04 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-19 00:35 - 2015-11-13 07:03 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-11-19 00:35 - 2015-11-13 07:03 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-11-19 00:35 - 2015-11-13 07:02 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-11-19 00:35 - 2015-11-13 07:02 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-11-19 00:35 - 2015-11-13 07:01 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-11-19 00:35 - 2015-11-13 07:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-11-19 00:35 - 2015-11-13 07:00 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-11-19 00:35 - 2015-11-13 06:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-11-19 00:35 - 2015-11-13 06:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-11-19 00:35 - 2015-11-13 06:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-11-19 00:35 - 2015-11-13 06:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-11-19 00:35 - 2015-11-13 06:57 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-11-19 00:35 - 2015-11-13 06:56 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-11-19 00:35 - 2015-11-13 06:56 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-11-19 00:35 - 2015-11-13 06:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-11-19 00:35 - 2015-11-13 06:55 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-19 00:35 - 2015-11-13 06:55 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-11-19 00:35 - 2015-11-13 06:54 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-19 00:35 - 2015-11-13 06:53 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-11-19 00:35 - 2015-11-13 06:53 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-11-19 00:35 - 2015-11-13 06:50 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-19 00:35 - 2015-11-13 06:49 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-19 00:35 - 2015-11-13 06:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-11-19 00:35 - 2015-11-13 06:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-11-19 00:35 - 2015-11-13 06:39 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-11-19 00:35 - 2015-11-13 06:37 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-11-19 00:35 - 2015-11-13 06:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-11-19 00:35 - 2015-11-13 06:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-11-19 00:35 - 2015-11-13 06:32 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-11-19 00:35 - 2015-11-13 06:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-11-19 00:35 - 2015-11-13 06:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-11-19 00:35 - 2015-11-13 06:29 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-11-19 00:35 - 2015-11-13 06:28 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-11-19 00:35 - 2015-11-13 06:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-11-19 00:35 - 2015-11-13 06:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-19 00:35 - 2015-11-13 06:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-11-17 16:07 - 2015-11-17 16:07 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-11-16 21:45 - 2015-11-16 21:46 - 00000000 _____ C:\WINDOWS\Path.idx
2015-11-16 04:00 - 2015-11-16 04:00 - 00000020 ___SH C:\Users\DefaultAppPool.IIS APPPOOL\ntuser.ini
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Vorlagen
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Startmenü
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Netzwerkumgebung
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Lokale Einstellungen
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Eigene Dateien
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Druckumgebung
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Documents\Eigene Videos
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Documents\Eigene Musik
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Documents\Eigene Bilder
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\AppData\Local\Verlauf
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\AppData\Local\Anwendungsdaten
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 _SHDL C:\Users\DefaultAppPool.IIS APPPOOL\Anwendungsdaten
2015-11-16 04:00 - 2015-11-16 04:00 - 00000000 ____D C:\Users\DefaultAppPool.IIS APPPOOL
2015-11-16 04:00 - 2015-11-15 03:36 - 00000000 ____D C:\Users\DefaultAppPool.IIS APPPOOL\AppData\Roaming\Media Center Programs
2015-11-16 04:00 - 2015-11-15 03:36 - 00000000 ____D C:\Users\DefaultAppPool.IIS APPPOOL\AppData\Roaming\Macromedia
2015-11-16 02:54 - 2015-11-16 02:54 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\FT_Software
2015-11-16 02:54 - 2015-11-16 02:54 - 00000000 ____D C:\ProgramData\FT Software
2015-11-16 02:53 - 2015-11-16 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Subways 4 - Remote Announcements
2015-11-16 02:51 - 2015-11-16 02:51 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\FT Software
2015-11-15 04:59 - 2015-11-27 00:36 - 00000000 ____D C:\WINDOWS\Minidump
2015-11-15 04:16 - 2015-11-15 04:16 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\Comms
2015-11-15 03:52 - 2015-11-15 03:52 - 90271744 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2015-11-15 03:52 - 2015-11-15 03:52 - 31113216 _____ C:\WINDOWS\system32\config\COMPONENTS.iobit
2015-11-15 03:52 - 2015-11-15 03:52 - 05251072 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2015-11-15 03:52 - 2015-11-15 03:52 - 00225280 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2015-11-15 03:52 - 2015-11-15 03:52 - 00032768 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2015-11-15 03:52 - 2015-11-15 03:52 - 00028672 _____ C:\WINDOWS\system32\config\SAM.iobit
2015-11-15 03:50 - 2015-11-03 01:12 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-15 03:50 - 2015-11-03 01:12 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-15 03:47 - 2015-11-15 03:47 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\ActiveSync
2015-11-15 03:45 - 2015-11-15 03:45 - 00000020 ___SH C:\Users\TOM WEIGANDT\ntuser.ini
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-11-15 03:45 - 2015-11-15 03:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-11-15 03:42 - 2015-12-04 11:27 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-15 03:36 - 2015-11-15 03:36 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-15 03:36 - 2015-11-15 03:36 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-11-15 03:36 - 2015-11-15 03:36 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-11-15 03:36 - 2015-11-15 03:36 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-11-15 03:36 - 2015-11-15 03:36 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-11-15 03:34 - 2015-11-15 03:34 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-11-15 03:34 - 2015-11-15 03:34 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-11-15 03:33 - 2015-11-27 03:24 - 00000000 ____D C:\Users\TOM WEIGANDT
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Vorlagen
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Startmenü
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Netzwerkumgebung
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Lokale Einstellungen
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Eigene Dateien
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Druckumgebung
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Documents\Eigene Videos
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Documents\Eigene Musik
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Documents\Eigene Bilder
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\AppData\Local\Verlauf
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\AppData\Local\Anwendungsdaten
2015-11-15 03:33 - 2015-11-15 03:33 - 00000000 _SHDL C:\Users\TOM WEIGANDT\Anwendungsdaten
2015-11-15 03:32 - 2015-12-04 11:34 - 02085814 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-15 03:32 - 2015-11-15 03:32 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-11-15 03:30 - 2015-12-03 18:41 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-11-15 03:30 - 2015-12-03 18:41 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-11-15 03:30 - 2015-11-15 03:30 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-11-15 03:30 - 2015-11-15 03:30 - 00000000 ____D C:\Program Files\Realtek
2015-11-15 03:30 - 2015-11-15 03:30 - 00000000 ____D C:\Program Files\Common Files\Atheros
2015-11-15 03:30 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-11-15 03:28 - 2015-11-15 03:38 - 00202760 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-15 03:27 - 2015-11-15 03:54 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-15 03:25 - 2015-11-15 03:25 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-15 03:25 - 2015-11-15 03:25 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-15 03:25 - 2015-11-15 03:25 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-15 03:25 - 2015-11-15 03:25 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-15 03:25 - 2015-11-15 03:25 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-15 03:25 - 2015-11-15 03:25 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-15 03:25 - 2015-11-15 03:25 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-11-15 03:25 - 2015-11-15 03:25 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-11-15 03:25 - 2015-11-15 03:25 - 00000000 ____D C:\Windows.old
2015-11-15 03:24 - 2015-11-15 03:24 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-11-15 03:24 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-11-15 03:24 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-11-15 03:24 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-11-15 03:24 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-11-15 03:24 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\Program Files\MSBuild
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-15 03:22 - 2015-11-15 03:22 - 00000000 ____D C:\inetpub
2015-11-15 03:22 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-11-15 03:22 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-11-15 03:22 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-11-15 03:22 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-15 03:22 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-15 03:22 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-11-13 00:45 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VFR Kauai Hawaii X
2015-11-12 02:46 - 2015-11-12 02:46 - 00000000 ____D C:\Program Files (x86)\Lockheed Martin
2015-11-12 02:37 - 2015-11-26 21:42 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rikoooo Add-ons
2015-11-12 02:25 - 2015-11-12 02:25 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\FFSJ
2015-11-12 01:28 - 2015-11-05 18:00 - 00072504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-11-12 01:28 - 2015-11-05 18:00 - 00069416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-11-12 01:28 - 2015-11-05 18:00 - 00050472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-11-10 00:52 - 2015-11-21 00:34 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Virtuali
2015-11-10 00:52 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FsDreamTeam
2015-11-10 00:51 - 2015-11-10 00:58 - 00000000 ____D C:\ProgramData\Virtuali
2015-11-10 00:51 - 2015-11-10 00:51 - 00000000 ____D C:\ProgramData\Esellerate
2015-11-09 07:01 - 2015-11-09 07:01 - 00000000 ____D C:\Users\TOM WEIGANDT\Documents\REX 4 DIRECT
2015-11-09 06:05 - 2015-11-09 06:05 - 00000000 ____D C:\ProgramData\FLEXnet
2015-11-09 05:57 - 2015-11-09 05:57 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Hifi
2015-11-09 05:36 - 2015-11-15 03:33 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldProp Solutions Inc
2015-11-09 05:34 - 2015-11-09 05:34 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\PMDG
2015-11-09 05:29 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMDG Simulations
2015-11-09 05:29 - 2015-11-09 05:34 - 00000000 ____D C:\Program Files (x86)\PMDG Operations Center
2015-11-09 05:29 - 2015-11-09 05:29 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\RAASPRO
2015-11-09 05:24 - 2015-11-26 05:08 - 00000000 ____D C:\Users\TOM WEIGANDT\Desktop\backup
2015-11-09 05:17 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbx
2015-11-09 05:16 - 2015-11-15 03:33 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orbx
2015-11-09 05:16 - 2015-11-12 01:50 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\Orbx
2015-11-09 04:12 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiFi
2015-11-09 04:10 - 2015-11-09 04:10 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\Bevelstone_Production_NL
2015-11-09 04:10 - 2015-11-09 04:10 - 00000000 ____D C:\ProgramData\EditVoicepackX
2015-11-09 04:09 - 2015-11-09 04:09 - 00001875 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EditVoicepack XL.lnk
2015-11-09 04:04 - 2015-11-13 00:50 - 00000000 ____D C:\Program Files (x86)\EZCA
2015-11-09 04:04 - 2015-11-09 04:04 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\EZCA
2015-11-09 04:04 - 2015-11-09 04:04 - 00000000 ____D C:\EZdok Software
2015-11-09 03:47 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REX 4
2015-11-09 03:27 - 2015-12-03 19:44 - 00000000 ____D C:\Users\TOM WEIGANDT\Documents\Prepar3D v3 Files
2015-11-09 03:27 - 2015-11-15 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lockheed Martin
2015-11-09 03:27 - 2015-11-10 02:02 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Lockheed Martin
2015-11-09 03:27 - 2015-11-09 03:27 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\Lockheed Martin
2015-11-09 03:27 - 2015-11-09 03:27 - 00000000 ____D C:\ProgramData\Lockheed Martin
2015-11-04 02:30 - 2015-11-13 00:38 - 00000000 ____D C:\Users\TOM WEIGANDT\Documents\A2A
2015-11-04 01:06 - 2015-11-09 02:09 - 00000000 ____D C:\Users\Public\Documents\DX10SceneryFixer

