|
Plagegeister aller Art und deren Bekämpfung: Ständig Neue Tabs mit Werbung im ChromeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
06.02.2016, 14:54 | #1 |
| Ständig Neue Tabs mit Werbung im Chrome Hey, habe nun seit einigen Wochen das Problem, dass andauernd smartnewtab.com oder hotchatdate.com und viele weitere Seiten bei ca. jeden 10.Klick im Browser ungewollt in einem neuen Tab öffnen. Ich benutze GoogleChrome und habe die letzte Tage schon versucht diesen nervigen Hijacker zu entfernen (AdwCleaner usw...) - ohne Erfolg. Nun hoffe ich auf die Hilfe aus diesem Forum! FRST.txt, erster Teil Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016 durchgeführt von Tomas (Administrator) auf TOMAS-PC (06-02-2016 14:30:12) Gestartet von C:\Users\Tomas\Downloads Geladene Profile: Tomas (Verfügbare Profile: Tomas & Larissa & Schulkonto & Gast & DefaultAppPool) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Arcai.com) C:\Program Files (x86)\netcut\services\aips.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (O&O Software GmbH) C:\Program Files\OO Software\DiskImage\oodiag.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe (Microsoft Corporation) C:\Windows\System32\vdsldr.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe (WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUS) C:\Windows\AsScrPro.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Saitek) C:\Program Files\Saitek\VolumeTracker\SaiVolume.exe (Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe (Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe (Spotify Ltd) C:\Users\Tomas\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE () C:\Program Files (x86)\Tecknet M008 16400DPI Gaming Mouse\TECKNETM008MON.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1602.3010.0_x64__8wekyb3d8bbwe\CompanionApp.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Spotify Ltd) C:\Users\Tomas\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Tomas\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Tomas\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Tomas\AppData\Roaming\Spotify\Spotify.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\WINWORD.EXE (Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [SaiVolume] => C:\Program Files\Saitek\VolumeTracker\SaiVolume.exe [152064 2012-10-15] (Saitek) HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek) HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek) HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176 2012-02-16] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321072 2012-02-03] (ASUSTeK Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-25] (ASUS) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-30] (Avast Software s.r.o.) HKLM-x32\...\Run: [TECKNETM008GMRun] => C:\Program Files (x86)\Tecknet M008 16400DPI Gaming Mouse\TECKNETM008MON.exe [3207168 2014-10-22] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1 HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1 HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\Run: [HP Officejet 4620 series (NET)] => C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\Run: [Spotify Web Helper] => C:\Users\Tomas\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2355312 2016-02-04] (Spotify Ltd) HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd) HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\MountPoints2: {616eca34-6968-11e2-bb03-10bf4858e8e3} - "E:\LaunchU3.exe" -a HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\MountPoints2: {b0da61eb-c67f-11e5-9bf5-10bf4858e8e3} - "E:\autorun.exe" AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation) AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-07-13] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-29] (Avast Software s.r.o.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [OODIIcon] -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => C:\Program Files\OO Software\DiskImage\oodishi.dll [2013-09-09] (O&O Software GmbH) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) AutoConfigURL: [S-1-5-21-229791554-3003767711-2460185856-1002] => hxxp://unblockservice.com/wpad.dat?c5409936a4d144d64151c3afcc4381425417181 Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{695b4cb6-d4eb-4cc0-b54b-d230795a0598}: [DhcpNameServer] 172.20.10.1 Tcpip\..\Interfaces\{975786f8-f882-4901-a2be-3a70730488c0}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-229791554-3003767711-2460185856-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl HKU\S-1-5-21-229791554-3003767711-2460185856-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\S-1-5-21-229791554-3003767711-2460185856-1002 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-29] (Avast Software s.r.o.) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-06] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-29] (Avast Software s.r.o.) BHO-x32: QUICKfind BHO Object -> {C08DF07A-3E49-4E25-9AB0-D3882835F153} -> C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll [2007-02-16] (IDM) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-06] (Oracle Corporation) Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\swoqbhfx.default FF DefaultSearchEngine: Google Default FF DefaultSearchEngine,S: FF DefaultSearchUrl: hxxps://de.search.yahoo.com/yhs/search FF SearchEngineOrder.1: Yahoo! (Avast) FF SearchEngineOrder.1,S: FF SelectedSearchEngine: Yahoo! (Avast) FF SelectedSearchEngine,S: FF Keyword.URL: hxxps://de.search.yahoo.com/yhs/search FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-30] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-30] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-30] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-10-01] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-06] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-06] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-26] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-26] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\swoqbhfx.default\searchplugins\google-default.xml [2014-10-12] FF SearchPlugin: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\swoqbhfx.default\searchplugins\yahoo-avast.xml [2015-04-01] FF Extension: FireShot - C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\swoqbhfx.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2015-11-23] FF Extension: leethax.net extension - C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\swoqbhfx.default\Extensions\leethax@leethax.net.xpi [2013-09-30] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-11] Chrome: ======= CHR Profile: C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-29] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AIPS; C:\Program Files (x86)\netcut\services\AIPS.exe [262144 2011-07-28] (Arcai.com) [Datei ist nicht signiert] R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-17] (ASUS) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-29] (Avast Software s.r.o.) S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-06-29] (Avast Software) R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe [69448 2015-10-14] (Google Inc.) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-01-19] (Digital Wave Ltd.) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation) S3 HerculesDJControlMP3; C:\Program Files\Hercules\Audio\DJ Console Series\drivers\amd64\HerculesDJControlMP3.EXE [18944 2012-09-06] (Hercules®) [Datei ist nicht signiert] R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-26] (Intel Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation) R2 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [6258480 2013-09-09] (O&O Software GmbH) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-04] (Electronic Arts) R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.) S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-12-09] (WiseCleaner.com) [Datei ist nicht signiert] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AiCharger; C:\Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-29] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-29] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-29] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-29] () S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-29] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-30] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-29] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-29] () R3 athr; C:\Windows\System32\drivers\athw10x.sys [4325544 2015-08-09] (Qualcomm Atheros Communications, Inc.) S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [238960 2012-10-30] (© Guillemot R&D, 2012. All rights reserved.) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-02-04] () S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC) S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC) [Datei ist nicht signiert] R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) R0 oodisr; C:\Windows\System32\DRIVERS\oodisr.sys [116936 2013-09-09] (O&O Software GmbH) R0 oodisrh; C:\Windows\System32\DRIVERS\oodisrh.sys [41160 2013-09-09] (O&O Software GmbH) R0 oodivd; C:\Windows\System32\DRIVERS\oodivd.sys [255688 2013-09-09] (O&O Software GmbH) R0 oodivdh; C:\Windows\System32\DRIVERS\oodivdh.sys [44744 2013-09-09] (O&O Software GmbH) S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) [Datei ist nicht signiert] R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [410880 2015-08-09] (Realsil Semiconductor Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-06-29] (Avast Software) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare) U3 idsvc; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-06 14:25 - 2016-02-06 14:30 - 00081531 _____ C:\Users\Tomas\Downloads\Addition.txt 2016-02-06 14:24 - 2016-02-06 14:30 - 00028241 _____ C:\Users\Tomas\Downloads\FRST.txt 2016-02-06 14:24 - 2016-02-06 14:30 - 00000000 ____D C:\FRST 2016-02-06 14:23 - 2016-02-06 14:24 - 02370560 _____ (Farbar) C:\Users\Tomas\Downloads\FRST64.exe 2016-02-06 14:20 - 2016-02-06 14:20 - 01508352 _____ C:\Users\Tomas\Downloads\adwcleaner_5.032 (2).exe 2016-02-06 14:09 - 2016-02-06 14:09 - 05576548 _____ C:\Users\Tomas\Downloads\Biologie_alles(1).pdf 2016-02-06 14:08 - 2016-02-06 14:08 - 04932964 _____ C:\Users\Tomas\Downloads\BiologieZusammenfassung.pdf 2016-02-06 14:06 - 2016-02-06 14:06 - 10473470 _____ C:\Users\Tomas\Downloads\Bio-Lsungen.zip 2016-02-06 13:39 - 2016-02-06 13:39 - 00000000 ___HD C:\OneDriveTemp 2016-02-05 19:12 - 2015-12-17 09:37 - 00892083 _____ C:\Users\Tomas\Documents\Überprüfung der.pptx 2016-02-05 16:02 - 2016-02-05 16:02 - 02461956 _____ C:\Users\Tomas\Downloads\Erdkunde_LK_2014.pdf 2016-02-05 16:02 - 2016-02-05 16:02 - 01029857 _____ C:\Users\Tomas\Downloads\Zusammenfassung_für_Abiunity.pdf 2016-02-05 16:02 - 2016-02-05 16:02 - 00323599 _____ C:\Users\Tomas\Downloads\Erdkunde_Zusammengefasst_pdf.pdf 2016-02-05 15:52 - 2016-02-05 15:54 - 10184363 _____ C:\Users\Tomas\Downloads\Tribalismus & Apartheid.pptx 2016-02-05 00:35 - 2016-02-05 00:35 - 00002912 _____ C:\EsgInstallerResumeAction 2016-02-05 00:02 - 2016-02-05 00:02 - 00632270 _____ C:\Users\Tomas\Downloads\Gatsby AP help.pdf 2016-02-04 23:16 - 2016-02-04 23:16 - 00047246 _____ C:\Users\Tomas\Downloads\17667.pdf 2016-02-04 22:58 - 2016-02-04 22:58 - 00608467 _____ C:\Users\Tomas\Downloads\English_summary_2.pdf 2016-02-04 22:34 - 2016-02-04 22:34 - 00000000 ____D C:\Program Files\Common Files\AV 2016-02-04 22:34 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe 2016-02-04 22:29 - 2016-02-04 22:29 - 00001462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2016-02-04 22:29 - 2016-02-04 22:29 - 00001450 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2016-02-04 22:29 - 2016-02-04 22:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2016-02-04 22:29 - 2016-02-04 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2016-02-04 22:28 - 2016-02-04 22:59 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2016-02-04 22:28 - 2016-02-04 22:35 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2016-02-04 22:28 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe 2016-02-04 22:26 - 2016-02-04 22:27 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Tomas\Downloads\spybot-2.4.40.exe 2016-02-04 22:23 - 2016-02-04 22:23 - 01508352 _____ C:\Users\Tomas\Downloads\adwcleaner_5.032 (1).exe 2016-02-04 21:09 - 2016-02-04 21:09 - 00030413 _____ C:\Users\Tomas\Downloads\1454616547_lotto_ident_769622764.pdf 2016-02-04 19:14 - 2016-02-04 19:14 - 00000000 _____ C:\autoexec.bat 2016-02-04 19:13 - 2016-02-04 19:13 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Enigma Software Group 2016-02-04 19:13 - 2016-02-04 19:13 - 00000000 ____D C:\sh4ldr 2016-02-04 19:12 - 2016-02-05 00:45 - 00000000 ____D C:\Program Files\Enigma Software Group 2016-02-04 19:12 - 2016-02-04 19:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Tomas\Downloads\SpyHunter-Installer.exe 2016-02-04 19:12 - 2016-02-04 19:12 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys 2016-02-04 00:21 - 2016-02-04 00:21 - 09175231 _____ (MusicBrainz) C:\Users\Tomas\Downloads\picard-setup-1.3.2.exe 2016-02-04 00:17 - 2016-02-04 00:19 - 00000000 ____D C:\Users\Tomas\Documents\DJ 2016-02-03 23:44 - 2016-02-03 23:44 - 00001050 _____ C:\Users\Public\Desktop\Mp3tag.lnk 2016-02-03 23:44 - 2016-02-03 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2016-02-03 23:43 - 2016-02-03 23:43 - 02877288 _____ C:\Users\Tomas\Downloads\mp3tagv273setup.exe 2016-02-03 20:09 - 2016-02-03 20:09 - 00465559 _____ C:\Users\Tomas\Downloads\Le_monde_des_médias.pdf 2016-02-03 19:34 - 2016-02-03 19:34 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini 2016-02-03 19:04 - 2016-02-04 22:03 - 00000000 ____D C:\WINDOWS\Minidump 2016-02-02 21:44 - 2016-02-02 21:44 - 00065673 _____ C:\Users\Tomas\Downloads\Thg-Partysupportanfrage.pdf 2016-02-02 19:45 - 2016-02-02 19:45 - 00001322 _____ C:\Users\Tomas\Desktop\TeamSpeak 3 Client.lnk 2016-02-02 19:45 - 2016-02-02 19:45 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2016-02-02 19:45 - 2016-02-02 19:45 - 00000000 ____D C:\Users\Tomas\AppData\Local\TeamSpeak 3 Client 2016-02-02 19:36 - 2016-02-02 19:37 - 31017664 _____ (TeamSpeak Systems GmbH) C:\Users\Tomas\Downloads\TeamSpeak3-Client-win64-3.0.18.2.exe 2016-02-02 15:33 - 2016-02-02 15:58 - 00002167 _____ C:\Users\Tomas\Downloads\20160202-156275802-umsatz.CSV 2016-02-02 15:32 - 2016-02-02 15:32 - 00010054 _____ C:\Users\Tomas\Downloads\20160122-20160202-156190407-camt52Booked.ZIP 2016-02-02 13:34 - 2016-02-02 13:35 - 06554232 _____ (Tim Kosse) C:\Users\Tomas\Downloads\FileZilla_3.15.0.1_win64-setup.exe 2016-02-02 13:29 - 2016-02-02 13:29 - 01508352 _____ C:\Users\Tomas\Downloads\adwcleaner_5.032.exe 2016-02-02 13:15 - 2016-02-04 22:43 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-02 13:15 - 2016-02-04 22:43 - 00002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-02-02 