Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Hijacker Virus .ru

Hijacker Virus .ru


Plagegeister aller Art und deren Bekämpfung: Hijacker Virus .ru

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 16.12.2015, 19:56   #1
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Hallo, hoffe hier kann mir jemand weiterhelfen bin am Ende meines Latein..

Folgendes: Fahre den Rechner hoch sobald mein Desktop da ist öffnet sich Firefox z.B. mit der Funday24.ru Seite. Laut Google is das ein Hijacker Virus.

Meine Mühe dies zu beheben: Sämtliche unbekannte Software in der Systemsteuerung deinstalliert, registry durchsucht nach auffälligen Einträgen, Ordner gesucht und gelöscht, Avira, Norton, Adw Cleaner, Malwarebytes, Emsisoft drüber laufen lassen und die Befunde entfernt. IE Explorer und Firefox addons durchsucht und Browser zurückgesetzt. Windows 10 apps durchsucht..

Weiß einfach nicht mehr weiter..mein Gefühl sagt mir SSD Platte formatieren und alles neu aufspielen..

Trotzdem hoffe ich vllt noch auf Hilfe und die Formatierung zu umgehen

Alt 16.12.2015, 20:48   #2
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru




Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
  • Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
  • Bitte kein Crossposting (posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
  • Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
  • Poste die Logfiles direkt in Deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst.



Los geht's:

Schritt 1


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 16.12.2015, 21:44   #3
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:16-12-2015 03
durchgeführt von Marcel (Administrator) auf SC0P3 (16-12-2015 21:36:11)
Gestartet von C:\Users\Marcel\Desktop
Geladene Profile: Marcel (Verfügbare Profile: Marcel)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft anti-malware\a2guard.exe [9135984 2015-12-15] (Emsisoft Ltd)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [592704 2015-09-29] (Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Run: [mmrmjqzyic] => explorer "hxxp://ahvorit.ru/?utm_source=uoua03n&utm_content=dca1dc1505a75f65d66478110f0bc4cc&utm_term=E77AC59F0CF2E0D5322A81B404C75889" <===== ACHTUNG
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2014-08-05]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{75a00132-d52e-47d0-9f3d-b3ba249de93b}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e98e3751-4041-4802-9c3f-29c0f6c14567}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.de/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-15] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-15] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128
FF NewTab: hxxps://www.google.de/
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxps://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-11] ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-11] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-06-29] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-15] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\searchplugins\google-lavasoft.xml [2015-12-15]
FF Extension: AdBeaver - C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\Extensions\adbeaverSG@adbeaver.org.xpi [2015-12-16]
FF Extension: LavaFox V2-Blue - C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\Extensions\djziggy@gmail.com [2015-12-15]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon => nicht gefunden

Chrome: 
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [10768560 2015-12-15] (Emsisoft Ltd)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-19] (Intel Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation)
S3 Origin Client Service; D:\Orgin\Origin\OriginClientService.exe [2099720 2015-11-13] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-12] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-19] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
R1 epp; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [123992 2015-10-23] (Emsisoft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-15] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-05-27] ()
R3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\drivers\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-16 21:36 - 2015-12-16 21:36 - 00018176 _____ C:\Users\Marcel\Desktop\FRST.txt
2015-12-16 21:36 - 2015-12-16 21:36 - 00000000 ____D C:\FRST
2015-12-16 21:35 - 2015-12-16 21:35 - 02370048 _____ (Farbar) C:\Users\Marcel\Desktop\FRST64.exe
2015-12-15 21:36 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Sun
2015-12-15 21:36 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel\.oracle_jre_usage
2015-12-15 21:36 - 2015-12-15 21:35 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-12-15 21:36 - 2014-08-27 21:39 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2015-12-15 21:35 - 2015-12-15 21:35 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-15 20:59 - 2015-12-15 21:32 - 00000000 ____D C:\Users\Marcel\AppData\Local\NPE
2015-12-15 20:51 - 2015-12-15 21:57 - 00000000 ____D C:\ProgramData\Norton
2015-12-15 20:51 - 2015-12-15 20:51 - 00000000 ____D C:\ProgramData\NortonInstaller
2015-12-15 20:22 - 2015-12-15 20:24 - 00000000 ____D C:\searchplugins
2015-12-15 18:53 - 2015-12-15 18:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-12-15 16:13 - 2015-12-15 16:14 - 01740288 _____ C:\Users\Marcel\Downloads\adwcleaner_5.025.exe
2015-12-15 15:21 - 2015-12-15 15:28 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Nico Mak Computing
2015-12-15 15:04 - 2015-12-15 15:04 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-15 14:12 - 2015-12-15 14:12 - 00000000 ____D C:\ProgramData\Emsisoft
2015-12-15 14:00 - 2015-12-16 21:36 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2015-12-15 14:00 - 2015-12-15 14:00 - 00000937 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-12-15 14:00 - 2015-12-15 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-12-14 16:54 - 2015-12-15 21:57 - 00000000 ____D C:\Program Files (x86)\Avira
2015-12-14 16:52 - 2015-12-14 16:52 - 00000000 ____D C:\Users\Marcel\AppData\Local\ActiveSync
2015-12-14 16:50 - 2015-12-14 16:50 - 00000020 ___SH C:\Users\Marcel\ntuser.ini
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-14 16:48 - 2015-12-16 17:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-14 16:46 - 2015-12-14 16:46 - 00000282 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{143FECAF-CC12-4CBE-9202-218EA7D9DDFE}.job
2015-12-14 16:45 - 2015-12-14 16:45 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-14 16:45 - 2015-12-14 16:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-12-14 16:45 - 2015-12-14 16:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-12-14 16:44 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel
2015-12-14 16:44 - 2015-12-14 16:45 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Vorlagen
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Startmenü
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Netzwerkumgebung
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Lokale Einstellungen
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Eigene Dateien
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Druckumgebung
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Videos
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Musik
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Bilder
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Local\Verlauf
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Local\Anwendungsdaten
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Anwendungsdaten
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-12-14 16:43 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-14 16:42 - 2015-12-16 17:36 - 02087808 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-14 16:42 - 2015-12-14 16:42 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-12-14 16:41 - 2015-12-14 17:03 - 00000000 ____D C:\Program Files (x86)\Razer
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\Razer
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____D C:\Program Files\Realtek
2015-12-14 16:41 - 2015-11-24 20:32 - 06358648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 02983032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 02554672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00938616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-12-14 16:41 - 2015-11-24 20:32 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-12-14 16:41 - 2015-11-23 21:35 - 06049858 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-12-14 16:40 - 2015-12-14 18:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-14 16:40 - 2015-12-14 16:46 - 00335048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-14 16:39 - 2015-12-14 16:39 - 00000000 ____D C:\Windows.old
2015-12-14 16:38 - 2015-12-14 16:38 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-14 16:38 - 2015-12-14 16:38 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-14 16:38 - 2015-12-14 16:38 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-14 16:38 - 2015-12-14 16:38 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-14 16:38 - 2015-12-14 16:38 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-14 16:38 - 2015-12-14 16:38 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-14 16:38 - 2015-12-14 16:38 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-14 16:37 - 2015-12-14 16:37 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-14 16:37 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-14 16:37 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-14 16:37 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-14 16:37 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-14 16:37 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files\MSBuild
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\inetpub
2015-12-14 16:32 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-14 16:32 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-14 16:32 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-14 15:26 - 2015-12-14 15:26 - 00000376 _____ C:\WINDOWS\SysWOW64\data.bin
2015-12-14 15:21 - 2015-12-14 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-14 15:21 - 2015-12-14 15:21 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-14 15:21 - 2015-12-14 15:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-14 14:45 - 2015-12-14 21:04 - 00000000 ____D C:\WINDOWS\system32\log
2015-12-14 13:37 - 2015-12-14 13:41 - 00000000 ___HD C:\$SysReset
2015-12-14 13:30 - 2015-12-14 13:30 - 00000000 ____D C:\Program Files\ReviverSoft
2015-12-14 13:29 - 2015-12-15 20:22 - 00002736 _____ C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini
2015-12-14 13:29 - 2015-12-15 20:22 - 00002736 _____ C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2015-12-14 13:29 - 2015-12-14 13:30 - 00000000 ____D C:\ProgramData\TuneUp Software
2015-12-14 13:29 - 2015-12-14 13:29 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\TuneUp Software
2015-12-14 13:29 - 2015-12-14 13:29 - 00000000 ____D C:\Users\Marcel\AppData\Local\TuneUp Software
2015-12-14 13:28 - 2015-12-15 20:22 - 00425744 _____ (Lavasoft Limited) C:\WINDOWS\system32\LavasoftTcpService64.dll
2015-12-14 13:28 - 2015-12-15 20:22 - 00345360 _____ (Lavasoft Limited) C:\WINDOWS\SysWOW64\LavasoftTcpService.dll
2015-12-14 13:26 - 2015-12-14 13:26 - 00000000 ____D C:\Users\Marcel\Mozilla
2015-12-13 23:11 - 2015-12-13 23:11 - 00000000 ____D C:\Users\Public\Documents\Baidu
2015-12-13 23:09 - 2015-12-14 15:27 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Opera Software
2015-12-13 23:09 - 2015-12-14 15:27 - 00000000 ____D C:\Users\Marcel\AppData\Local\Opera Software
2015-12-13 23:07 - 2015-12-13 23:09 - 00000000 ____D C:\Users\Marcel\AppData\Local\Balance Video
2015-12-13 23:06 - 2015-12-15 13:41 - 00000000 ____D C:\Users\Marcel\AppData\LocalLow\Company
2015-12-13 23:06 - 2015-12-14 16:48 - 00002284 _____ C:\WINDOWS\System32\Tasks\Tenabicb
2015-12-13 23:06 - 2015-12-13 23:06 - 00000000 ____D C:\Users\Marcel\AppData\Local\Tempfolder
2015-12-13 23:06 - 2015-12-13 23:05 - 00000895 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-12-13 23:01 - 2015-12-13 23:05 - 00000000 ____D C:\Users\Public\Documents\Stronghold AntiMalware
2015-12-13 22:53 - 2015-11-24 19:42 - 00102704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-12-13 22:52 - 2015-11-26 01:34 - 11228488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-13 22:52 - 2015-11-25 00:07 - 42913912 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 37882672 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 22345336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 18487360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 18389624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 16561320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 15933400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 15839392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 13533416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 12870384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 03540360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 03126800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 02876536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 02496816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435906.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435906.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01016360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00877872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00539464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00501056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00446768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00445400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00422752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00413816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00369272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-12-13 22:52 - 2015-11-25 00:07 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00034494 _____ C:\WINDOWS\system32\nvinfo.pb
2015-12-13 22:47 - 2015-12-14 21:17 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-13 22:47 - 2015-12-14 16:50 - 00001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-13 22:47 - 2015-12-13 22:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-13 22:41 - 2015-11-12 19:37 - 00112712 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2015-12-13 22:27 - 2015-12-13 22:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-13 22:20 - 2015-12-13 22:20 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SECRV
2015-12-13 22:15 - 2015-12-14 16:44 - 00000000 ____D C:\WINDOWS\system32\goij
2015-12-11 21:22 - 2015-12-11 21:22 - 00000000 _____ C:\autoexec.bat
2015-11-26 21:50 - 2015-10-30 16:58 - 00000000 ____D C:\Users\Marcel\Desktop\Opera.exe
2015-11-25 12:19 - 2015-11-16 04:54 - 01905456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435900.dll
2015-11-25 12:19 - 2015-11-16 04:54 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435900.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-16 21:36 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-16 21:25 - 2014-08-05 13:40 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-16 20:35 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-16 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-16 17:41 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-16 17:39 - 2015-10-21 19:14 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71A4A4D4-B54F-4EA6-A1BF-27340EA11EAE}
2015-12-16 17:36 - 2015-10-30 19:35 - 00888452 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-16 17:36 - 2015-10-30 19:35 - 00197278 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-15 22:14 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-15 21:57 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-12-15 21:57 - 2015-10-30 07:28 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-15 21:40 - 2014-08-05 10:04 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-15 21:38 - 2014-08-27 21:39 - 00000000 ____D C:\ProgramData\Oracle
2015-12-15 21:37 - 2014-08-05 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-15 21:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-15 18:45 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-15 14:18 - 2015-08-18 20:43 - 00000000 ____D C:\Users\Marcel\AppData\Local\ElevatedDiagnostics
2015-12-15 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-14 17:05 - 2015-07-30 19:48 - 00000000 ____D C:\Users\Marcel\AppData\Local\Packages
2015-12-14 17:04 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-14 16:51 - 2015-07-30 19:50 - 00002386 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-14 16:51 - 2015-07-30 19:50 - 00000000 ___RD C:\Users\Marcel\OneDrive
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-14 16:50 - 2015-07-30 19:48 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-14 16:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-14 16:49 - 2015-07-30 19:27 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-14 16:49 - 2015-07-30 18:55 - 00019976 _____ C:\WINDOWS\diagerr.xml
2015-12-14 16:49 - 2015-07-30 18:55 - 00019053 _____ C:\WINDOWS\diagwrn.xml
2015-12-14 16:48 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-14 16:48 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-14 16:48 - 2014-12-24 19:57 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-14 16:48 - 2014-10-09 20:27 - 00002298 _____ C:\WINDOWS\System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51}
2015-12-14 16:48 - 2014-08-05 13:40 - 00003142 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-14 16:48 - 2014-08-05 11:13 - 00002536 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2015-12-14 16:45 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-14 16:45 - 2015-03-24 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
2015-12-14 16:45 - 2014-09-04 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-12-14 16:45 - 2014-08-31 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-12-14 16:45 - 2014-08-26 10:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-12-14 16:45 - 2014-08-06 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2015-12-14 16:45 - 2014-08-05 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-12-14 16:45 - 2014-08-05 13:57 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2015-12-14 16:45 - 2014-08-05 13:53 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-14 16:45 - 2014-08-05 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-14 16:45 - 2014-08-05 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-12-14 16:45 - 2014-08-05 11:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-14 16:45 - 2014-08-05 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2015-12-14 16:45 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-14 16:44 - 2015-11-05 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-14 16:44 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-14 16:44 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-14 16:44 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-14 16:44 - 2014-08-05 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2015-12-14 16:44 - 2014-08-05 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2015-12-14 16:44 - 2014-08-05 10:05 - 00000000 ____D C:\Program Files\Intel
2015-12-14 16:44 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-12-14 16:41 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-14 16:41 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-14 16:40 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-14 16:40 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-14 16:39 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-14 16:39 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-12-14 16:32 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-12-14 16:32 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-12-14 16:32 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-12-14 16:32 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-12-14 16:24 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-14 14:52 - 2015-11-05 14:49 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Skype
2015-12-14 14:52 - 2014-08-05 16:38 - 00000000 ____D C:\Users\Marcel\AppData\Local\Microsoft Help
2015-12-13 23:09 - 2015-06-08 00:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-13 22:41 - 2014-08-05 13:32 - 00001450 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-12-13 22:41 - 2014-08-05 13:31 - 00000000 ____D C:\Users\Marcel\AppData\Local\NVIDIA Corporation
2015-12-13 22:35 - 2015-11-13 15:07 - 00000000 ____D C:\Users\Marcel\AppData\Local\SystemDir
2015-12-13 21:42 - 2014-08-05 10:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-11 21:34 - 2015-11-13 14:29 - 00000000 ___HD C:\Users\Marcel\AppData\Roaming\w5riW6zOQCSY9lKg
2015-12-09 04:39 - 2010-11-21 04:27 - 00301728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-29 16:21 - 2015-04-07 19:19 - 00000000 ____D C:\Users\Marcel\Documents\VAC Wochenberichte
2015-11-26 14:56 - 2014-08-05 20:27 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SoftGrid Client
2015-11-23 19:10 - 2014-08-05 10:33 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-20 15:03 - 2015-11-13 14:59 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SysHelp
2015-11-20 15:03 - 2015-11-13 14:29 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\PPkuWLK8XYKvqKio