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-04 13:05 - 2015-05-12 13:30 - 00001148 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-04 12:45 - 2015-05-12 23:25 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-04 11:34 - 2015-10-30 19:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-04 11:34 - 2015-10-30 19:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-04 11:34 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-04 11:30 - 2015-09-12 20:43 - 00004182 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{BE29A7CD-4065-45DA-A898-0087658DA596}
2015-12-04 11:28 - 2015-05-12 13:30 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-04 11:27 - 2015-05-13 22:37 - 01054370 _____ C:\WINDOWS\system32\oodbs.lor
2015-12-04 11:26 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-12-04 11:26 - 2015-07-31 17:54 - 00000000 ____D C:\WINDOWS\pss
2015-12-04 02:22 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-04 02:22 - 2015-05-14 03:51 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\CrashDumps
2015-12-04 01:45 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-04 01:21 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-03 18:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-03 18:25 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-03 18:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-02 05:29 - 2015-05-13 22:21 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2015-12-02 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-02 03:04 - 2015-05-13 22:20 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2015-12-02 01:36 - 2015-08-16 15:58 - 00000000 ____D C:\Users\TOM WEIGANDT\Verschiedenes
2015-12-02 01:33 - 2015-05-12 22:34 - 00000000 ____D C:\TUNING
2015-12-02 01:29 - 2015-05-12 22:41 - 00000000 ____D C:\ProgramData\ProductData
2015-11-28 00:11 - 2015-07-09 10:32 - 00000000 ____D C:\Program Files\Rockstar Games
2015-11-28 00:11 - 2015-07-09 10:32 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-11-27 03:09 - 2015-08-24 00:54 - 00007626 _____ C:\Users\TOM WEIGANDT\AppData\Local\resmon.resmoncfg
2015-11-27 02:55 - 2015-08-03 15:48 - 00000000 ____D C:\MSI
2015-11-27 01:29 - 2015-07-09 10:32 - 00000080 _____ C:\Users\TOM WEIGANDT\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-11-26 21:42 - 2015-10-24 14:57 - 00000000 ____D C:\ProgramData\InstallMate
2015-11-26 01:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-11-26 01:06 - 2015-05-12 22:36 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\IObit
2015-11-26 01:06 - 2015-05-12 22:36 - 00000000 ____D C:\ProgramData\IObit
2015-11-26 01:05 - 2015-05-12 22:36 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\LocalLow\IObit
2015-11-26 01:05 - 2015-05-12 22:36 - 00000000 ____D C:\Program Files (x86)\IObit
2015-11-25 01:44 - 2015-05-13 23:25 - 00000000 ____D C:\ProgramData\Origin
2015-11-20 22:02 - 2015-05-12 23:30 - 00000000 ____D C:\ProgramData\Oracle
2015-11-20 22:01 - 2015-10-11 16:37 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-20 22:01 - 2015-09-01 18:47 - 00000000 ____D C:\Users\TOM WEIGANDT\.oracle_jre_usage
2015-11-20 22:01 - 2015-08-03 14:55 - 00000000 ____D C:\Program Files\Java
2015-11-20 22:01 - 2015-08-03 14:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-19 02:17 - 2015-09-11 20:09 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-19 02:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-11-19 00:40 - 2015-07-30 19:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-19 00:36 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-11-19 00:36 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-11-19 00:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-11-19 00:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-19 00:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-11-19 00:36 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-11-19 00:36 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-11-16 21:45 - 2015-05-12 15:49 - 04046192 _____ C:\WINDOWS\PE_Rom.dll
2015-11-16 04:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-11-16 04:41 - 2015-08-03 12:40 - 00000000 ____D C:\Users\TOM WEIGANDT\Documents\Project CARS
2015-11-15 04:17 - 2015-07-30 19:37 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Local\Packages
2015-11-15 04:03 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-11-15 03:50 - 2015-10-27 22:41 - 00002419 _____ C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-15 03:50 - 2015-07-30 20:21 - 00000000 ___RD C:\Users\TOM WEIGANDT\OneDrive
2015-11-15 03:46 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-11-15 03:46 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-11-15 03:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-11-15 03:45 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-11-15 03:44 - 2015-07-30 17:46 - 00019974 _____ C:\WINDOWS\diagerr.xml
2015-11-15 03:44 - 2015-07-30 17:46 - 00019053 _____ C:\WINDOWS\diagwrn.xml
2015-11-15 03:43 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-11-15 03:42 - 2015-11-02 00:39 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-11-15 03:42 - 2015-07-30 19:16 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-11-15 03:42 - 2015-05-12 23:55 - 00002234 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-11-15 03:42 - 2015-05-12 23:49 - 00002578 _____ C:\WINDOWS\System32\Tasks\SamsungMagician
2015-11-15 03:42 - 2015-05-12 23:25 - 00003142 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-11-15 03:42 - 2015-05-12 13:30 - 00003660 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-11-15 03:42 - 2015-05-12 13:30 - 00003436 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-15 03:41 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-11-15 03:41 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-15 03:36 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-11-15 03:35 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-11-15 03:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-11-15 03:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-11-15 03:35 - 2015-05-14 01:01 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2015-11-15 03:34 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-11-15 03:34 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\System
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-11-15 03:34 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-15 03:34 - 2015-10-29 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZCA
2015-11-15 03:34 - 2015-09-13 14:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChrisTrains
2015-11-15 03:34 - 2015-08-17 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2015-11-15 03:34 - 2015-08-03 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-11-15 03:34 - 2015-08-03 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft DirectX SDK (June 2010)
2015-11-15 03:34 - 2015-07-30 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software
2015-11-15 03:34 - 2015-05-23 17:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-11-15 03:34 - 2015-05-22 01:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Rides 2
2015-11-15 03:34 - 2015-05-14 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trains and Drivers
2015-11-15 03:34 - 2015-05-14 22:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrainTeamBerlin
2015-11-15 03:34 - 2015-05-14 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Just Trains
2015-11-15 03:34 - 2015-05-14 02:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft
2015-11-15 03:34 - 2015-05-14 01:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A2A Simulations
2015-11-15 03:34 - 2015-05-13 23:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-15 03:34 - 2015-05-13 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-11-15 03:34 - 2015-05-13 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2015-11-15 03:34 - 2015-05-13 22:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-11-15 03:34 - 2015-05-13 22:08 - 00000000 ____D C:\WINDOWS\system32\oodag
2015-11-15 03:34 - 2015-05-12 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-15 03:34 - 2015-05-12 23:52 - 00000000 ____D C:\WINDOWS\system32\RAPID
2015-11-15 03:34 - 2015-05-12 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2015-11-15 03:34 - 2015-05-12 23:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2015-11-15 03:34 - 2015-05-12 23:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
2015-11-15 03:34 - 2015-05-12 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reinstall DirectX EZ
2015-11-15 03:34 - 2015-05-12 22:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-11-15 03:34 - 2015-05-12 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2015-11-15 03:34 - 2015-05-12 15:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-11-15 03:34 - 2015-05-12 15:40 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-11-15 03:34 - 2015-05-12 13:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asmedia Technology
2015-11-15 03:34 - 2015-05-12 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-15 03:34 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-11-15 03:34 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-11-15 03:33 - 2015-11-02 00:54 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RW_Tools
2015-11-15 03:33 - 2015-11-01 21:04 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Inputwish
2015-11-15 03:33 - 2015-09-16 18:11 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2015-11-15 03:33 - 2015-07-30 14:57 - 00000000 ___RD C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-11-15 03:33 - 2015-06-02 12:51 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-11-15 03:33 - 2015-05-14 22:32 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Versystem Soundboard
2015-11-15 03:33 - 2015-05-13 23:32 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-11-15 03:33 - 2015-05-13 22:21 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2015-11-15 03:33 - 2015-05-12 22:38 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-11-15 03:33 - 2015-05-12 13:46 - 00000000 ____D C:\Users\TOM WEIGANDT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Marvell
2015-11-15 03:32 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-11-15 03:28 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-11-15 03:27 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-11-15 03:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-11-15 03:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-11-15 03:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-11-15 03:22 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-11-15 03:22 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-11-15 03:22 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-11-15 03:22 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-11-15 03:22 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-11-15 03:22 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-11-15 03:22 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-11-15 03:22 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-11-15 03:22 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-11-15 03:22 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-11-15 03:22 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-11-15 03:22 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-11-15 03:22 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-11-15 03:22 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-11-15 03:22 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-11-15 03:22 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-11-15 03:22 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-11-15 03:22 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-11-15 03:22 - 2015-10-30 08:17 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2015-11-15 03:22 - 2015-10-30 08:17 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2015-11-15 03:22 - 2015-10-30 08:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2015-11-15 03:22 - 2015-10-30 08:17 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2015-11-15 03:22 - 2015-10-30 08:17 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2015-11-15 03:11 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-13 00:29 - 2015-05-13 22:21 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2015-11-11 03:51 - 2015-05-12 21:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 03:50 - 2015-05-12 21:34 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 00:36 - 2015-05-14 02:25 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-10 00:55 - 2015-05-12 13:31 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-09 04:04 - 2015-05-14 01:45 - 00002048 _____ C:\WINDOWS\ezdokcam1.lic

