| |
| |||||||
Log-Analyse und Auswertung: Browser Hijacker yoursites123.com - wie entfernen?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
09.12.2015, 20:14
| #1 |
 |  Browser Hijacker yoursites123.com - wie entfernen? Hallo miteinander, im PCGH-X wurde ich mit meiner Malware auf dieses Board verwiesen. Ich wurde heute beim Öffnen meines Chrome von einer Internetseite namens hxxp://www.yoursites123.com/ begrüßt, deren optisches Erscheinungsbild offensichtlich Google nachgeahmt ist. In der Adresszeile befinden sich Hardwaredaten meines Computers, u.a. uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 , also meine SSD. Die Seite hat sich als Standardsuchmaschine und Homepage eingestellt. Also hab ich die Einstellungen zurückgesetzt und alle Erweiterungen deinstalliert, beim nächsten Start bestand das Problem jedoch fort. Nach Deinstallation von Chrome musste ich feststellen dass es ebenfalls bei Mozilla, Internet Explorer und Edge auftritt. Also vollständiger Systemscan mit Bitdefender 2015, jedoch nichts gefunden. Wie werde ich das Scheißteil los? Ich hab echt keine Lust mein Windows schon wieder neu aufzusetzen. Eine Googlesuche ergab viele erst heute online gegangene Internetseiten mit angeblichen Tools zur Entfernung. Die Seiten erscheinen jedoch alle sehr dubios und sind grauenhaft übersetzt, und ich hab die Vermutung, dass die Schadsoftware meine Suchergebnisse manipuliert um einen Virus zu installieren. Ach ja, wenn ich einen Text zum Kopieren markiere, so wird nun nur noch der Text selbst markiert, nicht mehr die Leerzeichen rechts und zwischen den Zeilen, das ist mir noch aufgefallen. Ach ja, es gibt Kekse für jeden Porno den ihr findet!   Hier die Logs von FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-12-2015 durchgeführt von Philipp (Administrator) auf DESKTOP-ET8PTI7 (09-12-2015 19:49:00) Gestartet von C:\Users\Philipp\Downloads Geladene Profile: Philipp (Verfügbare Profile: Philipp) Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: IE) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (tsvr.com) C:\Users\Philipp\AppData\Roaming\TSv\TSvr.exe () C:\Windows\System32\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe (TFuns LIMITED) C:\ProgramData\4WdM4\WdMan.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (CMedia) C:\Program Files\UNi Xonar Audio\Customapp\AsusAudioCenter.exe () C:\Windows\syswow64\HsMgr.exe () C:\Windows\System\HsMgr64.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwtxapps.exe (CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Corsair Components, Inc.) C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\seccenter.exe (Almico Software (almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamresearch.exe () D:\Program Files (x86)\War Thunder\aces.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-07-30] (Realtek Semiconductor) HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cmicnfgp.dll,CMICtrlWnd HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2008-07-11] () HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2008-07-11] () HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1683920 2015-11-26] (Bitdefender) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2757424 2015-11-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation) HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe [12844864 2015-08-28] (Corsair Components, Inc.) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-10-05] (Malwarebytes) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638768 2015-12-02] (Electronic Arts) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Bitdefender-Geldb�rse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1416608 2015-11-26] (Bitdefender) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 5\CyberGhost.exe [433256 2015-11-05] (CyberGhost S.R.L.) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Spotify] => C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe [8270448 2015-12-02] (Spotify Ltd) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Spotify Web Helper] => C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2345584 2015-12-02] (Spotify Ltd) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64" Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-12-09] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Keine Datei) Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2015-12-09] ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (almico.com)) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\..\Interfaces\{1a8bcf1b-3f11-48dd-b499-59c15f0f407f}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} SearchScopes: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms} BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-11-02] (Bitdefender) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-10-24] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation) BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2015-11-02] (Bitdefender) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-11-14] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-11-14] (Oracle Corporation) Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-11-02] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2015-11-02] (Bitdefender) Toolbar: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-11-02] (Bitdefender) StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139 FireFox: ======== FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ur5ahyz4.default FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-11-14] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-11-14] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-05] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-05] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-08] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-08] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\bdwteff [2015-09-17] [ist nicht signiert] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-09-17] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-09-17] [ist nicht signiert] FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext Chrome: ======= CHR Profile: C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2015-11-08] CHR Extension: (Google Slides) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-08] CHR Extension: (Magic Actions for YouTube™) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-11-08] CHR Extension: (Google Docs) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-08] CHR Extension: (Google Drive) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-08] CHR Extension: (YouTube) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-08] CHR Extension: (Google Search) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-08] CHR Extension: (Bitdefender Wallet) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhhejlifdlcgcmogbggeomfodgklfaem [2015-11-08] CHR Extension: (Google Sheets) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-08] CHR Extension: (Google Docs Offline) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17] CHR Extension: (AdBlock) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-04] CHR Extension: (pr0gramm-comments.user.js) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\hihbofocfgdhnannhjkefnagopofgjhk [2015-11-23] CHR Extension: (Reddit Enhancement Suite) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2015-11-14] CHR Extension: (Chrome Web Store Payments) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-08] CHR Extension: (Gmail) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-08] CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-02] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2015-08-26] () R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2015-08-21] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [857288 2015-11-09] (Bitdefender) R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [Datei ist nicht signiert] R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [124488 2015-10-05] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1595864 2015-11-26] (Bitdefender) R2 WdMan; C:\ProgramData\4WdM4\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Datei ist nicht signiert] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1600512 2015-11-02] (BitDefender) R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [282000 2015-11-02] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [775424 2015-11-02] (BitDefender) S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2015-11-02] (Bitdefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2015-10-05] (BitDefender LLC) S4 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [87920 2015-11-26] (BitDefender) R3 cmudaxp; C:\Windows\system32\drivers\cmudaxp.sys [2735616 2013-12-11] (C-Media Inc) R3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [47840 2015-07-06] (Corsair) R3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21728 2015-07-06] (Corsair) U0 dqaxm; C:\Windows\System32\drivers\elfley.sys [79064 2015-12-09] (Malwarebytes) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160032 2015-04-29] (BitDefender LLC) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2015-10-23] (REALiX(tm)) R0 ignis; C:\Windows\system32\DRIVERS\ignis.sys [271808 2015-11-02] (Bitdefender) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-09] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 mt7612US; C:\Windows\System32\drivers\mt7612US.sys [376840 2015-10-28] (MediaTek Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-12] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2015-07-24] (Windows (R) Win 7 DDK provider) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation) U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [84792 2015-09-19] (Sysinternals - www.sysinternals.com) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [477272 2015-06-02] (BitDefender S.R.L.) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S1 BdfNdisf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [X] S3 vpnva; \SystemRoot\System32\drivers\vpnva64-6.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-12-09 19:49 - 2015-12-09 19:49 - 00026277 _____ C:\Users\Philipp\Downloads\FRST.txt 2015-12-09 19:48 - 2015-12-09 19:49 - 00000000 ____D C:\FRST 2015-12-09 19:47 - 2015-12-09 19:48 - 02369024 _____ (Farbar) C:\Users\Philipp\Downloads\FRST64.exe 2015-12-09 19:44 - 2015-12-09 19:44 - 00079064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\elfley.sys 2015-12-09 19:44 - 2015-12-09 19:44 - 00001183 _____ C:\Users\Philipp\Desktop\1.txt 2015-12-09 19:37 - 2015-12-09 19:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-12-09 19:37 - 2015-12-09 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-12-09 19:37 - 2015-12-09 19:37 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-12-09 19:37 - 2015-12-09 19:37 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-12-09 19:37 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-12-09 19:37 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-12-09 19:37 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2015-12-09 19:36 - 2015-12-09 19:37 - 22908888 _____ (Malwarebytes ) C:\Users\Philipp\Downloads\mbam-setup-2.2.0.1024.exe 2015-12-09 19:22 - 2015-12-09 19:22 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-ET8PTI7_Philipp_HistoryPrediction.bin 2015-12-09 19:19 - 2015-12-09 19:19 - 00422969 _____ C:\Users\Philipp\Desktop\hmI_07_MLW.pdf 2015-12-09 15:01 - 2015-12-09 15:01 - 00422969 _____ C:\Users\Philipp\Downloads\hmI_07_MLW.pdf 2015-12-09 11:56 - 2015-12-09 11:56 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Philipp\Downloads\SpyHunter-installer.exe 2015-12-09 11:53 - 2015-12-09 11:54 - 00000000 ____D C:\ProgramData\4WdM4 2015-12-09 11:53 - 2015-12-09 11:53 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TSv 2015-12-09 11:52 - 2015-12-09 11:52 - 00000376 _____ C:\WINDOWS\SysWOW64\data.bin 2015-12-09 11:52 - 2015-12-09 11:52 - 00000042 _____ C:\WINDOWS\SysWOW64\Z 2015-12-09 11:52 - 2015-12-09 11:52 - 00000000 ____D C:\ProgramData\HWdMH 2015-12-08 19:12 - 2015-12-08 19:12 - 00000000 ___HD C:\$WINDOWS.~BT 2015-12-08 15:35 - 2015-12-08 15:35 - 00003794 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2015-12-08 11:42 - 2015-12-08 11:42 - 01194647 _____ C:\Users\Philipp\Desktop\BlissfulMintyAdmiralbutterfly.webm 2015-12-07 19:51 - 2015-12-07 19:51 - 01774232 _____ C:\Users\Philipp\Downloads\Zeugnis *****.pdf 2015-12-07 17:48 - 2015-12-07 17:48 - 00025128 _____ C:\ProgramData\1449506890.bdinstall.bin 2015-12-07 17:33 - 2015-12-07 17:33 - 00265550 _____ C:\Users\Philipp\Desktop\rvICjPc.webm 2015-12-07 16:44 - 2015-12-07 16:46 - 00000000 ____D C:\Users\Philipp\Downloads\ضربات صقور القوة الجوية بمقاتلات F16 2015-12-07 14:23 - 2015-12-07 14:32 - 567854937 _____ C:\Users\Philipp\Downloads\daa3d1 cd1.mp4 2015-12-06 23:52 - 2015-12-06 23:52 - 00000000 ____D C:\Users\Philipp\Downloads\DeusVisualizer v1.01 2015-12-06 22:51 - 2015-12-06 22:52 - 15343945 _____ C:\Users\Philipp\Downloads\DeusVisualizer v1.01.zip 2015-12-05 13:34 - 2015-12-07 15:02 - 00000000 ____D C:\Users\Philipp\Downloads\Deep Anal Abyss 5 Scene 2 2015-12-05 02:12 - 2015-12-05 13:26 - 00000000 ____D C:\Users\Philipp\Downloads\Deep Anal Abyss 5 Scene 4 2015-12-03 16:15 - 2015-12-03 16:15 - 00404024 _____ C:\Users\Philipp\Downloads\hmI_06_MLW.pdf 2015-11-30 18:38 - 2015-11-30 19:31 - 645605753 _____ C:\Users\Philipp\Downloads\GER Skinpack.zip 2015-11-30 18:36 - 2015-11-30 18:36 - 11069738 _____ C:\Users\Philipp\Downloads\Flakpanzer_IV_Wirbelwind.zip 2015-11-30 15:25 - 2015-11-30 15:25 - 00100734 _____ C:\Users\Philipp\Downloads\abschluss21-103-74-86-10511017-27-90-124-15-72-100-50-4096.pdf 2015-11-30 15:18 - 2015-11-30 15:18 - 01187039 _____ C:\Users\Philipp\Downloads\Abiturzeugnis.pdf 2015-11-26 21:53 - 2015-11-26 21:54 - 00010943 _____ C:\Users\Philipp\Documents\Stundenplan.xlsx 2015-11-26 17:50 - 2015-11-26 17:50 - 00000000 ____D C:\Users\Philipp\Downloads\1 2015-11-26 17:46 - 2015-11-26 17:46 - 00000000 ____D C:\Users\Philipp\Downloads\ReShade_1.0_with_SweetFX_2.0_Beta_8 2015-11-26 14:04 - 2015-11-26 14:04 - 00396596 _____ C:\Users\Philipp\Downloads\hmI_05_MLW.pdf 2015-11-26 13:48 - 2015-11-26 13:48 - 01949837 _____ C:\Users\Philipp\Downloads\20151116_IuF_ONLINE.pdf 2015-11-26 13:35 - 2015-11-26 13:35 - 00521831 _____ C:\Users\Philipp\Downloads\Kapitel05.pdf 2015-11-26 11:37 - 2015-11-26 11:38 - 23470559 _____ C:\Users\Philipp\Downloads\Fallout_4_ReShade_2.0.1.rar 2015-11-26 11:34 - 2015-11-26 11:34 - 00029730 _____ C:\Users\Philipp\Downloads\SweetFX_Settings_Fallout 4_Mango's Config - A 1.0.txt 2015-11-24 11:24 - 2015-11-24 11:24 - 00419407 _____ C:\Users\Philipp\Downloads\hmI_tb04.pdf 2015-11-23 17:54 - 2015-11-23 17:55 - 38378909 _____ C:\Users\Philipp\Downloads\2014_CHEVY_IMPALA___IMPA_V1.4RX.zip 2015-11-23 16:00 - 2015-11-23 16:01 - 10491931 _____ C:\Users\Philipp\Downloads\Ford Police Interceptor 2012 V1.3.rar 2015-11-23 15:39 - 2015-11-23 15:39 - 08686465 _____ C:\Users\Philipp\Downloads\2010 LAPD Charger.rar 2015-11-23 00:12 - 2015-11-23 00:12 - 00000450 _____ C:\Users\Philipp\Downloads\pr0gramm-comments.user.js 2015-11-22 18:15 - 2015-11-12 19:37 - 00112712 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2015-11-21 10:40 - 2015-11-21 10:40 - 00324525 _____ C:\Users\Philipp\Downloads\Blatt4_Sol.pdf 2015-11-20 16:09 - 2015-11-20 16:09 - 00468921 _____ C:\Users\Philipp\Downloads\Kapitel04.pdf 2015-11-18 22:03 - 2015-11-18 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer Red Alert 2 2015-11-18 22:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2015-11-18 22:03 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2015-11-18 22:03 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2015-11-18 