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-03-24 19:28 - 2015-04-05 20:34 - 0011704 _____ () C:\Users\Marcel\AppData\Local\Temp-log.txt
2015-11-13 14:59 - 2015-11-13 14:59 - 0000006 ____S () C:\ProgramData\2d96cd46aec226b573de1a822380bfbea6fa64f3

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-14 16:40

==================== Ende von FRST.txt ============================
__________________
Alt 16.12.2015, 21:48   #4
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


FRST Logfile:
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:16-12-2015 03
durchgeführt von Marcel (Administrator) auf SC0P3 (16-12-2015 21:36:11)
Gestartet von C:\Users\Marcel\Desktop
Geladene Profile: Marcel (Verfügbare Profile: Marcel)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft anti-malware\a2guard.exe [9135984 2015-12-15] (Emsisoft Ltd)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [592704 2015-09-29] (Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Run: [mmrmjqzyic] => explorer "hxxp://ahvorit.ru/?utm_source=uoua03n&utm_content=dca1dc1505a75f65d66478110f0bc4cc&utm_term=E77AC59F0CF2E0D5322A81B404C75889" <===== ACHTUNG
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2014-08-05]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{75a00132-d52e-47d0-9f3d-b3ba249de93b}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e98e3751-4041-4802-9c3f-29c0f6c14567}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.de/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-15] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-15] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128
FF NewTab: hxxps://www.google.de/
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxps://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-11] ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-11] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-06-29] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-15] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\searchplugins\google-lavasoft.xml [2015-12-15]
FF Extension: AdBeaver - C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\Extensions\adbeaverSG@adbeaver.org.xpi [2015-12-16]
FF Extension: LavaFox V2-Blue - C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\Extensions\djziggy@gmail.com [2015-12-15]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon => nicht gefunden