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-05-30 21:48 - 2015-05-30 23:38 - 0000084 _____ () C:\Users\TOM WEIGANDT\AppData\Roaming\prio.ini
2015-08-24 00:54 - 2015-11-27 03:09 - 0007626 _____ () C:\Users\TOM WEIGANDT\AppData\Local\resmon.resmoncfg
2008-02-05 12:28 - 2008-02-05 12:28 - 0000051 _____ () C:\Users\TOM WEIGANDT\AppData\Local\setup.txt
2015-11-15 03:30 - 2015-11-15 03:30 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-04 13:15

==================== Ende von FRST.txt ============================
         

--- --- ---


Hallo schrauber, dies ist das einzige was auf dem Desktop ausgegeben wurde.
Musste Text kopieren, da der Virus auch es nicht gestattet hat, die Datei hochzuladen. ;-) Hoffe, es reicht aus?! Danke sehr für die kompetente Hilfe. :-)

FRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:01-12-2015
durchgeführt von TOM WEIGANDT (2015-12-04 14:03:29)
Gestartet von C:\Users\TOM WEIGANDT\Downloads
Windows 10 Home (X64) (2015-11-15 02:45:31)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1771388258-222888687-2504649837-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1771388258-222888687-2504649837-503 - Limited - Disabled)
Gast (S-1-5-21-1771388258-222888687-2504649837-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1771388258-222888687-2504649837-1002 - Limited - Enabled)
TOM WEIGANDT (S-1-5-21-1771388258-222888687-2504649837-1000 - Administrator - Enabled) => C:\Users\TOM WEIGANDT

