| |
| |||||||
Log-Analyse und Auswertung: Trojaner "searchprotect" und "tmp00000be1" entfernenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
20.05.2016, 23:03
| #1 | ||
 |  Trojaner "searchprotect" und "tmp00000be1" entfernen Hi Leute, ich brauche leider mal wieder Hilfe. Jemand/bzw. irgendein Programm hat in 2 meiner Email Accounts an alle Kontakte Spamware, und mir "Delivery Failure" Nachrichten geschickt. Laut Bitdefender und Avira ist ein Programm "searchProtect", dessen Ordner sich unter "C/ProgrammeX86/SearchProtect nicht löschen lässt. Avira hat zudem massenhaft Dateien im Ordner "tmp00000be1" gefunden. Hier mal der Avira Log: Zitat:
Zitat:
 Vielen Dank schon mal |
|
20.05.2016, 23:07
| #2 |
| /// TB-Ausbilder   |  Trojaner "searchprotect" und "tmp00000be1" entfernen Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Zur ersten Analyse bitte FRST und TDSS-Killer ausführen: Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt 2 Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
|
20.05.2016, 23:38
| #3 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:19-05-2016 durchgeführt von Ben (Administrator) auf BEN-PC (21-05-2016 00:21:49) Gestartet von C:\Users\Ben\Downloads Geladene Profile: Ben (Verfügbare Profile: Ben) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe (ICSI Technology Ltd.) C:\Windows\Dit.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (DivX, LLC) C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (ICSI) C:\Windows\DitExp.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_ep64.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_ep64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15053944 2016-01-06] (Logitech Inc.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [5006536 2016-03-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1651600 2016-04-25] (Bitdefender) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE HKLM-x32\...\Run: [Sound Blaster Recon3D PCIe Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe [885760 2012-02-22] (Creative Technology Ltd) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Dit] => C:\Windows\Dit.exe [90112 2004-08-05] (ICSI Technology Ltd.) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-06-24] (DivX, LLC) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861640 2015-06-27] (DivX, LLC) HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-05-09] (Plays.tv, LLC) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-04-27] (Raptr, Inc) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [807392 2016-05-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-04-25] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Dropbox Update] => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify] => C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe [6890608 2016-04-28] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-28] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: F - F:\Setup.exe autorun HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: {0cffc0e7-918d-11e2-ba83-bc5ff44945d9} - F:\setup.exe HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-21] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-05-21] ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2016-05-21] ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4 Tcpip\..\Interfaces\{93459425-DE5C-4808-9F97-6026C69CD4BC}: [DhcpNameServer] 80.69.96.12 81.210.129.4 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {71588120-FC17-4463-B07D-2C71FE6E057B} URL = hxxp://go.findrsearch.com/search/web?q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> {0C3286BA-7A37-4E59-A3F5-F4E06A97F97B} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=71e2f78e-876b-4e42-8029-3e0e5449b2d1&pid=fotofreeware&mode=bounce&k=0 SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> {38C82963-9229-4D88-99F7-221997DB985B} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=71e2f78e-876b-4e42-8029-3e0e5449b2d1&pid=fotofreeware&mode=bounce&k=0 SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> {94ABC068-6097-46F0-8AC3-5EBFF0AD0703} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=71e2f78e-876b-4e42-8029-3e0e5449b2d1&pid=fotofreeware&mode=bounce&k=0 SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> {F280C5F1-262E-4024-AC35-47BEAEBFA6CF} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=71e2f78e-876b-4e42-8029-3e0e5449b2d1&pid=fotofreeware&mode=bounce&k=0 SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> {F4ED6660-A91F-481D-A5DF-7DAC3E9994E2} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=71e2f78e-876b-4e42-8029-3e0e5449b2d1&pid=fotofreeware&mode=bounce&k=0 SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> {FD4E9F80-5AC9-44A3-8722-78CA6D2DC141} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=71e2f78e-876b-4e42-8029-3e0e5449b2d1&pid=fotofreeware&mode=bounce&k=0 BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default FF NewTab: about:home FF Homepage: hxxp://search.conduit.com/?gd=&ctid=CT3324774&octid=EB_ORIGINAL_CTID&ISID=MA62C3147-8AE0-40E0-918E-AEDF8799F4C5&SearchSource=55&CUI=&UM=5&UP=SP62D14C1F-E9FB-4EFC-B42C-631FD0CBFD66&SSPV= FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-08-05] (DivX, LLC) FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Photoshop CS6\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [Keine Datei] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-03-22] (Apple Inc.) FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-images.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-maps.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\youtube.xml [2015-11-12] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{58827B9B-1E67-4411-915F-922793B7986B}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{A31C05CC-0B97-428B-80B9-224FF9550200}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{D3ED56D7-F8F1-4998-87F7-9D409CB38784}.xml [2012-08-26] FF Extension: NoScript - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-04-07] FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\artur.dubovoy@gmail.com [2016-05-17] FF Extension: Cliqz - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\cliqz@cliqz.com.xpi [2016-04-19] FF Extension: Blur - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\donottrackplus@abine.com.xpi [2015-12-17] FF Extension: tor-flashproxy-badge - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid0-1kqApO5BUHwjBQft5BEUXHXZjCA@jetpack.xpi [2016-01-07] FF Extension: TopLine - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid0-uIWxKlEIWnV1103pH2C8N6RsUe0@jetpack.xpi [2012-10-28] [ist nicht signiert] FF Extension: Mailvelope - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2015-12-08] FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\vdpure@link64.xpi [2016-01-22] FF Extension: Video DownloadHelper - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-05-09] FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-05-12] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-05-12] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\cliqz@cliqz.com => nicht gefunden Chrome: ======= CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Search-Gol Toolbar) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac [2014-07-03] [UpdateUrl: hxxp://img.delta-search.com/ext/chrome/update/update-delta.xml] <==== ACHTUNG CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-17] CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17] CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17] CHR Extension: (Google-Suche) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-07-03] CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-03] CHR Extension: (Google Mail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-07-03] CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [955736 2016-05-20] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466504 2016-05-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466504 2016-05-20] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1424880 2016-05-20] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [280008 2016-04-25] (Avira Operations GmbH & Co. KG) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Datei ist nicht signiert] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [103424 2013-02-14] (Creative Technology Ltd) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2016-01-06] (Logitech Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-09] (Plays.tv, LLC) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-28] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [947640 2016-03-30] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-04-25] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-05-11] (Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-03-18] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-03-18] (BitDefender) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-05-20] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [133168 2016-05-20] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-03-17] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69888 2016-05-20] (Avira Operations GmbH & Co. KG) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [118608 2016-02-09] (BitDefender LLC) R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1044760 2013-02-14] (Creative Technology Ltd) R3 CTHDB; C:\Windows\System32\DRIVERS\CtHDb.sys [23640 2012-02-29] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2015-12-16] (BitDefender LLC) R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [298736 2016-03-03] (Bitdefender) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-02-22] (BitDefender S.R.L.