Chrome: 
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [10768560 2015-12-15] (Emsisoft Ltd)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-12] (NVIDIA Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-19] (Intel Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-12] (NVIDIA Corporation)
S3 Origin Client Service; D:\Orgin\Origin\OriginClientService.exe [2099720 2015-11-13] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-12] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-19] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
R1 epp; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [123992 2015-10-23] (Emsisoft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-15] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-05-27] ()
R3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\drivers\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-16 21:36 - 2015-12-16 21:36 - 00018176 _____ C:\Users\Marcel\Desktop\FRST.txt
2015-12-16 21:36 - 2015-12-16 21:36 - 00000000 ____D C:\FRST
2015-12-16 21:35 - 2015-12-16 21:35 - 02370048 _____ (Farbar) C:\Users\Marcel\Desktop\FRST64.exe
2015-12-15 21:36 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Sun
2015-12-15 21:36 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel\.oracle_jre_usage
2015-12-15 21:36 - 2015-12-15 21:35 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-12-15 21:36 - 2014-08-27 21:39 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2015-12-15 21:35 - 2015-12-15 21:35 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-15 20:59 - 2015-12-15 21:32 - 00000000 ____D C:\Users\Marcel\AppData\Local\NPE
2015-12-15 20:51 - 2015-12-15 21:57 - 00000000 ____D C:\ProgramData\Norton
2015-12-15 20:51 - 2015-12-15 20:51 - 00000000 ____D C:\ProgramData\NortonInstaller
2015-12-15 20:22 - 2015-12-15 20:24 - 00000000 ____D C:\searchplugins
2015-12-15 18:53 - 2015-12-15 18:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-12-15 16:13 - 2015-12-15 16:14 - 01740288 _____ C:\Users\Marcel\Downloads\adwcleaner_5.025.exe
2015-12-15 15:21 - 2015-12-15 15:28 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Nico Mak Computing
2015-12-15 15:04 - 2015-12-15 15:04 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-15 14:12 - 2015-12-15 14:12 - 00000000 ____D C:\ProgramData\Emsisoft
2015-12-15 14:00 - 2015-12-16 21:36 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2015-12-15 14:00 - 2015-12-15 14:00 - 00000937 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-12-15 14:00 - 2015-12-15 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-12-14 16:54 - 2015-12-15 21:57 - 00000000 ____D C:\Program Files (x86)\Avira
2015-12-14 16:52 - 2015-12-14 16:52 - 00000000 ____D C:\Users\Marcel\AppData\Local\ActiveSync
2015-12-14 16:50 - 2015-12-14 16:50 - 00000020 ___SH C:\Users\Marcel\ntuser.ini
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-14 16:48 - 2015-12-16 17:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-14 16:46 - 2015-12-14 16:46 - 00000282 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{143FECAF-CC12-4CBE-9202-218EA7D9DDFE}.job
2015-12-14 16:45 - 2015-12-14 16:45 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-14 16:45 - 2015-12-14 16:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-12-14 16:45 - 2015-12-14 16:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-12-14 16:44 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel
2015-12-14 16:44 - 2015-12-14 16:45 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Vorlagen
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Startmenü
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Netzwerkumgebung
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Lokale Einstellungen
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Eigene Dateien
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Druckumgebung
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Videos
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Musik
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Bilder
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Local\Verlauf
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Local\Anwendungsdaten
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Anwendungsdaten
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-12-14 16:43 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-14 16:42 - 2015-12-16 17:36 - 02087808 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-14 16:42 - 2015-12-14 16:42 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-12-14 16:41 - 2015-12-14 17:03 - 00000000 ____D C:\Program Files (x86)\Razer
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\Razer
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____D C:\Program Files\Realtek
2015-12-14 16:41 - 2015-11-24 20:32 - 06358648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 02983032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 02554672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00938616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-12-14 16:41 - 2015-11-24 20:32 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-12-14 16:41 - 2015-11-23 21:35 - 06049858 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-12-14 16:40 - 2015-12-14 18:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-14 16:40 - 2015-12-14 16:46 - 00335048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-14 16:39 - 2015-12-14 16:39 - 00000000 ____D C:\Windows.old
2015-12-14 16:38 - 2015-12-14 16:38 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-14 16:38 - 2015-12-14 16:38 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-14 16:38 - 2015-12-14 16:38 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-14 16:38 - 2015-12-14 16:38 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-14 16:38 - 2015-12-14 16:38 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-14 16:38 - 2015-12-14 16:38 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-14 16:38 - 2015-12-14 16:38 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-14 16:37 - 2015-12-14 16:37 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-14 16:37 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-14 16:37 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-14 16:37 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-14 16:37 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-14 16:37 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files\MSBuild
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\inetpub
2015-12-14 16:32 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-14 16:32 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-14 16:32 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-14 15:26 - 2015-12-14 15:26 - 00000376 _____ C:\WINDOWS\SysWOW64\data.bin
2015-12-14 15:21 - 2015-12-14 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-14 15:21 - 2015-12-14 15:21 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-14 15:21 - 2015-12-14 15:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-14 14:45 - 2015-12-14 21:04 - 00000000 ____D C:\WINDOWS\system32\log
2015-12-14 13:37 - 2015-12-14 13:41 - 00000000 ___HD C:\$SysReset
2015-12-14 13:30 - 2015-12-14 13:30 - 00000000 ____D C:\Program Files\ReviverSoft
2015-12-14 13:29 - 2015-12-15 20:22 - 00002736 _____ C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini
2015-12-14 13:29 - 2015-12-15 20:22 - 00002736 _____ C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2015-12-14 13:29 - 2015-12-14 13:30 - 00000000 ____D C:\ProgramData\TuneUp Software
2015-12-14 13:29 - 2015-12-14 13:29 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\TuneUp Software
2015-12-14 13:29 - 2015-12-14 13:29 - 00000000 ____D C:\Users\Marcel\AppData\Local\TuneUp Software
2015-12-14 13:28 - 2015-12-15 20:22 - 00425744 _____ (Lavasoft Limited) C:\WINDOWS\system32\LavasoftTcpService64.dll
2015-12-14 13:28 - 2015-12-15 20:22 - 00345360 _____ (Lavasoft Limited) C:\WINDOWS\SysWOW64\LavasoftTcpService.dll
2015-12-14 13:26 - 2015-12-14 13:26 - 00000000 ____D C:\Users\Marcel\Mozilla
2015-12-13 23:11 - 2015-12-13 23:11 - 00000000 ____D C:\Users\Public\Documents\Baidu
2015-12-13 23:09 - 2015-12-14 15:27 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Opera Software
2015-12-13 23:09 - 2015-12-14 15:27 - 00000000 ____D C:\Users\Marcel\AppData\Local\Opera Software
2015-12-13 23:07 - 2015-12-13 23:09 - 00000000 ____D C:\Users\Marcel\AppData\Local\Balance Video
2015-12-13 23:06 - 2015-12-15 13:41 - 00000000 ____D C:\Users\Marcel\AppData\LocalLow\Company
2015-12-13 23:06 - 2015-12-14 16:48 - 00002284 _____ C:\WINDOWS\System32\Tasks\Tenabicb
2015-12-13 23:06 - 2015-12-13 23:06 - 00000000 ____D C:\Users\Marcel\AppData\Local\Tempfolder
2015-12-13 23:06 - 2015-12-13 23:05 - 00000895 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-12-13 23:01 - 2015-12-13 23:05 - 00000000 ____D C:\Users\Public\Documents\Stronghold AntiMalware
2015-12-13 22:53 - 2015-11-24 19:42 - 00102704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-12-13 22:52 - 2015-11-26 01:34 - 11228488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-13 22:52 - 2015-11-25 00:07 - 42913912 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 37882672 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 22345336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 18487360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 18389624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 16561320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 15933400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 15839392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 13533416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 12870384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 03540360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 03126800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 02876536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 02496816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435906.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435906.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01016360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00877872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00539464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00501056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00446768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00445400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00422752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00413816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00369272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-12-13 22:52 - 2015-11-25 00:07 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00034494 _____ C:\WINDOWS\system32\nvinfo.pb
2015-12-13 22:47 - 2015-12-14 21:17 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-13 22:47 - 2015-12-14 16:50 - 00001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-13 22:47 - 2015-12-13 22:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-13 22:41 - 2015-11-12 19:37 - 00112712 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2015-12-13 22:27 - 2015-12-13 22:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-13 22:20 - 2015-12-13 22:20 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SECRV
2015-12-13 22:15 - 2015-12-14 16:44 - 00000000 ____D C:\WINDOWS\system32\goij
2015-12-11 21:22 - 2015-12-11 21:22 - 00000000 _____ C:\autoexec.bat
2015-11-26 21:50 - 2015-10-30 16:58 - 00000000 ____D C:\Users\Marcel\Desktop\Opera.exe
2015-11-25 12:19 - 2015-11-16 04:54 - 01905456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435900.dll
2015-11-25 12:19 - 2015-11-16 04:54 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435900.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-16 21:36 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-16 21:25 - 2014-08-05 13:40 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-16 20:35 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-16 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-16 17:41 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-16 17:39 - 2015-10-21 19:14 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71A4A4D4-B54F-4EA6-A1BF-27340EA11EAE}
2015-12-16 17:36 - 2015-10-30 19:35 - 00888452 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-16 17:36 - 2015-10-30 19:35 - 00197278 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-15 22:14 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-15 21:57 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-12-15 21:57 - 2015-10-30 07:28 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-15 21:40 - 2014-08-05 10:04 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-15 21:38 - 2014-08-27 21:39 - 00000000 ____D C:\ProgramData\Oracle
2015-12-15 21:37 - 2014-08-05 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-15 21:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-15 18:45 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-15 14:18 - 2015-08-18 20:43 - 00000000 ____D C:\Users\Marcel\AppData\Local\ElevatedDiagnostics
2015-12-15 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-14 17:05 - 2015-07-30 19:48 - 00000000 ____D C:\Users\Marcel\AppData\Local\Packages
2015-12-14 17:04 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-14 16:51 - 2015-07-30 19:50 - 00002386 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-14 16:51 - 2015-07-30 19:50 - 00000000 ___RD C:\Users\Marcel\OneDrive
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-14 16:50 - 2015-07-30 19:48 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-14 16:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-14 16:49 - 2015-07-30 19:27 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-14 16:49 - 2015-07-30 18:55 - 00019976 _____ C:\WINDOWS\diagerr.xml
2015-12-14 16:49 - 2015-07-30 18:55 - 00019053 _____ C:\WINDOWS\diagwrn.xml
2015-12-14 16:48 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-14 16:48 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-14 16:48 - 2014-12-24 19:57 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-14 16:48 - 2014-10-09 20:27 - 00002298 _____ C:\WINDOWS\System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51}
2015-12-14 16:48 - 2014-08-05 13:40 - 00003142 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-14 16:48 - 2014-08-05 11:13 - 00002536 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2015-12-14 16:45 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-14 16:45 - 2015-03-24 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
2015-12-14 16:45 - 2014-09-04 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-12-14 16:45 - 2014-08-31 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-12-14 16:45 - 2014-08-26 10:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-12-14 16:45 - 2014-08-06 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2015-12-14 16:45 - 2014-08-05 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-12-14 16:45 - 2014-08-05 13:57 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2015-12-14 16:45 - 2014-08-05 13:53 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-14 16:45 - 2014-08-05 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-14 16:45 - 2014-08-05 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-12-14 16:45 - 2014-08-05 11:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-14 16:45 - 2014-08-05 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2015-12-14 16:45 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-14 16:44 - 2015-11-05 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-14 16:44 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-14 16:44 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-14 16:44 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-14 16:44 - 2014-08-05 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2015-12-14 16:44 - 2014-08-05 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2015-12-14 16:44 - 2014-08-05 10:05 - 00000000 ____D C:\Program Files\Intel
2015-12-14 16:44 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-12-14 16:41 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-14 16:41 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-14 16:40 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-14 16:40 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-14 16:39 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-14 16:39 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-12-14 16:32 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-12-14 16:32 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-12-14 16:32 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-12-14 16:32 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-12-14 16:24 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-14 14:52 - 2015-11-05 14:49 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Skype
2015-12-14 14:52 - 2014-08-05 16:38 - 00000000 ____D C:\Users\Marcel\AppData\Local\Microsoft Help
2015-12-13 23:09 - 2015-06-08 00:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-13 22:41 - 2014-08-05 13:32 - 00001450 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-12-13 22:41 - 2014-08-05 13:31 - 00000000 ____D C:\Users\Marcel\AppData\Local\NVIDIA Corporation
2015-12-13 22:35 - 2015-11-13 15:07 - 00000000 ____D C:\Users\Marcel\AppData\Local\SystemDir
2015-12-13 21:42 - 2014-08-05 10:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-11 21:34 - 2015-11-13 14:29 - 00000000 ___HD C:\Users\Marcel\AppData\Roaming\w5riW6zOQCSY9lKg
2015-12-09 04:39 - 2010-11-21 04:27 - 00301728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-29 16:21 - 2015-04-07 19:19 - 00000000 ____D C:\Users\Marcel\Documents\VAC Wochenberichte
2015-11-26 14:56 - 2014-08-05 20:27 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SoftGrid Client
2015-11-23 19:10 - 2014-08-05 10:33 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-20 15:03 - 2015-11-13 14:59 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SysHelp
2015-11-20 15:03 - 2015-11-13 14:29 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\PPkuWLK8XYKvqKio

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-03-24 19:28 - 2015-04-05 20:34 - 0011704 _____ () C:\Users\Marcel\AppData\Local\Temp-log.txt
2015-11-13 14:59 - 2015-11-13 14:59 - 0000006 ____S () C:\ProgramData\2d96cd46aec226b573de1a822380bfbea6fa64f3

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-14 16:40

==================== Ende von FRST.txt ============================
--- --- ---


Sorry versehentlich zuerst die Addition txt geposted

Alt 17.12.2015, 16:20   #5
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-12-2015 03
durchgeführt von Marcel (2015-12-16 21:36:37)
Gestartet von C:\Users\Marcel\Desktop
Windows 10 Home (X64) (2015-12-14 15:50:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1762406799-550631045-2691834222-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1762406799-550631045-2691834222-503 - Limited - Disabled)
Gast (S-1-5-21-1762406799-550631045-2691834222-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1762406799-550631045-2691834222-1002 - Limited - Enabled)
Marcel (S-1-5-21-1762406799-550631045-2691834222-1000 - Administrator - Enabled) => C:\Users\Marcel

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Anti-Malware (Enabled - Up to date) {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {9425001D-A331-13F4-34E6-D05C71B96A74}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.6.2.40658 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.2.5.7 - Electronic Arts)
Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version:  - Sledgehammer Games)
Call of Duty: Advanced Warfare (HKLM-x32\...\Steam App 209650) (Version:  - Sledgehammer Games)
Call of Duty: Black Ops III (HKLM-x32\...\Steam App 311210) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - Infinity Ward)
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.77 - DivX, LLC)
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Free YouTube to MP3 Converter version 3.12.42.716 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1168 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{3B236485-CCE7-48DE-82DC-A5EA54A6F7D6}) (Version: 5.0.10.2850 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.7145.5001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
MSI Afterburner 3.0.1 (HKLM-x32\...\Afterburner) (Version: 3.0.1 - MSI Co., LTD)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 359.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.7.4.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.7.4.10 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.12.2807 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.1.39.1040 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.1.39.1040 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.39.1040 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.1.39.1040 - Qualcomm Atheros) Hidden
Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27748 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.1.0240 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.7.4.10 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Sound Blaster Cinema 2 (HKLM-x32\...\{B4F6F8CC-2C61-42CC-A4CC-76621F25BDC7}) (Version: 1.00.06 - Creative Technology Limited)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1762406799-550631045-2691834222-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