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

777 Immersion (HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\2933e08a32c08f3d) (Version: 1.3.1.1 - OldProp Solutions Inc)
Accu-Feel (HKLM-x32\...\Accu-Feel) (Version:  - )
Accu-Feel Air, Land, and Sea (HKLM-x32\...\Accu-Feel Air, Land, and Sea) (Version:  - )
Active Sky Next for P3D SP4 (HKLM-x32\...\{67230DFC-F135-4F7F-B489-5860FD0EE162}_is1) (Version: 1.0.5812.14847 - HiFi Technologies, Inc.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.9.160 - Adobe Systems, Inc.)
Advanced SystemCare 9 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 9.0.3 - IObit)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
aerosoft's - Im Koeblitzer Bergland 3 (HKLM-x32\...\{BFB6EA14-2AC6-422A-89F6-247B31CB2D03}) (Version: 1.00 - aerosoft)
aerosoft's - Koeln-Duesseldorf (HKLM-x32\...\{D2379705-565A-40AB-B2F6-5CD70D599AE2}) (Version: 1.01 - aerosoft)
aerosoft's - OMSI 2 - Drei Generationen (HKLM-x32\...\{C88376AA-BF64-40F4-9AD6-F8A18DA394F2}) (Version: 1.20 - aerosoft)
aerosoft's - OMSI 2 - Hamburg (HKLM-x32\...\{5BF6B590-F7F5-46B5-B5F4-B0CA93423AD6}) (Version: 2.02 - aerosoft)
AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.01.28 - ASUSTeK Computer Inc.)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.8 - Sereby Corporation)
ASConnect for P3D (HKLM-x32\...\{70C18CD2-D9F3-478D-994C-DCE39C84E19E}_is1) (Version: 1.0.0.34 - HiFi Technologies, Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{59c4462d-a177-4d44-a95b-deda1be79844}) (Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG) Hidden
Balearic Islands FSX & P3D (HKLM\...\{05894EFC-5844-4C45-87A2-DDEEC5DCA893}) (Version: 1 - Valentin Casares)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications)
BR 103 Verkehrsrot - ( Train Simulator 2013 ) (HKLM-x32\...\{72DDEEAC-6C4B-47D3-9B4C-193CDC187C8C}) (Version: 1.0 - vizzart)
Canary Islands part1 FSX & P3D (HKLM\...\{9BEEB35B-C8CE-462E-9E2C-DD0788D8E62F}) (Version: 1 - AHS334A – Alberto Sánchez)
Canary Islands part2 FSX & P3D (HKLM\...\{0FC174B7-A23C-4D09-B9E5-321D58729B65}) (Version: 1 - AHS334A – Alberto Sánchez)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Cervino ID FSX & P3D (HKLM\...\{8313B95B-8F63-4007-A503-A598CE47B131}) (Version: 1 - Frank Dainese)
ChrisTrains Stadler GTW v1.2 (HKLM-x32\...\ChrisTrains Stadler GTW v1.2) (Version:  - )
Cook Islands Photo Real Scenery FSX & P3D (HKLM\...\{45712B8A-1002-4EDD-96E9-6703C1409AB9}) (Version: 1 - Tiberius Kowalski)
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
Driver Booster 3.1 (HKLM-x32\...\Driver Booster_is1) (Version: 3.1 - IObit)
EditVoicepack XL (HKLM-x32\...\{c612ee79-eac1-4e3f-93b1-d70bbad5582c}) (Version: 5.2.3.0 - Bevelstone Production)
EditVoicepack XL (x32 Version: 5.2.3.0 - Bevelstone Production) Hidden
EZdok Camera for Microsoft Flight Simulator X (HKLM-x32\...\EZdok Camera for Microsoft Flight Simulator X) (Version:  - )
Fahrzeit Vol.4 'Der Sturm' (HKLM-x32\...\D53AF748-A2D6-46C5-8A9E-93961F5CF2FD_is1) (Version: 1.0 - 3DZUG)
Fiji Photoreal Package Western FSX & P3D (HKLM\...\{DC17D3A5-1F2A-47F2-8FDD-6F5550C6030E}) (Version: 1 - Tiberius Kowalski)
FSDreamTeam GSX P3D v3.x (HKLM-x32\...\FSDreamTeam GSX P3D v3.x_is1) (Version: 1.9.12 - VIRTUALI Sagl)
FTX Global Base Pack (HKLM-x32\...\FTX Global Base Pack1.40) (Version: 1.40 - Orbx Simulation Systems Pty Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.57 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Hawaii Photoreal Vol 1 FSX & P3D (HKLM\...\{6E644BCF-69E1-4CE5-B25B-D34EB52BD070}) (Version: 1 - AveMetal)
Hawaii Photoreal Vol 2 FSX & P3D (HKLM\...\{39BED188-6E61-42E2-A98A-506CD423EA2C}) (Version: 1 - AveMetal)
HWiNFO64 Version 5.02 (HKLM\...\HWiNFO64_is1) (Version: 5.02 - Martin Malík - REALiX)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Network Connections 15.6.25.0 (HKLM\...\PROSetDX) (Version: 15.6.25.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.58.2 - JMicron Technology Corp.)
Just Trains - BR111 Regio (HKLM-x32\...\{88851594-76C3-447D-93F5-D26B1627EA10}) (Version: 1.00.0000 - Just Trains)
Just Trains - Three Country Corner Route (HKLM-x32\...\{8591C645-D5C9-4357-8566-C7945AC2DE65}) (Version: 1.00.0000 - Just Trains)
Kefallinia FSX & P3D (HKLM\...\{9381A1BF-79CC-4800-98CF-2E97A6709B9F}) (Version: 1 - Dimitris Ntaskas)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1045 - Marvell)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.61242.0 (HKLM-x32\...\{85DF6786-66AA-42EE-8616-AE456B07BD99}) (Version: 10.0.61242.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1_F535B2CF-C9BB-4162-B03A-02D6971F32CC) (Version: 10.0.61355.0 - Microsoft Game Studios)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{eb96e401-0158-4062-b443-aff1b34e69b3}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 3.0.0.09 - MSI)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NoLimits 2 Roller Coaster Simulation (HKLM-x32\...\Steam App 301320) (Version:  - Ole Lange)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 359.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.0.80 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.0.80 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
O&O Defrag Professional (HKLM\...\{BC39713D-B14D-4BB0-9663-BC9F7B8AB1F2}) (Version: 15.8.823 - O&O Software GmbH)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version:  - MR-Software GbR)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)
Photoreal MtEverest plus Mesh FSX & P3D (HKLM\...\{21E41264-6BF4-4F45-AD76-23FB3655442A}) (Version: 1 - Ferranti & Sandmann + Frank Dainese)
PMDG 737 8900 NGX Base Package P3D (HKLM-x32\...\{0EA92925-36E7-40CB-A714-118AB046099B}) (Version: 1.10.6461 - PMDG Simulations, LLC.)