13:12 - 2016-02-05 23:41 - 00004156 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B2A8CF0F-520C-4C5F-8DFE-DA51CBA20443} 2016-02-02 13:11 - 2016-02-02 13:11 - 00987728 _____ (Google Inc.) C:\Users\Tomas\Downloads\ChromeSetup.exe 2016-02-01 01:00 - 2016-02-01 01:00 - 00976896 _____ C:\Users\Tomas\Downloads\Referat_Kongo.ppt 2016-02-01 00:36 - 2016-02-01 00:36 - 03840000 _____ C:\Users\Tomas\Downloads\MS_Office_2016_Key_Working_For_Activation.iso 2016-01-30 07:58 - 2016-01-30 07:58 - 00021844 _____ C:\Users\Tomas\Downloads\e1d23bc571dee989b394ca85eda6417d1452184314 (1).xlsx 2016-01-30 07:56 - 2016-01-30 07:56 - 01866681 _____ C:\Users\Tomas\Downloads\Teilnehmerliste-BG-1652.pdf 2016-01-30 07:56 - 2016-01-30 07:56 - 01866681 _____ C:\Users\Tomas\Downloads\Teilnehmerliste-BG-1652 (1).pdf 2016-01-29 18:11 - 2016-01-29 18:11 - 00040794 _____ C:\Users\Tomas\Documents\Herzlichen Glückwunsch - du hast gewonnen!.htm 2016-01-29 15:56 - 2016-01-29 15:57 - 09589798 _____ C:\Users\Tomas\Downloads\nora juli norwegen-2.pptx 2016-01-29 15:56 - 2016-01-29 15:56 - 02503819 _____ C:\Users\Tomas\Downloads\Das Klima in Frankreich Presentation.pptx 2016-01-29 15:54 - 2016-01-29 15:54 - 00611900 _____ C:\Users\Tomas\Downloads\Mallorca.pptx 2016-01-29 15:15 - 2016-01-29 15:17 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\MyPhoneExplorer 2016-01-29 15:15 - 2016-01-29 15:15 - 00002128 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2016-01-29 15:15 - 2016-01-29 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2016-01-29 15:15 - 2016-01-29 15:15 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer 2016-01-29 15:13 - 2016-01-29 15:14 - 07887096 _____ C:\Users\Tomas\Downloads\MyPhoneExplorer_Setup_1.8.7.exe 2016-01-29 13:11 - 2016-01-29 13:12 - 06050004 _____ C:\Users\Tomas\Downloads\Land Grabbing Laura & Maria.pptx 2016-01-28 16:54 - 2016-01-28 16:54 - 00139381 _____ C:\Users\Larissa\Downloads\Linien_41-42 (1).PDF 2016-01-28 16:44 - 2016-01-28 16:44 - 00139381 _____ C:\Users\Larissa\Downloads\Linien_41-42.PDF 2016-01-28 10:24 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-28 10:24 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2016-01-28 10:24 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-01-28 10:24 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-28 10:24 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-01-28 10:24 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-01-28 10:24 - 2016-01-16 07:21 - 22572624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-01-28 10:24 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2016-01-28 10:24 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-01-28 10:24 - 2016-01-16 07:20 - 06600904 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-01-28 10:24 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-28 10:24 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2016-01-28 10:24 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-28 10:24 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2016-01-28 10:24 - 2016-01-16 07:17 - 21125400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-01-28 10:24 - 2016-01-16 07:16 - 05238360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-01-28 10:24 - 2016-01-16 07:13 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-01-28 10:24 - 2016-01-16 07:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-01-28 10:24 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-01-28 10:24 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-01-28 10:24 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-01-28 10:24 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-01-28 10:24 - 2016-01-16 06:44 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-01-28 10:24 - 2016-01-16 06:40 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-01-28 10:24 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-01-28 10:24 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll 2016-01-28 10:24 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-01-28 10:24 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2016-01-28 10:24 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-01-28 10:24 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2016-01-28 10:24 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2016-01-28 10:24 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2016-01-28 10:24 - 2016-01-16 06:32 - 24602624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-01-28 10:24 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2016-01-28 10:24 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-01-28 10:24 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2016-01-28 10:24 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-01-28 10:24 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-01-28 10:24 - 2016-01-16 06:30 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-01-28 10:24 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-01-28 10:24 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-01-28 10:24 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-01-28 10:24 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll 2016-01-28 10:24 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-01-28 10:24 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-01-28 10:24 - 2016-01-16 06:28 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-01-28 10:24 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-01-28 10:24 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-01-28 10:24 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-01-28 10:24 - 2016-01-16 06:26 - 19338752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-01-28 10:24 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2016-01-28 10:24 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll 2016-01-28 10:24 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll 2016-01-28 10:24 - 2016-01-16 06:24 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-01-28 10:24 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2016-01-28 10:24 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2016-01-28 10:24 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-01-28 10:24 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-01-28 10:24 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-01-28 10:24 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-01-28 10:24 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-01-28 10:24 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-01-28 10:24 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-01-28 10:24 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-01-28 10:24 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2016-01-28 10:24 - 2016-01-16 06:19 - 12126208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-01-28 10:24 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll 2016-01-28 10:24 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-01-28 10:24 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-01-28 10:24 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-01-28 10:24 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-01-28 10:24 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-01-28 10:24 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-01-28 10:24 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-01-28 10:23 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2016-01-28 10:23 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-28 10:23 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-28 10:23 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-28 10:23 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-01-28 10:23 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2016-01-28 10:23 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2016-01-28 10:23 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-01-28 10:23 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-01-28 10:23 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll 2016-01-28 10:23 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll 2016-01-28 10:23 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll 2016-01-28 10:23 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-01-28 10:23 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll 2016-01-28 10:23 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-01-28 10:23 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll 2016-01-28 10:23 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2016-01-28 10:23 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe 2016-01-28 10:23 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll 2016-01-28 10:23 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-01-28 10:23 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2016-01-28 10:23 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-01-28 10:23 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2016-01-28 10:23 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-01-28 10:23 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll 2016-01-28 10:23 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-01-28 10:23 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll 2016-01-28 10:23 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll 2016-01-28 10:23 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-01-28 10:23 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll 2016-01-28 10:23 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2016-01-28 10:23 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-01-28 10:23 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll 2016-01-28 10:23 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2016-01-28 10:23 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-01-28 10:23 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2016-01-28 10:23 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe 2016-01-28 10:23 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2016-01-28 10:23 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2016-01-28 10:23 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll 2016-01-28 10:23 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-01-28 10:23 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-01-28 10:23 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2016-01-28 10:23 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2016-01-28 10:23 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2016-01-28 10:23 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-01-28 10:23 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-01-28 10:23 - 2016-01-16 06:18 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-01-28 10:23 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2016-01-28 10:23 - 2016-01-16 06:09 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-01-27 01:04 - 2016-01-27 01:04 - 00001509 _____ C:\Users\Public\Desktop\Free Audio Converter.lnk 2016-01-27 01:04 - 2016-01-27 01:04 - 00001316 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2016-01-27 01:04 - 2016-01-27 01:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2016-01-27 01:03 - 2016-01-27 01:04 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2016-01-26 09:18 - 2016-02-03 10:00 - 00000000 ____D C:\Users\Larissa\AppData\Local\CrashDumps 2016-01-25 14:06 - 2016-01-25 14:06 - 00000000 ____D C:\Users\Tomas\Downloads\DMS 0701 [DJC] 2016-01-25 02:44 - 2016-01-25 02:49 - 26372936 _____ (DVDVideoSoft Ltd. ) C:\Users\Tomas\Downloads\FreeAudioConverter.exe 2016-01-25 01:01 - 2016-01-25 14:06 - 00000000 ____D C:\Users\Tomas\Downloads\EDM Traxx 2502 2016-01-25 01:00 - 2016-01-25 14:06 - 00000000 ____D C:\Users\Tomas\Downloads\EDM Traxx 2402 2016-01-24 22:39 - 2016-01-24 22:39 - 00044918 _____ C:\Users\Tomas\Downloads\clean-bandit-rather-be-feat-jess-glynne.htm 2016-01-24 20:14 - 2016-01-24 20:14 - 00000462 _____ C:\Users\Tomas\Downloads\listen-dsl.asx 2016-01-24 17:00 - 2016-01-24 17:00 - 00000000 ____D C:\Users\Tomas\AppData\Local\ElevatedDiagnostics 2016-01-24 15:53 - 2016-02-04 11:39 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\PioneerLog 2016-01-24 15:52 - 2016-01-24 15:52 - 00000000 ____D C:\Users\Tomas\Documents\rekordbox 2016-01-24 15:52 - 2016-01-24 15:52 - 00000000 ____D C:\Users\Public\Documents\Pioneer DJ 2016-01-24 15:52 - 2016-01-24 15:52 - 00000000 ____D C:\ProgramData\SafeNet Sentinel 2016-01-24 15:52 - 2016-01-24 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pioneer 2016-01-24 15:52 - 2015-02-17 10:53 - 00040456 _____ (Pioneer Corporation.) C:\WINDOWS\system32\Drivers\XDJ-RXAudio64.sys 2016-01-24 15:52 - 2015-02-17 10:39 - 00092672 _____ (Pioneer Corporation.) C:\WINDOWS\SysWOW64\XDJ-RX_ASIO.dll 2016-01-24 15:48 - 2016-01-24 15:48 - 00000972 _____ C:\Users\Tomas\Desktop\rekordbox.lnk 2016-01-24 15:48 - 2016-01-24 15:48 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Pioneer 2016-01-24 15:48 - 2016-01-24 15:48 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pioneer 2016-01-24 15:47 - 2016-01-24 15:52 - 00000000 ____D C:\Program Files (x86)\Pioneer 2016-01-24 15:45 - 2016-01-24 15:46 - 49904850 _____ C:\Users\Tomas\Desktop\Install_rekordbox_4_0_5.zip 2016-01-24 14:38 - 2016-01-24 14:38 - 00002856 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2016-01-24 14:38 - 2016-01-24 14:38 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-01-24 14:38 - 2016-01-24 14:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-01-24 14:38 - 2016-01-24 14:38 - 00000000 ____D C:\Program Files\CCleaner 2016-01-24 14:37 - 2016-01-24 14:37 - 05565560 _____ (Piriform Ltd) C:\Users\Tomas\Downloads\ccsetup513_slim.exe 2016-01-24 14:35 - 2016-01-24 14:35 - 00000658 _____ C:\Users\Tomas\Desktop\UpdateInfo.txt 2016-01-24 14:33 - 2013-03-26 22:50 - 05047296 _____ (Atomix Productions) C:\Users\Tomas\Desktop\virtualdj_pro.exe 2016-01-24 01:57 - 2016-02-05 18:47 - 00000000 ____D C:\Users\Tomas\AppData\Local\CrashDumps 2016-01-23 17:51 - 2016-02-02 13:48 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\FileZilla 2016-01-23 17:51 - 2016-01-23 17:51 - 00001836 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2016-01-23 17:51 - 2016-01-23 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2016-01-23 17:51 - 2016-01-23 17:51 - 00000000 ____D C:\Program Files\FileZilla FTP Client 2016-01-23 17:43 - 2016-01-23 17:43 - 00008853 _____ C:\Users\Tomas\Downloads\5366F2BBFDC632873F12D5011C6E5671022CA9AF.torrent 2016-01-23 17:39 - 2016-01-31 22:29 - 00000000 ____D C:\Users\Tomas\AppData\LocalLow\BitTorrent 2016-01-23 17:36 - 2016-01-23 17:36 - 01873952 _____ (BitTorrent Inc.) C:\Users\Tomas\Downloads\BitTorrent.exe 2016-01-23 17:22 - 2016-01-23 17:22 - 00013813 _____ C:\Users\Tomas\Downloads\9B652536322F3BF2D9D5CE7D2A69DBA2E437A95F.torrent 2016-01-23 17:21 - 2016-01-23 17:21 - 00014206 _____ C:\Users\Tomas\Downloads\8C30BAF5A9FC721239892C6B1B10B21E78F486D6 (1).torrent 2016-01-23 17:20 - 2016-01-23 17:20 - 00024132 _____ C:\Users\Tomas\Downloads\7FE24962CCC00E2C1287CD9E506CACC8DB9170AD.torrent 2016-01-23 17:17 - 2016-01-23 17:17 - 00014206 _____ C:\Users\Tomas\Downloads\8C30BAF5A9FC721239892C6B1B10B21E78F486D6.torrent 2016-01-23 17:15 - 2016-01-31 22:29 - 00000000 ____D C:\Users\Tomas\AppData\LocalLow\uTorrent 2016-01-23 17:13 - 2016-01-23 17:13 - 02026520 _____ (BitTorrent Inc.) C:\Users\Tomas\Downloads\uTorrent373.exe 2016-01-23 17:13 - 2016-01-23 17:13 - 00020176 _____ C:\Users\Tomas\Downloads\19827977789BFAE200EC2634EA4BF3502805DD56.torrent 2016-01-23 17:06 - 2016-02-04 00:00 - 00000000 ____D C:\Users\Tomas\Downloads\Download bis 215 2016-01-21 18:40 - 2016-01-29 12:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-01-20 23:46 - 2016-01-20 23:46 - 00071040 _____ C:\Users\Tomas\Downloads\NuN_09_Sozialisation (1).pdf 2016-01-20 23:45 - 2016-01-20 23:45 - 00071040 _____ C:\Users\Tomas\Downloads\NuN_09_Sozialisation.pdf 2016-01-20 22:18 - 2016-01-20 22:18 - 00000470 _____ C:\Users\Tomas\Downloads\listen-dsl (8).asx 2016-01-20 22:17 - 2016-01-20 22:17 - 00000470 _____ C:\Users\Tomas\Downloads\listen-dsl (7).asx 2016-01-20 22:16 - 2016-01-20 22:16 - 00000462 _____ C:\Users\Tomas\Downloads\listen-dsl (6).asx 2016-01-20 19:04 - 2016-01-20 19:03 - 00016059 _____ C:\Users\Tomas\Desktop\Lebenslauf_Jan-Soeren.odt 2016-01-17 18:46 - 2016-01-17 18:49 - 142182064 _____ (Microsoft Corporation) C:\Users\Tomas\Downloads\wlsetup3528-all.exe 2016-01-17 04:19 - 2016-01-17 04:19 - 00000000 ____D C:\.oracle_jre_usage 2016-01-17 00:15 - 2016-01-17 00:15 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\dll-files.com 2016-01-15 12:56 - 2016-01-15 12:56 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk 2016-01-15 12:56 - 2016-01-15 12:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-01-15 12:18 - 2016-01-15 12:18 - 00000000 ____D C:\Users\Larissa\AppData\Local\ActiveSync 2016-01-15 12:16 - 2016-01-15 12:16 - 00000020 ___SH C:\Users\Larissa\ntuser.ini 2016-01-15 00:15 - 2016-01-15 00:15 - 00034375 _____ C:\Users\Tomas\Downloads\Vertraege_Vorlagen.zip 2016-01-13 10:04 - 2016-01-13 10:04 - 00000000 ____D C:\WINDOWS\PCHEALTH 2016-01-13 09:16 - 2016-01-13 09:16 - 00001732 _____ C:\Users\Tomas\Documents\Evolutionstheorie von Charles Darwin Handout von Tomas Gan.pdf 2016-01-13 07:42 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-01-13 07:42 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-01-13 07:42 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-01-13 07:42 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-01-13 07:42 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-13 07:42 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-01-13 07:42 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-01-13 07:42 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-01-13 07:42 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-01-13 07:42 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-01-13 07:42 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-01-13 07:42 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-01-13 07:42 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-01-13 07:42 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-13 07:42 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-13 07:42 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-13 07:42 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-01-13 07:42 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-01-13 07:42 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-01-13 07:42 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-01-13 07:42 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-01-13 07:42 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-13 07:42 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-01-13 07:42 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-01-13 07:42 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-13 07:42 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-13 07:42 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-01-13 07:42 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-01-13 07:42 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll 2016-01-13 07:42 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-01-13 07:42 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-01-13 07:42 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-01-13 07:42 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2016-01-13 07:42 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-01-13 07:42 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-01-13 07:42 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-01-13 07:42 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-01-13 07:42 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-01-13 07:42 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-01-13 07:42 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-13 07:42 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-01-13 07:42 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-01-13 07:42 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2016-01-13 07:42 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-13 07:42 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-01-13 07:42 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-01-13 07:42 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-01-13 07:42 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-01-13 07:42 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-01-13 07:42 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-01-13 07:42 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-01-13 07:42 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2016-01-13 07:42 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-01-13 07:42 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-01-13 07:42 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-01-13 07:42 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-01-13 07:42 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-01-13 07:42 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-01-13 07:42 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-01-13 07:42 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2016-01-13 07:42 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-01-13 07:42 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-01-13 07:42 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-01-13 07:42 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-01-13 07:42 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-01-13 07:42 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-01-13 07:42 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-01-13 07:42 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-01-13 07:42 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-01-13 07:42 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-01-13 07:42 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-01-13 07:42 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-01-13 07:42 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-01-12 21:15 - 2016-01-12 21:15 - 00029018 _____ C:\Users\Tomas\Downloads\Abrechnung_4461_5474_20160107.PDF 2016-01-12 20:48 - 2016-01-12 20:48 - 00098044 _____ C:\Users\Tomas\Desktop\28.12.2015_Abi_Party_THG.pdf 2016-01-12 15:05 - 2016-01-20 01:39 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Usenet.nl 2016-01-12 15:05 - 2016-01-20 01:32 - 00000000 ____D C:\Users\Tomas\Documents\Usenet.nl 2016-01-12 15:05 - 2016-01-12 15:05 - 07457256 _____ ( ) C:\Users\Tomas\Downloads\UsenetNLSetup_1.30.exe 2016-01-12 15:05 - 2016-01-12 15:05 - 00001960 _____ C:\Users\Tomas\Desktop\Usenet.nl.lnk 2016-01-12 15:05 - 2016-01-12 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Usenet.nl 2016-01-12 15:05 - 2016-01-12 15:05 - 00000000 ____D C:\Program Files (x86)\Usenet.nl 2016-01-11 22:07 - 2014-01-01 03:12 - 739344496 _____ C:\Users\Tomas\Desktop\REC014.WAV 2016-01-11 00:02 - 2016-01-11 00:02 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-01-10 17:25 - 2016-01-10 17:25 - 00535008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110.dll 2016-01-10 17:24 - 2016-01-10 17:25 - 05444000 _____ (Dll-Files.com ) C:\Users\Tomas\Downloads\dffsetup-msvcp110.exe 2016-01-10 17:24 - 2016-01-10 17:25 - 00661456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110.dll 2016-01-10 17:22 - 2016-01-10 17:22 - 00155363 _____ C:\Users\Tomas\Downloads\msvcp110.zip 2016-01-09 23:52 - 2016-01-09 23:52 - 00011718 _____ C:\Users\Tomas\Downloads\19. Geb.xlsx 2016-01-09 21:06 - 2016-01-09 21:06 - 00000000 ___RD C:\Users\Tomas\3D Objects 2016-01-09 17:51 - 2016-01-09 17:51 - 00000000 ____D C:\Users\Tomas\AppData\Local\ActiveSync 2016-01-09 17:49 - 2016-01-09 17:49 - 00000020 ___SH C:\Users\Tomas\ntuser.ini 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Vorlagen 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Startmenü 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2016-01-09 17:38 - 2016-01-09 17:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2016-01-09 17:31 - 2016-02-05 23:32 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-01-09 17:14 - 2016-01-09 17:14 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2010 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2010 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2016-01-09 17:14 - 2016-01-09 17:14 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2016-01-09 17:05 - 2016-01-09 17:05 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines 2016-01-09 17:03 - 2016-01-09 17:17 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2016-01-09 16:58 - 2016-02-05 00:44 - 00000000 ____D C:\Users\Tomas 2016-01-09 16:58 - 2016-02-04 22:59 - 00000000 ____D C:\Users\Larissa 2016-01-09 16:58 - 2016-02-03 19:34 - 00000000 ____D C:\Users\DefaultAppPool 2016-01-09 16:58 - 2016-01-09 17:30 - 00000000 ____D C:\Users\Gast 2016-01-09 16:58 - 2016-01-09 17:25 - 00000000 ____D C:\Users\Schulkonto 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Vorlagen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Startmenü 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Netzwerkumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Lokale Einstellungen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Eigene Dateien 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Druckumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Documents\Eigene Videos 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Documents\Eigene Musik 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Documents\Eigene Bilder 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\AppData\Local\Verlauf 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\AppData\Local\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Tomas\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Vorlagen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Startmenü 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Netzwerkumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Lokale Einstellungen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Eigene Dateien 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Druckumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Documents\Eigene Videos 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Documents\Eigene Musik 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Documents\Eigene Bilder 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\AppData\Local\Verlauf 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\AppData\Local\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Schulkonto\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Vorlagen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Startmenü 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Netzwerkumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Lokale Einstellungen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Eigene Dateien 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Druckumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Documents\Eigene Videos 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Documents\Eigene Musik 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Documents\Eigene Bilder 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\AppData\Local\Verlauf 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\AppData\Local\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Larissa\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Vorlagen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Startmenü 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Netzwerkumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Lokale Einstellungen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Eigene Dateien 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Druckumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Documents\Eigene Videos 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Documents\Eigene Musik 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Documents\Eigene Bilder 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\AppData\Local\Verlauf 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\AppData\Local\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\Gast\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten 2016-01-09 16:58 - 2016-01-09 16:58 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten 2016-01-09 16:57 - 2016-02-05 19:14 - 02114034 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-09 16:57 - 2016-01-09 16:57 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2016-01-09 16:53 - 2016-01-09 17:17 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2016-01-09 16:53 - 2016-01-09 17:17 - 00000000 ____D C:\WINDOWS\system32\NV 2016-01-09 16:53 - 2016-01-09 17:05 - 00000000 ____D C:\Program Files\Intel 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____D C:\WINDOWS\system32\DAX2 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____D C:\ProgramData\SonicFocus 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____D C:\ProgramData\NVIDIA 2016-01-09 16:53 - 2016-01-09 16:53 - 00000000 ____D C:\Program Files\Realtek 2016-01-09 16:53 - 2015-10-26 09:30 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2016-01-09 16:53 - 2015-10-26 09:30 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2016-01-09 16:52 - 2016-01-09 17:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-01-09 16:52 - 2016-01-09 17:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-01-09 16:52 - 2016-01-09 17:05 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-01-09 16:52 - 2016-01-09 17:05 - 00000000 ____D C:\Program Files (x86)\ASUS 2016-01-09 16:52 - 2015-07-13 18:37 - 06873744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 