15-12-2015 21:45:24 vir

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-12-15 14:10 - 00000966 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02EAD4D4-820C-4CC4-B168-12B065325C8A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {145BF35D-4759-4442-9148-08CE5CACEA69} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {1B365CEE-086E-49EF-9E3A-1A7BE29196B4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {24BA1A30-2A51-4871-8ECD-B250C54A0474} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {25356A9D-6720-4B4B-924D-7191223EDB2F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2AE3576C-5E06-4541-9D22-295122107742} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {2CAB22EF-375B-4498-BFEA-F7914518D0F0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3CC0BEC7-4D1F-49A6-A97D-45BF05E8F21B} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {47812A19-D0A2-46E0-8422-3F22316D023B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {4E88CCA6-824D-4606-BD28-E14FD03E3EDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-11] (Adobe Systems Incorporated)
Task: {56C57FCD-41A3-47CA-9712-DD168E871A41} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {5B1D0E41-F1C7-4AD8-8A63-ECB420E9027B} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {62FB0034-6752-4BB0-AC6B-7650D0A9C2C2} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {639F1467-986B-4204-8347-BB7EB8F0E8D1} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {7615799A-D52A-4529-9FAC-E5810A5DF8D0} - System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51} => pcalua.exe -a C:\Users\Marcel\AppData\Roaming\omiga-plus\UninstallManager.exe -c  -ptid=tugs <==== ACHTUNG
Task: {7641FCBE-161E-4CFF-9247-D97841523CE5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {77159E4D-B64B-46DA-A8BE-AE17414B88BE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {7D7C421C-E778-4302-ACEE-6532BE85164A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {83EECFDD-9156-4156-A48C-D900BB6788D5} - System32\Tasks\Tenabicb => C:\PROGRA~1\SHOPPE~1\Zyiamat.bat
Task: {90C9F792-D4F3-4632-8282-F378BC33C84B} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {928D6C74-E14D-47B2-BD9F-976D15D6B79F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {9D67C522-FEB6-48C9-9B10-B56FCD7B180D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {B674AA12-06DF-486F-8007-376B98C53B8C} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {BC1A0BA5-A7AC-4BBA-AE50-DCA27FE53128} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {C1213BBF-3461-4665-8BD1-F27CEED05906} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {C16757AF-BB51-4573-8FA3-B4B9DA05B253} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {CB5F3DA8-AE9F-42E7-B20E-903018351155} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-23] (Microsoft Corporation)
Task: {CC33801F-EC15-44D1-BD97-D61629CB75F4} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {D1FB2DA4-3858-4CDD-8254-C81E82AD3179} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {DA18A204-BEBC-4CD9-9BFA-792B7B2F3EC6} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {E87B9074-B845-493F-8EEA-553037D2B011} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {EA233492-1573-4608-BB57-6C74161610F7} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F04014C8-AFFE-4339-B8A8-291871FB0856} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {F26C6C3B-ADAE-4CC5-A29F-8694B2A19CF4} - \nethost task -> Keine Datei <==== ACHTUNG
Task: {F4F2153C-DA44-42B3-B4BD-E7235E512532} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FE3401E4-C42A-4C74-9DB0-76B1A10BE43C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{143FECAF-CC12-4CBE-9202-218EA7D9DDFE}.job => C:\WINDOWS\system32\msfeedssync.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-05 15:04 - 2015-03-19 20:23 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-06-23 20:11 - 2015-06-23 20:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-01-22 14:15 - 2014-01-22 14:15 - 00300544 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2015-07-08 07:58 - 2015-07-08 07:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2015-03-30 20:59 - 2015-11-12 19:39 - 00012080 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-10-01 07:28 - 2015-10-01 07:28 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2015-08-03 07:15 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Marcel\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libcef.dll
2014-11-16 20:24 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Marcel\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2014-09-04 18:55 - 2015-11-10 20:55 - 00778752 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 15:55 - 2015-07-03 17:12 - 04962816 _____ () D:\Program Files (x86)\Steam\v8.dll
2014-09-04 18:55 - 2015-12-14 21:01 - 02547280 _____ () D:\Program Files (x86)\Steam\video.dll
2015-01-20 15:55 - 2015-07-03 17:12 - 01556992 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2015-01-20 15:55 - 2015-07-03 17:12 - 01187840 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2014-09-04 18:55 - 2015-09-24 01:33 - 02549248 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2014-09-04 18:55 - 2015-09-24 01:33 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2014-09-04 18:55 - 2015-09-24 01:33 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2014-09-04 18:55 - 2015-09-24 01:33 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2014-09-04 18:55 - 2015-09-24 01:33 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2014-09-04 18:55 - 2015-12-14 21:01 - 00804432 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-10-09 19:19 - 2015-11-03 23:00 - 00201728 _____ () D:\Program Files (x86)\Steam\bin\openvr_api.dll
2014-09-04 18:55 - 2015-11-17 01:31 - 47846176 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll
2015-01-20 15:55 - 2015-09-25 00:56 - 00119208 _____ () D:\Program Files (x86)\Steam\winh264.dll
2014-02-19 17:51 - 2014-02-19 17:51 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\webcompanion.com -> hxxp://webcompanion.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1762406799-550631045-2691834222-1000\Control Panel\Desktop\\Wallpaper -> c:\users\marcel\appdata\roaming\mozilla\firefox\desktop-hintergrund.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^658.lnk => C:\Windows\pss\658.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DC0.lnk => C:\Windows\pss\DC0.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DD0.lnk => C:\Windows\pss\DD0.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Office 2010 Toolkit v2.2.3.lnk => C:\Windows\pss\Office 2010 Toolkit v2.2.3.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Office 2013 Toolkit and EZ Activator Free Download.lnk => C:\Windows\pss\Office 2013 Toolkit and EZ Activator Free Download.lnk.Startup
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM\...\StartupApproved\Run: => "3D BubbleSound"
HKLM\...\StartupApproved\Run32: => "DivXUpdate"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "YTDownloader"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "DeskBar"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "apphide"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "YTDownloader"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{CE1ECF5F-96E9-4BB5-89B6-47F9E6D2E74F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FA2F2492-71ED-428F-BE98-39A358BCC11C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{37371038-8E9C-4F3B-AE52-EC39134EEA54}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\BFHWebHelper.exe
FirewallRules: [{00CE7E57-AA34-4B94-A82B-0E3DE5520364}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\BFHWebHelper.exe
FirewallRules: [{9A8261D5-4547-4002-A0DD-39FFA5A21835}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{6D0BBF07-E627-42EF-9A5B-541CD2D04D59}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{03878130-4B30-4AD2-A325-E7AA77F2FB7A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{70457B30-0D42-4E77-AEC4-8C1BEA46C5B3}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{EE648335-D42A-499D-AAC8-7A0278FA1144}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25B31DC9-C9E2-4B4E-9F2F-31D7F0A6B9C0}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{67F6757A-9458-4B27-9797-BDEB78B75D4A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{61D6C42D-DC55-4680-9079-38468A871367}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{241F4E92-6C0C-4F8F-96DF-BC55E412ECD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A9680E0A-EC81-4CE1-BF1F-4F23AC297083}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{28F7007C-3049-4A84-B382-F505E37DD72A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7006974F-BB4B-4252-9849-2403A1015A9F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B1A9DBC1-0951-4E5C-A56A-413DEB68B02E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{BBC49069-A86B-427C-B0A6-AA4903AF47C3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{99064551-6BA9-4AE9-871A-2DD225DB22F9}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{F0C0A301-E830-4A11-BEEF-EBD5F3879AE8}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{50588479-D388-4E9D-B4D2-83B6430E02E0}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{2291F4AF-41BF-4131-BA0F-203DF11F78BB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AF254B16-B3AF-42FA-8E21-BBF39C5AEAFF}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{744E5698-7B54-4A51-9E46-F08AD4604015}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F5828340-53ED-44E7-9197-82ABA07E7986}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{6C9A46FF-80E7-4B6B-8135-F79046DE0F29}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{90A455F5-BCBE-4CE9-A882-01ABA45BD441}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{4AB5097C-B972-4DAC-AA53-7A794A064CCE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{D69CA548-BCB2-4CAA-A1D1-B9E754F12977}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{7F1091A3-8D17-43E8-A10E-79EF7FC40358}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{BD0C3846-7768-475F-B60A-269B2B477FC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{1858BCCE-D7C7-4266-A542-DD3F831A3B41}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{FFE446C2-4FDD-4237-AFD0-CE954D638F25}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{28EA9830-00AF-4A87-9451-BA32B8C595EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{FD161752-AE6E-49DC-8B4F-52F72FCAB335}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{56495F82-0550-4552-B5B4-2FC9AE34907B}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{E98EC9DB-7227-429D-8A48-5C6B47CD4588}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{B53EA384-9452-4F66-B745-D3721EA922ED}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{EABBDC10-222E-41F0-8B76-027608D7D5FC}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CD75C995-8D45-49ED-BABB-B5DFDFC65B50}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8CD128D9-BFAA-436F-9BD6-8B4051E9AC28}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1A6A2739-5CBA-46FC-8FCE-B6A93CBDEABF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{70B8DCBC-4643-4DAF-B577-DE3DB52314B4}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{34507701-F364-4C0E-A7F1-8EABD146446F}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{72C1B0E1-83F3-472C-BF64-C01BEF3EBFC7}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{A7F7B13A-355D-47C6-BD9F-5EBD6A637D8A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CDD88E46-4A36-4568-9A4D-25A08940E072}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\bfh.exe
FirewallRules: [{B155F3EC-E47F-425A-B5BC-A3154F1888A6}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\bfh.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/15/2015 09:45:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/15/2015 08:21:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 42.0.0.5780, Zeitstempel: 0x5632d0a4
Name des fehlerhaften Moduls: mozglue.dll, Version: 42.0.0.5780, Zeitstempel: 0x5632ba58
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000ed50
ID des fehlerhaften Prozesses: 0x2080
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5

Error: (12/15/2015 06:27:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:10:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:09:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:09:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:28 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (12/16/2015 05:30:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/15/2015 10:13:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_30f42" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/15/2015 10:03:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Netzwerkinspektionsdienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (12/15/2015 10:02:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577

Error: (12/15/2015 09:57:38 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/15/2015 09:57:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_360ad" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/15/2015 09:31:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/15/2015 09:31:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_32c35" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/15/2015 08:10:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/15/2015 08:10:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


CodeIntegrity:
===================================
  Date: 2015-12-15 22:03:35.485
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-15 22:02:46.293
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-12-15 20:13:46.633
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-15 14:45:45.243
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-15 14:38:07.447
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-14 16:48:56.508
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-14 16:47:46.751
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-14 16:41:01.572
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 45%
Installierter physikalischer RAM: 16317.12 MB
Verfügbarer physikalischer RAM: 8886.95 MB
Summe virtueller Speicher: 20413.12 MB
Verfügbarer virtueller Speicher: 12276.21 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.25 GB) (Free:53.06 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:530.3 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 7152C9CA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 4DA3150B)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================


Alt 17.12.2015, 17:21   #6
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Hi,
Zitat:
Weiß einfach nicht mehr weiter..mein Gefühl sagt mir SSD Platte formatieren und alles neu aufspielen..
überhaupt kein Grund!