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 b06bdrv; \SystemRoot\system32\drivers\bxvbda.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-21 00:21 - 2016-05-21 00:21 - 00030520 _____ C:\Users\Ben\Downloads\FRST.txt 2016-05-21 00:21 - 2016-05-21 00:21 - 00000000 ____D C:\FRST 2016-05-21 00:20 - 2016-05-21 00:20 - 02382336 _____ (Farbar) C:\Users\Ben\Downloads\FRST64.exe 2016-05-20 23:08 - 2016-05-21 00:14 - 00001096 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-05-20 22:59 - 2016-05-20 22:59 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe 2016-05-20 20:41 - 2016-05-21 00:14 - 00001132 _____ C:\Users\Public\Desktop\Avira Launcher.lnk 2016-05-20 20:40 - 2016-05-20 20:42 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Avira 2016-05-20 20:38 - 2016-05-20 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-05-20 20:38 - 2016-05-20 20:42 - 00000000 ____D C:\ProgramData\Avira 2016-05-20 20:38 - 2016-05-20 20:41 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2016-05-20 20:38 - 2016-05-20 20:41 - 00133168 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2016-05-20 20:38 - 2016-05-20 20:41 - 00069888 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2016-05-20 20:38 - 2016-05-20 20:41 - 00000000 ____D C:\Program Files (x86)\Avira 2016-05-20 20:38 - 2015-03-17 13:01 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2016-05-15 16:33 - 2016-05-15 16:33 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2016-05-15 16:31 - 2016-05-15 16:31 - 00025965 _____ C:\ProgramData\1463322708.bdinstall.bin 2016-05-15 05:10 - 2016-05-15 05:10 - 00394940 _____ C:\ProgramData\1463281764.bdinstall.bin 2016-05-15 05:09 - 2016-05-21 00:14 - 00002116 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk 2016-05-15 05:09 - 2016-05-15 05:09 - 00253404 ____H C:\bdr-ld02 2016-05-15 05:09 - 2016-05-15 05:09 - 00009216 ____H C:\bdr-ld02.mbr 2016-05-15 05:09 - 2016-05-15 05:09 - 00000684 ____H C:\bdr-cf02 2016-05-15 05:09 - 2016-05-15 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016 2016-05-15 05:09 - 2016-03-03 01:36 - 00298736 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys 2016-05-15 05:09 - 2016-02-22 15:13 - 00511320 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2016-05-15 05:09 - 2015-12-16 05:53 - 00182936 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2016-05-15 05:09 - 2015-12-15 21:35 - 49760229 ____H C:\bdr-im02.gz 2016-05-15 05:09 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz02 2016-05-15 05:08 - 2016-05-15 05:08 - 00093711 _____ C:\ProgramData\1463281683.bdinstall.bin 2016-05-15 05:07 - 2016-05-15 05:10 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Bitdefender 2016-05-15 05:07 - 2016-05-15 05:07 - 00390241 _____ C:\ProgramData\1463281564.bdinstall.bin 2016-05-15 05:07 - 2016-03-18 06:58 - 00842152 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2016-05-15 05:07 - 2016-03-18 06:56 - 01623536 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2016-05-15 05:07 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2016-05-15 05:06 - 2016-05-15 05:26 - 00000000 ____D C:\ProgramData\Bitdefender 2016-05-15 05:05 - 2016-05-21 00:13 - 00000000 ____D C:\Program Files\Bitdefender Agent 2016-05-14 18:18 - 2016-05-14 18:18 - 00000000 ____D C:\Users\Ben\Desktop\AST Fahrwerk 2016-05-13 21:20 - 2016-05-15 03:45 - 00000000 ____D C:\Users\Ben\AppData\Local\AMD 2016-05-13 21:19 - 2016-05-13 21:19 - 00000000 _____ C:\Windows\ativpsrm.bin 2016-05-13 21:18 - 2016-05-13 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved 2016-05-13 21:17 - 2016-05-13 21:18 - 00000000 ____D C:\Program Files (x86)\Raptr 2016-05-13 21:17 - 2016-05-13 21:17 - 00000000 ____D C:\Program Files (x86)\AMD 2016-05-13 21:10 - 2016-05-13 21:10 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Ben\Downloads\autodetectutility.exe 2016-05-13 20:04 - 2016-05-13 20:04 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-05-13 