22:03 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2015-11-18 22:03 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2015-11-18 22:03 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2015-11-18 22:03 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2015-11-18 22:03 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2015-11-18 22:03 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2015-11-18 22:03 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2015-11-18 22:03 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2015-11-18 22:03 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2015-11-18 22:03 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2015-11-18 22:03 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2015-11-18 22:03 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2015-11-18 22:03 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2015-11-18 22:03 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2015-11-18 22:03 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2015-11-18 22:03 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2015-11-18 22:03 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2015-11-18 22:03 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2015-11-18 22:03 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2015-11-18 22:03 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2015-11-18 22:03 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2015-11-18 22:03 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2015-11-18 22:03 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2015-11-18 22:03 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2015-11-18 22:03 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2015-11-18 22:03 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2015-11-18 22:03 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2015-11-18 22:03 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2015-11-18 22:03 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2015-11-18 22:03 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2015-11-18 22:03 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2015-11-18 22:03 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2015-11-18 22:03 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2015-11-18 22:03 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2015-11-18 22:03 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2015-11-18 22:03 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2015-11-18 22:03 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2015-11-18 22:03 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2015-11-18 22:03 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2015-11-18 22:03 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2015-11-18 22:03 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2015-11-18 22:03 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2015-11-18 22:03 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2015-11-18 22:03 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2015-11-18 22:03 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2015-11-18 22:03 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2015-11-18 22:03 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2015-11-18 22:03 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2015-11-18 22:03 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2015-11-18 22:03 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2015-11-18 22:03 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2015-11-18 22:03 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2015-11-18 22:03 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2015-11-18 22:03 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2015-11-18 22:03 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2015-11-18 22:03 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2015-11-18 22:03 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2015-11-18 22:03 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2015-11-18 22:03 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2015-11-18 22:03 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2015-11-18 22:03 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2015-11-18 22:03 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2015-11-18 22:03 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2015-11-18 22:03 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2015-11-18 22:03 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2015-11-18 22:03 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2015-11-18 22:03 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2015-11-18 22:03 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2015-11-18 22:03 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2015-11-18 22:03 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2015-11-18 22:03 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2015-11-18 22:03 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2015-11-18 22:03 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2015-11-18 22:03 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2015-11-18 20:24 - 2015-11-18 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair Utility Engine 2015-11-18 20:24 - 2015-11-18 20:24 - 00000000 ____D C:\Program Files (x86)\Corsair 2015-11-17 18:56 - 2015-11-17 18:56 - 00423189 _____ C:\Users\Philipp\Downloads\hmI_04_MLW.pdf 2015-11-17 11:34 - 2015-11-17 11:34 - 00682531 _____ C:\Users\Philipp\Downloads\IuF_Übung_1_L_Korrektur.pdf 2015-11-17 11:34 - 2015-11-17 11:34 - 00369610 _____ C:\Users\Philipp\Downloads\Blatt2_Sol-Korrektur.pdf 2015-11-17 11:34 - 2015-11-17 11:34 - 00325081 _____ C:\Users\Philipp\Downloads\Blatt3_Sol.pdf 2015-11-17 11:33 - 2015-11-17 11:33 - 00286170 _____ C:\Users\Philipp\Downloads\Vorlesung3_Rentenrechnung.pdf 2015-11-17 11:33 - 2015-11-17 11:33 - 00265945 _____ C:\Users\Philipp\Downloads\Finanzmathematik - Vorlesung 2.pdf 2015-11-16 20:47 - 2015-11-16 20:47 - 00000000 ____D C:\Users\Philipp\AppData\Local\Microsoft Help 2015-11-16 19:28 - 2015-12-09 19:44 - 00001160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk 2015-11-16 19:28 - 2015-11-16 19:29 - 00000000 ____D C:\Users\Philipp\AppData\Local\paint.net 2015-11-16 19:28 - 2015-11-16 19:28 - 00000000 ____D C:\Program Files\paint.net 2015-11-16 19:25 - 2015-11-16 19:25 - 06557455 _____ C:\Users\Philipp\Downloads\paint.net.4.0.6.install.zip 2015-11-16 19:08 - 2015-11-16 19:09 - 00000000 ____D C:\Users\Philipp\Desktop\Praktikum 2015-11-15 13:26 - 2015-12-09 19:44 - 00001158 _____ C:\Users\Philipp\Desktop\Cheat Engine.lnk 2015-11-15 13:26 - 2015-11-15 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4 2015-11-15 13:26 - 2015-11-15 13:26 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.4 2015-11-14 16:34 - 2015-11-14 16:34 - 03157155 _____ C:\Users\Philipp\Downloads\Philipp1.pdf 2015-11-14 15:35 - 2015-11-14 15:35 - 00000000 ____D C:\Program Files (x86)\Java 2015-11-12 22:04 - 2015-11-05 15:41 - 00102520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2015-11-12 22:03 - 2015-11-05 18:00 - 42914096 _____ C:\WINDOWS\system32\nvcompiler.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 37882160 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 22343800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 18389112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 16561320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 13533608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 02876720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 02496632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 01905456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435891.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435891.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 01016360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 01013960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00877688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00820672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00674096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00601240 _____ C:\WINDOWS\system32\nvmcumd.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00539648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00500872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00446768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00445216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00422568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00414000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00369456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00155792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2015-11-12 22:03 - 2015-11-05 18:00 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2015-11-11 18:15 - 2015-11-05 06:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-11-11 18:15 - 2015-11-05 06:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2015-11-11 18:15 - 2015-11-05 06:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys 2015-11-11 18:15 - 2015-11-05 06:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2015-11-11 18:15 - 2015-11-05 06:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2015-11-11 18:15 - 2015-11-05 06:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-11-11 18:15 - 2015-11-05 06:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2015-11-11 18:15 - 2015-11-05 06:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2015-11-11 18:15 - 2015-11-05 05:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2015-11-11 18:15 - 2015-11-05 05:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2015-11-11 18:15 - 2015-11-05 05:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2015-11-11 18:15 - 2015-11-05 05:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2015-11-11 18:15 - 2015-11-05 05:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-11-11 18:15 - 2015-11-05 05:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2015-11-11 18:15 - 2015-11-05 05:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2015-11-11 18:15 - 2015-11-05 05:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-11-11 18:15 - 2015-11-05 05:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-11-11 18:15 - 2015-11-05 05:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2015-11-11 18:15 - 2015-11-05 05:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2015-11-11 18:15 - 2015-11-05 05:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2015-11-11 18:15 - 2015-11-05 05:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll 2015-11-11 18:15 - 2015-11-05 05:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2015-11-11 18:15 - 2015-11-05 05:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-11-11 18:15 - 2015-11-05 05:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2015-11-11 18:15 - 2015-11-05 05:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-11-11 18:15 - 2015-11-05 05:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2015-11-11 18:15 - 2015-11-05 05:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-11-11 18:15 - 2015-11-05 05:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-11-11 18:15 - 2015-11-05 05:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-11-11 18:15 - 2015-11-05 05:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2015-11-11 18:15 - 2015-11-05 05:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-11-11 18:15 - 2015-11-05 05:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2015-11-11 18:15 - 2015-11-05 05:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2015-11-11 18:15 - 2015-11-05 04:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-11-11 18:15 - 2015-11-05 04:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2015-11-11 18:15 - 2015-11-05 04:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-11-11 18:15 - 2015-11-05 04:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2015-11-11 18:15 - 2015-11-05 04:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-11-11 18:15 - 2015-11-05 04:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2015-11-11 18:15 - 2015-11-05 04:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2015-11-11 18:15 - 2015-11-05 04:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-11-11 18:15 - 2015-11-05 04:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2015-11-11 18:15 - 2015-11-05 04:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-11-11 18:15 - 2015-11-05 04:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-11-11 18:15 - 2015-11-05 04:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2015-11-11 18:15 - 2015-11-05 04:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2015-11-11 18:15 - 2015-11-05 04:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-11-11 18:15 - 2015-11-05 04:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-11-11 18:15 - 2015-11-05 04:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-11-11 18:15 - 2015-11-05 04:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-11-11 18:15 - 2015-11-05 04:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2015-11-11 18:15 - 2015-11-05 04:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2015-11-11 18:15 - 2015-11-05 04:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2015-11-10 14:53 - 2015-11-10 14:53 - 00559220 _____ C:\Users\Philipp\Downloads\EWS Aushang.pdf 2015-11-10 14:52 - 2015-11-10 14:52 - 01264506 _____ C:\Users\Philipp\Downloads\Kapitel2_3.pdf 2015-11-10 11:29 - 2015-11-10 11:29 - 00508796 _____ C:\Users\Philipp\Downloads\hmI_tb02.pdf 2015-11-10 11:29 - 2015-11-10 11:29 - 00390555 _____ C:\Users\Philipp\Downloads\hmI_tb01 (1).pdf 2015-11-10 08:30 - 2015-11-10 08:30 - 00000000 ____D C:\Users\Philipp\AppData\Local\Fallout4 2015-11-09 18:39 - 2015-11-09 18:39 - 00000222 _____ C:\Users\Philipp\Desktop\Fallout 4.url ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-12-09 19:48 - 2015-07-30 17:04 - 00000000 ____D C:\Windows 2015-12-09 19:45 - 2015-07-30 16:40 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Spotify 2015-12-09 19:45 - 2015-07-30 16:21 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-09 19:44 - 2015-11-08 20:55 - 00002197 _____ C:\Users\Philipp\Desktop\JDownloader 2.lnk 2015-12-09 19:44 - 2015-10-29 17:58 - 00001447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-12-09 19:44 - 2015-10-29 17:58 - 00001378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-12-09 19:44 - 2015-10-26 14:03 - 00000690 _____ C:\Users\Public\Desktop\FIFA 15.lnk 2015-12-09 19:44 - 2015-10-24 12:25 - 00001081 _____ C:\Users\Philipp\Desktop\Eclipse Java Mars.lnk 2015-12-09 19:44 - 2015-10-20 06:02 - 00001099 _____ C:\Users\Philipp\Desktop\RAGEPluginHook.exe - Shortcut.lnk 2015-12-09 19:44 - 2015-10-19 19:08 - 00001308 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk 2015-12-09 19:44 - 2015-10-19 19:08 - 00001306 _____ C:\Users\Philipp\Desktop\OpenIV.lnk 2015-12-09 19:44 - 2015-10-19 16:45 - 00000750 _____ C:\Users\Public\Desktop\Grand Theft Auto V.lnk 2015-12-09 19:44 - 2015-10-05 15:21 - 00002646 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-12-09 19:44 - 2015-09-20 18:57 - 00002246 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk 2015-12-09 19:44 - 2015-07-31 12:14 - 00000765 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\A0001.lnk 2015-12-09 19:44 - 2015-07-31 12:13 - 00000480 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Musik (F).lnk 2015-12-09 19:44 - 2015-07-31 12:13 - 00000479 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lokaler Datenträger (C).lnk 2015-12-09 19:44 - 2015-07-31 12:13 - 00000437 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spiele (D).lnk 