Schritt 1



Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.
Klicke auf OK und kopiere nun den Text aus der Codebox in das leere Textdokument:
Code:
ATTFilter
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Run: [mmrmjqzyic] => 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Task: {25356A9D-6720-4B4B-924D-7191223EDB2F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei 
Task: {7615799A-D52A-4529-9FAC-E5810A5DF8D0} - System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51} => 
Task: {7D7C421C-E778-4302-ACEE-6532BE85164A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei 
Task: {E87B9074-B845-493F-8EEA-553037D2B011} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei 
Task: {F04014C8-AFFE-4339-B8A8-291871FB0856} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei 
Task: {F26C6C3B-ADAE-4CC5-A29F-8694B2A19CF4} - \nethost task -> Keine Datei
Speichere dieses bitte als Fixlist.txt in das Verzeichnis ab, in dem sich auch die FRST-Anwendung befindet.
  • Starte FRST und drücke auf den Entfernen-Button.
  • Das Tool erstellt eine "Fixlog.txt" -Datei.
  • Poste mir bitte deren Inhalt.

bitte folgende Scans genau nach Anleitung durchführen.

Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 3

  • Download und Anleitung
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Unter Einstellungen/ Erkennung und Schutz setze bitte einen Haken bei "Suche nach Rootkits".
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass Deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4



Bitte starte FRST erneut, markiere auch die checkbox und drücke auf Untersuchen.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________
--> Hijacker Virus .ru
Geändert von deeprybka (17.12.2015 um 17:27 Uhr)

Alt 17.12.2015, 18:25   #7
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Bin grade etwas verwirrt den Text ins Verzeichnis wo frst auch drin is, frst und die log datein sind auf dem Desktop oder erstellt frst mir ein Verzeichnis ?

Alt 17.12.2015, 18:40   #8
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
Gestartet von C:\Users\Marcel\Desktop
Da muss auch die fixlist.txt liegen...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 17.12.2015, 19:37   #9
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:17-12-2015
durchgeführt von Marcel (2015-12-17 19:36:23) Run:1
Gestartet von C:\Users\Marcel\Desktop
Geladene Profile: Marcel (Verfügbare Profile: Marcel)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Run: [mmrmjqzyic] => 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Task: {25356A9D-6720-4B4B-924D-7191223EDB2F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei 
Task: {7615799A-D52A-4529-9FAC-E5810A5DF8D0} - System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51} => 
Task: {7D7C421C-E778-4302-ACEE-6532BE85164A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei 
Task: {E87B9074-B845-493F-8EEA-553037D2B011} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei 
Task: {F04014C8-AFFE-4339-B8A8-291871FB0856} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei 
Task: {F26C6C3B-ADAE-4CC5-A29F-8694B2A19CF4} - \nethost task -> Keine Datei
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Wert erfolgreich entfernt
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\Software\Microsoft\Windows\CurrentVersion\Run\\mmrmjqzyic => Wert erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{25356A9D-6720-4B4B-924D-7191223EDB2F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{25356A9D-6720-4B4B-924D-7191223EDB2F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7615799A-D52A-4529-9FAC-E5810A5DF8D0}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7615799A-D52A-4529-9FAC-E5810A5DF8D0}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51} => => nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B0755EA2-C348-4C07-A69B-ACF53522AB51} => => Schlüssel nicht gefunden. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7D7C421C-E778-4302-ACEE-6532BE85164A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D7C421C-E778-4302-ACEE-6532BE85164A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E87B9074-B845-493F-8EEA-553037D2B011}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E87B9074-B845-493F-8EEA-553037D2B011}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F04014C8-AFFE-4339-B8A8-291871FB0856}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F04014C8-AFFE-4339-B8A8-291871FB0856}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F26C6C3B-ADAE-4CC5-A29F-8694B2A19CF4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F26C6C3B-ADAE-4CC5-A29F-8694B2A19CF4}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\nethost task => Schlüssel nicht gefunden. 

==== Ende von Fixlog 19:36:34 ====

Alt 17.12.2015, 19:38   #10
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Gut.

Gleich weiter mit den nächsten Schritten...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 17.12.2015, 19:59   #11
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
# AdwCleaner v5.025 - Bericht erstellt am 17/12/2015 um 19:40:42
# Aktualisiert am 13/12/2015 von Xplode
# Datenbank : 2015-12-13.2 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : Marcel - SC0P3
# Gestartet von : C:\Users\Marcel\Desktop\AdwCleaner_5.025.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Internetbrowser ] *****


*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [843 Bytes] ##########
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 17.12.2015
Suchlaufzeit: 19:44
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.12.17.05
Rootkit-Datenbank: v2015.12.16.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Marcel

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 363338
Abgelaufene Zeit: 2 Min., 15 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.Shopperz.BrwsrFlsh, HKU\.DEFAULT\SOFTWARE\MICROSOFT\INTERNET EXPLORER\INTERNETREGISTRY\REGISTRY\USER\S-1-5-18\SOFTWARE\shopperz131220151730, In Quarantäne, [44e5d7cfd2b9270fc96f8d7c18ec0bf5], 

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:17-12-2015
durchgeführt von Marcel (Administrator) auf SC0P3 (17-12-2015 19:58:37)
Gestartet von C:\Users\Marcel\Desktop
Geladene Profile: Marcel (Verfügbare Profile: Marcel)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Users\Marcel\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft anti-malware\a2guard.exe [9135984 2015-12-15] (Emsisoft Ltd)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-09] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [592704 2015-09-29] (Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2014-08-05]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Hosts Datei wurde nicht im Standardordner gefunden
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{75a00132-d52e-47d0-9f3d-b3ba249de93b}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e98e3751-4041-4802-9c3f-29c0f6c14567}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1762406799-550631045-2691834222-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.de/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-15] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-15] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128
FF NewTab: hxxps://www.google.de/
FF SelectedSearchEngine: Google
FF Homepage: hxxps://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-11] ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-11] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-06-29] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-15] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\searchplugins\google-lavasoft.xml [2015-12-15]
FF Extension: AdBeaver - C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\Extensions\adbeaverSG@adbeaver.org.xpi [2015-12-16]
FF Extension: LavaFox V2-Blue - C:\Users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\93hm1noh.default-1450192884128\Extensions\djziggy@gmail.com [2015-12-15]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon => nicht gefunden