00937616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-01-09 16:52 - 2015-07-13 18:37 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 00075080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 00062792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-01-09 16:52 - 2015-07-13 17:28 - 05096627 _____ C:\WINDOWS\system32\nvcoproc.bin 2016-01-09 16:51 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2016-01-09 16:50 - 2016-01-09 16:51 - 00000000 ____D C:\ProgramData\SetupTPDriver 2016-01-09 16:48 - 2016-01-09 17:19 - 05076248 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-01-09 16:42 - 2016-01-09 16:43 - 00000000 ____D C:\Windows.old 2016-01-09 16:41 - 2016-01-09 16:41 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2016-01-09 16:41 - 2016-01-09 16:41 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2016-01-09 16:41 - 2016-01-09 16:41 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL 2016-01-09 16:41 - 2016-01-09 16:41 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL 2016-01-09 16:41 - 2016-01-09 16:41 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-01-09 16:41 - 2016-01-09 16:41 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-01-09 16:41 - 2016-01-09 16:41 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2016-01-09 16:41 - 2016-01-09 16:41 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2016-01-09 16:41 - 2016-01-09 16:41 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2016-01-09 16:38 - 2015-10-29 19:43 - 09893888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons000a.dll 2016-01-09 16:38 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll 2016-01-09 16:38 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll 2016-01-09 16:38 - 2015-10-29 19:42 - 09893888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons000a.dll 2016-01-09 16:38 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll 2016-01-09 16:38 - 2015-10-29 19:26 - 09687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000a.dll 2016-01-09 16:38 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll 2016-01-09 16:38 - 2015-10-29 19:24 - 09566208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000a.dll 2016-01-09 16:38 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll 2016-01-09 16:37 - 2016-01-09 16:37 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\WINDOWS\system32\msmq 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\Program Files\MSBuild 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-01-09 16:32 - 2016-01-09 16:32 - 00000000 ____D C:\inetpub 2016-01-09 16:31 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2016-01-09 16:31 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-01-09 16:31 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2016-01-09 16:31 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2016-01-09 16:31 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2016-01-09 16:31 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2016-01-07 22:31 - 2016-01-07 22:31 - 00021844 _____ C:\Users\Tomas\Downloads\e1d23bc571dee989b394ca85eda6417d1452184314.xlsx 2016-01-07 19:47 - 2016-01-07 19:47 - 00073096 _____ C:\Users\Tomas\Downloads\feste-feiern-die-perfekte-gaesteliste-1-setup.exe 2016-01-07 19:17 - 2016-01-07 19:17 - 01466656 _____ C:\Users\Tomas\Downloads\Excel Vorlage Partyplaner - CHIP-Installer.exe 2016-01-07 19:17 - 2016-01-07 19:17 - 00006307 _____ C:\Users\Tomas\Downloads\Party.zip Geändert von tuesmaster (06.02.2016 um 14:55 Uhr) Grund: CODE |
06.02.2016, 14:57 | #2 |
| Ständig Neue Tabs mit Werbung im Chrome Zweiter Teil FRST:txt
__________________Code:
ATTFilter ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-06 14:28 - 2014-02-09 01:25 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Spotify 2016-02-06 14:21 - 2014-01-06 18:01 - 00000000 ____D C:\AdwCleaner 2016-02-06 14:14 - 2015-08-09 18:40 - 00000000 ____D C:\Users\Tomas\AppData\Local\Packages 2016-02-06 14:08 - 2013-04-13 09:47 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-02-06 14:02 - 2014-02-09 01:26 - 00000000 ____D C:\Users\Tomas\AppData\Local\Spotify 2016-02-06 13:50 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2016-02-06 13:46 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-02-06 13:46 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-02-06 13:43 - 2012-02-24 03:29 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-06 13:39 - 2015-08-10 11:24 - 00000000 ___RD C:\Users\Tomas\OneDrive 2016-02-06 13:39 - 2015-08-09 18:39 - 00000000 __SHD C:\Users\Tomas\IntelGraphicsProfiles 2016-02-06 13:39 - 2013-10-19 22:41 - 00000442 _____ C:\WINDOWS\Tasks\Wise Memory Optimizer Task.job 2016-02-06 13:39 - 2013-07-17 12:41 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-06 13:39 - 2013-05-18 18:09 - 00000422 _____ C:\WINDOWS\Tasks\Wise Care 365.job 2016-02-06 13:39 - 2013-01-29 01:13 - 00000828 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2016-02-05 23:39 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-02-05 23:35 - 2013-05-18 17:53 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Wise Care 365 2016-02-05 19:18 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-02-05 19:14 - 2015-10-30 19:35 - 00899588 _____ C:\WINDOWS\system32\perfh007.dat 2016-02-05 19:14 - 2015-10-30 19:35 - 00202038 _____ C:\WINDOWS\system32\perfc007.dat 2016-02-05 18:47 - 2015-08-12 21:42 - 00003642 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask 2016-02-05 15:44 - 2013-01-29 01:16 - 00002380 _____ C:\WINDOWS\system32\ServiceFilter.ini 2016-02-05 15:43 - 2013-01-29 01:16 - 00003558 _____ C:\WINDOWS\system32\AutoRunFilter.ini 2016-02-04 22:06 - 2013-04-24 15:05 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\TS3Client 2016-02-04 21:50 - 2013-03-17 16:34 - 00000000 ____D C:\Users\Tomas\Desktop\SORT 2016-02-04 19:41 - 2014-05-30 01:06 - 00000000 ____D C:\Users\Tomas\Documents\Abi-Komitee 2016-02-04 19:11 - 2013-04-13 22:04 - 00000000 ____D C:\ProgramData\Origin 2016-02-04 19:09 - 2014-09-23 22:18 - 00000000 ____D C:\ProgramData\Package Cache 2016-02-04 19:09 - 2014-08-11 13:52 - 00000000 ____D C:\Program Files (x86)\Origin 2016-02-04 12:32 - 2013-01-29 01:13 - 00000830 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2016-02-04 00:42 - 2013-09-12 20:12 - 00000000 ____D C:\Users\Tomas\Documents\Schule 2016-02-04 00:26 - 2013-01-29 23:25 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\vlc 2016-02-04 00:03 - 2013-05-15 21:17 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Mp3tag 2016-02-03 23:57 - 2013-11-23 14:45 - 00000000 ____D C:\Users\Tomas\Downloads\Unroot 2016-02-03 23:44 - 2013-05-15 19:51 - 00000000 ____D C:\Program Files (x86)\Mp3tag 2016-02-03 18:44 - 2013-02-02 10:11 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Skype 2016-02-03 09:55 - 2013-01-31 21:11 - 00002326 _____ C:\Users\Larissa\Desktop\Google Chrome.lnk 2016-02-03 09:54 - 2015-08-09 18:34 - 00000000 __SHD C:\Users\Larissa\IntelGraphicsProfiles 2016-02-02 13:11 - 2014-06-09 00:20 - 00000000 __SHD C:\Users\Tomas\AppData\Local\EmieUserList 2016-02-02 13:11 - 2014-06-09 00:20 - 00000000 __SHD C:\Users\Tomas\AppData\Local\EmieSiteList 2016-02-02 12:58 - 2013-12-23 15:30 - 00000000 ____D C:\Program Files (x86)\Basement Softworks 2016-02-02 12:57 - 2013-09-30 21:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-02-02 12:38 - 2013-07-17 12:41 - 00003962 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-02 12:38 - 2012-02-24 03:29 - 00004194 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-02 12:05 - 2015-08-09 18:34 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-01-31 18:01 - 2013-05-18 18:09 - 00000402 _____ C:\WINDOWS\Tasks\Wise Turbo Checker.job 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-01-28 20:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-01-28 16:52 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-01-27 01:03 - 2013-06-20 20:36 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\DVDVideoSoft 2016-01-24 23:27 - 2014-08-11 13:54 - 00000000 ____D C:\Program Files (x86)\Origin Games 2016-01-24 23:27 - 2013-04-13 22:04 - 00000000 ____D C:\ProgramData\Electronic Arts 2016-01-24 23:27 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-01-24 16:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-01-24 15:53 - 2013-01-31 20:04 - 00000000 ____D C:\Users\Tomas\Documents\VirtualDJ 2016-01-22 01:05 - 2013-01-28 17:25 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Skype 2016-01-20 20:19 - 2015-12-06 22:23 - 00000000 ____D C:\Users\Tomas\Documents\Karriere 2016-01-20 18:08 - 2013-04-13 09:47 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-01-17 18:53 - 2014-10-24 15:45 - 00001380 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2016-01-17 18:53 - 2014-01-12 22:26 - 00001449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-01-17 18:53 - 2012-02-24 03:33 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2016-01-17 18:52 - 2012-02-24 03:33 - 00000000 ____D C:\Program Files (x86)\Windows Live 2016-01-17 18:52 - 2012-02-24 03:31 - 00000000 ____D C:\Program Files\Windows Live 2016-01-17 04:17 - 2013-03-13 23:58 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-01-17 04:17 - 2013-03-13 23:58 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-01-15 12:56 - 2014-03-12 09:54 - 00000000 ____D C:\Users\Larissa\AppData\Local\Skype 2016-01-15 12:56 - 2013-01-28 17:25 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-01-15 12:56 - 2013-01-28 17:24 - 00000000 ____D C:\ProgramData\Skype 2016-01-15 12:39 - 2015-08-09 18:34 - 00000000 ____D C:\Users\Larissa\AppData\Local\Packages 2016-01-15 12:23 - 2015-08-09 18:49 - 00002431 _____ C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-01-15 12:23 - 2015-08-09 18:49 - 00000000 ___RD C:\Users\Larissa\OneDrive 2016-01-13 10:11 - 2013-03-13 23:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-01-13 10:09 - 2013-06-14 19:31 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2016-01-13 10:03 - 2009-07-14 03:34 - 00000510 _____ C:\WINDOWS\win.ini 2016-01-13 09:54 - 2013-08-13 07:57 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-01-13 09:38 - 2013-02-25 12:00 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-01-10 17:25 - 2013-01-29 01:19 - 00000000 ____D C:\ProgramData\Temp 2016-01-10 15:43 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat 2016-01-09 18:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2016-01-09 17:56 - 2015-08-10 11:24 - 00002425 _____ C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-01-09 17:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog 2016-01-09 17:50 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView 2016-01-09 17:49 - 2015-08-10 11:22 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture 2016-01-09 17:49 - 2015-08-09 18:34 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2016-01-09 17:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2016-01-09 17:38 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT 2016-01-09 17:38 - 2015-08-03 00:58 - 00049470 _____ C:\WINDOWS\diagerr.xml 2016-01-09 17:38 - 2015-08-03 00:58 - 00047628 _____ C:\WINDOWS\diagwrn.xml 2016-01-09 17:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2016-01-09 17:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration 2016-01-09 17:32 - 2015-08-09 18:26 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat 2016-01-09 17:31 - 2015-12-15 00:41 - 00002564 _____ C:\WINDOWS\System32\Tasks\{5833DB41-65E3-4D13-80C9-4AFA331D1FB9} 2016-01-09 17:31 - 2015-10-01 20:50 - 00002466 _____ C:\WINDOWS\System32\Tasks\avastBCLRestart_chrome.exe 2016-01-09 17:31 - 2015-09-06 12:57 - 00002312 _____ C:\WINDOWS\System32\Tasks\{BA1AAE35-DB83-46AD-8785-A5BE1D816864} 2016-01-09 17:31 - 2015-08-20 09:54 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-01-09 17:31 - 2015-08-09 18:43 - 00002862 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher 2016-01-09 17:31 - 2014-11-19 17:15 - 00002292 _____ C:\WINDOWS\System32\Tasks\{C70EE833-A7A4-4341-9C5E-82E2AF1FBC14} 2016-01-09 17:31 - 2014-09-09 09:17 - 00002244 _____ C:\WINDOWS\System32\Tasks\{2E114670-75BC-48CB-947E-6D60E4BFB95B} 2016-01-09 17:31 - 2014-03-10 22:11 - 00002744 _____ C:\WINDOWS\System32\Tasks\HP Officejet 4620 series.exe_{FF7D9FC2-8893-4890-AF8A-F415598F3D20} 2016-01-09 17:31 - 2013-12-01 00:38 - 00002458 _____ C:\WINDOWS\System32\Tasks\{63BE9561-7A5C-45DF-8F52-54E0DE75C0B8} 2016-01-09 17:31 - 2013-10-19 22:41 - 00002572 _____ C:\WINDOWS\System32\Tasks\Wise Memory Optimizer Task 2016-01-09 17:31 - 2013-07-11 19:27 - 00002476 _____ C:\WINDOWS\System32\Tasks\Razer_Game_Booster_AutoUpdate 2016-01-09 17:31 - 2013-06-27 19:05 - 00002464 _____ C:\WINDOWS\System32\Tasks\Game_Booster_AutoUpdate 2016-01-09 17:31 - 2013-06-19 00:38 - 00002462 _____ C:\WINDOWS\System32\Tasks\HP Officejet 4620 series.exe_{16B99BAA-879F-44EA-A2E6-8AEA0832A7CA} 2016-01-09 17:31 - 2013-06-13 07:08 - 00002246 _____ C:\WINDOWS\System32\Tasks\{F0AAEF09-2794-4590-95F7-8340D1EC4EDC} 2016-01-09 17:31 - 2013-05-18 18:09 - 00002958 _____ C:\WINDOWS\System32\Tasks\Wise Turbo Checker 2016-01-09 17:31 - 2013-05-18 18:09 - 00002552 _____ C:\WINDOWS\System32\Tasks\Wise Care 365 2016-01-09 17:31 - 2013-05-18 16:52 - 00002606 _____ C:\WINDOWS\System32\Tasks\{97F2E11B-B79F-49B8-AB59-95BA25AE9985} 2016-01-09 17:31 - 2013-01-29 01:16 - 00002160 _____ C:\WINDOWS\System32\Tasks\SidebarExecute 2016-01-09 17:31 - 2013-01-29 01:13 - 00003044 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d 2016-01-09 17:31 - 2013-01-29 01:13 - 00002702 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon 2016-01-09 17:30 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media 2016-01-09 17:30 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries 2016-01-09 17:21 - 2013-04-23 19:59 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2016-01-09 17:17 - 2015-12-15 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools 2016-01-09 17:17 - 2015-10-30 19:44 - 00000000 ____D C:\WINDOWS\ShellNew 2016-01-09 17:17 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-01-09 17:17 - 2015-08-19 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tecknet M008 16400DPI Gaming Mouse 2016-01-09 17:17 - 2015-08-12 14:41 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Calculator Plus 2016-01-09 17:17 - 2015-07-21 21:49 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox 2016-01-09 17:17 - 2015-07-21 21:49 - 00000000 ____D C:\WINDOWS\system32\vbox 2016-01-09 17:17 - 2015-02-18 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free M4a to MP3 Converter 2016-01-09 17:17 - 2015-01-27 20:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QUIZPro IV 2016-01-09 17:17 - 2014-12-11 23:28 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Control Center 2016-01-09 17:17 - 2014-12-10 00:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebSite X5 v11 - Home 2016-01-09 17:17 - 2014-10-24 15:46 - 00000000 ____D C:\WINDOWS\de 