PMDG 777-200LRF Base Package P3D (HKLM-x32\...\{C1CB0E26-CE1A-4789-8EEA-919C4CD491C1}) (Version: 1.10.6492 - PMDG Simulations, LLC.)
Prepar3D v2 Academic Bundle (x32 Version: 2.5.12946.0 - ) Hidden
Prepar3D v3 Academic (HKLM-x32\...\{ef7923e2-4857-4683-820d-a3994d88d709}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v3 Academic Client (HKLM-x32\...\{213CD124-D688-436D-9BD8-FFB56DC830BE}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v3 Content (HKLM-x32\...\{CE8E65FC-9BE3-438A-8449-BCD5E8ACC6BE}) (Version: 3.0.10.14945 - Lockheed Martin)
Prepar3D v3 Scenery (HKLM-x32\...\{3F2CF900-1437-4F93-9ABF-07B8B80E37DA}) (Version: 3.0.10.14945 - Lockheed Martin)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - Slightly Mad Studios)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Railtraction BR 648 Coradia Lint41 (HKLM-x32\...\{6DB7926B-7DBB-438E-8D66-6CCCC25F0C25}) (Version: 1.0.2 - Railtraction)
RAPID Mode (Version: 1.0.1.91 - Samsung Electronics Co., Ltd.) Hidden
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 6.4.6.10930 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7634 - Realtek Semiconductor Corp.)
Reinstall DirectX EZ v6.2 (HKLM\...\Reinstall DirectX EZ_is1) (Version:  - AthTek Software)
RemoteFlight Server (HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\99bc7aed10c867fe) (Version: 1.0.0.44 - Inputwish)
REX 4 - Texture Direct - SP5 - Hotfix 1 (HKLM-x32\...\{3C8D0656-F927-4224-95ED-EB637846E7A2}) (Version: 4.5.2015.1006 - REX Game Studios, LLC.)
REX 4 - Texture Direct (SP5)- Soft Cloud (SP2) Add-On - Hotfix (HKLM-x32\...\{5E49DBC3-8568-490F-8D35-41C8DCADB3B7}) (Version: 4.7.2015.1006 - REX Game Studios, LLC.)
RivaTuner Statistics Server 6.4.0 (HKLM-x32\...\RTSS) (Version: 6.4.0 - Unwinder)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version:  - Punk Software)
RW_Tools V6 (HKU\S-1-5-21-1771388258-222888687-2504649837-1000\...\RW_Tools V6) (Version:  - )
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.6 - Samsung Electronics)
Seychelles Photo Real Scenery Pack FSX & P3D (HKLM\...\{F73D2DDD-51CF-451C-AE96-7BAD9DD538F1}) (Version: 1 - Diaphenous)
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.0.80 - NVIDIA Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TaD Premium Pack II (HKLM-x32\...\TaD Premium Pack II) (Version:  - )
The Alpes - Val d'Aosta FSX & P3D (HKLM\...\{79996584-69AE-4D87-926E-B621D8D477C4}) (Version: 1 - Frank Dainese)
TP-LINK TL-WN881ND Driver (HKLM-x32\...\{B512F025-E992-44D0-B1F4-D6E1D3339C80}) (Version: 1.0.0 - TP-LINK)
Train Simulator 2015 (HKLM-x32\...\Steam App 24010) (Version:  - Dovetail Games)
TurboV EVO (HKLM-x32\...\{B171F5F0-3672-44A1-A501-28837F892408}) (Version:  - )
U-Bahn Frankfurt (HKLM-x32\...\{C0097AC1-5754-4B5C-95F5-47881972BA83}) (Version: 1.00.000 - Just Trains)
UKTS Freeware Pack - Blocks-Lofts-Bridges #1 (HKLM-x32\...\{07BB63A6-188D-4447-A0B6-8ED8B2075B81}) (Version: 1.0.9 - UKTrainSim)
UKTS Freeware Pack - Industrial #1 (HKLM-x32\...\{B19E2B7A-745D-4B67-B21B-C97F727F3923}) (Version: 1.0.3 - UKTrainSim)
Uplay (HKLM-x32\...\Uplay) (Version: 6.1 - Ubisoft)
Versystem Soundboard (HKLM-x32\...\VersystemSoundboard) (Version:  - )
VFR Kauai Hawaii X (HKLM-x32\...\VFR Kauai Hawaii X) (Version:  - )
Virtual Rides 2 Version 1.0 (HKLM-x32\...\{A71636CD-637E-4975-B7BF-E2FAF34BD11F}_is1) (Version: 1.0 - rondomedia Marketing & Vertriebs GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Subways 4 – New York Line 7 (HKLM-x32\...\Steam App 343070) (Version:  - TML-Studios)
World of Subways 4 - Remote Announcements (HKLM-x32\...\World of Subways 4 - Remote Announcements 1.5.0) (Version: 1.5.0 - FT Software)
World of Subways 4 - Remote Announcements (x32 Version: 1.5.0 - FT Software) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1771388258-222888687-2504649837-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\TOM WEIGANDT\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\FileCoAuth.exe (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01B83FAD-98F0-465A-987B-37F71A4CE101} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-12] (Google Inc.)
Task: {0889595C-A9F8-4E26-9262-CF67E2579C37} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {0F16D459-053C-40AA-A389-F1674702D9DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0F50C60B-E6E4-4862-9E6A-9FF9F3D47C0C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {111A12F0-5053-446E-B1BE-A2255722B4A0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {15909342-773E-454A-B768-0BD075DE46BC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-12] (Adobe Systems Incorporated)
Task: {17B8736E-8A02-442F-A385-0569069A9ED4} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {1B7BBE05-ED79-49A4-98E0-807E301D448A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {21FD0A07-C243-49B6-B52A-1FEFF2D9056F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {263EAC9B-6961-411B-AB89-926D5D42849B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {30E8FE2D-602C-4DA4-9B51-E157475D6BD5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {34253388-A2B2-4179-A35E-2D56DB6287C5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {3709C4B8-3721-4466-98DC-175DD1A977E4} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3DB84033-AA99-4089-B219-363F12284A26} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {41EAB399-B53C-4AAD-AF10-215F99D9994D} - System32\Tasks\Driver Booster SkipUAC (TOM WEIGANDT) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-11-18] (IObit)
Task: {463D540C-1322-4134-ABCD-FBC50CF6DECB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {55341CD3-A27C-44AF-AC1D-0F240D83DB7F} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-11-18] (IObit)