Chrome: 
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [10768560 2015-12-15] (Emsisoft Ltd)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-09] (NVIDIA Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-19] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-09] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-09] (NVIDIA Corporation)
S3 Origin Client Service; D:\Orgin\Origin\OriginClientService.exe [2099720 2015-11-13] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-12] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-19] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
R1 epp; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [123992 2015-10-23] (Emsisoft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-15] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-05-27] ()
R3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-17] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\drivers\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-17 19:55 - 2015-12-17 19:55 - 00001355 _____ C:\Users\Marcel\Desktop\mbam.txt
2015-12-17 19:44 - 2015-12-17 19:54 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-17 19:44 - 2015-12-17 19:44 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-17 19:44 - 2015-12-17 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-17 19:44 - 2015-12-17 19:44 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-17 19:44 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-17 19:44 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-17 19:44 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-17 19:39 - 2015-12-17 19:40 - 00000000 ____D C:\AdwCleaner
2015-12-17 19:37 - 2015-12-17 19:39 - 01740288 _____ C:\Users\Marcel\Desktop\AdwCleaner_5.025.exe
2015-12-17 19:36 - 2015-12-17 19:36 - 00004645 _____ C:\Users\Marcel\Desktop\Fixlog.txt
2015-12-17 19:33 - 2015-12-17 19:34 - 02370048 _____ (Farbar) C:\Users\Marcel\Desktop\FRST64.exe
2015-12-17 19:31 - 2015-12-17 19:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-17 16:46 - 2015-12-17 16:46 - 00000000 ____D C:\Users\Marcel\AppData\Local\CrashDumps
2015-12-17 16:16 - 2015-12-17 16:16 - 00026409 _____ C:\Users\Marcel\Desktop\Wochenbericht 68.xlsx
2015-12-17 16:07 - 2015-12-17 16:07 - 00026315 _____ C:\Users\Marcel\Desktop\Wochenbericht 67.xlsx
2015-12-17 16:01 - 2015-12-17 16:01 - 00026463 _____ C:\Users\Marcel\Desktop\Wochenbericht 66.xlsx
2015-12-16 21:36 - 2015-12-17 19:58 - 00018501 _____ C:\Users\Marcel\Desktop\FRST.txt
2015-12-16 21:36 - 2015-12-17 19:58 - 00000000 ____D C:\FRST
2015-12-16 21:36 - 2015-12-16 21:36 - 00040371 _____ C:\Users\Marcel\Desktop\Addition.txt
2015-12-15 21:36 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Sun
2015-12-15 21:36 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel\.oracle_jre_usage
2015-12-15 21:36 - 2015-12-15 21:35 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-12-15 21:36 - 2014-08-27 21:39 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2015-12-15 21:35 - 2015-12-15 21:35 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-15 20:59 - 2015-12-15 21:32 - 00000000 ____D C:\Users\Marcel\AppData\Local\NPE
2015-12-15 20:51 - 2015-12-15 21:57 - 00000000 ____D C:\ProgramData\Norton
2015-12-15 20:51 - 2015-12-15 20:51 - 00000000 ____D C:\ProgramData\NortonInstaller
2015-12-15 20:22 - 2015-12-15 20:24 - 00000000 ____D C:\searchplugins
2015-12-15 18:53 - 2015-12-15 18:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-12-15 16:13 - 2015-12-15 16:14 - 01740288 _____ C:\Users\Marcel\Downloads\adwcleaner_5.025.exe
2015-12-15 15:21 - 2015-12-15 15:28 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Nico Mak Computing
2015-12-15 15:04 - 2015-12-15 15:04 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-15 14:12 - 2015-12-15 14:12 - 00000000 ____D C:\ProgramData\Emsisoft
2015-12-15 14:00 - 2015-12-17 19:58 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2015-12-15 14:00 - 2015-12-15 14:00 - 00000937 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-12-15 14:00 - 2015-12-15 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-12-14 16:54 - 2015-12-15 21:57 - 00000000 ____D C:\Program Files (x86)\Avira
2015-12-14 16:52 - 2015-12-14 16:52 - 00000000 ____D C:\Users\Marcel\AppData\Local\ActiveSync
2015-12-14 16:50 - 2015-12-14 16:50 - 00000020 ___SH C:\Users\Marcel\ntuser.ini
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-14 16:50 - 2015-12-14 16:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-14 16:48 - 2015-12-17 19:54 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-14 16:46 - 2015-12-14 16:46 - 00000282 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{143FECAF-CC12-4CBE-9202-218EA7D9DDFE}.job
2015-12-14 16:45 - 2015-12-14 16:45 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-14 16:45 - 2015-12-14 16:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-12-14 16:45 - 2015-12-14 16:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-12-14 16:44 - 2015-12-15 21:36 - 00000000 ____D C:\Users\Marcel
2015-12-14 16:44 - 2015-12-14 16:45 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Vorlagen
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Startmenü
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Netzwerkumgebung
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Lokale Einstellungen
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Eigene Dateien
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Druckumgebung
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Videos
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Musik
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Documents\Eigene Bilder
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Local\Verlauf
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\AppData\Local\Anwendungsdaten
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 _SHDL C:\Users\Marcel\Anwendungsdaten
2015-12-14 16:44 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-12-14 16:43 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-14 16:42 - 2015-12-17 19:47 - 02087808 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-14 16:42 - 2015-12-14 16:42 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-12-14 16:41 - 2015-12-17 16:53 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 17:03 - 00000000 ____D C:\Program Files (x86)\Razer
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\Razer
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:44 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-14 16:41 - 2015-12-14 16:41 - 00000000 ____D C:\Program Files\Realtek
2015-12-14 16:41 - 2015-11-24 20:32 - 06358648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 02983032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 02554672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00938616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-12-14 16:41 - 2015-11-24 20:32 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-12-14 16:41 - 2015-11-23 21:35 - 06049858 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-12-14 16:40 - 2015-12-14 18:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-14 16:40 - 2015-12-14 16:46 - 00335048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-14 16:39 - 2015-12-14 16:39 - 00000000 ____D C:\Windows.old
2015-12-14 16:38 - 2015-12-14 16:38 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-14 16:38 - 2015-12-14 16:38 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-14 16:38 - 2015-12-14 16:38 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-14 16:38 - 2015-12-14 16:38 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-14 16:38 - 2015-12-14 16:38 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-14 16:38 - 2015-12-14 16:38 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-14 16:38 - 2015-12-14 16:38 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-14 16:38 - 2015-12-14 16:38 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-14 16:37 - 2015-12-14 16:37 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-14 16:37 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-14 16:37 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-14 16:37 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-14 16:37 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-14 16:37 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files\MSBuild
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-14 16:32 - 2015-12-14 16:32 - 00000000 ____D C:\inetpub
2015-12-14 16:32 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-14 16:32 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-14 16:32 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-14 16:32 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-14 15:26 - 2015-12-14 15:26 - 00000376 _____ C:\WINDOWS\SysWOW64\data.bin
2015-12-14 15:21 - 2015-12-14 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-14 15:21 - 2015-12-14 15:21 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-14 15:21 - 2015-12-14 15:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-14 14:45 - 2015-12-14 21:04 - 00000000 ____D C:\WINDOWS\system32\log
2015-12-14 13:37 - 2015-12-14 13:41 - 00000000 ___HD C:\$SysReset
2015-12-14 13:30 - 2015-12-14 13:30 - 00000000 ____D C:\Program Files\ReviverSoft
2015-12-14 13:29 - 2015-12-15 20:22 - 00002736 _____ C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini
2015-12-14 13:29 - 2015-12-15 20:22 - 00002736 _____ C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2015-12-14 13:29 - 2015-12-14 13:30 - 00000000 ____D C:\ProgramData\TuneUp Software
2015-12-14 13:29 - 2015-12-14 13:29 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\TuneUp Software
2015-12-14 13:29 - 2015-12-14 13:29 - 00000000 ____D C:\Users\Marcel\AppData\Local\TuneUp Software
2015-12-14 13:28 - 2015-12-15 20:22 - 00425744 _____ (Lavasoft Limited) C:\WINDOWS\system32\LavasoftTcpService64.dll
2015-12-14 13:28 - 2015-12-15 20:22 - 00345360 _____ (Lavasoft Limited) C:\WINDOWS\SysWOW64\LavasoftTcpService.dll
2015-12-14 13:26 - 2015-12-14 13:26 - 00000000 ____D C:\Users\Marcel\Mozilla
2015-12-13 23:11 - 2015-12-13 23:11 - 00000000 ____D C:\Users\Public\Documents\Baidu
2015-12-13 23:09 - 2015-12-14 15:27 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Opera Software
2015-12-13 23:09 - 2015-12-14 15:27 - 00000000 ____D C:\Users\Marcel\AppData\Local\Opera Software
2015-12-13 23:07 - 2015-12-13 23:09 - 00000000 ____D C:\Users\Marcel\AppData\Local\Balance Video
2015-12-13 23:06 - 2015-12-15 13:41 - 00000000 ____D C:\Users\Marcel\AppData\LocalLow\Company
2015-12-13 23:06 - 2015-12-14 16:48 - 00002284 _____ C:\WINDOWS\System32\Tasks\Tenabicb
2015-12-13 23:06 - 2015-12-13 23:06 - 00000000 ____D C:\Users\Marcel\AppData\Local\Tempfolder
2015-12-13 23:01 - 2015-12-13 23:05 - 00000000 ____D C:\Users\Public\Documents\Stronghold AntiMalware
2015-12-13 22:53 - 2015-11-24 19:42 - 00102704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-12-13 22:52 - 2015-11-26 01:34 - 11228488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-13 22:52 - 2015-11-25 00:07 - 42913912 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 37882672 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 22345336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 18487360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 18389624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 16561320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 15933400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 15839392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 13533416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 12870384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 03540360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 03126800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 02876536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 02496816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435906.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435906.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 01016360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00877872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00539464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00501056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00446768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00445400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00422752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00413816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00369272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-12-13 22:52 - 2015-11-25 00:07 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-12-13 22:52 - 2015-11-25 00:07 - 00034494 _____ C:\WINDOWS\system32\nvinfo.pb
2015-12-13 22:47 - 2015-12-17 19:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-13 22:47 - 2015-12-14 21:17 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-13 22:47 - 2015-12-14 16:50 - 00001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-13 22:41 - 2015-12-09 02:51 - 00111520 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2015-12-13 22:27 - 2015-12-13 22:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-13 22:20 - 2015-12-13 22:20 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SECRV
2015-12-13 22:15 - 2015-12-14 16:44 - 00000000 ____D C:\WINDOWS\system32\goij
2015-12-11 21:22 - 2015-12-11 21:22 - 00000000 _____ C:\autoexec.bat
2015-12-02 17:58 - 2015-11-16 19:32 - 00919040 _____ (Farbar) C:\WINDOWS\mod_frst.exe
2015-11-26 21:50 - 2015-10-30 16:58 - 00000000 ____D C:\Users\Marcel\Desktop\Opera.exe
2015-11-25 12:19 - 2015-11-16 04:54 - 01905456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435900.dll
2015-11-25 12:19 - 2015-11-16 04:54 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435900.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-17 19:55 - 2015-10-21 19:14 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{71A4A4D4-B54F-4EA6-A1BF-27340EA11EAE}
2015-12-17 19:53 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-17 19:51 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-17 19:47 - 2015-10-30 19:35 - 00888452 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-17 19:47 - 2015-10-30 19:35 - 00197278 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-17 19:47 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-17 18:04 - 2014-08-05 20:27 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SoftGrid Client
2015-12-17 17:25 - 2014-08-05 13:40 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-17 16:53 - 2014-08-05 13:32 - 00001450 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-12-17 16:43 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-17 16:43 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-17 15:49 - 2015-04-07 19:19 - 00000000 ____D C:\Users\Marcel\Documents\VAC Wochenberichte
2015-12-16 21:36 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-15 21:57 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-12-15 21:57 - 2015-10-30 07:28 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-15 21:40 - 2014-08-05 10:04 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-15 21:38 - 2014-08-27 21:39 - 00000000 ____D C:\ProgramData\Oracle
2015-12-15 21:37 - 2014-08-05 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-15 21:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-15 14:18 - 2015-08-18 20:43 - 00000000 ____D C:\Users\Marcel\AppData\Local\ElevatedDiagnostics
2015-12-15 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-14 17:05 - 2015-07-30 19:48 - 00000000 ____D C:\Users\Marcel\AppData\Local\Packages
2015-12-14 17:04 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-14 16:51 - 2015-07-30 19:50 - 00002386 _____ C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-14 16:51 - 2015-07-30 19:50 - 00000000 ___RD C:\Users\Marcel\OneDrive
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-14 16:50 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-14 16:50 - 2015-07-30 19:48 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-14 16:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-14 16:49 - 2015-07-30 19:27 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-14 16:49 - 2015-07-30 18:55 - 00019976 _____ C:\WINDOWS\diagerr.xml
2015-12-14 16:49 - 2015-07-30 18:55 - 00019053 _____ C:\WINDOWS\diagwrn.xml
2015-12-14 16:48 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-14 16:48 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-14 16:48 - 2014-12-24 19:57 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-14 16:48 - 2014-10-09 20:27 - 00002298 _____ C:\WINDOWS\System32\Tasks\{B0755EA2-C348-4C07-A69B-ACF53522AB51}
2015-12-14 16:48 - 2014-08-05 13:40 - 00003142 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-14 16:48 - 2014-08-05 11:13 - 00002536 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2015-12-14 16:45 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-14 16:45 - 2015-03-24 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
2015-12-14 16:45 - 2014-09-04 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-12-14 16:45 - 2014-08-31 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-12-14 16:45 - 2014-08-26 10:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-12-14 16:45 - 2014-08-06 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2015-12-14 16:45 - 2014-08-05 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-12-14 16:45 - 2014-08-05 13:57 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2015-12-14 16:45 - 2014-08-05 13:53 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-14 16:45 - 2014-08-05 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-14 16:45 - 2014-08-05 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-12-14 16:45 - 2014-08-05 11:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-14 16:45 - 2014-08-05 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2015-12-14 16:45 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-14 16:44 - 2015-11-05 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-14 16:44 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-14 16:44 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-14 16:44 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-14 16:44 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-14 16:44 - 2014-08-05 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2015-12-14 16:44 - 2014-08-05 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2015-12-14 16:44 - 2014-08-05 10:05 - 00000000 ____D C:\Program Files\Intel
2015-12-14 16:44 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-12-14 16:41 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-14 16:41 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-14 16:40 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-14 16:40 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-14 16:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-14 16:39 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-14 16:39 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-14 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-12-14 16:32 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-12-14 16:32 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-12-14 16:32 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-12-14 16:32 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-12-14 16:32 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-12-14 16:32 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-12-14 16:32 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-12-14 16:32 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-12-14 16:32 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-12-14 16:24 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-14 14:52 - 2015-11-05 14:49 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Skype
2015-12-14 14:52 - 2014-08-05 16:38 - 00000000 ____D C:\Users\Marcel\AppData\Local\Microsoft Help
2015-12-13 22:41 - 2014-08-05 13:31 - 00000000 ____D C:\Users\Marcel\AppData\Local\NVIDIA Corporation
2015-12-13 22:35 - 2015-11-13 15:07 - 00000000 ____D C:\Users\Marcel\AppData\Local\SystemDir
2015-12-13 21:42 - 2014-08-05 10:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-11 21:34 - 2015-11-13 14:29 - 00000000 ___HD C:\Users\Marcel\AppData\Roaming\w5riW6zOQCSY9lKg
2015-12-09 04:39 - 2010-11-21 04:27 - 00301728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-09 02:51 - 2014-08-05 13:31 - 01846016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-12-09 02:51 - 2014-08-05 13:31 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-12-09 02:51 - 2014-08-05 13:31 - 01530240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-12-09 02:51 - 2014-08-05 13:31 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-23 19:10 - 2014-08-05 10:33 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-20 15:03 - 2015-11-13 14:59 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\SysHelp
2015-11-20 15:03 - 2015-11-13 14:29 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\PPkuWLK8XYKvqKio