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\ru 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\nl 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\it 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\he 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\fr 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\es 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\en 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\el 2016-01-09 17:17 - 2014-10-24 15:45 - 00000000 ____D C:\WINDOWS\ar 2016-01-09 17:17 - 2014-08-11 13:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2016-01-09 17:17 - 2014-07-26 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy 2016-01-09 17:17 - 2014-05-10 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans 2016-01-09 17:17 - 2014-05-10 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2016-01-09 17:17 - 2014-05-10 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java-Editor 2016-01-09 17:17 - 2014-05-07 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-01-09 17:17 - 2014-03-11 22:56 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.EU 2016-01-09 17:17 - 2014-03-10 22:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2016-01-09 17:17 - 2014-03-04 17:08 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTools 2016-01-09 17:17 - 2014-02-28 17:42 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ 2016-01-09 17:17 - 2013-12-29 01:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown 2016-01-09 17:17 - 2013-12-28 20:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Technology 2016-01-09 17:17 - 2013-12-27 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2016-01-09 17:17 - 2013-12-25 23:11 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Free 2016-01-09 17:17 - 2013-12-24 22:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Folder Hider 2016-01-09 17:17 - 2013-12-23 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioCon v1.0 2016-01-09 17:17 - 2013-11-10 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape 2016-01-09 17:17 - 2013-11-10 22:07 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2016-01-09 17:17 - 2013-10-10 19:14 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2016-01-09 17:17 - 2013-09-12 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 2016-01-09 17:17 - 2013-08-27 20:24 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-01-09 17:17 - 2013-08-27 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2016-01-09 17:17 - 2013-08-12 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express 2016-01-09 17:17 - 2013-08-11 19:09 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.0 2016-01-09 17:17 - 2013-07-13 22:28 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 2016-01-09 17:17 - 2013-06-27 15:43 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner 2016-01-09 17:17 - 2013-06-17 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-01-09 17:17 - 2013-06-12 22:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2016-01-09 17:17 - 2013-05-30 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2016-01-09 17:17 - 2013-05-18 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365 2016-01-09 17:17 - 2013-04-28 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D 2016-01-09 17:17 - 2013-04-22 21:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2016-01-09 17:17 - 2013-03-02 16:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\No23 Recorder 2016-01-09 17:17 - 2013-03-01 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\arcai.com 2016-01-09 17:17 - 2013-01-31 20:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ 2016-01-09 17:17 - 2013-01-28 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro 2016-01-09 17:17 - 2013-01-28 17:07 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-01-09 17:17 - 2013-01-28 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-01-09 17:17 - 2012-02-24 03:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2016-01-09 17:14 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated 2016-01-09 17:08 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2016-01-09 17:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2016-01-09 17:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2016-01-09 17:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool 2016-01-09 17:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-01-09 17:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME 2016-01-09 17:08 - 2014-07-28 08:40 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin 2016-01-09 17:08 - 2011-02-18 21:08 - 00000000 ____D C:\WINDOWS\system32\SPReview 2016-01-09 17:08 - 2011-02-18 20:48 - 00000000 ____D C:\WINDOWS\system32\EventProviders 2016-01-09 17:06 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR 2016-01-09 17:06 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker 2016-01-09 17:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas 2016-01-09 17:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2016-01-09 17:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\IME 2016-01-09 17:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help 2016-01-09 17:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Cursors 2016-01-09 17:06 - 2009-07-14 08:44 - 00000000 ___RD C:\Users\Public\Recorded TV 2016-01-09 17:05 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar 2016-01-09 17:05 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2016-01-09 17:05 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate 2016-01-09 17:05 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\System 2016-01-09 17:05 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-01-09 17:05 - 2015-03-12 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oxford 2016-01-09 17:05 - 2014-08-17 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer 2016-01-09 17:05 - 2013-12-16 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software 2016-01-09 17:05 - 2013-11-23 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2016-01-09 17:05 - 2013-03-23 20:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft 2016-01-09 17:05 - 2013-03-13 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sinvise Systems 2016-01-09 17:05 - 2013-01-31 20:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hercules 2016-01-09 17:05 - 2013-01-29 01:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite 2016-01-09 17:05 - 2013-01-29 01:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility 2016-01-09 17:05 - 2013-01-29 01:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2016-01-09 17:05 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games 2016-01-09 17:01 - 2015-12-15 00:27 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Texas Instruments 2016-01-09 17:01 - 2015-03-12 22:29 - 00000000 ____D C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oxford 2016-01-09 16:57 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-01-09 16:48 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2016-01-09 16:47 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2016-01-09 16:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-01-09 16:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning 2016-01-09 16:42 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-01-09 16:42 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-01-09 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2016-01-09 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2016-01-09 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI 2016-01-09 16:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2016-01-09 16:32 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb 2016-01-09 16:32 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb 2016-01-09 16:32 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb 2016-01-09 16:32 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb 2016-01-09 16:32 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe 2016-01-09 16:32 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll 2016-01-09 16:32 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof 2016-01-09 16:32 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys 2016-01-09 16:32 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb 2016-01-09 16:32 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb 2016-01-09 16:32 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb 2016-01-09 16:32 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe 2016-01-09 16:32 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb 2016-01-09 16:32 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe 2016-01-09 16:32 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe 2016-01-09 16:32 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll 2016-01-09 16:32 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof 2016-01-09 16:01 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-03-03 23:04 - 2014-03-03 23:04 - 0007638 _____ () C:\Program Files (x86)\084231381.png 2014-03-03 23:04 - 2014-03-03 23:04 - 0000658 _____ () C:\Program Files (x86)\UpdateInfo.txt 2013-02-25 14:17 - 2013-12-07 23:34 - 0000308 _____ () C:\Users\Tomas\AppData\Roaming\Rim.Desktop.Exception.log 2013-02-25 14:15 - 2014-09-09 09:21 - 0004042 _____ () C:\Users\Tomas\AppData\Roaming\Rim.Desktop.HttpServerSetup.log 2013-02-25 14:17 - 2013-12-07 23:34 - 0000385 _____ () C:\Users\Tomas\AppData\Roaming\Rim.DesktopHelper.Exception.log 2013-02-25 14:17 - 2013-06-13 09:44 - 0000231 _____ () C:\Users\Tomas\AppData\Roaming\Rim.Transcoder.Exception.log 2013-01-28 16:35 - 2015-03-06 09:52 - 0000448 _____ () C:\Users\Tomas\AppData\Roaming\sp_data.sys 2013-05-18 17:37 - 2013-06-13 08:08 - 0000608 _____ () C:\Users\Tomas\AppData\Roaming\TOMAS-PC.MTBF.txt 2013-05-18 17:37 - 2013-06-13 09:04 - 0000672 _____ () C:\Users\Tomas\AppData\Roaming\__AvidCloudManager.log 2013-05-18 17:37 - 2013-06-13 08:09 - 0000672 _____ () C:\Users\Tomas\AppData\Roaming\__AvidCloudManagerPrevious.log 2013-02-25 14:18 - 2013-06-13 09:44 - 0035328 _____ () C:\Users\Tomas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-11-19 17:45 - 2014-11-19 17:45 - 0000093 _____ () C:\Users\Tomas\AppData\Local\fusioncache.dat 2013-02-02 22:05 - 2015-03-26 15:51 - 0007625 _____ () C:\Users\Tomas\AppData\Local\Resmon.ResmonCfg 2015-03-26 15:52 - 2015-03-26 15:52 - 0000000 _____ () C:\Users\Tomas\AppData\Local\Settings.xml 2013-05-04 14:17 - 2013-05-04 14:17 - 0461531 _____ () C:\ProgramData\1367673062.bdinstall.bin 2013-05-18 17:18 - 2013-05-18 18:16 - 0097916 _____ () C:\ProgramData\1368893894.2020.bin 2013-05-18 17:18 - 2013-05-18 17:18 - 0002534 _____ () C:\ProgramData\1368893894.2804.bin 2013-05-18 17:18 - 2013-05-18 17:18 - 0002253 _____ () C:\ProgramData\1368893894.5236.bin 2013-05-18 17:18 - 2013-05-18 17:18 - 0009682 _____ () C:\ProgramData\1368893894.6624.bin 2013-06-17 17:45 - 2013-06-17 17:45 - 0235722 _____ () C:\ProgramData\1371487414.bdinstall.bin 2013-06-13 16:39 - 2013-06-13 16:39 - 0000057 _____ () C:\ProgramData\Ament.ini 2016-01-09 16:53 - 2016-01-09 16:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2012-02-24 03:42 - 2010-10-06 18:45 - 0131984 _____ () C:\ProgramData\FullRemove.exe 2014-03-10 21:45 - 2014-03-10 21:45 - 0000408 _____ () C:\ProgramData\hpzinstall.log 2013-06-22 19:50 - 2013-06-22 19:50 - 0000106 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc 2009-07-29 06:21 - 2009-07-28 19:31 - 0000223 _____ () C:\ProgramData\setwallpaper.cmd 2009-07-29 06:21 - 2009-07-23 02:04 - 0024576 _____ () C:\ProgramData\SetWallpaper.exe 2013-01-29 01:20 - 2013-01-29 01:21 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2013-01-29 01:20 - 2013-01-29 01:20 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2013-01-29 01:19 - 2013-01-29 01:19 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\setwallpaper.cmd C:\ProgramData\SetWallpaper.exe C:\Users\Tomas\freemem.vbs C:\Users\Tomas\SETUP.EXE C:\Users\Tomas\skript.vbs C:\Users\Tomas\_ISDEL.EXE C:\Users\Tomas\_SETUP.DLL Einige Dateien in TEMP: ==================== C:\Users\Tomas\AppData\Local\Temp\Install_rekordbox_4_0_6.exe C:\Users\Tomas\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-02-04 17:55 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016 durchgeführt von Tomas (2016-02-06 14:30:50) Gestartet von C:\Users\Tomas\Downloads Windows 10 Home (X64) (2016-01-09 16:39:15) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-229791554-3003767711-2460185856-500 - Administrator - Disabled) ASPNET (S-1-5-21-229791554-3003767711-2460185856-1807 - Limited - Enabled) DefaultAccount (S-1-5-21-229791554-3003767711-2460185856-503 - Limited - Disabled) Gast (S-1-5-21-229791554-3003767711-2460185856-501 - Limited - Disabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-229791554-3003767711-2460185856-1063 - Limited - Enabled) Larissa (S-1-5-21-229791554-3003767711-2460185856-1004 - Administrator - Enabled) => C:\Users\Larissa Schulkonto (S-1-5-21-229791554-3003767711-2460185856-1804 - Limited - Enabled) => C:\Users\Schulkonto Tomas (S-1-5-21-229791554-3003767711-2460185856-1002 - Administrator - Enabled) => C:\Users\Tomas ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated) Adobe Reader X (10.1.15) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.15 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.10 - Michael Tippach) ASUS AI Recovery (HKLM-x32\...\{D39F0676-163E-4595-A917-E28F99BBD4D2}) (Version: 1.0.24 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0041 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.0.9 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.25 - ASUS) ASUS Virtual Touch (HKLM-x32\...\{938CFBD4-0652-49E5-BB8B-153948865941}) (Version: 1.0.9 - ASUS) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0016 - ASUS) Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team) Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software) bl (x32 Version: 1.0.0 - Your Company Name) Hidden BLE Device Monitor (HKLM-x32\...\Texas Instruments BLE Device Monitor) (Version: 2.0.0 - Texas Instruments) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP) Chrome Remote Desktop Host (HKLM-x32\...\{CDF9E1C8-4B97-4F8B-A848-7DD0E8BEB89F}) (Version: 47.0.2526.18 - Google Inc.) CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\CopyTrans Suite) (Version: 3.003 - WindSolutions) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.1126 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 5.2.0.0348 - DT Soft Ltd) Die Sims™ 3 Katy Perry Süße Welt (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts) Duplicate Cleaner Free 3.2.1 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 3.2.1 - DigitalVolcano Software Ltd) <==== ACHTUNG Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Free Audio Converter (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.73.119 - DVDVideoSoft Ltd.) Free M4a to MP3 Converter 8.3 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com) Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GlassFish Server Open Source Edition 4.0 (HKLM-x32\...