2015-12-09 19:44 - 2015-07-31 12:13 - 00000431 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lokaler Datenträger (E).lnk 2015-12-09 19:44 - 2015-07-30 18:54 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-12-09 19:44 - 2015-07-30 17:16 - 00001209 _____ C:\Users\Philipp\Desktop\War Thunder.lnk 2015-12-09 19:44 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\ELAMBKUP 2015-12-09 19:44 - 2015-07-30 16:42 - 00001846 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2015-12-09 19:44 - 2015-07-30 16:18 - 00002393 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-12-09 19:44 - 2015-07-10 12:01 - 00002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk 2015-12-09 19:44 - 2015-07-10 12:01 - 00002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk 2015-12-09 19:44 - 2015-07-10 12:01 - 00002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Devices Flow.lnk 2015-12-09 19:44 - 2015-07-10 12:00 - 00002325 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk 2015-12-09 19:44 - 2015-07-10 12:00 - 00001590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk 2015-12-09 19:44 - 2015-07-10 12:00 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk 2015-12-09 19:33 - 2015-07-30 17:06 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-09 19:28 - 2015-07-30 17:11 - 00771100 _____ C:\WINDOWS\system32\perfh007.dat 2015-12-09 19:28 - 2015-07-30 17:11 - 00153964 _____ C:\WINDOWS\system32\perfc007.dat 2015-12-09 19:28 - 2015-07-30 17:08 - 00000000 ____D C:\WINDOWS\INF 2015-12-09 19:28 - 2015-07-30 16:21 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-09 19:25 - 2015-08-30 16:14 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2015-12-09 19:23 - 2015-09-20 18:51 - 00000000 ____D C:\Program Files\Bitdefender Agent 2015-12-09 19:23 - 2015-07-30 16:42 - 00000000 ____D C:\Users\Philipp\AppData\Local\Spotify 2015-12-09 19:23 - 2015-07-30 16:40 - 00000000 ____D C:\ProgramData\Origin 2015-12-09 19:22 - 2015-07-30 17:04 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-12-09 19:22 - 2015-07-30 16:30 - 00000000 ____D C:\Program Files (x86)\Steam 2015-12-09 19:22 - 2015-07-30 16:21 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-09 19:22 - 2015-07-30 16:14 - 00000000 ____D C:\ProgramData\NVIDIA 2015-12-09 19:22 - 2015-07-30 16:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-12-09 19:21 - 2015-07-30 15:45 - 00034266 _____ C:\bdlog.txt 2015-12-09 19:20 - 2015-07-30 17:09 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2015-12-09 18:38 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-09 18:33 - 2015-07-30 17:09 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-09 18:30 - 2015-07-30 11:50 - 00000000 ___RD C:\Users\Philipp\OneDrive 2015-12-09 14:28 - 2015-07-30 21:30 - 00000000 ____D C:\Users\Philipp\Documents\Outlook-Dateien 2015-12-09 11:53 - 2015-11-08 20:52 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 2015-12-09 07:54 - 2015-09-18 13:15 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\vlc 2015-12-08 22:35 - 2015-07-30 16:46 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TS3Client 2015-12-08 21:46 - 2015-07-30 23:28 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe 2015-12-08 21:01 - 2015-07-30 23:28 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0 2015-12-08 20:40 - 2015-07-30 16:21 - 00004208 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-08 20:40 - 2015-07-30 16:21 - 00003976 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-08 19:14 - 2015-07-30 17:12 - 00000000 ___DC C:\WINDOWS\Panther 2015-12-08 18:26 - 2015-09-15 23:38 - 00004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{97561899-E9AD-4A43-B7E0-2ACA28AA10FA} 2015-12-08 01:28 - 2015-11-08 20:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\JDownloader v2.0 2015-12-07 19:28 - 2015-07-30 17:04 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM 2015-12-06 20:36 - 2015-08-04 23:09 - 00000000 ____D C:\Users\Philipp\AppData\Local\CyberGhost 2015-12-06 20:36 - 2015-07-30 16:17 - 00000000 ____D C:\Users\Philipp\AppData\Local\VirtualStore 2015-12-03 22:41 - 2015-08-06 19:17 - 00000080 _____ C:\Users\Philipp\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2015-12-02 01:10 - 2015-07-30 16:37 - 00000000 ____D C:\Users\Philipp\AppData\Local\Steam 2015-12-02 01:03 - 2015-07-30 16:40 - 00000000 ____D C:\Program Files (x86)\Origin 2015-11-30 15:05 - 2015-07-30 16:16 - 00000000 ____D C:\Users\Philipp\AppData\Local\Packages 2015-11-26 19:35 - 2015-09-20 18:57 - 00087920 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys 2015-11-22 18:15 - 2015-10-08 14:17 - 00000000 ____D C:\Users\Philipp\AppData\Local\NVIDIA Corporation 2015-11-17 19:16 - 2015-10-21 19:28 - 00010973 _____ C:\Users\Philipp\Desktop\Stundenplan.xlsx 2015-11-16 00:16 - 2015-07-30 16:16 - 00000000 ____D C:\Users\Philipp 2015-11-14 15:46 - 2015-10-24 12:17 - 00000000 ____D C:\ProgramData\Oracle 2015-11-14 15:35 - 2015-10-24 12:17 - 00000000 ____D C:\Users\Philipp\.oracle_jre_usage 2015-11-14 15:35 - 2015-10-24 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-11-14 15:35 - 2015-10-24 12:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2015-11-13 19:05 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\rescache 2015-11-12 22:04 - 2015-10-08 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-11-12 22:04 - 2015-07-30 16:14 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-11-12 21:57 - 2015-10-22 15:55 - 00000000 ____D C:\ProgramData\Cisco 2015-11-12 21:57 - 2015-10-22 15:55 - 00000000 ____D C:\Program Files (x86)\Cisco 2015-11-12 21:54 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-11-12 19:37 - 2015-10-08 14:17 - 01828160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2015-11-12 19:37 - 2015-10-08 14:17 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2015-11-12 19:37 - 2015-10-08 14:17 - 01509824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2015-11-12 19:37 - 2015-10-08 14:17 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2015-11-11 18:28 - 2015-08-12 10:28 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-11-11 18:25 - 2015-08-12 10:28 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-11-11 12:27 - 2015-08-04 23:07 - 00000000 ____D C:\Program Files\CyberGhost 5 2015-11-10 08:30 - 2015-07-30 16:47 - 00000000 ____D C:\Users\Philipp\Documents\My Games ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-09-20 18:57 - 2015-09-20 18:57 - 0421166 _____ () C:\ProgramData\1442771734.bdinstall.bin 2015-10-01 12:38 - 2015-10-01 12:38 - 0429709 _____ () C:\ProgramData\1443699314.bdinstall.bin 2015-10-05 19:53 - 2015-10-05 19:53 - 0024812 _____ () C:\ProgramData\1444071187.bdinstall.bin 2015-10-19 14:46 - 2015-10-19 14:46 - 0092151 _____ () C:\ProgramData\1445262410.bdinstall.bin 2015-12-07 17:48 - 2015-12-07 17:48 - 0025128 _____ () C:\ProgramData\1449506890.bdinstall.bin 2015-11-08 20:52 - 2015-12-09 11:53 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Einige Dateien in TEMP: ==================== C:\Users\Philipp\AppData\Local\Temp\130914858501780547.exe C:\Users\Philipp\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Philipp\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Philipp\AppData\Local\Temp\nvStInst.exe C:\Users\Philipp\AppData\Local\Temp\proxy_vole5770445873370605829.dll C:\Users\Philipp\AppData\Local\Temp\sfamcc00001.dll C:\Users\Philipp\AppData\Local\Temp\sfareca00001.dll C:\Users\Philipp\AppData\Local\Temp\sfextra.dll C:\Users\Philipp\AppData\Local\Temp\sonarinst.exe C:\Users\Philipp\AppData\Local\Temp\VersionTmp.exe Einige mit null Byte Größe Dateien/Ordner: ========================== C:\Windows\System32\BDSandBoxUISkin32.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-12-08 19:11 ==================== Ende von FRST.txt ============================ Geändert von Redbull0329 (09.12.2015 um 21:06 Uhr) |
|
09.12.2015, 20:19
| #2 |
| | Browser Hijacker yoursites123.com - wie entfernen? Hier die Logs von FRST:
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-12-2015
durchgeführt von Philipp (2015-12-09 19:49:20)
Gestartet von C:\Users\Philipp\Downloads
Windows 10 Home (X64) (2015-07-30 15:16:56)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-4170469713-2190753842-1125926178-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4170469713-2190753842-1125926178-503 - Limited - Disabled)
Gast (S-1-5-21-4170469713-2190753842-1125926178-501 - Limited - Disabled)
Philipp (S-1-5-21-4170469713-2190753842-1125926178-1001 - Administrator - Enabled) => C:\Users\Philipp
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\uTorrent) (Version: 3.4.5.41162 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.6.2.40658 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.18.1035 - Bitdefender)
Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.18.1037 - Bitdefender)
Bloodbath Kavkaz (HKLM-x32\...\Steam App 348020) (Version: - Dagestan Technology)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Corsair Utility Engine (HKLM-x32\...\{791216E9-E76E-4C76-9C6E-C968A8C253D9}) (Version: 1.10.67 - Corsair)
CPUID CPU-Z 1.72.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version: - )
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Hacker Evolution (HKLM-x32\...\Steam App 70100) (Version: - exosyphen studios)
HWiNFO64 Version 5.06 (HKLM\...\HWiNFO64_is1) (Version: 5.06 - Martin Malík - REALiX)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Java SE Development Kit 8 Update 66 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180660}) (Version: 8.0.660.17 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version: - Konami Digital Entertainment)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.91 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.7.4.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.7.4.10 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.91 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenIV (HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\OpenIV) (Version: 2.6.4.646 - .black/OpenIV Team)
Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)
paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)
Rainbow Six Siege - Closed Beta (HKLM-x32\...\Uplay Install 1001) (Version: - Ubisoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.8 - Rockstar Games)
SHIELD Streaming (Version: 4.1.0240 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.7.4.10 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Spotify) (Version: 1.0.19.106.gb8a7150f - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft)
UNi Xonar Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version: - )
Uplay (HKLM-x32\...\Uplay) (Version: 7.3 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-07-30 17:09 - 2015-12-09 19:22 - 00001853 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {299CB8D4-2C2A-498D-8ADB-502E250038EB} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2015-11-09] (Bitdefender)
Task: {4B535349-E1C6-4791-8C00-00B26D03CDC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-30] (Google Inc.)
Task: {5DF2764E-C7BF-4552-B404-DDC2958F82FF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {76F88F0E-CFD2-47E8-81EC-C74E5A0386DB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-11] (Microsoft Corporation)
Task: {A9B80965-C1AE-46FC-A72D-08DC2A1A434F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-30] (Google Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-07-30 16:44 - 2015-07-15 03:04 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-10-01 12:37 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2015-12-04 01:15 - 2015-12-04 01:15 - 00876888 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_01250_002\ashttpbr.mdl
2015-12-04 01:15 - 2015-12-04 01:15 - 00742976 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_01250_002\ashttpdsp.mdl
2015-12-04 01:15 - 2015-12-04 01:15 - 02803536 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_01250_002\ashttpph.mdl
2015-12-04 01:15 - 2015-12-04 01:15 - 01415584 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_01250_002\ashttprbl.mdl
2015-07-30 16:14 - 2015-11-05 16:08 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-08-19 13:46 - 2015-08-11 10:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-07-31 13:08 - 2015-08-26 19:47 - 00076152 _____ () C:\WINDOWS\system32\PnkBstrA.exe
2015-10-01 14:46 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 14:46 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-01 14:46 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-10-01 14:47 - 2015-09-17 06:44 - 06569472 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-01 14:46 - 2015-09-17 06:42 - 00471040 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-01 14:46 - 2015-09-17 06:42 - 01808384 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 14:46 - 2015-09-17 06:43 - 02274816 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:45 - 00210432 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-10-08 14:17 - 2015-11-12 19:39 - 00708912 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2015-10-08 14:17 - 2015-11-12 19:39 - 00854320 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2015-07-31 11:57 - 2008-07-11 14:04 - 00200704 ____N () C:\Windows\syswow64\HsMgr.exe
2015-07-31 11:57 - 2008-07-11 14:03 - 00282112 ____N () C:\Windows\System\HsMgr64.exe
2015-11-26 19:35 - 2015-11-26 19:35 - 00475712 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\intermsec.dll
2015-10-01 12:37 - 2015-11-26 19:35 - 00157696 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\ui\ltr\intermsec.ui
2015-10-01 12:37 - 2015-09-11 19:00 - 00032256 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\lang\de-DE\intermsec.txtui
2015-10-01 12:37 - 2015-09-11 19:00 - 00005120 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\lang\de-DE\bdaphconp.txtui
2015-10-05 18:04 - 2015-11-26 19:34 - 00051352 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bddpsp.dll
2015-12-04 09:09 - 2015-12-04 09:09 - 22954008 _____ () D:\Program Files (x86)\War Thunder\aces.exe
2015-10-08 14:16 - 2015-11-12 19:39 - 00012080 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-07-31 11:57 - 2012-06-06 08:56 - 00143360 ____N () C:\Program Files\UNi Xonar Audio\Customapp\VmixP8.dll
2015-07-30 16:37 - 2015-10-05 17:18 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-07-30 16:37 - 2015-07-03 17:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-07-30 16:37 - 2015-11-10 03:44 - 02541648 _____ () C:\Program Files (x86)\Steam\video.dll
2015-07-30 16:37 - 2015-07-03 17:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-07-30 16:37 - 2015-07-03 17:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-07-30 16:37 - 2015-09-24 01:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-07-30 16:37 - 2015-09-24 01:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-07-30 16:37 - 2015-09-24 01:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-07-30 16:37 - 2015-09-24 01:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-07-30 16:37 - 2015-09-24 01:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-07-30 16:37 - 2015-11-10 03:44 - 00806992 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-07-30 16:37 - 2015-11-03 23:00 - 00201728 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-08-04 23:07 - 2015-05-21 13:27 - 00032768 _____ () C:\Program Files\CyberGhost 5\de\CyberGhost.resources.dll
2015-08-04 23:07 - 2015-11-05 12:26 - 01435240 _____ () C:\Program Files\CyberGhost 5\Geckofx-Core.dll
2015-07-30 16:37 - 2015-10-08 23:20 - 45010208 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-07-30 16:42 - 2015-12-02 01:03 - 50679920 _____ () C:\Users\Philipp\AppData\Roaming\Spotify\libcef.dll
2015-07-30 16:42 - 2015-12-02 01:03 - 01882224 _____ () C:\Users\Philipp\AppData\Roaming\Spotify\libglesv2.dll