Task: {5B16D8CF-8AF2-4D59-8431-3467E0D6029E} - System32\Tasks\ASC9_SkipUac_TOM WEIGANDT => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2015-11-23] (IObit)
Task: {5E47CC96-C41B-4F5A-AE60-FE93BBFBE4A2} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {6084F995-00BC-4988-8008-443F8591E1C9} - System32\Tasks\ASUS\ASUS Mobilink Execute => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\ASUS Mobilink.exe [2010-11-25] (ASUSTeK Computer Inc.)
Task: {6B6C276B-CEB8-4977-ADCB-9AB21D5BE83A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {746C3B72-EB73-4F1D-AAF6-A6769AC3DC91} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {7C898F92-F88A-4599-9CF8-8F6C78CB9DC1} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {7CB95267-5876-4F07-9DD9-AF9D11504439} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {7D1BAFD2-9126-4CAC-B5E2-4C33E72E5875} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-11] (Microsoft Corporation)
Task: {87A6315B-12BF-4B08-BEE2-223FBE7DE1E8} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {8EC5BFF0-DCD9-4E16-8110-E6B2678088B2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {9505FE5B-DC58-4EBF-AA9B-0692FCC638DB} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {952B7F8F-35EE-4F3A-B09C-9B97A98B971F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {980FA650-02D1-4DAF-A564-35412EC905FF} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2011-04-13] (ASUSTeK Computer Inc.)
Task: {9A8C6729-9033-4E7C-AB4A-26E7D1E07054} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {BD1CC854-9F5E-41B4-9E6C-0960A06A4C59} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {C2427D63-BEE8-41CA-85BC-3B51A44610E2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C2E7A76E-45AC-4046-BD1E-8012E3693B72} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-12] (Google Inc.)
Task: {CF407B88-8AF1-4A6B-B411-08D969CF4151} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {D48C9800-313E-4310-BB43-BFFDE8B7DDF4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {D537355F-E8F8-452F-A300-436874341212} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {D53A069C-3320-4420-89DB-ECB590F9361D} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {D5610B98-3E11-46FA-89D2-A58B3A2450AE} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2015-04-10] (Samsung Electronics.)
Task: {D7159FE2-1807-411D-871B-1769082A353A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D7C5D3FA-24C8-4DFF-BC8C-6A370F9485D7} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {EA6CE515-7F9D-4B75-993F-ECBE8DE63B21} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {EB1AD969-1072-4F7F-8EEB-0F0016FD950C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {F1D6A214-EB11-46D5-A7CF-2E806E3DD343} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {F5887ED0-3FDA-4559-AC18-B2A8174710AA} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.)
Task: {F59A0E45-75FB-44A4-96DF-F6D7B9476D24} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FACFE464-7DE7-401E-B691-3B6973FB1E27} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\ASC9_SkipUac_TOM WEIGANDT.job => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-02 05:09 - 2015-11-24 20:32 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-06-13 09:36 - 2011-06-13 09:36 - 00922240 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
2010-12-02 03:15 - 2010-12-02 03:15 - 00915584 ____R () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
2015-05-12 15:41 - 2010-10-21 10:52 - 00586880 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
2015-09-23 22:41 - 2015-09-23 22:41 - 00188072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-12-02 03:25 - 2015-11-05 02:43 - 00217904 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-12-03 18:24 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-03 18:24 - 2015-11-22 11:47 - 02653816 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-12-03 18:24 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-11-19 00:43 - 2015-11-19 00:43 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-05-12 23:14 - 2007-09-02 12:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2015-12-03 18:24 - 2015-11-22 10:23 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-03 18:24 - 2015-11-22 10:18 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-03 18:24 - 2015-11-22 10:19 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-03 18:24 - 2015-11-22 10:21 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-11-16 17:55 - 2015-11-16 17:55 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\20a5e2ef95a1a72a33:Win32App
AlternateDataStreams: C:\47ff1218b748655ec4e40c7dd3f793f0:Win32App
AlternateDataStreams: C:\628d46373e7774b98832ff:Win32App
AlternateDataStreams: C:\6c318c00f861be924a81c379eb:Win32App
AlternateDataStreams: C:\8780fc462235fb90e6b2eb5610b7ff67:Win32App
AlternateDataStreams: C:\9ffa367c7c652e7099816ef0650940e0:Win32App
AlternateDataStreams: C:\eaeb1e10e171f8468740d0:Win32App
AlternateDataStreams: C:\Program Files\CCleaner:Win32App_1
AlternateDataStreams: C:\Program Files\Microsoft Silverlight:Win32App_1
AlternateDataStreams: C:\Program Files\Microsoft SQL Server:Win32App_1
AlternateDataStreams: C:\Program Files\WinRAR:Win32App_1
AlternateDataStreams: C:\Program Files (x86)\ASM104xUSB3:Win32App_1
AlternateDataStreams: C:\Program Files (x86)\Bluetooth Suite:Win32App_1
AlternateDataStreams: C:\Program Files (x86)\Microsoft SQL Server:Win32App_1
AlternateDataStreams: C:\Program Files (x86)\RocketDock:Win32App_1
AlternateDataStreams: C:\WINDOWS\My Product Name:Win32App
AlternateDataStreams: C:\WINDOWS\SysWOW64\Adobe:Win32App_1