\nbi-glassfish-mod-4.0.0.89.0) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.103 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Hercules DJ Products Series drivers (HKLM-x32\...\{33999F1F-EA46-4E55-A239-1BA803235396}) (Version: 6.HDJS.2012 - Hercules) Hotfix für Microsoft Visual Basic 2010 Express - DEU (KB2635973) (HKLM-x32\...\{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}.KB2635973) (Version: 1 - Microsoft Corporation) HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Officejet 4620 series - Grundlegende Software für das Gerät (HKLM\...\{B16F9E6E-1388-472C-98C3-F32D397EF85D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard) I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) Incomedia WebSite X5 v11 - Home (HKLM-x32\...\{C5743DB8-7BDF-47D3-8D41-0BBD487B48A1}_is1) (Version: 11.0.2.14 - Incomedia s.r.l.) InstantOn for NB (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 2.2.0 - ASUS) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan) iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.) Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation) Java SE Development Kit 8 Update 5 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation) Java-Editor 11.40, 2013.07.26 (HKLM-x32\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version: - Gerhard Röhner) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version: - Audacity Team) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Calculator Plus (HKLM-x32\...\{83073C45-3003-4671-9A86-243AAADD915A}) (Version: 1.0.0 - Microsoft) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{E9089B6A-1FDE-47F3-8D29-175F5B7A0722}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla) Mp3tag v2.73 (HKLM-x32\...\Mp3tag) (Version: v2.73 - Florian Heidenreich) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.7 - F.J. Wechselberger) NetBeans IDE 8.0 (HKLM-x32\...\nbi-nb-base-8.0.0.0.201403101706) (Version: 8.0 - NetBeans.org) NetCut 2.1.4 (HKLM-x32\...\NetCut_is1) (Version: - arcai.com) No23 Recorder (HKLM-x32\...\No23 Recorder) (Version: 2.1.0.3 - No23) No23 Recorder (x32 Version: 2.1.0.3 - No23) Hidden NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation) NVIDIA Grafiktreiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) O&O DiskImage Professional (HKLM\...\{56F8EF3C-D9A0-4728-95D5-DC05A72931F5}) (Version: 7.81.6 - O&O Software GmbH) OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.4.20.386 - Electronic Arts, Inc.) Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Oxford Advanced Learner's Dictionary - 8th Edition (HKLM-x32\...\NSIS_oald8) (Version: - ) paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC) PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) ph (x32 Version: 1.0.0 - Your Company Name) Hidden PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Pioneer XDJ-RX Driver (HKLM-x32\...\XDJ-RX) (Version: 1.000.000.000 - Pioneer Corporation.) PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu) Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 9.2 - Qualcomm Atheros) QUICKfind server v1.1 (HKLM-x32\...\QUICKfind) (Version: - IDM) QUIZPro V4.53 (HKLM-x32\...\QUIZPro_is1) (Version: QUIZPro V.4.53 - Litschi) Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.42.0 - Razer Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.30130 - Realtek Semiconductor Corp.) rekordbox 4.0.5 (HKLM-x32\...\Pioneer rekordbox 4.0.5) (Version: 4.0.5.0004 - Pioneer DJ) Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.4.0 - SAMSUNG Electronics Co., Ltd.) SceneSwitch (HKLM-x32\...\{5172E572-C175-4F80-A6D5-5CB45826AD61}) (Version: 1.0.12 - ASUS) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden Shutdown Timer (HKLM-x32\...\{0B1BBEE3-C10D-44BE-A6BE-EEC867315F87}) (Version: 3.3.4 - Sinvise Systems) Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.) Smart Technology Programming Software 7.0.27.13 (HKLM\...\{C9193CBB-C31A-412A-A074-AD08F0F2CF3D}) (Version: 7.0.27.13 - Mad Catz) Smart Technology Volume Tracker 7.0.23.0 (HKLM\...\{7C2F1B90-E6E6-4ECF-B626-4545CF6EEB2D}) (Version: 7.0.23.0 - Mad Catz) SmartTools Publishing • Word Falz & Lochmarken-Assistent (HKLM-x32\...\SmartToolsFalz & Lochmarken-Assistentv7.00) (Version: v7.00 - SmartTools Publishing) Spotify (HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\Spotify) (Version: 1.0.21.143.g76c19bcd - Spotify AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) SpyHunter 4 (HKLM-x32\...\SpyHunter) (Version: 4.21.18.4608 - Enigma Software Group, LLC) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Sweet Home 3D version 4.0 (HKLM-x32\...\Sweet Home 3D_is1) (Version: - eTeks) System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.10.1 - TeamSpeak Systems GmbH) TeamSpeak 3 Client (HKU\S-1-5-21-229791554-3003767711-2460185856-1002\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43174 - TeamViewer) Tecknet M008 16400DPI Gaming Mouse version 1.0 (HKLM-x32\...\{A018E620-853C-4625-BF17-4161A5F6F238}_is1) (Version: 1.0 - TECKNET) TI Connect 1.5 (HKLM-x32\...\{A8B94669-8654-4126-BD28-D0D2412CDED6}) (Version: 1.5.0.027 - Texas Instruments Incorporated) TI NoteFolio Creator (HKLM-x32\...\{F07AE5AB-516C-4CEB-A0AA-AD083B9182C6}) (Version: 1.1.0.276 - Texas Instruments Incorporated) Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114502) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6F47687A-78E9-41B1-8587-ED0CC2677A2A}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114502) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6F47687A-78E9-41B1-8587-ED0CC2677A2A}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114502) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6F47687A-78E9-41B1-8587-ED0CC2677A2A}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114502) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{6F47687A-78E9-41B1-8587-ED0CC2677A2A}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114502) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{6F47687A-78E9-41B1-8587-ED0CC2677A2A}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114502) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6F47687A-78E9-41B1-8587-ED0CC2677A2A}) (Version: - Microsoft) Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version: - ) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden Virtual DJ - Atomix Productions (HKLM-x32\...\Virtual DJ - Atomix Productions) (Version: - ) VirtualDJ PRO Full (HKLM-x32\...\{C515E2A3-4878-4C85-A519-52630C7AB08B}) (Version: 7.3 - Atomix Productions) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation) VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN) Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.) Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows-Treiberpaket - ASUS (ATP) Mouse (06/17/2015 1.0.0.262) (HKLM\...\14588A15B66655338DBCC021FFA81E31DC281859) (Version: 06/17/2015 1.0.0.262 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.0 - ASUS) WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{19EA33FB-B34E-40EA-8B8A-61743AEB795A}) (Version: 3.0.27 - ASUS) Wise Auto Shutdown 1.37 (HKLM-x32\...\Wise Auto Shutdown_is1) (Version: 1.37 - WiseCleaner.com, Inc.) Wise Care 365 Version 2.92 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.9.2 - WiseCleaner.com, Inc.) Wise Folder Hider 1.51 (HKLM-x32\...\Wise Folder Hider_is1) (Version: 1.51 - WiseCleaner.com, Inc.) Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden 影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-229791554-3003767711-2460185856-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Tomas\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-229791554-3003767711-2460185856-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {07AB62A8-6AC5-4048-8044-53132BDB2868} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {0B3022E3-1822-42D2-853B-060D9B16FE85} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {11874617-DEA6-4C4C-8846-0D39E8F38E9F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {15C03FAB-099F-42DF-9639-78A5DA821C24} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {18E9053B-5F1B-46E7-9292-B24C333DA269} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {2619974A-0D0D-4570-8623-8195905315DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd) Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {2EA42CA1-98CA-45DF-9696-B6B4CA7E53CA} - System32\Tasks\{63BE9561-7A5C-45DF-8F52-54E0DE75C0B8} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{9B2506E3-9A3F-45B5-96BF-509CAD584650}\Sims3SP06Setup.exe" -c -runfromtemp -l0x0007 -removeonly Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {3DC0A9A2-A97C-4013-A22B-E734354F8B3E} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {4272F462-D0DF-4732-A7D5-4E79928D7FB2} - System32\Tasks\HP Officejet 4620 series.exe_{16B99BAA-879F-44EA-A2E6-8AEA0832A7CA} => C:\Program Files\HP\HP Officejet 4620 series\Bin\HP Officejet 4620 series.exe [2012-10-17] (Hewlett-Packard Co.) Task: {432CAB8C-21D2-4D25-AAB9-3BA4FF291121} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {455D7F23-9FDE-4C4C-BC0F-D600551E086A} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK Task: {5008030F-1FE0-44CD-A9B8-BCBF408838D5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {50806C6D-86C1-4BD6-A41A-7DF8D26EA609} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated) Task: {50876734-F222-4288-986A-FC212B51D5DB} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {50D099E7-B4F5-47C9-BDC2-3A8D874736C6} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {513FA56E-3DD0-4724-B190-67B47FA37A5D} - System32\Tasks\{97F2E11B-B79F-49B8-AB59-95BA25AE9985} => pcalua.exe -a C:\Users\Tomas\Documents\Videobearbeitung\Unpacked\PSu\Psu\cr-pinnacle_studio_ultimate_v16\Drivers\Pinnacle_Video_Driver_32bit.exe -d C:\Users\Tomas\Documents\Videobearbeitung\Unpacked\PSu\Psu\cr-pinnacle_studio_ultimate_v16\Drivers Task: {51425287-089D-4EA5-8524-FAD48C16FE9A} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe Task: {519C0449-FC5C-4558-AB1B-E40E96669D47} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.) Task: {5AB04660-8F84-4819-AE7C-BB3C79090D6B} - System32\Tasks\{C70EE833-A7A4-4341-9C5E-82E2AF1FBC14} => pcalua.exe -a C:\Users\Tomas\Downloads\tinotefoliocreator.exe -d C:\Users\Tomas\Downloads Task: {5DAD0DC2-CCA8-49CA-BFAF-66AE76626359} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {63ADD77A-2AB0-49B5-866E-0E3EFB798F15} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe [2013-12-09] (WiseCleaner.com) Task: {655C100E-09F3-46AE-9F8E-146194715CF7} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-29] (Avast Software s.r.o.) Task: {65EBA6C3-B791-455B-8B56-D9C4B665171B} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe Task: {69EE79FA-48BD-48F9-ADC5-0F5EC07FFFC1} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {6F56DB41-E446-49AD-A2AA-EA6F32BE7967} - System32\Tasks\{BA1AAE35-DB83-46AD-8785-A5BE1D816864} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.9.0.103&LastError=12002 Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {7A5B20CB-8F8C-4329-97C6-309700C01FE3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.) Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {857C0BDB-BAF9-4D00-993C-F4E8669866D8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {8603CAB1-9413-49FD-8650-2D2AEE62C726} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {892032F6-1E45-4B3E-B005-B577E7FF130E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {8968CAA9-99A3-4EE7-A0C6-7506E669C7A7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {89B7B58E-0D44-44E9-8E47-54FBB2DD0603} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {9269AB60-7757-4817-83C1-8EE3437F56AA} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-02-16] (ASUS) Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {B0A2587C-B2A5-42FE-9969-F6CB7C3482C9} - System32\Tasks\{F0AAEF09-2794-4590-95F7-8340D1EC4EDC} => Chrome.exe hxxp://ui.skype.com/ui/0/6.1.0.129.259/de/abandoninstall?page=tsMain Task: {B1D415E2-32AF-4259-9C65-C016770FD400} - System32\Tasks\ASUS Quick Gesture (x64) => C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe [2011-12-21] (ASUSTeK Computer Inc.) Task: {B76ED834-7FAF-4913-93B1-3E58C3983462} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {B8FFA197-08C5-492F-AFCA-4B95A6D5077B} - System32\Tasks\HP Officejet 4620 series.exe_{FF7D9FC2-8893-4890-AF8A-F415598F3D20} => C:\Program Files\HP\HP Officejet 4620 series\Bin\HP Officejet 4620 series.exe [2012-10-17] (Hewlett-Packard Co.) Task: {B9EE50CA-9AD6-47A5-BA7E-E59D1C7B419A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {BC998EC4-F9BA-47F5-B183-E706D3F74777} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {BF34CA88-8FA2-4751-9770-4B14B8B4EC2B} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16] (ASUSTek Computer Inc.) Task: {BF61286A-E53F-41B7-AB3E-3CFFE88F4A10} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {CA26024E-280C-4E02-8BA4-897A93F28EE8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {CB047AB3-CA29-4D81-A9FA-886632B84ADA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {D16E4CC9-40A4-400B-BBD4-51CBCDA3F2BE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-13] (Microsoft Corporation) Task: {D98057A1-182C-4751-AFF1-B99D1FA79DA9} - System32\Tasks\Wise Memory Optimizer Task => C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe [2013-12-09] (WiseCleaner.com) Task: {D9931657-8DE4-4320-9843-63460DAE9FF7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {DA79FCD1-405E-4502-8E3D-372599BB6493} - System32\Tasks\ASUS Quick Gesture => C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe [2011-12-21] (ASUSTeK Computer Inc.) Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {E41CFD6A-7362-4D3C-BB84-45814BC13FFA} - System32\Tasks\avastBCLRestart_chrome.exe => Chrome.exe Task: {E5CA0173-795F-40E0-BF64-EC71ED37C2B2} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-12-09] (WiseCleaner.COM) Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {F28C9DB2-E947-4B2F-9B39-3D82A1193690} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-02-29] (ASUSTek Computer Inc.) Task: {F7B0D119-DF62-4423-9439-0ABB52BD9693} - System32\Tasks\{5833DB41-65E3-4D13-80C9-4AFA331D1FB9} => pcalua.exe -a "C:\Program Files (x86)\TI Education\TI Connect\TILauncher.exe" -d "C:\Program Files (x86)\TI Education\TI NoteFolio Creator\" -c "C:\Program Files (x86)\TI Education\TI NoteFolio Creator\TINoteFolioCreator.exe" Task: {FA051BD3-FCDA-48D8-B5A6-B0389D86A396} - System32\Tasks\{2E114670-75BC-48CB-947E-6D60E4BFB95B} => pcalua.exe -a "C:\Program Files (x86)\NetBeans 8.0\uninstall.exe" Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {FCA85C13-6CD7-40F4-BFBF-770417390320} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\WINDOWS\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe Task: C:\WINDOWS\Tasks\Wise Memory Optimizer Task.