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-03-24 19:28 - 2015-04-05 20:34 - 0011704 _____ () C:\Users\Marcel\AppData\Local\Temp-log.txt
2015-11-13 14:59 - 2015-11-13 14:59 - 0000006 ____S () C:\ProgramData\2d96cd46aec226b573de1a822380bfbea6fa64f3

Einige Dateien in TEMP:
====================
C:\Users\Marcel\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-14 16:40

==================== Ende von FRST.txt ============================

Alt 17.12.2015, 20:00   #12
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:17-12-2015
durchgeführt von Marcel (2015-12-17 19:59:01)
Gestartet von C:\Users\Marcel\Desktop
Windows 10 Home (X64) (2015-12-14 15:50:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1762406799-550631045-2691834222-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1762406799-550631045-2691834222-503 - Limited - Disabled)
Gast (S-1-5-21-1762406799-550631045-2691834222-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1762406799-550631045-2691834222-1002 - Limited - Enabled)
Marcel (S-1-5-21-1762406799-550631045-2691834222-1000 - Administrator - Enabled) => C:\Users\Marcel

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Anti-Malware (Enabled - Out of date) {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9}
AS: Emsisoft Anti-Malware (Enabled - Out of date) {9425001D-A331-13F4-34E6-D05C71B96A74}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.6.2.40658 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.2.5.7 - Electronic Arts)
Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version:  - Sledgehammer Games)
Call of Duty: Advanced Warfare (HKLM-x32\...\Steam App 209650) (Version:  - Sledgehammer Games)
Call of Duty: Black Ops III (HKLM-x32\...\Steam App 311210) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - Infinity Ward)
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.77 - DivX, LLC)
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Free YouTube to MP3 Converter version 3.12.42.716 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1168 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{3B236485-CCE7-48DE-82DC-A5EA54A6F7D6}) (Version: 5.0.10.2850 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.7145.5001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 43.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0 (x86 de)) (Version: 43.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.0.5820 - Mozilla)
MSI Afterburner 3.0.1 (HKLM-x32\...\Afterburner) (Version: 3.0.1 - MSI Co., LTD)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 359.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.12.2807 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.1.39.1040 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.1.39.1040 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.39.1040 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.1.39.1040 - Qualcomm Atheros) Hidden
Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27748 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Sound Blaster Cinema 2 (HKLM-x32\...\{B4F6F8CC-2C61-42CC-A4CC-76621F25BDC7}) (Version: 1.00.06 - Creative Technology Limited)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1762406799-550631045-2691834222-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Marcel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

15-12-2015 21:45:24 vir

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02EAD4D4-820C-4CC4-B168-12B065325C8A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {145BF35D-4759-4442-9148-08CE5CACEA69} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {1B365CEE-086E-49EF-9E3A-1A7BE29196B4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {24BA1A30-2A51-4871-8ECD-B250C54A0474} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {2AE3576C-5E06-4541-9D22-295122107742} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {2CAB22EF-375B-4498-BFEA-F7914518D0F0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3CC0BEC7-4D1F-49A6-A97D-45BF05E8F21B} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {47812A19-D0A2-46E0-8422-3F22316D023B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {4E88CCA6-824D-4606-BD28-E14FD03E3EDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-11] (Adobe Systems Incorporated)
Task: {56C57FCD-41A3-47CA-9712-DD168E871A41} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {5B1D0E41-F1C7-4AD8-8A63-ECB420E9027B} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {62FB0034-6752-4BB0-AC6B-7650D0A9C2C2} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {639F1467-986B-4204-8347-BB7EB8F0E8D1} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {7641FCBE-161E-4CFF-9247-D97841523CE5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {77159E4D-B64B-46DA-A8BE-AE17414B88BE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {83EECFDD-9156-4156-A48C-D900BB6788D5} - System32\Tasks\Tenabicb => C:\PROGRA~1\SHOPPE~1\Zyiamat.bat
Task: {90C9F792-D4F3-4632-8282-F378BC33C84B} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {928D6C74-E14D-47B2-BD9F-976D15D6B79F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {9D67C522-FEB6-48C9-9B10-B56FCD7B180D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {A171AC0E-82C8-46B1-8540-409ECD63BD82} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-23] (Microsoft Corporation)
Task: {B674AA12-06DF-486F-8007-376B98C53B8C} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {BC1A0BA5-A7AC-4BBA-AE50-DCA27FE53128} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {C1213BBF-3461-4665-8BD1-F27CEED05906} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {C16757AF-BB51-4573-8FA3-B4B9DA05B253} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {CC33801F-EC15-44D1-BD97-D61629CB75F4} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {D1FB2DA4-3858-4CDD-8254-C81E82AD3179} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {DA18A204-BEBC-4CD9-9BFA-792B7B2F3EC6} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {EA233492-1573-4608-BB57-6C74161610F7} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F4F2153C-DA44-42B3-B4BD-E7235E512532} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FE3401E4-C42A-4C74-9DB0-76B1A10BE43C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{143FECAF-CC12-4CBE-9202-218EA7D9DDFE}.job => C:\WINDOWS\system32\msfeedssync.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-14 16:41 - 2015-11-24 20:32 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-12-17 16:53 - 2015-12-09 02:52 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2014-08-05 15:04 - 2015-03-19 20:23 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-06-23 20:11 - 2015-06-23 20:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-14 16:38 - 2015-12-14 16:38 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-01-22 14:15 - 2014-01-22 14:15 - 00300544 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2015-07-08 07:58 - 2015-07-08 07:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2015-03-30 20:59 - 2015-12-09 02:53 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-10-01 07:28 - 2015-10-01 07:28 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2015-08-03 07:15 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Marcel\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libcef.dll
2014-11-16 20:24 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Marcel\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2014-02-19 17:51 - 2014-02-19 17:51 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\webcompanion.com -> hxxp://webcompanion.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1762406799-550631045-2691834222-1000\Control Panel\Desktop\\Wallpaper -> c:\users\marcel\appdata\roaming\mozilla\firefox\desktop-hintergrund.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^658.lnk => C:\Windows\pss\658.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DC0.lnk => C:\Windows\pss\DC0.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^DD0.lnk => C:\Windows\pss\DD0.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Office 2010 Toolkit v2.2.3.lnk => C:\Windows\pss\Office 2010 Toolkit v2.2.3.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Marcel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Office 2013 Toolkit and EZ Activator Free Download.lnk => C:\Windows\pss\Office 2013 Toolkit and EZ Activator Free Download.lnk.Startup
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM\...\StartupApproved\Run: => "3D BubbleSound"
HKLM\...\StartupApproved\Run32: => "DivXUpdate"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "YTDownloader"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "DeskBar"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "apphide"
HKU\S-1-5-21-1762406799-550631045-2691834222-1000\...\StartupApproved\Run: => "YTDownloader"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{CE1ECF5F-96E9-4BB5-89B6-47F9E6D2E74F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FA2F2492-71ED-428F-BE98-39A358BCC11C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{37371038-8E9C-4F3B-AE52-EC39134EEA54}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\BFHWebHelper.exe
FirewallRules: [{00CE7E57-AA34-4B94-A82B-0E3DE5520364}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\BFHWebHelper.exe
FirewallRules: [{9A8261D5-4547-4002-A0DD-39FFA5A21835}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{6D0BBF07-E627-42EF-9A5B-541CD2D04D59}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{03878130-4B30-4AD2-A325-E7AA77F2FB7A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{70457B30-0D42-4E77-AEC4-8C1BEA46C5B3}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{EE648335-D42A-499D-AAC8-7A0278FA1144}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25B31DC9-C9E2-4B4E-9F2F-31D7F0A6B9C0}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{67F6757A-9458-4B27-9797-BDEB78B75D4A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{61D6C42D-DC55-4680-9079-38468A871367}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{241F4E92-6C0C-4F8F-96DF-BC55E412ECD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A9680E0A-EC81-4CE1-BF1F-4F23AC297083}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{28F7007C-3049-4A84-B382-F505E37DD72A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7006974F-BB4B-4252-9849-2403A1015A9F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B1A9DBC1-0951-4E5C-A56A-413DEB68B02E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{BBC49069-A86B-427C-B0A6-AA4903AF47C3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{99064551-6BA9-4AE9-871A-2DD225DB22F9}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{F0C0A301-E830-4A11-BEEF-EBD5F3879AE8}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{50588479-D388-4E9D-B4D2-83B6430E02E0}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{2291F4AF-41BF-4131-BA0F-203DF11F78BB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AF254B16-B3AF-42FA-8E21-BBF39C5AEAFF}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{744E5698-7B54-4A51-9E46-F08AD4604015}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F5828340-53ED-44E7-9197-82ABA07E7986}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{6C9A46FF-80E7-4B6B-8135-F79046DE0F29}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{90A455F5-BCBE-4CE9-A882-01ABA45BD441}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{4AB5097C-B972-4DAC-AA53-7A794A064CCE}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{D69CA548-BCB2-4CAA-A1D1-B9E754F12977}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{7F1091A3-8D17-43E8-A10E-79EF7FC40358}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{BD0C3846-7768-475F-B60A-269B2B477FC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{1858BCCE-D7C7-4266-A542-DD3F831A3B41}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{FFE446C2-4FDD-4237-AFD0-CE954D638F25}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{28EA9830-00AF-4A87-9451-BA32B8C595EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{FD161752-AE6E-49DC-8B4F-52F72FCAB335}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{56495F82-0550-4552-B5B4-2FC9AE34907B}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{E98EC9DB-7227-429D-8A48-5C6B47CD4588}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{B53EA384-9452-4F66-B745-D3721EA922ED}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{EABBDC10-222E-41F0-8B76-027608D7D5FC}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CD75C995-8D45-49ED-BABB-B5DFDFC65B50}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8CD128D9-BFAA-436F-9BD6-8B4051E9AC28}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1A6A2739-5CBA-46FC-8FCE-B6A93CBDEABF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{70B8DCBC-4643-4DAF-B577-DE3DB52314B4}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{34507701-F364-4C0E-A7F1-8EABD146446F}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{72C1B0E1-83F3-472C-BF64-C01BEF3EBFC7}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{A7F7B13A-355D-47C6-BD9F-5EBD6A637D8A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CDD88E46-4A36-4568-9A4D-25A08940E072}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\bfh.exe
FirewallRules: [{B155F3EC-E47F-425A-B5BC-A3154F1888A6}] => (Allow) D:\Program Files (x86)\Origin Games\BFH\bfh.exe
FirewallRules: [{7584FF49-DA50-4FF0-A25B-6FB5CA3E2B8A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [{BAB31DE4-0D07-453E-852E-5E1B63DF6D6C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [{7D2040B3-0953-4584-AE42-8273C1B50224}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{20E59CBE-2A69-4D43-BE43-C521404A6273}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/17/2015 04:46:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ShellExperienceHost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d93d
Name des fehlerhaften Moduls: StartUI.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d84d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000ccc89
ID des fehlerhaften Prozesses: 0x15bc
Startzeit der fehlerhaften Anwendung: 0xShellExperienceHost.exe0
Pfad der fehlerhaften Anwendung: ShellExperienceHost.exe1
Pfad des fehlerhaften Moduls: ShellExperienceHost.exe2
Berichtskennung: ShellExperienceHost.exe3
Vollständiger Name des fehlerhaften Pakets: ShellExperienceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ShellExperienceHost.exe5