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1771388258-222888687-2504649837-1000\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 37.152.80.6 - 37.152.80.10
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: lfsvc => 3

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{29E8C817-91BC-4DF2-89C8-DDBCC664D29A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{FAC86C8C-4131-4349-81A0-D3D9D0B902C2}] => (Allow) E:\Steam\steamapps\common\World of Subways 4 – New York Line 7\Bin\x64_Release\WoS4.exe
FirewallRules: [{907E6140-6CAA-4B0C-BF7B-D321118F2BAF}] => (Allow) E:\Steam\steamapps\common\World of Subways 4 – New York Line 7\Bin\x64_Release\WoS4.exe
FirewallRules: [{40B2695E-FE73-47D1-85BE-128405990C39}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
FirewallRules: [{0060D0AC-8BC2-4ABA-BDC8-CEF8691628A6}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
FirewallRules: [{0AD85ED5-B4C1-49E5-9E81-2953BED7851C}] => (Allow) D:\Steam Games\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{AFEBF7B2-DD26-4CAC-8CB4-5D23369DE2F3}] => (Allow) D:\Steam Games\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{6B6AD879-05F6-4E6B-BC7B-221DEB8ED2FB}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
FirewallRules: [{828CCF91-D644-40EF-8F36-9FA4364D830E}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
FirewallRules: [{C7FA2DC7-F48F-4501-8FC0-BE198477D99A}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
FirewallRules: [{5FE9520D-78C9-426B-86DF-F9449B68FB29}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{687CE3AC-908B-4806-820F-AD2120DE0B0E}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{5D301FDE-E514-485E-910C-3E381E040D5B}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{390AD0EF-AFD1-4C0A-843C-6F1673844F51}] => (Allow) E:\Steam\bin\steamwebhelper.exe
FirewallRules: [{FC0387DA-50C8-4A71-A642-F89B58FC5715}] => (Allow) D:\Steam Games\steamapps\common\RailWorks\RailWorks.exe
FirewallRules: [{FA65AE67-EA95-470D-AA84-460BEAB85F21}] => (Allow) D:\Steam Games\steamapps\common\RailWorks\RailWorks.exe
FirewallRules: [{590967FB-FFA8-4D98-AA7B-CB8F10BFD76F}] => (Allow) D:\Steam Games\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{2D192BBD-9A2E-4303-AAE2-80E8B8ED12D3}] => (Allow) D:\Steam Games\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{657B71CD-52FD-4175-8EBA-97C637D71E9D}] => (Allow) D:\Steam Games\steamapps\common\OMSI 2\Omsi.exe
FirewallRules: [{A1C5148A-3A97-4FA7-AE28-8A1A9C90F71A}] => (Allow) D:\Steam Games\steamapps\common\OMSI 2\Omsi.exe
FirewallRules: [{C1AB1CCF-9EAB-4594-887F-7FAB99DF5304}] => (Allow) D:\Steam Games\steamapps\common\NoLimits 2\64bit\nolimits2stm.exe
FirewallRules: [{1D1DD97B-C41A-4825-BAFC-E800BE155CC6}] => (Allow) D:\Steam Games\steamapps\common\NoLimits 2\64bit\nolimits2stm.exe
FirewallRules: [{E9A2BE9D-6700-480F-8E92-0333651F4FFF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{266E39EB-5BFE-4A0B-A606-9B89AF4DA8E4}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{051397E3-3FB1-47F0-AF50-F0DA765B4196}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CD71E025-C3A6-41DB-80DC-6304C67A28CD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1E836C48-2318-45FD-8F7A-278DB13E245F}] => (Allow) LPort=25545
FirewallRules: [{063493E1-3CC4-4105-BBCC-6F36FD758C9B}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{FAAE61A2-439D-41D2-AAC4-05CA892FCE22}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{253D283C-CDBD-416E-97BC-12A998B76807}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{BB3B74DB-B11D-4292-997D-E4B308A9E018}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{47EEE077-9B1B-4EDA-906D-03EA16BDAE19}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{ED0D416D-3066-4365-87A2-3B35D8CBAF16}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{63FA706F-15AF-47B1-AC42-AE4710A0BC71}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CA4F20FF-E417-4487-8C8B-3E810104B433}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{46BC51B2-AD8F-459F-86D0-7CCD0DDAD158}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B8B13ECD-D904-4EDF-8CE0-8724899E388C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{17087593-6E79-4193-8B70-609866B9F59C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{CCF02F05-EBD9-47BD-A9C6-70B28F3FED20}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{538B7298-CC79-4313-BA2C-B9033D1A1175}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB Root Hub
Description: USB Root Hub
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard USB Host Controller)
Service: asmthub3
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: USB Root Hub
Description: USB Root Hub
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard USB Host Controller)
Service: asmthub3
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/04/2015 00:54:58 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 00:32:33 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 00:32:11 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 00:32:11 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 00:32:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 00:32:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 00:31:42 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (12/04/2015 02:09:16 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
.