2015-07-30 16:42 - 2015-12-02 01:03 - 00082544 _____ () C:\Users\Philipp\AppData\Roaming\Spotify\libegl.dll
2015-08-28 18:11 - 2015-08-28 18:11 - 00091136 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\LuaQtWrapperLibrary.dll
2015-08-28 18:09 - 2015-08-28 18:09 - 00224256 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\quazip.dll
2015-08-28 18:09 - 2015-08-28 18:09 - 00200704 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\lua52.dll
2015-12-09 19:25 - 2015-12-09 19:25 - 00158720 _____ () C:\Users\Philipp\AppData\Local\Temp\sfareca00001.dll
2015-08-30 16:14 - 2015-12-09 19:25 - 00192512 _____ () C:\Users\Philipp\AppData\Local\Temp\sfamcc00001.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Philipp\Desktop\hw64_506.exe:BDU
AlternateDataStreams: C:\Users\Philipp\Downloads\KeyboardVisualizerVC 1.05.exe:BDU
AlternateDataStreams: C:\Users\Philipp\Downloads\NDP46-KB3045560-Web.exe:BDU
AlternateDataStreams: C:\Users\Philipp\Downloads\SpyHunter-installer.exe:BDU
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Philipp\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{45cf0c9f-e8ba-4a7f-b112-1b506451cf43}.png
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{C31CCCF5-D4A5-4B92-B324-5F69F7D1EFE4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E9948567-0519-4C90-A1A4-28B09485E1ED}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{328FE4BF-CEF9-474C-9B7D-9DE5BE970960}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{15EEBD87-8DF2-48BB-8838-771FA50374B3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{4CBC0480-6332-47C1-B9E6-0CA7D2B4DD42}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{BCACE126-4688-43B2-A42B-95BB83456EDD}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{84A385D8-3D52-4ED2-928D-E46B09A7D372}D:\program files (x86)\war thunder\aces.exe] => (Allow) D:\program files (x86)\war thunder\aces.exe
FirewallRules: [UDP Query User{21816CEA-C4EF-4BE1-BB9B-B70CA4FEE059}D:\program files (x86)\war thunder\aces.exe] => (Allow) D:\program files (x86)\war thunder\aces.exe
FirewallRules: [{7904BC90-A8FF-432B-B3FB-CC24775BA5CD}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{9493FF77-5477-42D9-98C6-51F049C5C940}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{C3EC7BD5-C115-489B-B545-0C7CC5A9205C}] => (Allow) E:\Programme\Battlefield 4\bf4_x86.exe
FirewallRules: [{DABF8CEE-FE25-43A3-990A-D9562E421CA6}] => (Allow) E:\Programme\Battlefield 4\bf4_x86.exe
FirewallRules: [{9253C317-FC26-4D83-99A3-60F1D9CC0064}] => (Allow) E:\Programme\Battlefield 4\bf4.exe
FirewallRules: [{820A1E92-797E-4CAB-A677-06ADA96316E3}] => (Allow) E:\Programme\Battlefield 4\bf4.exe
FirewallRules: [{847D8D52-6644-45AD-9253-C54CE7C94BE3}] => (Allow) E:\SteamLibrary\steamapps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{961C8840-1C15-442A-935B-E6FE72882E67}] => (Allow) E:\SteamLibrary\steamapps\common\Wargame Red Dragon\WarGame3.exe
FirewallRules: [{FECEFC85-2458-4C7C-BDCA-A12716E7D8F3}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D08C9B5F-F967-4096-BD92-9F7ABE7BE1FE}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{480F2B8C-A448-41E2-9446-5E4945646BB5}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [UDP Query User{D9398D92-5515-4CA9-BFFB-7AF3981F451C}D:\program files (x86)\rockstar games\gta v\gta5.exe] => (Allow) D:\program files (x86)\rockstar games\gta v\gta5.exe
FirewallRules: [{951FE9B3-561C-4BD9-BEB2-0B5C4FC61753}] => (Allow) E:\Programme\Ubisoft\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{922C8F2C-1FAB-4E9A-95CF-0964045230EF}] => (Allow) E:\Programme\Ubisoft\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{A294B7FD-7CB0-40BE-882F-41798197C0DF}] => (Allow) E:\Programme\Ubisoft\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{EF949252-03BC-4778-854C-4677C4637DB4}] => (Allow) E:\Programme\Ubisoft\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{B07EA1C3-BBFD-4129-9A9B-E45DF25F3739}] => (Allow) E:\Programme\Ubisoft\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{B1054CA5-F4BE-4E11-A178-F0A62CDE80ED}] => (Allow) E:\Programme\Ubisoft\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{C34AEEB2-D9A9-4A12-9F4A-B8957846680A}] => (Allow) C:\Windows\syswow64\PnkBstrA.exe
FirewallRules: [{7DBBA5C6-CD42-4297-AE43-7DABC4BD93A6}] => (Allow) C:\Windows\syswow64\PnkBstrA.exe
FirewallRules: [{F78F822C-072D-4E50-819A-31A1E169C9C6}] => (Allow) C:\Windows\syswow64\PnkBstrB.exe
FirewallRules: [{C2943677-B03F-41E7-BAC1-96AAF1DBA67D}] => (Allow) C:\Windows\syswow64\PnkBstrB.exe
FirewallRules: [TCP Query User{F450EA15-0A6C-471A-BA69-A50DFEBC9CE4}E:\steamlibrary\steamapps\common\red orchestra 2\binaries\win32\rogame.exe] => (Allow) E:\steamlibrary\steamapps\common\red orchestra 2\binaries\win32\rogame.exe
FirewallRules: [UDP Query User{0F4DB4B9-0278-4440-AFAC-8A83BE24BA6F}E:\steamlibrary\steamapps\common\red orchestra 2\binaries\win32\rogame.exe] => (Allow) E:\steamlibrary\steamapps\common\red orchestra 2\binaries\win32\rogame.exe
FirewallRules: [TCP Query User{88E2CE57-2FDD-4E22-9ADB-DDAD5A437876}E:\steamlibrary\steamapps\common\the stanley parable\stanley.exe] => (Allow) E:\steamlibrary\steamapps\common\the stanley parable\stanley.exe
FirewallRules: [UDP Query User{1600E8BC-6862-48CA-902D-ED962239228B}E:\steamlibrary\steamapps\common\the stanley parable\stanley.exe] => (Allow) E:\steamlibrary\steamapps\common\the stanley parable\stanley.exe
FirewallRules: [TCP Query User{4E1BD533-88D0-41D1-BC09-48B1FA2F743A}D:\program files (x86)\war thunder\launcher.exe] => (Allow) D:\program files (x86)\war thunder\launcher.exe
FirewallRules: [UDP Query User{5DF5411F-ED0A-4ED6-BEE0-53EF4D7B4251}D:\program files (x86)\war thunder\launcher.exe] => (Allow) D:\program files (x86)\war thunder\launcher.exe
FirewallRules: [{8B21CCB9-EFDC-4EE6-BB22-7BF733062D51}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{DAA1E1BD-B6B5-4456-9C89-1BF2D21CE970}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{97DAADB2-6718-4026-B7CD-975D048BD524}] => (Allow) E:\SteamLibrary\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{3242B6AF-5408-4CFC-9877-A9D317898856}] => (Allow) E:\SteamLibrary\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A224DA0D-DAEB-4355-851E-40E1C2677B4F}] => (Allow) E:\SteamLibrary\steamapps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{E36AD41F-324B-4A05-9567-CA4038199160}] => (Allow) E:\SteamLibrary\steamapps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{63D24425-B1D1-45A0-801A-E973961D4BC4}] => (Allow) E:\SteamLibrary\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{87A5B8BD-6811-49EC-8DD3-851FC1BF82D5}] => (Allow) E:\SteamLibrary\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{0CE9113B-B5FF-4185-8676-99AFD9558468}] => (Allow) E:\SteamLibrary\steamapps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{064B6DF2-3C65-4852-8AEA-7C0798665778}] => (Allow) E:\SteamLibrary\steamapps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{FB7BDCD6-258F-4D03-8A9D-3841C87E5442}] => (Allow) E:\SteamLibrary\steamapps\common\Metro Last Light Redux\metro.exe
FirewallRules: [{701EEF98-5AFD-4CA2-BCD9-11EF825435D2}] => (Allow) E:\SteamLibrary\steamapps\common\Metro Last Light Redux\metro.exe
FirewallRules: [{1E7BCDE9-4D4A-4559-A6BB-A4186F08B8D1}] => (Allow) E:\Programme\Ubisoft\Rainbow Six Siege - Closed Beta\RainbowSix.exe
FirewallRules: [{A4B1DA04-19D5-48BC-851B-402A57DEEE42}] => (Allow) E:\Programme\Ubisoft\Rainbow Six Siege - Closed Beta\RainbowSix.exe
FirewallRules: [{4FB5AF06-4D4E-4A63-93C5-85DBA053864C}] => (Allow) E:\SteamLibrary\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{6C2FDF79-646B-43B3-8DAB-2C2DA64F7C99}] => (Allow) E:\SteamLibrary\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{A0530DD0-06D4-45A6-8333-67D8DA8E3425}] => (Allow) E:\SteamLibrary\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{D342B72D-34B8-4D07-8569-3D65E5D81C34}] => (Allow) E:\SteamLibrary\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{8F3FBB03-1827-4D09-A62F-B655303BFE4A}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1F1AF0BA-D828-4249-8D13-30DBB28884D0}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A4B96B13-23A9-4184-93BE-D6E9CC067736}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9823FC22-FE23-4BA1-AB8F-47CC4024C9AA}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{21BDC749-6C56-4FBA-A7E7-187F4B8F2CDF}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0688F1A1-65E7-4695-B9BA-1D213AE7F3CC}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{73B809C4-D43D-45E5-9157-79BB7B13CE2D}] => (Allow) E:\Programme\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{B52AC790-BD14-4FE8-9592-6C8EC5C4DEA1}] => (Allow) E:\Programme\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{AA6281A4-097B-4F37-8E1F-E3F3FB3C020A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{AB3E3924-5E9F-4D8F-9C2E-26BD50D8F8E0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5C98B5E3-0B17-4988-B4E5-A2DAF7B62931}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3902AB21-0B78-4415-B88B-9D019A110930}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5AAF6307-9EE5-493F-AFB5-7A34E36F0A07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{C0DF0787-E12F-4629-AAB2-29C0619BF2D0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D69D743-BDC4-4CE5-92EB-CC9E4F6EF9D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{924EF213-C416-4E3D-8866-5CC16A7E913D}] => (Allow) E:\Programme\GTA 5\GTA5.exe
FirewallRules: [{CCC9AED4-1427-43D3-B028-F9966A004700}] => (Allow) E:\Programme\GTA 5\GTA5.exe
FirewallRules: [{FB8D369E-B4D9-4401-BAC8-1A0E1D5CEF70}] => (Allow) E:\Programme\GTA 5\GTA5.exe
FirewallRules: [{6C1CBC35-3449-4AA1-BE6E-50CF061017B6}] => (Allow) E:\Programme\GTA 5\GTA5.exe
FirewallRules: [{8716A849-D98F-43DB-92E2-3ACD4EF000F1}] => (Allow) E:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{D30E12A9-01F5-4956-910F-723926B09E52}] => (Allow) E:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{8F1DBBCE-4E15-4215-ADD5-C11FC24D1B7D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{8FCC2077-CAA4-48DA-9A4F-24D8D0B96D49}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{EF4F405B-5F93-4D10-B00C-0606FEBC66A5}] => (Allow) E:\Programme\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{21903DBD-40D6-4E36-8A05-6E7F97F85DD2}] => (Allow) E:\Programme\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{9A46D119-BA34-450D-ACF8-ACE66EF6BECA}] => (Allow) E:\Programme\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{E78921E4-DCFC-4AEE-B28C-35CA2709F327}] => (Allow) E:\Programme\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{F4E4454A-1C47-4BDE-A21A-CD77BA69F406}] => (Allow) E:\Programme\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{6CE9509C-D95E-4BF6-BC9A-23F1685A281E}] => (Allow) E:\Programme\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{5DE2FD8B-43B0-42FE-B481-931006FDCA67}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{6FA07783-D5DA-44FD-87C4-464E4DA0A93B}] => (Allow) LPort=2869
FirewallRules: [{08D48334-5E40-40E9-A9E9-36181E1FF7CA}] => (Allow) LPort=1900
FirewallRules: [{3A1B17F6-98EF-43BB-B5D1-13CA0DA6284E}] => (Allow) E:\SteamLibrary\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{EC27722E-59D5-4705-B901-18E3890605AF}] => (Allow) E:\SteamLibrary\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AF49A56C-2FC1-4D59-88AF-8BF51770A188}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{6D1D3BAE-F1FC-4A47-A506-30C36A8C8A5C}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{F68865B2-FD9A-4E6E-ABAB-FE007ABDAAD3}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{2CF8B826-F4FD-493D-A438-00850EDE7611}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{E0BC01D0-8723-49A4-AB5E-5C1DB9D0D770}] => (Allow) E:\SteamLibrary\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{2A8BDE3B-0043-4BF9-A860-E2694C8E4C24}] => (Allow) E:\SteamLibrary\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{2D26C1D9-CACC-4F49-A387-B33014D3AB17}] => (Allow) E:\Programme\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{AB25D4E9-E0D0-42F0-B270-DD1A8542CC89}] => (Allow) E:\Programme\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{A17F7ABB-F778-4781-A0AD-3BC5B42F7A32}] => (Allow) E:\SteamLibrary\steamapps\common\Hacker Evolution\HackerEvolution.exe
FirewallRules: [{5C2569F5-D4E0-4A14-961D-2F6F8F5FC71A}] => (Allow) E:\SteamLibrary\steamapps\common\Hacker Evolution\HackerEvolution.exe
FirewallRules: [{9BDADF26-451A-4597-965D-FC7FFD2E192A}] => (Allow) E:\SteamLibrary\steamapps\common\Hacker Evolution\HackerEvolutionModEditor.exe
FirewallRules: [{79B4627B-8057-46E7-B742-3055CBEEFE4E}] => (Allow) E:\SteamLibrary\steamapps\common\Hacker Evolution\HackerEvolutionModEditor.exe
FirewallRules: [{39FC7B8E-44F7-41CC-8662-D75BF25C820D}] => (Allow) E:\SteamLibrary\steamapps\common\Bloodbath Kavkaz\nw.exe
FirewallRules: [{4C2EE1EE-61F9-478B-A50B-315F5EC135F9}] => (Allow) E:\SteamLibrary\steamapps\common\Bloodbath Kavkaz\nw.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/09/2015 07:35:03 PM) (Source: MsiInstaller) (EventID: 1024) (User: DESKTOP-ET8PTI7)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F094E6F00}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (12/09/2015 07:28:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MicrosoftEdge.exe, Version: 11.0.10240.16590, Zeitstempel: 0x563ad824
Name des fehlerhaften Moduls: eModel.dll, Version: 11.0.10240.16590, Zeitstempel: 0x563ad3a7
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0000000000112663
ID des fehlerhaften Prozesses: 0xcbc
Startzeit der fehlerhaften Anwendung: 0xMicrosoftEdge.exe0
Pfad der fehlerhaften Anwendung: MicrosoftEdge.exe1
Pfad des fehlerhaften Moduls: MicrosoftEdge.exe2
Berichtskennung: MicrosoftEdge.exe3
Vollständiger Name des fehlerhaften Pakets: MicrosoftEdge.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge.exe5
Error: (12/09/2015 07:27:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MicrosoftEdge.exe, Version: 11.0.10240.16590, Zeitstempel: 0x563ad824
Name des fehlerhaften Moduls: eModel.dll, Version: 11.0.10240.16590, Zeitstempel: 0x563ad3a7
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0000000000112663
ID des fehlerhaften Prozesses: 0x26cc
Startzeit der fehlerhaften Anwendung: 0xMicrosoftEdge.exe0
Pfad der fehlerhaften Anwendung: MicrosoftEdge.exe1
Pfad des fehlerhaften Moduls: MicrosoftEdge.exe2
Berichtskennung: MicrosoftEdge.exe3
Vollständiger Name des fehlerhaften Pakets: MicrosoftEdge.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge.exe5
Error: (12/09/2015 07:23:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ET8PTI7)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/09/2015 06:30:33 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ET8PTI7)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/09/2015 01:00:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (12/09/2015 11:50:23 AM) (Source: MsiInstaller) (EventID: 1024) (User: DESKTOP-ET8PTI7)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F094E6F00}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (12/09/2015 11:38:09 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ET8PTI7)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/09/2015 07:55:36 AM) (Source: MsiInstaller) (EventID: 1024) (User: DESKTOP-ET8PTI7)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F094E6F00}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (12/08/2015 11:32:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ET8PTI7)
Description: Bei der Aktivierung der App „Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Systemfehler:
=============
Error: (12/09/2015 07:49:22 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.