Error: (12/15/2015 09:45:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/15/2015 08:21:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 42.0.0.5780, Zeitstempel: 0x5632d0a4
Name des fehlerhaften Moduls: mozglue.dll, Version: 42.0.0.5780, Zeitstempel: 0x5632ba58
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000ed50
ID des fehlerhaften Prozesses: 0x2080
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5

Error: (12/15/2015 06:27:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:10:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:09:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:09:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/15/2015 06:08:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SC0P3)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (12/17/2015 07:54:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (12/17/2015 07:54:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/17/2015 07:54:11 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (12/17/2015 07:49:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_320a5" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/17/2015 07:44:32 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (12/17/2015 07:41:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/17/2015 07:41:16 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (12/17/2015 07:40:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_34adb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/17/2015 07:40:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/17/2015 07:40:41 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-12-15 22:03:35.485
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-15 22:02:46.293
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-12-15 20:13:46.633
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-15 14:45:45.243
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-15 14:38:07.447
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-14 16:48:56.508
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-14 16:47:46.751
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-14 16:41:01.572
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 15%
Installierter physikalischer RAM: 16317.12 MB
Verfügbarer physikalischer RAM: 13777.09 MB
Summe virtueller Speicher: 20413.12 MB
Verfügbarer virtueller Speicher: 17688.41 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.25 GB) (Free:55.59 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:530.3 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 7152C9CA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 4DA3150B)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Alt 17.12.2015, 20:06   #13
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Jetzt bitte Suchscan durchführen:

Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 17.12.2015, 21:12   #14
sc0p3
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a8e2faae644e724e8c7fc0e18696e924
# end=init
# utc_time=2015-12-17 07:28:44
# local_time=2015-12-17 08:28:44 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 27248
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a8e2faae644e724e8c7fc0e18696e924
# end=updated
# utc_time=2015-12-17 07:31:59
# local_time=2015-12-17 08:31:59 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a8e2faae644e724e8c7fc0e18696e924
# engine=27248
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-12-17 08:08:26
# local_time=2015-12-17 09:08:26 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 344688 4275576 0 0
# compatibility_mode_1='ESET NOD32 Antivirus 9.0'
# compatibility_mode=8233 16777213 100 100 2703 7463818 0 0
# scanned=349939
# found=18
# cleaned=18
# scan_time=2187
sh=D5DCA17C7209C5DA20D3A2B3B69E972F56A4ECE3 ft=1 fh=266922d56827e43c vn="Variante von Win32/ELEX.FC evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Microsoft\Windows\INetCache\IE\N25XJCJ8\face_yoursearching[1].exe"
sh=EC2D35DA42AEE1FC5BBA51846C0CF5973C20F290 ft=1 fh=8b2e9ce87f94dcc7 vn="Variante von Win32/Adware.ConvertAd.ADW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Microsoft\Windows\INetCache\IE\X31T3SK6\nr21lBp[1].exe"
sh=8092C2E0042432450B07828E4724F50707562E0E ft=1 fh=d25fbb5db31859d0 vn="Variante von Win32/Adware.EoRezo.BD Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Microsoft\Windows\INetCache\IE\X31T3SK6\setup_gmsd_de[1].exe"
sh=15812A4E13B454738989F1769A40D6DAF87DC1FF ft=1 fh=cb39af89f9a83b4e vn="Variante von Win32/Amonetize.NG evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\amisetup4743__15940.exe"
sh=909BEA89BA235AF63F713E233E23F23FE23FBE48 ft=1 fh=630ebc6aeabacdcf vn="Variante von Win32/Toptools.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\InstallHelper.exe"
sh=074292D5081B0EBD7FCBE98EBD229FFC069A0D2D ft=1 fh=ad4026516c1cda11 vn="Variante von Win32/Adware.ConvertAd.ADW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\nsg5AD3.tmp"
sh=8092C2E0042432450B07828E4724F50707562E0E ft=1 fh=d25fbb5db31859d0 vn="Variante von Win32/Adware.EoRezo.BD Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\nsh85F7.tmp"
sh=074292D5081B0EBD7FCBE98EBD229FFC069A0D2D ft=1 fh=ad4026516c1cda11 vn="Variante von Win32/Adware.ConvertAd.ADW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\nsu76AF.tmp"
sh=074292D5081B0EBD7FCBE98EBD229FFC069A0D2D ft=1 fh=ad4026516c1cda11 vn="Variante von Win32/Adware.ConvertAd.ADW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\nsvE6EE.tmp"
sh=D5DCA17C7209C5DA20D3A2B3B69E972F56A4ECE3 ft=1 fh=266922d56827e43c vn="Variante von Win32/ELEX.FC evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\nsz4CD0.tmp"
sh=EC2D35DA42AEE1FC5BBA51846C0CF5973C20F290 ft=1 fh=8b2e9ce87f94dcc7 vn="Variante von Win32/Adware.ConvertAd.ADW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\nszE31D.tmp"
sh=A20688C3677C7C74270E3CB108647A91B1B55FCF ft=1 fh=a8bc0b8a31e0d809 vn="Variante von Win32/ELEX.DB evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\_@405.tmp"
sh=9C11B9D1DCC5CD2058132254E4A12FF3004397C0 ft=1 fh=9433394e892a5ea7 vn="Variante von Win32/ELEX.BP evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\_@408.tmp"
sh=A99A057031BE5E697F08A6B32F08D279C673DB78 ft=1 fh=bf29d5f4060d2337 vn="Variante von Win32/ELEX.CC evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\_@41B.tmp"
sh=2770FBEB22B91D5A14CBD1456B7B5036CE0F4D59 ft=1 fh=999d3174b6f45459 vn="Variante von Win32/ELEX.CR evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\Users\Marcel\AppData\Local\Temp\_@41C.tmp"
sh=C9B7A543AB66A22E19F457D715BE2239AB2BD8C6 ft=1 fh=ba4f57d037402f77 vn="Variante von Win32/Adware.ConvertAd.ACS Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\WINDOWS\Temp\A8A1.tmp.exe"
sh=D2438BBC612D3A3E2352B3ED95D0DD24A1A6CBDB ft=1 fh=ffe94c90b82e0785 vn="Variante von Win32/ELEX.BV evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\WINDOWS\Temp\iSafeDownloader.exe"
sh=9C7DC346F264A8BC3DD3C658836AD2BE32CE2BA7 ft=1 fh=bcad1ed4c0a6a71a vn="Variante von Win32/Toolbar.Linkury.AJ evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows.old\WINDOWS\Temp\nsu6572.exe"

Alt 17.12.2015, 21:25   #15
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
Hijacker Virus .ru - Standard

Hijacker Virus .ru


Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Antwort
Seite 1 von 2 1 2

Themen zu Hijacker Virus .ru
avira, browser, cleaner, desktop, explorer, firefox, formatieren, formatierung, gelöscht, gesucht, google, hijacker, ie explorer, malwarebytes, neu, nicht mehr, norton, ordner, rechner, registry, software, systemsteuerung, virus, windows, öffnet


« Win10: googel chrome und skype watch4 werbung und unseriöse andere werbung | Win 10 sehr langsam seit 2 Tagen/mini freezes »


Ähnliche Themen: Hijacker Virus .ru


  1. Hijacker, Virus durch kostenlosen Download eingefangen!
    Plagegeister aller Art und deren Bekämpfung - 03.04.2015 (11)
  2. Hijacker-Virus/Trojaner, Firefox öffnet neue Tabs und Fenster
    Log-Analyse und Auswertung - 19.05.2014 (15)
  3. Win7 64Bit - Email Account wurde kompromittiert, vermutlich durch Virus, Trojaner, Malware oder Hijacker. Nach Scan mit ESET Online Scanner
    Log-Analyse und Auswertung - 17.04.2014 (9)
  4. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  5. 95p.com Browser Hijacker Virus
    Log-Analyse und Auswertung - 13.01.2012 (12)
  6. Goingonearth Hijacker-Virus - OTL Fix?
    Plagegeister aller Art und deren Bekämpfung - 12.04.2011 (24)
  7. Möglicher Hijacker/Trojaner/Virus gesucht
    Log-Analyse und Auswertung - 16.03.2011 (4)
  8. Hijacker deaktivier Taskmanager und Registry-Editor - Hijacker nicht entfernbar
    Plagegeister aller Art und deren Bekämpfung - 17.08.2010 (2)
  9. HijackThis File nach Virus Fund (TR/Spy.Gen TR/Crypt.UPKM.GEN und TR/HiJacker.GEN)
    Log-Analyse und Auswertung - 29.04.2009 (1)
  10. Virus eingefangen....Hijacker...
    Mülltonne - 23.12.2008 (0)
  11. rechner von'virus/hijacker' befallen. bitte um auswertung der logs
    Log-Analyse und Auswertung - 13.07.2008 (13)
  12. Wer kennt den IEXPLORER.EXE Trojaner, Virus oder Hijacker? Infos mit Screenshot ->
    Mülltonne - 31.12.2005 (1)
  13. Virus Hijacker erstellt tmp dateien auch im abges. modus
    Plagegeister aller Art und deren Bekämpfung - 15.05.2005 (4)
  14. Problem sei virus, hijacker und trojaner
    Plagegeister aller Art und deren Bekämpfung - 24.12.2004 (3)
  15. Welcher Virus/Hijacker?
    Plagegeister aller Art und deren Bekämpfung - 06.10.2004 (1)
  16. Virus oder hijacker
    Plagegeister aller Art und deren Bekämpfung - 02.05.2004 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Hijacker Virus .ru - Hallo, hoffe hier kann mir jemand weiterhelfen bin am Ende meines Latein.. Folgendes: Fahre den Rechner hoch sobald mein Desktop da ist öffnet sich Firefox z.B. mit der Funday24.ru Seite. - Hijacker Virus .ru...
Archiv
Du betrachtest: Hijacker Virus .ru auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131