Vorgang:
   VSS-Server wird instanziiert

Error: (12/04/2015 02:09:16 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} und dem Namen "IVssCoordinatorEx2" kann nicht gestartet werden. [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
]


Vorgang:
   VSS-Server wird instanziiert

Error: (12/04/2015 01:35:54 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TOMWEIGANDT-PC)
Description: Bei der Aktivierung der App „Microsoft.Getstarted_2.5.6.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (12/04/2015 01:16:19 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT-AUTORITÄT)
Description: C:\Device\HarddiskVolume52

Error: (12/04/2015 00:08:29 PM) (Source: Ntfs) (EventID: 55) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "C:" wurde eine Beschädigung erkannt.

In einer Indexstruktur des Dateisystems wurde eine Beschädigung gefunden. Die Dateireferenznummer ist 0x10000000533b9. Der Name der Datei ist "\Users\TOM WEIGANDT\AppData\Local\Temp\Rar$DRa0.863\Wankendorf V2.55_B&R\Wankendorf V2.55_B&R_07.09\Wankendorf V2.55_B&R\Sceneryobjects\Woelchen_90 Objekte - Bus2011_Senzent\Model". Das Attribut des beschädigten Indexes ist ":$I30:$INDEX_ALLOCATION".

Error: (12/04/2015 00:08:29 PM) (Source: Ntfs) (EventID: 55) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "C:" wurde eine Beschädigung erkannt.

In einer Indexstruktur des Dateisystems wurde eine Beschädigung gefunden. Die Dateireferenznummer ist 0x10000000533b9. Der Name der Datei ist "\Users\TOM WEIGANDT\AppData\Local\Temp\Rar$DRa0.863\Wankendorf V2.55_B&R\Wankendorf V2.55_B&R_07.09\Wankendorf V2.55_B&R\Sceneryobjects\Woelchen_90 Objekte - Bus2011_Senzent\Model". Das Attribut des beschädigten Indexes ist ":$I30:$INDEX_ALLOCATION".

Error: (12/04/2015 00:08:29 PM) (Source: Ntfs) (EventID: 55) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "C:" wurde eine Beschädigung erkannt.

In einer Indexstruktur des Dateisystems wurde eine Beschädigung gefunden. Die Dateireferenznummer ist 0x10000000533b9. Der Name der Datei ist "\Users\TOM WEIGANDT\AppData\Local\Temp\Rar$DRa0.863\Wankendorf V2.55_B&R\Wankendorf V2.55_B&R_07.09\Wankendorf V2.55_B&R\Sceneryobjects\Woelchen_90 Objekte - Bus2011_Senzent\Model". Das Attribut des beschädigten Indexes ist ":$I30:$INDEX_ALLOCATION".

Error: (12/04/2015 11:42:15 AM) (Source: Ntfs) (EventID: 55) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "C:" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen online überprüft werden.

Error: (12/04/2015 11:30:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/04/2015 11:30:43 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate) erreicht.

Error: (12/04/2015 11:27:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LiveUpdateSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/04/2015 11:27:52 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LiveUpdateSvc erreicht.

Error: (12/04/2015 11:27:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


CodeIntegrity:
===================================
  Date: 2015-12-04 13:13:14.493
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:14.415
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:14.352
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:14.274
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:14.211
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:14.149
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:14.055
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:13.993
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:13.883
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-04 13:13:13.821
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-2700K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 32735.14 MB
Verfügbarer physikalischer RAM: 24363.48 MB
Summe virtueller Speicher: 32735.14 MB
Verfügbarer virtueller Speicher: 24623.23 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:1396.82 GB) (Free:1303.78 GB) NTFS
Drive d: () (Fixed) (Total:209.59 GB) (Free:91.07 GB) NTFS
Drive e: () (Fixed) (Total:59.62 GB) (Free:34.21 GB) NTFS
Drive f: (Volume) (Fixed) (Total:100.51 GB) (Free:58.51 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: B56AD2C3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B56AD2BB)
Partition 1: (Not Active) - (Size=209.6 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 59.6 GB) (Disk ID: B56AD2C7)
Partition 1: (Not Active) - (Size=59.6 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: B56AD2C8)
Partition 1: (Not Active) - (Size=1396.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

==================== Ende von Addition.txt ============================
         

--- --- ---


@Schrauber Hast einen Rat oder irgendwas gefunden? :-)

hi,

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Hallo, hab alles gemacht, wie beschrieben. No threats found!! :-)

Bitte Windows Repair laufen lassen:
Windows reparieren - so geht's - Anleitungen