Error: (12/09/2015 07:49:22 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (12/09/2015 07:49:22 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.
Error: (12/09/2015 07:49:22 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (12/09/2015 07:49:21 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.
Error: (12/09/2015 07:49:21 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (12/09/2015 07:49:21 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.
Error: (12/09/2015 07:49:21 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
Error: (12/09/2015 07:49:20 PM) (Source: Schannel) (EventID: 4108) (User: NT-AUTORITÄT)
Description: Das vom Remoteserver erhaltene Zertifikat wurde falsch verifiziert. Fehlercode: 0x80092013. Fehler bei der SSL-Zertifikatanforderung. Die angefügten Daten enthalten das Serverzertifikat.
Error: (12/09/2015 07:49:20 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.
CodeIntegrity:
===================================
Date: 2015-11-05 21:45:54.955
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-11-05 21:45:54.940
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-11-05 21:45:54.924
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-11-05 21:45:54.895
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-11-05 21:45:54.877
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-10-24 22:25:32.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-10-24 22:25:32.727
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-20 20:00:32.514
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-20 20:00:32.504
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-20 20:00:32.493
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 16333.7 MB
Verfügbarer physikalischer RAM: 10878.43 MB
Summe virtueller Speicher: 29293.7 MB
Verfügbarer virtueller Speicher: 23306.58 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:118.7 GB) (Free:41.39 GB) NTFS
Drive d: (Spiele) (Fixed) (Total:272.84 GB) (Free:82.84 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: () (Fixed) (Total:931.51 GB) (Free:176.82 GB) NTFS
Drive f: (Musik) (Fixed) (Total:25.25 GB) (Free:10.27 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: A8EDA91D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 190E99FE)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: F9D9866B)
Partition 1: (Active) - (Size=272.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=25.3 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Hier das Log von Malwarebytes Anti-Malware: Code:
ATTFilter <?xml version="1.0" encoding="UTF-8"?>
-<logs>
<record subtype="Malware Protection" result="Starting" last_modified_tag="ae8990d1-4f24-45a2-9abb-074c1e065523" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.510449+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malware Protection" result="Started" last_modified_tag="b5af0dbf-5fed-41ac-9295-bba988ba21ae" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.513452+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="8d143751-1ef0-4245-be11-4c8fd390ee17" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.533471+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Started" last_modified_tag="106c666a-b495-47db-9bc4-23614bb6e420" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.844889+01:00" LoggingEventType="2" severity="debug"/>
<record last_modified_tag="e96ae828-48fe-4816-92c7-b6ef761e3d92" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:12.679966+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.6.2" name="Remediation Database" fromVersion="2015.9.16.1"/>
<record last_modified_tag="995fb86a-a01c-4f42-84b4-ec0444c2beea" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:12.694980+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.7.1" name="Rootkit Database" fromVersion="2015.9.18.1"/>
<record last_modified_tag="71f18c7f-82cb-4cc1-b8de-0a16d6546421" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:12.707993+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.8.1" name="IP Database" fromVersion="2015.9.21.2"/>
<record last_modified_tag="83392acb-2165-43ef-9feb-75dd109067ab" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:13.087354+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.9.6" name="Domain Database" fromVersion="2015.9.22.3"/>
<record last_modified_tag="38024c23-1ad3-41b0-bef7-cc0cd5acae75" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:39.004117+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.9.4" name="Malware Database" fromVersion="2015.9.22.5"/>
<record subtype="Refresh" result="Starting" last_modified_tag="4237264d-151b-4bf2-83fc-bf0710d5bf0d" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:39.029140+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Stopping" last_modified_tag="b4d8457f-a19d-4d9a-9756-0744c3c1f08e" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:39.033144+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Stopped" last_modified_tag="2bd13dc8-fa33-4316-a9bf-ae365dc22d2e" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:39.248349+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Refresh" result="Success" last_modified_tag="96336313-511e-4480-a21a-63dd653709df" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:42.545487+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="2c522d0a-8e45-42f8-8e71-9bf6bac68178" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:42.581521+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Started" last_modified_tag="5723071d-c1b4-431a-b6ca-7ef591ac118a" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:43.118032+01:00" LoggingEventType="2" severity="debug"/>
<record last_modified_tag="2337a8a0-14c5-4c71-894b-9c465b7da6c7" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Scan" source="Manual" datetime="2015-12-09T19:44:31.123168+01:00" LoggingEventType="6" severity="debug" scanresult="completed" nonmalwaredetections="47" malwaredetections="0" duration="294" starttime="2015-12-09T19:38:44+01:00" scantype="threat"/>
</logs>
Und noch ein zweites Log von Malwarebytes Anti-Malware: Code:
ATTFilter <?xml version="1.0" encoding="UTF-8"?>
-<logs>
<record subtype="Malware Protection" result="Starting" last_modified_tag="ae8990d1-4f24-45a2-9abb-074c1e065523" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.510449+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malware Protection" result="Started" last_modified_tag="b5af0dbf-5fed-41ac-9295-bba988ba21ae" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.513452+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="8d143751-1ef0-4245-be11-4c8fd390ee17" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.533471+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Started" last_modified_tag="106c666a-b495-47db-9bc4-23614bb6e420" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:37:43.844889+01:00" LoggingEventType="2" severity="debug"/>
<record last_modified_tag="e96ae828-48fe-4816-92c7-b6ef761e3d92" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:12.679966+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.6.2" name="Remediation Database" fromVersion="2015.9.16.1"/>
<record last_modified_tag="995fb86a-a01c-4f42-84b4-ec0444c2beea" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:12.694980+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.7.1" name="Rootkit Database" fromVersion="2015.9.18.1"/>
<record last_modified_tag="71f18c7f-82cb-4cc1-b8de-0a16d6546421" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:12.707993+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.8.1" name="IP Database" fromVersion="2015.9.21.2"/>
<record last_modified_tag="83392acb-2165-43ef-9feb-75dd109067ab" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:13.087354+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.9.6" name="Domain Database" fromVersion="2015.9.22.3"/>
<record last_modified_tag="38024c23-1ad3-41b0-bef7-cc0cd5acae75" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Manual" datetime="2015-12-09T19:38:39.004117+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.9.4" name="Malware Database" fromVersion="2015.9.22.5"/>
<record subtype="Refresh" result="Starting" last_modified_tag="4237264d-151b-4bf2-83fc-bf0710d5bf0d" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:39.029140+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Stopping" last_modified_tag="b4d8457f-a19d-4d9a-9756-0744c3c1f08e" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:39.033144+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Stopped" last_modified_tag="2bd13dc8-fa33-4316-a9bf-ae365dc22d2e" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:39.248349+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Refresh" result="Success" last_modified_tag="96336313-511e-4480-a21a-63dd653709df" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:42.545487+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="2c522d0a-8e45-42f8-8e71-9bf6bac68178" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:42.581521+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Started" last_modified_tag="5723071d-c1b4-431a-b6ca-7ef591ac118a" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T19:38:43.118032+01:00" LoggingEventType="2" severity="debug"/>
<record last_modified_tag="2337a8a0-14c5-4c71-894b-9c465b7da6c7" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Scan" source="Manual" datetime="2015-12-09T19:44:31.123168+01:00" LoggingEventType="6" severity="debug" scanresult="completed" nonmalwaredetections="47" malwaredetections="0" duration="294" starttime="2015-12-09T19:38:44+01:00" scantype="threat"/>
<record last_modified_tag="49664acf-a695-47bf-a3da-affe8073161f" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Update" source="Scheduler" datetime="2015-12-09T20:10:49.336950+01:00" LoggingEventType="1" severity="debug" toVersion="2015.12.9.5" name="Malware Database" fromVersion="2015.12.9.4"/>
<record subtype="Refresh" result="Starting" last_modified_tag="68ade0a3-6401-4495-8408-0bc6fa70f15e" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T20:10:49.359503+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Stopping" last_modified_tag="96c44265-dd91-430f-9aed-fa4562ad0143" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T20:10:49.363507+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Stopped" last_modified_tag="4512a732-245b-419b-b545-cb78e026d5d6" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T20:10:49.615246+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Refresh" result="Success" last_modified_tag="5a8bd64f-ce1b-4f3c-a8cd-c18217c3164d" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T20:10:53.039372+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="5e40bde6-011b-4adb-85f8-5938fcac920b" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T20:10:53.051383+01:00" LoggingEventType="2" severity="debug"/>
<record subtype="Malicious Website Protection" result="Started" last_modified_tag="55258eb6-82d7-4d10-ada5-72579cedab92" systemname="DESKTOP-ET8PTI7" username="SYSTEM" type="Protection" source="Protection" datetime="2015-12-09T20:10:53.609701+01:00" LoggingEventType="2" severity="debug"/>
</logs>
|
|
09.12.2015, 20:56
| #3 |
| | Browser Hijacker yoursites123.com - wie entfernen? Das GMER Tool will bei mir auch im abgesicherten Modus ohne Devices nicht laufen sondern stürzt mit APC_INDEX_MISMATCH als Bluescreen ab.
__________________In der Übersicht wird jedoch ein Ordner angezeigt, der mir auch schon aufgefallen ist: C:\ProgramData\4WdM4 mit der darin enthaltenen WdMan.exe, heute morgen angelegt (ich habe dort nichts installiert), und nur eine *exe samt config enthalten. Wird bei virustotal von AVG erkannt: https://www.virustotal.com/de/file/74887578f8a837b43bf9e336ceda11d193748926808a9ce51bc02423bc65237b/analysis/ Siehe Anhang. Geändert von Redbull0329 (09.12.2015 um 21:37 Uhr) |
|
09.12.2015, 23:12
| #4 |
| /// TB-Ausbilder /// Anleitungs-Guru  | Browser Hijacker yoursites123.com - wie entfernen? Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das... 
 Hinweis:Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert. Adware & Co. können wir sehr gut entfernen. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean  bekommst.Los geht's: Bitte MBAM-Log richtig posten. Malwarebytes Anti-Malware Logfile finden - Anleitungen
__________________ Gruß deeprybka  Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
10.12.2015, 15:18
| #5 |
| | Browser Hijacker yoursites123.com - wie entfernen? Hi, danke für die flotte Antwort. Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 09.12.2015 Suchlaufzeit: 19:38 Protokolldatei: Malware_Log.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2015.12.09.04 Rootkit-Datenbank: v2015.12.07.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: Philipp Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 345072 Abgelaufene Zeit: 4 Min., 54 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
10.12.2015, 15:20
| #6 |
| /// TB-Ausbilder /// Anleitungs-Guru | Browser Hijacker yoursites123.com - wie entfernen? Hi, Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
__________________ --> Browser Hijacker yoursites123.com - wie entfernen? |
|
10.12.2015, 18:35
| #7 |
| | Browser Hijacker yoursites123.com - wie entfernen? Hat das Problem leider nicht gelöst Code:
ATTFilter # AdwCleaner v5.024 - Bericht erstellt am 10/12/2015 um 18:32:03
# Aktualisiert am 07/12/2015 von Xplode
# Datenbank : 2015-12-07.3 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : Philipp - DESKTOP-ET8PTI7
# Gestartet von : C:\Users\Philipp\Downloads\AdwCleaner_5.024.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
[-] Datei Gelöscht : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.lyricsfreak.com_0.localstorage
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.lyricsfreak.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.metrolyrics.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.plyrics.com_0.localstorage
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.plyrics.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_v.qq.com_0.localstorage
[-] Datei Gelöscht : C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_v.qq.com_0.localstorage-journal
***** [ DLLs ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel Gelöscht : HKCU\Software\PRODUCTSETUP
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\TSv
***** [ Internetbrowser ] *****
[-] [C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : istartsurf
[-] [C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : yahoo.com
[-] [C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.istartsurf.com/?type=hp&ts=1447012314&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cor&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2615 Bytes] ##########
|
|
10.12.2015, 20:33
| #8 | |
| /// TB-Ausbilder /// Anleitungs-Guru | Browser Hijacker yoursites123.com - wie entfernen?Zitat:
 Schritt 1   Drücke bitte die  + R Taste und schreibe notepad in das Ausführen Fenster.Klicke auf OK und kopiere nun den Text aus der Codebox in das leere Textdokument: Code:
ATTFilter CloseProcesses:
File: C:\Users\Philipp\AppData\Roaming\TSv\TSvr.exe
C:\Users\Philipp\AppData\Roaming\TSv
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
Edge HomeButtonPage: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 ->
R2 WdMan; C:\ProgramData\4WdM4\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Datei ist nicht signiert]
File: C:\ProgramData\4WdM4\WdMan.exe
C:\ProgramData\4WdM4
EmptyTemp:
Schritt 2 ESET Online Scanner
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
11.12.2015, 01:16
| #9 |
| | Browser Hijacker yoursites123.com - wie entfernen? FRST Log: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-12-2015
durchgeführt von Philipp (2015-12-10 23:59:35) Run:1
Gestartet von C:\Users\Philipp\Downloads
Geladene Profile: Philipp (Verfügbare Profile: Philipp)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
CloseProcesses:
File: C:\Users\Philipp\AppData\Roaming\TSv\TSvr.exe
C:\Users\Philipp\AppData\Roaming\TSv
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449658361&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
Edge HomeButtonPage: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 ->
R2 WdMan; C:\ProgramData\4WdM4\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Datei ist nicht signiert]
File: C:\ProgramData\4WdM4\WdMan.exe
C:\ProgramData\4WdM4
EmptyTemp:
*****************
Prozess erfolgreich geschlossen.