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseMemoryOptimzer.exe Task: C:\WINDOWS\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2013-01-29 01:13 - 2012-02-21 05:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe 2013-09-09 16:35 - 2013-09-09 16:35 - 00326448 _____ () C:\Program Files\OO Software\DiskImage\oodiagrs.dll 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-01-09 16:52 - 2015-07-13 18:37 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2013-09-09 16:35 - 2013-09-09 16:35 - 00344880 _____ () C:\Program Files\OO Software\DiskImage\oodishrs.dll 2015-10-16 11:02 - 2015-10-16 11:02 - 00043480 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-01-13 07:42 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-01-13 07:42 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-01-13 07:42 - 2016-01-05 02:24 - 00936960 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2016-01-28 10:24 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-01-28 10:24 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-01-09 16:41 - 2016-01-09 16:41 - 00529408 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.NodeWinrtWrap.dll 2015-10-30 08:18 - 2015-10-30 19:44 - 00037888 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\winrt-projections\bin\Winrt_Projections.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00796160 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http\bin\NodeRT_Windows_Web_Http.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00961024 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.headers\bin\NodeRT_Windows_Web_Http_Headers.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00206336 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.filters\bin\NodeRT_Windows_Web_Http_Filters.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00558592 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.storage.streams\bin\NodeRT_Windows_Storage_Streams.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00397824 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.foundation\bin\NodeRT_Windows_Foundation.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00181248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\nodert-buffer-utils\bin\NodeRT_Buffer_Utils.node 2015-10-30 08:18 - 2015-10-30 19:44 - 00093696 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.security.cryptography\bin\NodeRT_Windows_Security_Cryptography.node 2015-10-30 08:18 - 2015-10-30 19:43 - 00200192 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.cortana.pal\bin\NodeRT_Windows_Cortana_PAL.node 2015-12-08 20:25 - 2015-12-08 20:25 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2015-08-19 13:40 - 2014-10-22 16:46 - 03207168 _____ () C:\Program Files (x86)\Tecknet M008 16400DPI Gaming Mouse\TECKNETM008MON.exe 2016-01-23 16:32 - 2016-01-23 16:32 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2016-02-05 15:55 - 2016-02-05 15:55 - 00015872 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2016-02-05 15:55 - 2016-02-05 15:55 - 14869504 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2015-11-23 17:32 - 2015-11-23 17:32 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll 2016-02-06 13:46 - 2016-02-06 13:46 - 00012288 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1602.3010.0_x64__8wekyb3d8bbwe\CompanionApp.exe 2016-02-06 13:46 - 2016-02-06 13:46 - 05766656 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1602.3010.0_x64__8wekyb3d8bbwe\CompanionApp.dll 2016-02-06 13:46 - 2016-02-06 13:46 - 00628736 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1602.3010.0_x64__8wekyb3d8bbwe\CompanionAppDeviceManager.dll 2015-12-15 09:40 - 2015-12-15 09:41 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1602.3010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll 2016-02-04 22:43 - 2016-02-03 08:33 - 02048840 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libglesv2.dll 2016-02-04 22:43 - 2016-02-03 08:33 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libegl.dll 2016-02-04 22:43 - 2016-02-03 08:33 - 29251912 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\PepperFlash\pepflashplayer.dll 2015-06-29 12:56 - 2015-06-29 12:56 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-06-29 12:56 - 2015-06-29 12:56 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-02-05 15:44 - 2016-02-05 15:44 - 02819072 _____ () C:\Program Files\AVAST Software\Avast\defs\16020500\algo.dll 2016-02-05 23:36 - 2016-02-05 23:36 - 02819072 _____ () C:\Program Files\AVAST Software\Avast\defs\16020501\algo.dll 2016-01-27 01:03 - 2016-01-19 04:02 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll 2016-01-27 01:03 - 2016-01-19 04:02 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll 2016-01-27 01:03 - 2016-01-19 04:02 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll 2016-01-27 01:03 - 2016-01-19 04:02 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll 2016-01-27 01:03 - 2016-01-19 04:02 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll 2016-01-27 01:03 - 2016-01-19 04:02 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll 2013-01-29 01:13 - 2012-02-21 05:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2010-08-20 18:57 - 2010-08-20 18:57 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2010-08-20 18:57 - 2010-08-20 18:57 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2012-01-31 18:25 - 2012-01-31 18:25 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll 2015-06-29 12:56 - 2015-06-29 12:56 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-08-19 13:40 - 2014-10-20 10:49 - 00028160 _____ () C:\Program Files (x86)\Tecknet M008 16400DPI Gaming Mouse\uiHook.dll 2016-02-04 22:28 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2016-02-04 22:28 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2016-02-04 22:28 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2016-01-23 16:32 - 2016-01-23 16:32 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-01-23 16:32 - 2016-01-23 16:32 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll 2015-03-11 17:39 - 2016-02-04 16:56 - 50679920 _____ () C:\Users\Tomas\AppData\Roaming\Spotify\libcef.dll 2015-03-11 17:39 - 2016-02-04 16:56 - 01882224 _____ () C:\Users\Tomas\AppData\Roaming\Spotify\libglesv2.dll 2015-03-11 17:39 - 2016-02-04 16:56 - 00082544 _____ () C:\Users\Tomas\AppData\Roaming\Spotify\libegl.dll 2014-03-31 20:35 - 2014-03-31 20:35 - 00282304 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll 2013-01-28 18:47 - 2013-01-28 18:47 - 00107520 _____ () C:\Program Files (x86)\DAEMON Tools Pro\BRD.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\Tomas\Cookies:p6ONrA2hZhaoIoJmQ1JnZPJM57 ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-229791554-3003767711-2460185856-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Tomas\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img2.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\Services: BlackBerry Device Manager => 3 MSCONFIG\Services: lfsvc => 3 MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: BrowserPlugInHelper => C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" MSCONFIG\startupreg: HP Officejet 4620 series (NET) => "C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN31F240FR05RT:NW" -scfn "HP Officejet 4620 series (NET)" -AutoStart 1 MSCONFIG\startupreg: iSkysoft Helper Compact.exe => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: OODITRAY.EXE => C:\Program Files\OO Software\DiskImage\ooditray.exe MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{99AA5594-C746-4B26-92B5-E66A407BA00B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{38BFBFF7-2A2B-4D86-93BB-0519671B0219}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{F3E3A149-56A2-449B-8F61-C6AB54F196DA}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe FirewallRules: [{C5275D6B-50D3-4F2F-8FDF-57DD8FFA53CF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{81DFAE81-7A0B-43BE-9259-5037A687EE50}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{2165E714-0821-473D-B1C1-8082CAB45CB4}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{DCEFBD79-66C8-4E4E-82E7-A7BBDC2712E7}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{DE66667C-CC6C-4C89-A59A-DFD8930E3D0A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{553B1F31-7FCB-4913-94BE-BE81E9BD538E}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{54DD04E4-20CC-40B1-8667-465A50700BA1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{311791C4-B695-46FA-9D99-FF02AB9D832E}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{AF5CEC30-6C8E-45BF-93A1-8D4478DC76BB}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{E4842CDB-A9D0-4626-875E-9109D6E2F2B8}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{402E1B43-2304-4D87-B097-8FE44D536391}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B517E939-9E68-44E2-8138-0172B76700E5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{440BD236-2FF6-48E0-844B-DD72D8CB55B6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{6946BE2A-9CE8-47A4-8DCC-B5B474F63509}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{8D0F53B1-25A4-4FB1-8861-02DF32F83574}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{4EF2A6CC-EC08-4352-B71D-65709E751E07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{7DF7CED0-7403-4632-BF24-1847CE338038}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{DAC92982-FB67-4A7C-A883-BC5E7C0C9569}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{68241265-05B1-4658-8C1A-39A7FDB9BC01}C:\Program Files\VideoLAN\VLC\vlc.exe] => (Block) C:\Program Files\VideoLAN\VLC\vlc.exe FirewallRules: [UDP Query User{F9DDEDDB-BB74-4C37-8A72-2AB078225892}C:\Program Files\VideoLAN\VLC\vlc.exe] => (Block) C:\Program Files\VideoLAN\VLC\vlc.exe FirewallRules: [{80114DB9-790E-4D4D-AF4C-7F8A2E791546}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D5E4CA4F-208F-4142-84F9-6CE41AC9D917}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{B7AE1B9F-765A-4820-88B3-9A879AD7A210}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{B98A87B6-1DA7-4C63-846E-D651B929D86C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{610293EC-5756-4DF5-B733-33F45BADB628}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{7845CB9B-5D17-47F9-97DD-C90C3FEA6C55}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{2AB4F1FB-13AC-4EED-BB73-138EA8E58BB3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{E7A17AB1-950A-477F-9E5D-252A0357BFC0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{048158CF-41A4-47B6-BC7E-92718075EF83}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{7F7DF062-A52D-485B-B60E-CF682FA3DAFA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{785AA730-CDEA-45B6-A084-CFCDE32F0563}] => (Allow) LPort=4481 FirewallRules: [{9A36D54C-E1AC-469F-968D-E1C055DAF853}] => (Allow) LPort=4481 FirewallRules: [{F34B0513-F4B8-4E61-9F11-519991314C97}] => (Allow) LPort=4482 FirewallRules: [{C9487CBD-DB56-4639-B4C6-3385823630FD}] => (Allow) LPort=4482 FirewallRules: [TCP Query User{E8EB979F-9E61-4AD0-B391-EDA344B139D1}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe FirewallRules: [UDP Query User{DA6E5E7B-4BB1-4F79-9FA1-E417DF7C0815}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe FirewallRules: [{142DEBEA-D3E4-4313-934C-2A16DB1EF9A0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [TCP Query User{8DA7D97C-0203-47D3-832A-B972FECDD283}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe FirewallRules: [UDP Query User{884AC228-FF7A-4A2D-9196-0BE599265959}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe FirewallRules: [{DF23AE68-16D6-4FB2-8953-CF5FCFDB8E8F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{25B3A00E-E05F-46CF-A2F7-B3E8808DB4B7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{D6057E5A-3FA3-408A-9A13-AEDFB4EDBA54}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{08506509-F218-46C1-AD75-33E68335E91B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{13C189FA-991C-4ECB-B1E1-E9FFA819643B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{B2EF26AB-1511-4F73-A38B-AD10F6FF6812}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{CE47B4FC-62FF-4668-8383-BC074E2900C6}C:\users\tomas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomas\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{2B3EDAD7-7301-42B9-9F01-2B1A1F405B56}C:\users\tomas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomas\appdata\roaming\spotify\spotify.exe FirewallRules: [{F90ECE00-00C7-46B1-BE79-51B7BEAD0A64}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\FaxApplications.exe FirewallRules: [{62DE4084-F06C-4F36-BC22-A77DA6F1AEC9}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\DigitalWizards.exe FirewallRules: [{6C41DC0C-9E88-4B98-B849-1FDC2CDA810D}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\bin\SendAFax.exe FirewallRules: [{89901A59-1B48-4A00-9309-F28291015A5C}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\DeviceSetup.exe FirewallRules: [{53D16657-59B1-471D-9639-9AC7936CB26B}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe FirewallRules: [{63A91989-91CF-40D8-9401-BA5AF9C64C49}] => (Allow) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{C87A79CD-42B0-4F81-8ABE-0EFF145BF32D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{0CC940D7-0AD3-4614-8F71-25BBA5692E87}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{2DAAA1E3-E712-41AC-A6F9-05517E48779D}] => (Allow) LPort=8743 FirewallRules: [{3006CA0F-88DD-4B42-9670-2A25D6A7C616}] => (Allow) LPort=8643 FirewallRules: [{4FAD3E32-0926-45B4-82FA-6759542A05B8}] => (Allow) LPort=7676 FirewallRules: [{DDFBFCDB-9070-4797-BF05-F74CCF912CA0}] => (Allow) LPort=7679 FirewallRules: [{A891759F-D834-4C64-AFF3-B19075E48F26}] => (Allow) LPort=24234 FirewallRules: [{34C836A2-B820-48BE-8D3B-7CF3F8BCAC9E}] => (Allow) LPort=7900 FirewallRules: [{2382EA4E-A247-4192-9021-0374F5EFC423}] => (Allow) LPort=1900 FirewallRules: [TCP Query User{06CC6AF3-1C83-4491-B661-4EA6A845A1BB}C:\users\tomas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomas\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{71EEA16F-C18C-4C7D-BFFA-0DA203095B45}C:\users\tomas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomas\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{23FB11AD-A58B-49C1-BD47-399280C93871}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe FirewallRules: [UDP Query User{EE337DB5-B26E-43F3-A60B-D5EFA370263A}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe FirewallRules: [{55B38BE8-7B8A-49A8-AF9E-6D11791E68D9}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{9D91F36A-DFD4-4A01-8120-368AC650A9D9}] => (Allow) LPort=2869 FirewallRules: [{63356210-6D34-4B89-8DD8-CFD797E6BDA0}] => (Allow) LPort=1900 FirewallRules: [{76BB9761-B705-45F8-B23F-43466A88DA05}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{B30E1C4F-7FCA-4312-A45A-571EA831D6DC}] => (Allow) LPort=1689 FirewallRules: [{A078C605-E4B4-4C41-BA1C-27EE02809CC5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{D87FA19E-C2AC-4199-8DFC-E2512E6549F2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A0E9D199-93EA-43EA-914C-0C90CA384AC0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{455E34C8-DEC2-4E1E-863B-431445EC502E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{F387BAAC-960C-4F91-96AC-6B193C7E9ACB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{EE618781-C18E-4DFF-A6A2-3487FFD97D63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{C3E25A50-7EE3-4468-B98E-53971ED64C68}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{50A77544-120D-4595-92A8-5CA56CADA9A7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{AB80245C-701C-4484-80B5-BF086749A3CC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{FC04DDBE-20AA-4996-87C6-F54CD61B1EE8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{C4CBDF6E-EB06-4FDD-8EA0-0C12717940F9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{57938CC6-3C79-4724-B646-BB91885FDFF3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{E959492D-C966-4001-A7AE-B951145AF3BD}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{6C56795A-943E-4EF5-847F-6991DDE27825}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{54A7B53B-0E1D-45AB-B267-054A9A779728}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{2E635DC6-2A52-4C36-9BBB-587B8F09805D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{E8558D0E-2E61-4C76-967F-BED893848706}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{A15125DF-187B-4D02-B39A-FC4D6D0A780F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{F63D6754-95B0-4D6B-A650-705AE5C3A57A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{B0BC4802-B55A-42A5-8CCA-ADD3A335F609}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{4BB0EFA4-2CFF-43B6-8BD5-AABACD2B63FC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{850F159F-4102-484D-ACCF-473D8530DFB8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{B3DB053D-DC8D-4CCD-BE09-802D25066050}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{BAF811C7-BC3E-4E61-8A42-77783D66D3F6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{7D112C36-EBC5-4E9E-B353-4DE2A57A1A4E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{7A52856C-81F1-4BFF-A340-F9691249CB3F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{C89852FF-F01B-496F-BCF2-675A11DD2ED6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [TCP Query User{4EE7FE5A-7B3C-43FE-849C-639E011BC40F}C:\users\tomas\desktop\sort\nützliches\candisoft_load!_0.7.2\load.exe] => (Block) C:\users\tomas\desktop\sort\nützliches\candisoft_load!_0.7.2\load.exe FirewallRules: [UDP Query User{9ED64640-F23E-427D-B278-8DC5558AD8BD}C:\users\tomas\desktop\sort\nützliches\candisoft_load!_0.7.2\load.exe] => (Block) C:\users\tomas\desktop\sort\nützliches\candisoft_load!_0.7.2\load.exe FirewallRules: [{DA995058-0FEA-47AC-91A9-3EC4A8F03E50}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [TCP Query User{B0F37C4A-5141-4650-8BBF-99D0B84D4D54}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe FirewallRules: [UDP Query User{634E9631-6ACA-4DF8-9B45-610A434949EC}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvnfsd.exe FirewallRules: [TCP Query User{CC69FA83-8B2E-4F6C-AD48-E9FE534E6F91}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe FirewallRules: [UDP Query User{33E8CD7A-0BAB-4552-932D-DCE84C4EDF1A}C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\psvlinksysmgr.exe FirewallRules: [TCP Query User{C59B4D28-B236-4461-AF94-7E59BCD95966}C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe FirewallRules: [UDP Query User{87CF2BBF-3A5A-4953-877D-416CAD413A05}C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\rekordbox.exe FirewallRules: [TCP Query User{D57D5B51-6E8D-4D1C-A230-E83A20EB029A}C:\program files (x86)\pioneer\rekordbox 4.0.5\edb_streamd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\edb_streamd.exe FirewallRules: [UDP Query User{8C7E1DD1-EDEF-43D2-938A-96A312FF606E}C:\program files (x86)\pioneer\rekordbox 4.0.5\edb_streamd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.5\edb_streamd.exe FirewallRules: [{EFB526B4-FC9D-47DB-9ABF-7AB101A8D858}] => (Allow) C:\Program Files (x86)\SimpleFiles\SimpleFiles.exe FirewallRules: [{B1B04F39-ECF0-4549-B0FE-5AE7B3B51B03}] => (Allow) C:\Program Files (x86)\SimpleFiles\SimpleFiles.exe FirewallRules: [{FE553160-B2C9-4D22-A218-576AF50AF2E2}] => (Allow) C:\Program Files (x86)\SimpleFiles\downloader.exe FirewallRules: [{5F5592D5-AEF1-4B31-9EB4-AED6563E943B}] => (Allow) C:\Program Files (x86)\SimpleFiles\downloader.exe FirewallRules: [{BCBEDD72-23E1-4A07-8311-93475930921D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Wiederherstellungspunkte ========================= 10-01-2016 20:53:24 Windows Update 17-01-2016 00:14:47 Windows Modules Installer 20-01-2016 18:12:26 Windows Update 24-01-2016 16:19:12 Windows Update 24-01-2016 19:01:52 Windows-Sicherung 28-01-2016 10:24:57 Windows Update 31-01-2016 18:14:02 Windows Update 03-02-2016 19:17:39 Windows Update ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (02/06/2016 12:25:18 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (02/05/2016 11:34:05 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (02/05/2016 11:34:05 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (02/05/2016 06:47:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d4c0 Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10586.71, Zeitstempel: 0x5699d4ee Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000b41fb ID des fehlerhaften Prozesses: 0x1f94 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (02/05/2016 06:46:05 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d4c0 Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10586.71, Zeitstempel: 0x5699d4ee Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000b41fb ID des fehlerhaften Prozesses: 0x2780 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (02/05/2016 06:43:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.10586.0, Zeitstempel: 0x5632d4c0 Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10586.71, Zeitstempel: 0x5699d4ee Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000b41fb ID des fehlerhaften Prozesses: 0x1b74 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5 Error: (02/05/2016 03:51:05 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1 Name des fehlerhaften Moduls: jucheck.exe, Version: 2.8.60.27, Zeitstempel: 0x55c116b1 Ausnahmecode: 0x40000015 Fehleroffset: 0x00052d24 ID des fehlerhaften Prozesses: 0xb08 Startzeit der fehlerhaften Anwendung: 0xjucheck.exe0 Pfad der fehlerhaften Anwendung: jucheck.exe1 Pfad des fehlerhaften Moduls: jucheck.exe2 Berichtskennung: jucheck.exe3 Vollständiger Name des fehlerhaften Pakets: jucheck.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jucheck.exe5 Error: (02/05/2016 03:42:15 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (02/05/2016 03:42:15 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (02/04/2016 10:17:07 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm explorer.exe, Version 10.0.10586.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1594 Startzeit: 01d15ead9ea2d871 Beendigungszeit: 0 Anwendungspfad: C:\Windows\explorer.exe Berichts-ID: df6ea37d-cb81-11e5-9bfa-10bf4858e8e3 Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Systemfehler: ============= Error: (02/06/2016 12:46:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Benutzerdatenzugriff_3f9ec" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/06/2016 12:46:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Benutzerdatenspeicher _3f9ec" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/06/2016 12:46:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Kontaktdaten_3f9ec" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/06/2016 12:46:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Synchronisierungshost_3f9ec" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/05/2016 11:44:51 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalAktivierung{3185A766-B338-11E4-A71E-12E3F512A338}{7006698D-2974-4091-A424-85DD0B909E23}NT-AUTORITÄTNetzwerkdienstS-1-5-20LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (02/05/2016 11:44:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalAktivierung{3185A766-B338-11E4-A71E-12E3F512A338}{7006698D-2974-4091-A424-85DD0B909E23}NT-AUTORITÄTNetzwerkdienstS-1-5-20LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (02/05/2016 11:39:51 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Übermittlungsoptimierung" wurde nicht richtig gestartet. Error: (02/05/2016 11:34:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/05/2016 11:34:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht. Error: (02/05/2016 11:34:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 CodeIntegrity: =================================== Date: 2016-01-29 13:05:02.319 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-17 04:23:41.500 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-17 00:19:13.416 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-12 01:05:44.322 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-10 23:41:13.683 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-09 17:38:52.507 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-09 17:31:26.993 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-09 17:24:52.701 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-01-09 16:49:55.698 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz Prozentuale Nutzung des RAM: 46% Installierter physikalischer RAM: 8071.12 MB Verfügbarer physikalischer RAM: 4298.63 MB Summe virtueller Speicher: 16263.12 MB Verfügbarer virtueller Speicher: 11939.57 MB ==================== Laufwerke ================================ Drive c: (OS) (Fixed) (Total:399.64 GB) (Free:24.64 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (DATA) (Fixed) (Total:505.64 GB) (Free:127.43 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 85CBDE57) Partition: GPT. ==================== Ende von Addition.txt ============================ |
06.02.2016, 14:59 | #3 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ständig Neue Tabs mit Werbung im Chrome Hallo und
__________________Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
06.02.2016, 15:13 | #4 |
| Ständig Neue Tabs mit Werbung im Chrome Danke für die schnelle Antwort! Hatte mal ein kostenloses Programm, dass dann sagte es sei fündig geworden, aber habe es deinstalliert, weil in der Free-Version das bereinigen nicht ging. AdwCleaner hat nichts gefunden. und sonst leider auch keine Logs. |
06.02.2016, 15:15 | #5 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ständig Neue Tabs mit Werbung im Chrome Spyhunter Dazu lies mal Folgendes => BleepingComputer braucht Hilfe aus der Community - www.politik-forum.eu Zitat:
Bitte auch Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz für Ihre Dateien, aber auf Kosten Ihrer Privatsphäre? | Emsisoft Blog Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc - etwas ist bei Sicherheitssoftware einfach inakzeptabel. Wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen. Gib Bescheid wenn Avast weg ist.
__________________ Logfiles bitte immer in CODE-Tags posten |
06.02.2016, 15:25 | #6 |
| Ständig Neue Tabs mit Werbung im Chrome Beide Sachen sind deinstalliert! Habe damals Avast im Chip-Download-Adventskalender gratis bekommen. Habe mich davon lenken lassen. Entnehme diesen Post http://www.trojaner-board.de/175647-...hutztool.html, dass ich MSE als Alternative nehmen soll? Reicht das aus? Starte den PC jetzt neu. |
06.02.2016, 15:28 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ständig Neue Tabs mit Werbung im Chrome Ja, aber nicht jetzt!! Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten |
06.02.2016, 17:02 | #8 |
| Ständig Neue Tabs mit Werbung im Chrome Hey, es wurde was gefunden! Ein Kumpel hat vor zwei Wochen seinen USB-Stick auf meinem PC zwischengespeichert und da waren nun zwei Dateien von irgendwelchen Tools drin. Ich will diesen Ordner komplett löschen, wie mache ich das am sichersten? Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001 www.malwarebytes.org Database version: main: v2016.02.06.03 rootkit: v2016.01.20.01 Windows 10 x64 NTFS Internet Explorer 11.63.10586.0 Tomas :: TOMAS-PC [administrator] 06.02.2016 15:43:32 mbar-log-2016-02-06 (15-43-32).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 613413 Time elapsed: 1 hour(s), 2 minute(s), 35 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 1 HKU\S-1-5-21-229791554-3003767711-2460185856-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigUrl (Hijack.AutoConfigURL.PrxySvrRST) -> Data: hxxp://unblockservice.com/wpad.dat?c5409936a4d144d64151c3afcc4381425417181 -> Delete on reboot. [b7c4b2abcdcc10269a078e5933cfc63a] Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 2 C:\Users\Tomas\Desktop\SORT\Pinnacle.Studio.Ultimate.v16.0.0.75.Multilingual.Keymaker.Only.Fixed-CORE\cr-keygen.exe (RiskWare.Tool.HCK) -> Delete on reboot. [dc9f9fbe1287999dd5312dd2887831cf] C:\Users\Tomas\Desktop\SORT\Sony Vegas Pro 12 Build 563 + Keygen 64-Bit Version\Keygen.exe (RiskWare.Tool.HCK) -> Delete on reboot. [92e944194059e0562f788f8c847e2ad6] Physical Sectors Detected: 0 (No malicious items detected) (end) |
06.02.2016, 23:48 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ständig Neue Tabs mit Werbung im Chrome Ja, vllt liest du die Anleitung zu MBAR nochmal richtig??? Und du diesen gecrackten Scheiß wirst du umgehend deinstallieren! Lesestoff: Illegale Software: Cracks, Keygens und Co Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html Es geht weiter wenn du alles Illegale entfernt hast. Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.
__________________ Logfiles bitte immer in CODE-Tags posten |
07.02.2016, 00:29 | #10 |
| Ständig Neue Tabs mit Werbung im Chrome Welche MBAR-Anleitung soll ich mir angucken? Es ist ja nicht installiert! Der Ordner SORT war nur ein BackUp von dem USB-Stick meines Kumpels. Ich hatte keine Ahnung, was da drin ist. Ich bin auch generell Gegner von Keygens und gecrackten Softwares.... |
07.02.2016, 00:34 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ständig Neue Tabs mit Werbung im Chrome Du hast gefragt wie man die Funde entfernt. Und das steht alles in der Anleitung. Außerdem diente die Warnung zu Cracks, damit du alles selbst nochmal durchgehst und etwaige andere Schiete löschst.
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Ständig Neue Tabs mit Werbung im Chrome |
adwcleaner, andauernd, browser, ccsetup, chrome, dauernd, entferne, entfernen, esgscanner.sys, forum, googlechrome, hijacker, hilfe, hoffe, nervige, neue, neue tabs mit werbung, neuen, newtab, officejet, onedrive, problem, safer networking, seite, seiten, smart, smartnewtab. hijacker, ungewollt, versuch, versucht, werbung, windowsapps, woche, wochen |