07:13 - 2016-05-21 00:15 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Raptr 2016-05-12 22:32 - 2016-05-12 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV 2016-05-12 07:36 - 2016-05-21 00:15 - 00000000 ____D C:\Users\Ben\AppData\Roaming\PlaysTV 2016-05-12 07:35 - 2016-05-12 07:35 - 00000000 ____D C:\Program Files (x86)\Raptr Inc 2016-05-11 16:52 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 16:52 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 16:52 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 16:52 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 16:52 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 16:52 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 16:52 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 16:52 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 16:52 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 16:52 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 16:52 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 16:52 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 16:52 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 16:52 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 16:52 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 16:52 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 16:52 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 16:52 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 16:52 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 16:52 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 16:52 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 16:52 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 16:52 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 16:52 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 16:52 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 16:52 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 16:52 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 16:52 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 16:52 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 16:52 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 16:52 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 16:52 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 16:52 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 16:52 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 16:52 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 16:52 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 16:52 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-07 11:16 - 2016-05-07 11:16 - 46070258 _____ C:\Users\Ben\Desktop\Prince Ea - A Brand New Ending - YouTube_720p.mp4 2016-05-05 14:35 - 2016-05-05 22:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-04 18:30 - 2016-05-04 19:39 - 00000000 ____D C:\Users\Public\CineForm 2016-05-04 18:30 - 2016-05-04 19:29 - 00000000 ____D C:\Users\Ben\AppData\Roaming\GoPro 2016-05-04 18:30 - 2016-05-04 18:30 - 00000000 ____D C:\Users\Ben\AppData\Local\GoPro 2016-05-04 18:29 - 2016-05-04 18:29 - 00000000 ____D C:\Program Files (x86)\OpenAL 2016-04-27 21:28 - 2016-04-27 21:28 - 08306382 _____ C:\Users\Ben\Desktop\Infiltrate template.rar 2016-04-25 20:04 - 2014-12-29 21:16 - 00000000 ____D C:\Users\Ben\Desktop\Template ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-21 00:21 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-05-21 00:21 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-05-21 00:20 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Spotify 2016-05-21 00:18 - 2011-04-12 09:43 - 00699432 _____ C:\Windows\system32\perfh007.dat 2016-05-21 00:18 - 2011-04-12 09:43 - 00149572 _____ C:\Windows\system32\perfc007.dat 2016-05-21 00:18 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-21 00:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-05-21 00:15 - 2015-11-02 20:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-05-21 00:15 - 2015-03-04 23:19 - 00000000 ___RD C:\Users\Ben\Dropbox 2016-05-21 00:15 - 2014-09-13 14:31 - 00001530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2016-05-21 00:15 - 2013-11-27 20:47 - 00000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-05-21 00:15 - 2013-09-13 21:51 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-21 00:15 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Local\Spotify 2016-05-21 00:15 - 2012-08-17 03:21 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-05-21 00:15 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-05-21 