========================= File: C:\Users\Philipp\AppData\Roaming\TSv\TSvr.exe ========================
"C:\Users\Philipp\AppData\Roaming\TSv\TSvr.exe" => nicht gefunden.
====== Ende von File: ======
"C:\Users\Philipp\AppData\Roaming\TSv" => nicht gefunden.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wert erfolgreich wiederhergestellt
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wert erfolgreich wiederhergestellt
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Schlüssel nicht gefunden.
"HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Schlüssel nicht gefunden.
HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\\HomeButtonPage => Wert erfolgreich entfernt
WdMan => Dienst erfolgreich entfernt
========================= File: C:\ProgramData\4WdM4\WdMan.exe ========================
Datei ist nicht signiert
MD5: 1B7E44B77D84DFEE9E845817AE3550FA
Erstellungs- und Änderungsdatum: 2015-12-09 11:53 - 2015-12-04 04:23
Größe: 0333312
Attribute: ----A
Firmenname: TFuns LIMITED
Interne Name: TFuns.exe
Original Name: TFuns.exe
Produkt: TFuns
Beschreibung: TFuns
Datei Version: 20.0.0.2508
Produkt Version: 20.0.0.2508
Urheberrecht: Copyright (C) TFuns from 2001
====== Ende von File: ======
C:\ProgramData\4WdM4 => erfolgreich verschoben
EmptyTemp: => 12.7 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 00:00:49 ====
ESET Log: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=d2409b1008fd4b42b22f3603b4190598
# end=init
# utc_time=2015-12-10 11:05:10
# local_time=2015-12-11 12:05:10 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27140
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=d2409b1008fd4b42b22f3603b4190598
# end=updated
# utc_time=2015-12-10 11:06:46
# local_time=2015-12-11 12:06:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=d2409b1008fd4b42b22f3603b4190598
# engine=27140
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-12-11 12:08:27
# local_time=2015-12-11 01:08:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Bitdefender Antivirus'
# compatibility_mode=2067 16777213 50 88 7397 147105172 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 106088 13266519 0 0
# scanned=318825
# found=2
# cleaned=0
# scan_time=3700
sh=13133C4B2991A6C6737EC57FC0E2D77B2C41E250 ft=1 fh=1d027069d0b38307 vn="Variante von Win32/InstallCore.ACZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Philipp\AppData\Local\Microsoft\Windows\INetCache\IE\L8IFAJ2V\JDownloader2Setup[1].exe"
sh=9165D4F19245A418C85D54EC4EB43C9E2B14F609 ft=1 fh=9911baa83996143d vn="Variante von Win32/ELEX.GG evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\syswow64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\picx1209[1].exe"
|
|
11.12.2015, 06:31
| #10 |
| /// TB-Ausbilder /// Anleitungs-Guru | Browser Hijacker yoursites123.com - wie entfernen?Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
11.12.2015, 07:41
| #11 |
| | Browser Hijacker yoursites123.com - wie entfernen? In Edge besteht das Problem fort, in allen anderen Browsern scheint es gelöst, dort konnte ich meine alten Einstellungen wieder festlegen ohne dass sie bei jedem Start verändert werden. |
|
11.12.2015, 11:24
| #12 |
| /// TB-Ausbilder /// Anleitungs-Guru | Browser Hijacker yoursites123.com - wie entfernen?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
14.12.2015, 14:28
| #13 |
| | Browser Hijacker yoursites123.com - wie entfernen? Das hat nichts gebracht. Malwarebytes hat aber gerade ein PUP.Optional.YourSites123.ShrtCln Registrierungsschlüssel ausgespuckt. Im Log steht leider nichts davon. Soll ich auf Auswahl entfernen klicken? |
|
14.12.2015, 18:21
| #14 |
| /// TB-Ausbilder /// Anleitungs-Guru | Browser Hijacker yoursites123.com - wie entfernen? Ja. Und bitte frische Logs: Schritt 1  Bitte starte FRST erneut, markiere auch die checkbox  und drücke auf Untersuchen. Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
14.12.2015, 20:22
| #15 |
| | Browser Hijacker yoursites123.com - wie entfernen?Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:14-12-2015 durchgeführt von Philipp (Administrator) auf DESKTOP-ET8PTI7 (14-12-2015 20:19:35) Gestartet von C:\Users\Philipp\Downloads Geladene Profile: Philipp (Verfügbare Profile: Philipp) Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe () C:\Windows\System32\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (CMedia) C:\Program Files\UNi Xonar Audio\Customapp\AsusAudioCenter.exe () C:\Windows\syswow64\HsMgr.exe () C:\Windows\System\HsMgr64.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwtxapps.exe (CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Corsair Components, Inc.) C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe (Almico Software (almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1512.4020.0_x64__8wekyb3d8bbwe\Calculator.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-07-30] (Realtek Semiconductor) HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cmicnfgp.dll,CMICtrlWnd HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2008-07-11] () HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2008-07-11] () HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1683920 2015-11-26] (Bitdefender) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2757424 2015-11-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation) HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe [12844864 2015-08-28] (Corsair Components, Inc.) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3013200 2015-12-10] (Valve Corporation) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638768 2015-12-02] (Electronic Arts) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Bitdefender-Geldb�rse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1416608 2015-11-26] (Bitdefender) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 5\CyberGhost.exe [433256 2015-11-05] (CyberGhost S.R.L.) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Spotify] => C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe [8270448 2015-12-02] (Spotify Ltd) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\Run: [Spotify Web Helper] => C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2345584 2015-12-02] (Spotify Ltd) HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64" HKU\S-1-5-21-4170469713-2190753842-1125926178-1001\...\RunOnce: [Uninstall C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Philipp\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64" Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-12-09] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Keine Datei) Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2015-12-09] ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (almico.com)) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{1a8bcf1b-3f11-48dd-b499-59c15f0f407f}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-11-02] (Bitdefender) BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2015-12-11] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-10-24] (Oracle Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2015-12-11] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation) BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2015-11-02] (Bitdefender) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2015-12-11] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-11-14] (Oracle Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2015-12-11] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-11-14] (Oracle Corporation) Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-11-02] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2015-11-02] (Bitdefender) Toolbar: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-11-02] (Bitdefender) IE Session Restore: HKU\S-1-5-21-4170469713-2190753842-1125926178-1001 -> ist aktiviert. Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2015-12-11] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\ur5ahyz4.default FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-12-11] (Microsoft Corporation) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-11-14] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-11-14] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-12-11] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2015-12-11] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-05] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-05] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-08] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-08] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\\antispam32\bdwteff [2015-12-14] [ist nicht signiert] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-09-17] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext Chrome: ======= CHR HomePage: Default -> hxxp://facebook.de/ CHR StartupUrls: Default -> "hxxp://www.facebook.com/","hxxp://www.istartsurf.com/?type=hp&ts=1447012314&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=cor&uid=SAMSUNGXSSDX830XSeries_S0VYNYAC109139" CHR Profile: C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2015-12-09] CHR Extension: (Google Präsentationen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-09] CHR Extension: (Magic Actions for YouTube™) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-12-10] CHR Extension: (From Dust) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2015-12-09] CHR Extension: (Google Docs) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-09] CHR Extension: (Google Drive) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-09] CHR Extension: (YouTube) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-09] CHR Extension: (Google-Suche) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-09] CHR Extension: (Bitdefender Wallet) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhhejlifdlcgcmogbggeomfodgklfaem [2015-12-09] CHR Extension: (Google Tabellen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-09] CHR Extension: (Google Docs Offline) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-09] CHR Extension: (AdBlock) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-09] CHR Extension: (Proxmate) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2015-12-09] CHR Extension: (Reddit Enhancement Suite) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2015-12-12] CHR Extension: (Better Battlelog (BBLog)) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjlfnjepjdmlppapoikepbaabbghofma [2015-12-09] CHR Extension: (Ghostery) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2015-12-09] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-09] CHR Extension: (Google Mail) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-09] CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2877112 2015-11-19] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2015-12-02] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2015-08-26] () R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2015-08-21] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [857288 2015-11-09] (Bitdefender) R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [Datei ist nicht signiert] R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [124488 2015-10-05] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1595864 2015-11-26] (Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1600512 2015-11-02] (BitDefender) R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [282000 2015-11-02] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [775424 2015-11-02] (BitDefender) S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2015-11-02] (Bitdefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [115800 2015-12-14] (BitDefender LLC) S4 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [87912 2015-12-14] (BitDefender) R3 cmudaxp; C:\Windows\system32\drivers\cmudaxp.sys [2735616 2013-12-11] (C-Media Inc) R3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [47840 2015-07-06] (Corsair) R3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21728 2015-07-06] (Corsair) R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160032 2015-04-29] (BitDefender LLC) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2015-10-23] (REALiX(tm)) R0 ignis; C:\Windows\system32\DRIVERS\ignis.sys [271808 2015-11-02] (Bitdefender) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-14] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 mt7612US; C:\Windows\System32\drivers\mt7612US.sys [376840 2015-10-28] (MediaTek Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-12] (NVIDIA Corporation) S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2015-07-24] (Windows (R) Win 7 DDK provider) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation) U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [84792 2015-09-19] (Sysinternals - www.sysinternals.com) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [477272 2015-06-02] (BitDefender S.R.L.) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S1 BdfNdisf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [X] S3 vpnva; \SystemRoot\System32\drivers\vpnva64-6.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-12-14 20:19 - 2015-12-14 20:19 - 00026890 _____ C:\Users\Philipp\Downloads\FRST.txt 2015-12-14 20:17 - 2015-12-14 20:17 - 00000000 ____D C:\Users\Philipp\Downloads\FRST-OlderVersion 2015-12-14 20:02 - 2015-12-14 20:02 - 00016148 _____ C:\WINDOWS\system32\DESKTOP-ET8PTI7_Philipp_HistoryPrediction.bin 2015-12-14 14:26 - 2015-12-14 18:25 - 00001183 _____ C:\Users\Philipp\Desktop\2.txt 2015-12-13 18:02 - 2015-12-13 18:04 - 00000000 ____D C:\Users\Philipp\Downloads\Charming Lass Banged In Ass 2015-12-13 17:42 - 2015-12-13 17:42 - 01256938 _____ C:\Users\Philipp\Downloads\BHWiiaj.webm 2015-12-13 15:34 - 2015-12-13 15:34 - 00361055 _____ C:\Users\Philipp\Downloads\Kapitel06.pdf 2015-12-13 14:41 - 2015-12-13 14:41 - 01376319 _____ C:\Users\Philipp\Downloads\RichHotGrizzlybear.webm 2015-12-13 11:12 - 2015-12-13 11:12 - 00000000 ____D C:\Users\Philipp\AppData\Local\Geckofx 2015-12-12 22:39 - 2015-12-12 22:39 - 00000000 ____D C:\ProgramData\Codemasters 2015-12-12 21:18 - 2015-12-12 21:18 - 00000222 _____ C:\Users\Philipp\Desktop\DiRT Rally.url 2015-12-12 16:30 - 2015-12-12 16:55 - 00000000 ____D C:\Users\Philipp\Downloads\DeWizardOfAhs — Anal whore! That dildo went DEEP! 2015-12-12 16:17 - 2015-12-12 16:43 - 890763142 _____ C:\Users\Philipp\Desktop\videoplayback.mp4 2015-12-11 20:40 - 2015-12-11 20:40 - 05776746 _____ C:\Users\Philipp\Downloads\GrimyRelievedCassowary.webm 2015-12-11 18:24 - 2015-12-11 18:24 - 00185647 _____ C:\Users\Philipp\Downloads\DHL-Marke-UV7N725LHP.pdf 2015-12-11 17:44 - 2015-12-11 17:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2015-12-11 17:41 - 2015-12-11 17:41 - 00002544 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002516 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00002427 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2015-12-11 17:41 - 2015-12-11 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools 2015-12-11 17:39 - 2015-12-13 11:21 - 00000000 ____D C:\Program Files\Microsoft Office 2015-12-11 17:39 - 2015-12-11 17:39 - 00247348 _____ C:\WINDOWSMSUIGHUB.tt2 2015-12-11 17:39 - 2015-12-11 17:39 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-12-11 16:13 - 2015-11-17 17:39 - 138142456 _____ C:\Users\Philipp\Desktop\DSCI0723.AVI 2015-12-11 00:04 - 2015-12-11 00:04 - 02870984 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_deu.exe 2015-12-10 23:59 - 2015-12-11 00:00 - 00006888 _____ C:\Users\Philipp\Downloads\Fixlog.txt 2015-12-10 19:11 - 2015-12-10 19:15 - 00000000 ____D C:\Users\Philipp\Downloads\David K Smith - 06 04 2014 09-43-07 - N scale rotary dumper 2015-12-10 18:30 - 2015-12-10 18:32 - 00000000 ____D C:\AdwCleaner 2015-12-10 18:27 - 2015-12-10 18:30 - 01738240 _____ C:\Users\Philipp\Downloads\AdwCleaner_5.024.exe 2015-12-10 18:27 - 2015-12-10 18:27 - 00000000 _____ C:\Users\Philipp\Desktop\Neues Textdokument.txt 2015-12-10 15:18 - 2015-12-10 15:18 - 00001193 _____ C:\Users\Philipp\Desktop\Malware_Log.txt 2015-12-09 21:39 - 2015-12-09 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-12-09 21:38 - 2015-12-09 21:38 - 00927824 _____ (Google Inc.) C:\Users\Philipp\Downloads\ChromeSetup.exe 2015-12-09 21:02 - 2015-12-09 21:02 - 05565384 _____ (Piriform Ltd) C:\Users\Philipp\Downloads\ccsetup512_slim.exe 2015-12-09 21:02 - 2015-12-09 21:02 - 00002874 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2015-12-09 21:02 - 2015-12-09 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-12-09 21:02 - 2015-12-09 21:02 - 00000000 ____D C:\Program Files\CCleaner 2015-12-09 20:47 - 2015-12-09 20:47 - 107771893 _____ C:\Users\Philipp\Desktop\BDSP_DESKTOP-ET8PTI7_2015_12_09_20_47.zip 2015-12-09 20:45 - 2015-12-09 20:45 - 04991072 _____ C:\Users\Philipp\Downloads\supporttool_2015.exe 2015-12-09 20:45 - 2015-12-09 20:45 - 00000000 ____D C:\ProgramData\Dumps 2015-12-09 20:34 - 2015-12-09 20:34 - 00359560 _____ C:\WINDOWS\Minidump\120915-10046-01.dmp 2015-12-09 20:27 - 2015-12-09 20:27 - 00363744 _____ C:\WINDOWS\Minidump\120915-10515-01.dmp 2015-12-09 20:24 - 2015-12-09 20:24 - 00380416 _____ C:\Users\Philipp\Downloads\Gmer-19357.exe 2015-12-09 19:48 - 2015-12-14 20:19 - 00000000 ____D C:\FRST 2015-12-09 19:47 - 2015-12-14 20:17 - 02369536 _____ (Farbar) C:\Users\Philipp\Downloads\FRST64.exe 2015-12-09 19:44 - 2015-12-09 19:44 - 00001183 _____ C:\Users\Philipp\Desktop\1.txt 2015-12-09 19:38 - 2015-12-01 08:01 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-12-09 19:38 - 2015-12-01 07:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys 2015-12-09 19:38 - 2015-12-01 06:54 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2015-12-09 19:38 - 2015-12-01 06:51 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-12-09 19:38 - 2015-12-01 06:49 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-12-09 19:38 - 2015-12-01 06:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-12-09 19:38 - 2015-12-01 05:59 - 05455360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-12-09 19:38 - 2015-11-25 06:42 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2015-12-09 19:38 - 2015-11-25 06:42 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe 2015-12-09 19:38 - 2015-11-25 06:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-12-09 19:38 - 2015-11-25 06:40 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-12-09 19:38 - 2015-11-25 06:33 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-12-09 19:38 - 2015-11-25 06:32 - 00113184 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2015-12-09 19:38 - 2015-11-25 06:27 - 01366680 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2015-12-09 19:38 - 2015-11-25 06:12 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2015-12-09 19:38 - 2015-11-25 06:11 - 01532984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-12-09 19:38 - 2015-11-25 06:09 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2015-12-09 19:38 - 2015-11-25 06:01 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-12-09 19:38 - 2015-11-25 05:59 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2015-12-09 19:38 - 2015-11-25 05:49 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2015-12-09 19:38 - 2015-11-25 05:49 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll 2015-12-09 19:38 - 2015-11-25 05:49 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-12-09 19:38 - 2015-11-25 05:49 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll 2015-12-09 19:38 - 2015-11-25 05:48 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll 2015-12-09 19:38 - 2015-11-25 05:48 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll 2015-12-09 19:38 - 2015-11-25 05:44 - 21872640 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-12-09 19:38 - 2015-11-25 05:42 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-12-09 19:38 - 2015-11-25 05:37 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-12-09 19:38 - 2015-11-25 05:36 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2015-12-09 19:38 - 2015-11-25 05:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2015-12-09 19:38 - 2015-11-25 05:35 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-12-09 19:38 - 2015-11-25 05:35 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe 2015-12-09 19:38 - 2015-11-25 05:34 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-12-09 19:38 - 2015-11-25 05:31 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll 2015-12-09 19:38 - 2015-11-25 05:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll 2015-12-09 19:38 - 2015-11-25 05:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2015-12-09 19:38 - 2015-11-25 05:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2015-12-09 19:38 - 2015-11-25 05:29 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2015-12-09 19:38 - 2015-11-25 05:29 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll 2015-12-09 19:38 - 2015-11-25 05:28 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-12-09 19:38 - 2015-11-25 05:28 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2015-12-09 19:38 - 2015-11-25 05:27 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-12-09 19:38 - 2015-11-25 05:26 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2015-12-09 19:38 - 2015-11-25 05:26 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-12-09 19:38 - 2015-11-25 05:25 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-12-09 19:38 - 2015-11-25 05:25 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2015-12-09 19:38 - 2015-11-25 05:23 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-12-09 19:38 - 2015-11-25 05:23 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-12-09 19:38 - 2015-11-25 05:23 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2015-12-09 19:38 - 2015-11-25 05:22 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2015-12-09 19:38 - 2015-11-25 05:22 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-12-09 19:38 - 2015-11-25 05:22 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll 2015-12-09 19:38 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll 2015-12-09 19:38 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL 2015-12-09 19:38 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL 2015-12-09 19:38 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL 2015-12-09 19:38 - 2015-11-25 05:19 - 01795584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-12-09 19:38 - 2015-11-25 05:19 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-12-09 19:38 - 2015-11-25 05:18 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2015-12-09 19:38 - 2015-11-25 05:17 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-12-09 19:38 - 2015-11-25 05:16 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2015-12-09 19:38 - 2015-11-25 05:16 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe 2015-12-09 19:38 - 2015-11-25 05:13 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-12-09 19:38 - 2015-11-25 05:11 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll 2015-12-09 19:38 - 2015-11-25 05:10 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-12-09 19:38 - 2015-11-25 05:10 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2015-12-09 19:38 - 2015-11-25 05:10 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-12-09 19:38 - 2015-11-25 05:10 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2015-12-09 19:38 - 2015-11-25 05:08 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2015-12-09 19:38 - 2015-11-25 05:07 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2015-12-09 19:38 - 2015-11-25 05:05 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-12-09 19:38 - 2015-11-25 05:04 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2015-12-09 19:38 - 2015-11-25 05:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll 2015-12-09 19:38 - 2015-11-25 05:04 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2015-12-09 19:38 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll 2015-12-09 19:38 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL 2015-12-09 19:38 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL 2015-12-09 19:38 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL 2015-12-09 19:38 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls 2015-12-09 19:38 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\system32\locale.nls 2015-12-09 19:37 - 2015-12-14 20:09 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-12-09 19:37 - 2015-12-09 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-12-09 19:37 - 2015-12-09 19:37 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-12-09 19:37 - 2015-12-09 19:37 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-12-09 19:37 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-12-09 19:37 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-12-09 19:37 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2015-12-09 19:19 - 2015-12-09 19:19 - 00422969 _____ C:\Users\Philipp\Desktop\hmI_07_MLW.pdf 2015-12-09 15:01 - 2015-12-09 15:01 - 00422969 _____ C:\Users\Philipp\Downloads\hmI_07_MLW.pdf 2015-12-09 11:56 - 2015-12-09 11:56 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Philipp\Downloads\SpyHunter-installer.exe 2015-12-09 11:52 - 2015-12-09 11:52 - 00000376 _____ C:\WINDOWS\SysWOW64\data.bin 2015-12-09 11:52 - 2015-12-09 11:52 - 00000042 _____ C:\WINDOWS\SysWOW64\Z 2015-12-09 11:52 - 2015-12-09 11:52 - 00000000 ____D C:\ProgramData\HWdMH 2015-12-08 15:35 - 2015-12-08 15:35 - 00003794 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2015-12-07 19:51 - 2015-12-07 19:51 - 01774232 _____ C:\Users\Philipp\Documents\Zeugnis *****.pdf 2015-12-07 17:48 - 2015-12-07 17:48 - 00025128 _____ C:\ProgramData\1449506890.bdinstall.bin 2015-12-07 16:44 - 2015-12-07 16:46 - 00000000 ____D C:\Users\Philipp\Downloads\ضربات صقور القوة الجوية بمقاتلات F16 2015-12-07 14:23 - 2015-12-07 14:32 - 567854937 _____ C:\Users\Philipp\Downloads\daa3d1 cd1.mp4 2015-12-06 23:52 - 2015-12-06 23:52 - 00000000 ____D C:\Users\Philipp\Downloads\DeusVisualizer v1.01 2015-12-06 22:51 - 2015-12-06 22:52 - 15343945 _____ C:\Users\Philipp\Downloads\DeusVisualizer v1.01.zip 2015-12-03 16:15 - 2015-12-03 16:15 - 00404024 _____ C:\Users\Philipp\Downloads\hmI_06_MLW.pdf 2015-11-30 18:38 - 2015-11-30 19:31 - 645605753 _____ C:\Users\Philipp\Downloads\GER Skinpack.zip 2015-11-30 18:36 - 2015-11-30 18:36 - 11069738 _____ C:\Users\Philipp\Downloads\Flakpanzer_IV_Wirbelwind.zip 2015-11-30 15:25 - 2015-11-30 15:25 - 00100734 _____ C:\Users\Philipp\Downloads\abschluss21-103-74-86-10511017-27-90-124-15-72-100-50-4096.pdf 2015-11-30 15:18 - 2015-11-30 15:18 - 01187039 _____ C:\Users\Philipp\Documents\Abiturzeugnis_kompremiert.pdf 2015-11-26 21:53 - 2015-11-26 21:54 - 00010943 _____ C:\Users\Philipp\Documents\Stundenplan.xlsx 2015-11-26 17:50 - 2015-11-26 17:50 - 00000000 ____D C:\Users\Philipp\Downloads\1 2015-11-26 17:46 - 2015-11-26 17:46 - 00000000 ____D C:\Users\Philipp\Downloads\ReShade_1.0_with_SweetFX_2.0_Beta_8 2015-11-26 14:04 - 2015-11-26 14:04 - 00396596 _____ C:\Users\Philipp\Downloads\hmI_05_MLW.pdf 2015-11-26 13:48 - 2015-11-26 13:48 - 01949837 _____ C:\Users\Philipp\Downloads\20151116_IuF_ONLINE.pdf 2015-11-26 13:35 - 2015-11-26 13:35 - 00521831 _____ C:\Users\Philipp\Downloads\Kapitel05.pdf 2015-11-26 11:37 - 2015-11-26 11:38 - 23470559 _____ C:\Users\Philipp\Downloads\Fallout_4_ReShade_2.0.1.rar 2015-11-26 11:34 - 2015-11-26 11:34 - 00029730 _____ C:\Users\Philipp\Downloads\SweetFX_Settings_Fallout 4_Mango's Config - A 1.0.txt 2015-11-24 11:24 - 2015-11-24 11:24 - 00419407 _____ C:\Users\Philipp\Downloads\hmI_tb04.pdf 2015-11-23 17:54 - 2015-11-23 17:55 - 38378909 _____ C:\Users\Philipp\Downloads\2014_CHEVY_IMPALA___IMPA_V1.4RX.zip 2015-11-23 16:00 - 2015-11-23 16:01 - 10491931 _____ C:\Users\Philipp\Downloads\Ford Police Interceptor 2012 V1.3.rar 2015-11-23 15:39 - 2015-11-23 15:39 - 08686465 _____ C:\Users\Philipp\Downloads\2010 LAPD Charger.rar 2015-11-23 00:12 - 2015-11-23 00:12 - 00000450 _____ C:\Users\Philipp\Downloads\pr0gramm-comments.user.js 2015-11-22 18:15 - 2015-11-12 19:37 - 00112712 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2015-11-21 10:40 - 2015-11-21 10:40 - 00324525 _____ C:\Users\Philipp\Downloads\Blatt4_Sol.pdf 2015-11-20 16:09 - 2015-11-20 16:09 - 00468921 _____ C:\Users\Philipp\Downloads\Kapitel04.pdf 2015-11-18 22:03 - 2015-11-18 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer Red Alert 2 2015-11-18 22:03 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2015-11-18 22:03 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2015-11-18 22:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2015-11-18 22:03 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2015-11-18 22:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2015-11-18 22:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2015-11-18 22:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2015-11-18 22:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2015-11-18 22:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2015-11-18 22:03 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2015-11-18 22:03 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2015-11-18 22:03 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2015-11-18 22:03 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2015-11-18 22:03 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2015-11-18 22:03 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2015-11-18 22:03 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2015-11-18 22:03 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2015-11-18 22:03 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2015-11-18 22:03 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2015-11-18 22:03 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2015-11-18 22:03 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2015-11-18 22:03 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2015-11-18 22:03 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2015-11-18 22:03 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2015-11-18 22:03 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2015-11-18 22:03 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2015-11-18 22:03 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2015-11-18 22:03 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2015-11-18 22:03 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2015-11-18 22:03 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2015-11-18 22:03 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2015-11-18 22:03 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2015-11-18 22:03 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2015-11-18 22:03 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2015-11-18 22:03 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2015-11-18 22:03 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2015-11-18 22:03 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2015-11-18 22:03 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2015-11-18 22:03 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2015-11-18 22:03 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2015-11-18 22:03 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2015-11-18 22:03 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2015-11-18 22:03 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2015-11-18 22:03 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2015-11-18 22:03 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2015-11-18 22:03 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2015-11-18 22:03 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2015-11-18 22:03 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2015-11-18 22:03 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2015-11-18 22:03 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2015-11-18 22:03 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2015-11-18 22:03 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2015-11-18 22:03 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2015-11-18 22:03 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2015-11-18 22:03 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2015-11-18 22:03 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2015-11-18 22:03 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2015-11-18 22:03 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2015-11-18 22:03 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2015-11-18 22:03 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2015-11-18 22:03 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2015-11-18 22:03 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2015-11-18 22:03 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2015-11-18 22:03 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2015-11-18 22:03 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2015-11-18 22:03 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2015-11-18 22:03 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2015-11-18 22:03 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2015-11-18 22:03 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2015-11-18 22:03 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2015-11-18 22:03 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2015-11-18 22:03 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2015-11-18 22:03 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2015-11-18 22:03 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2015-11-18 22:03 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2015-11-18 22:03 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2015-11-18 22:03 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2015-11-18 22:03 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2015-11-18 22:03 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2015-11-18 22:03 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2015-11-18 22:03 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2015-11-18 22:03 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2015-11-18 22:03 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2015-11-18 22:03 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2015-11-18 22:03 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2015-11-18 22:03 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2015-11-18 22:03 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2015-11-18 22:03 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2015-11-18 22:03 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2015-11-18 22:03 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2015-11-18 22:03 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2015-11-18 22:03 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2015-11-18 22:03 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2015-11-18 20:24 - 2015-11-18 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair Utility Engine 2015-11-18 20:24 - 2015-11-18 20:24 - 00000000 ____D C:\Program Files (x86)\Corsair 2015-11-17 18:56 - 2015-11-17 18:56 - 00423189 _____ C:\Users\Philipp\Downloads\hmI_04_MLW.pdf 2015-11-17 11:34 - 2015-11-17 11:34 - 00682531 _____ C:\Users\Philipp\Downloads\IuF_Übung_1_L_Korrektur.pdf 2015-11-17 11:34 - 2015-11-17 11:34 - 00369610 _____ C:\Users\Philipp\Downloads\Blatt2_Sol-Korrektur.pdf 2015-11-17 11:34 - 2015-11-17 11:34 - 00325081 _____ C:\Users\Philipp\Downloads\Blatt3_Sol.pdf 2015-11-17 11:33 - 2015-11-17 11:33 - 00286170 _____ C:\Users\Philipp\Downloads\Vorlesung3_Rentenrechnung.pdf 2015-11-17 11:33 - 2015-11-17 11:33 - 00265945 _____ C:\Users\Philipp\Downloads\Finanzmathematik - Vorlesung 2.pdf 2015-11-16 20:47 - 2015-11-16 20:47 - 00000000 ____D C:\Users\Philipp\AppData\Local\Microsoft Help 2015-11-16 19:28 - 2015-12-09 20:28 - 00001160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk 2015-11-16 19:28 - 2015-11-16 19:29 - 00000000 ____D C:\Users\Philipp\AppData\Local\paint.net 2015-11-16 19:28 - 2015-11-16 19:28 - 00000000 ____D C:\Program Files\paint.net 2015-11-16 19:08 - 2015-11-16 19:09 - 00000000 ____D C:\Users\Philipp\Desktop\Praktikum 2015-11-15 13:26 - 2015-12-09 20:28 - 00001158 _____ C:\Users\Philipp\Desktop\Cheat Engine.lnk 2015-11-15 13:26 - 2015-11-15 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4 2015-11-15 13:26 - 2015-11-15 13:26 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.4 2015-11-14 16:34 - 2015-11-14 16:34 - 03157155 _____ C:\Users\Philipp\Downloads\Philipp1.pdf 2015-11-14 15:35 - 2015-11-14 15:35 - 00000000 ____D C:\Program Files (x86)\Java ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-12-14 20:17 - 2015-07-30 16:40 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Spotify 2015-12-14 19:45 - 2015-07-30 16:21 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-14 19:36 - 2015-09-20 18:51 - 00000000 ____D C:\Program Files\Bitdefender Agent 2015-12-14 19:01 - 2015-09-20 18:57 - 00087912 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys 2015-12-14 17:34 - 2015-09-15 23:38 - 00004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{97561899-E9AD-4A43-B7E0-2ACA28AA10FA} 2015-12-14 13:36 - 2015-07-30 23:28 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe 2015-12-14 13:36 - 2015-07-30 23:28 - 00214392 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0 2015-12-14 12:35 - 2015-07-30 16:42 - 00000000 ____D C:\Users\Philipp\AppData\Local\Spotify 2015-12-14 11:10 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-14 11:03 - 2015-08-30 16:14 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2015-12-14 11:02 - 2015-07-30 16:40 - 00000000 ____D C:\ProgramData\Origin 2015-12-14 11:02 - 2015-07-30 16:30 - 00000000 ____D C:\Program Files (x86)\Steam 2015-12-14 11:01 - 2015-07-30 16:21 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-14 01:25 - 2015-09-18 13:15 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\vlc 2015-12-13 22:47 - 2015-07-30 16:46 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TS3Client 2015-12-13 19:48 - 2015-07-30 17:11 - 00771100 _____ C:\WINDOWS\system32\perfh007.dat 2015-12-13 19:48 - 2015-07-30 17:11 - 00153964 _____ C:\WINDOWS\system32\perfc007.dat 2015-12-13 19:48 - 2015-07-30 17:08 - 00000000 ____D C:\WINDOWS\INF 2015-12-13 19:48 - 2015-07-30 16:21 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-13 17:53 - 2015-11-08 20:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\JDownloader v2.0 2015-12-12 19:19 - 2015-07-30 16:47 - 00011447 _____ C:\Users\Philipp\Documents\Mappe1.xlsx 2015-12-12 12:22 - 2015-07-30 17:09 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-11 17:44 - 2015-07-30 17:09 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2015-12-11 17:44 - 2015-07-30 17:09 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-12-11 17:30 - 2015-07-30 20:54 - 00000000 ____D C:\Users\Philipp\AppData\LocalLow\Temp 2015-12-11 15:21 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\rescache 2015-12-11 00:01 - 2015-07-30 17:04 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-12-11 00:01 - 2015-07-30 16:14 - 00000000 ____D C:\ProgramData\NVIDIA 2015-12-11 00:01 - 2015-07-30 16:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-12-11 00:01 - 2015-07-30 15:45 - 00036621 _____ C:\bdlog.txt 2015-12-10 18:33 - 2015-07-30 16:13 - 00341016 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-12-10 14:34 - 2015-07-30 16:16 - 00000000 ____D C:\Users\Philipp 2015-12-10 14:33 - 2015-09-19 17:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-12-10 14:33 - 2015-09-19 17:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-12-10 14:33 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-12-10 14:33 - 2015-07-30 17:04 - 00000000 ____D C:\Windows 2015-12-10 13:10 - 2015-09-19 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-12-10 13:10 - 2015-07-30 17:06 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-10 13:09 - 2015-08-12 10:28 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-12-10 13:07 - 2015-08-12 10:28 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-12-10 13:06 - 2015-07-30 17:12 - 00000000 ___DC C:\WINDOWS\Panther 2015-12-10 13:04 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT 2015-12-09 20:34 - 2015-07-30 18:01 - 712515799 _____ C:\WINDOWS\MEMORY.DMP 2015-12-09 20:34 - 2015-07-30 18:01 - 00000000 ____D C:\WINDOWS\Minidump 2015-12-09 20:28 - 2015-11-08 20:55 - 00002197 _____ C:\Users\Philipp\Desktop\JDownloader 2.lnk 2015-12-09 20:28 - 2015-10-29 17:58 - 00001447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-12-09 20:28 - 2015-10-29 17:58 - 00001378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-12-09 20:28 - 2015-10-26 14:03 - 00000690 _____ C:\Users\Public\Desktop\FIFA 15.lnk 2015-12-09 20:28 - 2015-10-24 12:25 - 00001081 _____ C:\Users\Philipp\Desktop\Eclipse Java Mars.lnk 2015-12-09 20:28 - 2015-10-20 06:02 - 00001099 _____ C:\Users\Philipp\Desktop\RAGEPluginHook.exe - Shortcut.lnk 2015-12-09 20:28 - 2015-10-19 19:08 - 00001308 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk 2015-12-09 20:28 - 2015-10-19 19:08 - 00001306 _____ C:\Users\Philipp\Desktop\OpenIV.lnk 2015-12-09 20:28 - 2015-10-19 16:45 - 00000750 _____ C:\Users\Public\Desktop\Grand Theft Auto V.lnk 2015-12-09 20:28 - 2015-10-05 15:21 - 00002646 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2015-12-09 20:28 - 2015-09-20 18:57 - 00002246 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk 2015-12-09 20:28 - 2015-07-31 12:14 - 00000765 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\A0001.lnk 2015-12-09 20:28 - 2015-07-31 12:13 - 00000480 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Musik (F).lnk 2015-12-09 20:28 - 2015-07-31 12:13 - 00000479 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lokaler Datenträger (C).lnk 2015-12-09 20:28 - 2015-07-31 12:13 - 00000437 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spiele (D).lnk 2015-12-09 20:28 - 2015-07-31 12:13 - 00000431 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lokaler Datenträger (E).lnk 2015-12-09 20:28 - 2015-07-30 18:54 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-12-09 20:28 - 2015-07-30 17:16 - 00001209 _____ C:\Users\Philipp\Desktop\War Thunder.lnk 2015-12-09 20:28 - 2015-07-30 16:42 - 00001846 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2015-12-09 20:28 - 2015-07-30 16:18 - 00002393 _____ C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-12-09 20:28 - 2015-07-10 12:01 - 00002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk 2015-12-09 20:28 - 2015-07-10 12:01 - 00002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk 2015-12-09 20:28 - 2015-07-10 12:01 - 00002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Devices Flow.lnk 2015-12-09 20:28 - 2015-07-10 12:00 - 00002325 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk 2015-12-09 20:28 - 2015-07-10 12:00 - 00001590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk 2015-12-09 20:28 - 2015-07-10 12:00 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk 2015-12-09 20:27 - 2015-07-30 17:09 - 00000000 ____D C:\WINDOWS\ELAMBKUP 2015-12-09 18:30 - 2015-07-30 11:50 - 00000000 ___RD C:\Users\Philipp\OneDrive 2015-12-09 14:28 - 2015-07-30 21:30 - 00000000 ____D C:\Users\Philipp\Documents\Outlook-Dateien 2015-12-09 04:39 - 2015-07-30 16:45 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-12-08 20:40 - 2015-07-30 16:21 - 00004208 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-08 20:40 - 2015-07-30 16:21 - 00003976 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-07 19:28 - 2015-07-30 17:04 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM 2015-12-06 20:36 - 2015-08-04 23:09 - 00000000 ____D C:\Users\Philipp\AppData\Local\CyberGhost 2015-12-06 20:36 - 2015-07-30 16:17 - 00000000 ____D C:\Users\Philipp\AppData\Local\VirtualStore 2015-12-03 22:41 - 2015-08-06 19:17 - 00000080 _____ C:\Users\Philipp\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2015-12-02 01:10 - 2015-07-30 16:37 - 00000000 ____D C:\Users\Philipp\AppData\Local\Steam 2015-12-02 01:03 - 2015-07-30 16:40 - 00000000 ____D C:\Program Files (x86)\Origin 2015-12-01 01:32 - 2015-07-30 17:10 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-12-01 01:32 - 2015-07-30 17:10 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-30 15:05 - 2015-07-30 16:16 - 00000000 ____D C:\Users\Philipp\AppData\Local\Packages 2015-11-22 18:15 - 2015-10-08 14:17 - 00000000 ____D C:\Users\Philipp\AppData\Local\NVIDIA Corporation 2015-11-17 19:16 - 2015-10-21 19:28 - 00010973 _____ C:\Users\Philipp\Desktop\Stundenplan.xlsx 2015-11-14 15:46 - 2015-10-24 12:17 - 00000000 ____D C:\ProgramData\Oracle 2015-11-14 15:35 - 2015-10-24 12:17 - 00000000 ____D C:\Users\Philipp\.oracle_jre_usage 2015-11-14 15:35 - 2015-10-24 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-11-14 15:35 - 2015-10-24 12:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-09-20 18:57 - 2015-09-20 18:57 - 0421166 _____ () C:\ProgramData\1442771734.bdinstall.bin 2015-10-01 12:38 - 2015-10-01 12:38 - 0429709 _____ () C:\ProgramData\1443699314.bdinstall.bin 2015-10-05 19:53 - 2015-10-05 19:53 - 0024812 _____ () C:\ProgramData\1444071187.bdinstall.bin 2015-10-19 14:46 - 2015-10-19 14:46 - 0092151 _____ () C:\ProgramData\1445262410.bdinstall.bin 2015-12-07 17:48 - 2015-12-07 17:48 - 0025128 _____ () C:\ProgramData\1449506890.bdinstall.bin Einige Dateien in TEMP: ==================== C:\Users\Philipp\AppData\Local\Temp\proxy_vole3934976256982894983.dll C:\Users\Philipp\AppData\Local\Temp\proxy_vole7286617386779439636.dll C:\Users\Philipp\AppData\Local\Temp\proxy_vole7824626371459855221.dll C:\Users\Philipp\AppData\Local\Temp\sfamcc00001.dll C:\Users\Philipp\AppData\Local\Temp\sfareca00001.dll Einige mit null Byte Größe Dateien/Ordner: ========================== C:\Windows\System32\BDSandBoxUISkin32.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-12-10 17:33 ==================== Ende von FRST.txt ============================ |
|
| Themen zu Browser Hijacker yoursites123.com - wie entfernen? |
| .com, adobe, alert, browser, cyberghost, defender, dnsapi.dll, einstellungen, entfernen, explorer, google, homepage, iexplore.exe, internet explorer, launch, malware, mozilla, musik, onedrive, problem, proxy, prozesse, realtek, registry, rundll, services.exe, svchost.exe, virus, windows |
Linear-Darstellung