00:14 - 2016-03-28 20:56 - 00002165 _____ C:\Users\Public\Desktop\Preset Manager 1.0.lnk 2016-05-21 00:14 - 2016-01-12 00:56 - 00001831 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2016-05-21 00:14 - 2015-03-21 03:54 - 00002168 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2016-05-21 00:14 - 2014-11-30 20:11 - 00000761 _____ C:\Users\Public\Desktop\Assetto Corsa.lnk 2016-05-21 00:14 - 2014-08-31 01:09 - 00000953 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk 2016-05-21 00:14 - 2014-04-20 21:02 - 00001101 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk 2016-05-21 00:14 - 2014-04-13 19:36 - 00001100 _____ C:\Users\Public\Desktop\Picasa 3.lnk 2016-05-21 00:14 - 2013-09-13 21:51 - 00001141 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-21 00:14 - 2013-08-23 01:01 - 00001060 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-05-21 00:14 - 2013-03-20 21:54 - 00001944 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2016-05-21 00:14 - 2012-12-25 18:54 - 00000704 _____ C:\Users\Public\Desktop\Winamp.lnk 2016-05-21 00:14 - 2012-09-21 01:34 - 00001779 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001923 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001911 _____ C:\Users\Public\Desktop\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-16 20:38 - 00001321 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-05-21 00:14 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-05-21 00:14 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-05-21 00:13 - 2015-10-13 23:16 - 00000941 _____ C:\Users\Ben\Desktop\Magic Bullet Looks.lnk 2016-05-21 00:13 - 2015-03-04 23:19 - 00001009 _____ C:\Users\Ben\Desktop\Drobox.lnk 2016-05-21 00:13 - 2014-12-17 22:53 - 00001827 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk 2016-05-21 00:13 - 2014-10-19 19:41 - 00000905 _____ C:\Users\Ben\Desktop\GTR2.lnk 2016-05-21 00:13 - 2014-09-13 15:19 - 00001038 _____ C:\Users\Ben\Desktop\Vegas Pro 13.0 (64-bit).lnk 2016-05-21 00:13 - 2014-07-10 01:26 - 00000783 _____ C:\Users\Ben\Desktop\Zeug vom Desktop.lnk 2016-05-21 00:13 - 2013-11-27 23:49 - 00000924 _____ C:\Users\Ben\Desktop\GIMP.lnk 2016-05-21 00:13 - 2013-03-20 22:03 - 00000763 _____ C:\Users\Ben\Desktop\GTR Evolution.lnk 2016-05-21 00:13 - 2012-12-30 04:03 - 00001563 _____ C:\Users\Ben\Desktop\Counter-Strike Source.lnk 2016-05-21 00:13 - 2012-11-06 22:55 - 00000961 _____ C:\Users\Ben\Desktop\TeamSpeak 3 Client.lnk 2016-05-21 00:13 - 2012-10-03 14:32 - 00000684 _____ C:\Users\Ben\Desktop\Free PDF to Word Doc Converter.lnk 2016-05-21 00:13 - 2012-09-21 01:34 - 00001793 _____ C:\Users\Ben\Desktop\Spotify.lnk 2016-05-21 00:13 - 2012-08-19 16:49 - 00000842 _____ C:\Users\Ben\Desktop\BitLord.lnk 2016-05-21 00:13 - 2012-08-16 21:17 - 00000355 _____ C:\Users\Ben\Desktop\Arbeitsplatz.lnk 2016-05-21 00:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-05-21 00:12 - 2015-12-26 07:38 - 00292677 _____ C:\bdlog.txt 2016-05-21 00:05 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-05-20 23:38 - 2015-08-15 12:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-05-20 23:38 - 2015-06-18 18:28 - 00001216 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job 2016-05-20 23:37 - 2015-03-11 20:44 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-05-20 23:08 - 2015-03-11 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-05-20 23:08 - 2015-03-11 20:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-05-20 21:39 - 2012-08-17 03:18 - 00000000 ____D C:\Users\Ben\AppData\Roaming\vlc 2016-05-20 21:00 - 2012-11-06 22:56 - 00000000 ____D C:\Users\Ben\AppData\Roaming\TS3Client 2016-05-20 20:41 - 2013-08-26 11:01 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-20 19:38 - 2015-06-18 18:28 - 00001164 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job 2016-05-20 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-05-20 00:30 - 2015-04-14 01:51 - 00000080 _____ C:\Users\Ben\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2016-05-19 19:19 - 2013-10-13 03:43 - 00000000 ____D C:\Users\Ben\Documents\BitLord 2016-05-19 19:19 - 2013-10-13 03:43 - 00000000 ____D C:\Users\Ben\AppData\Roaming\BitLord 2016-05-19 19:15 - 2012-08-19 16:49 - 00000000 _____ C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2016-05-16 21:24 - 2014-02-01 17:31 - 00000213 _____ C:\Users\Ben\Desktop\TO DO! BICHT!!!.txt 2016-05-16 20:18 - 2012-09-01 01:53 - 00000371 _____ C:\Users\Ben\Desktop\TO DO.txt 2016-05-15 05:09 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2016-05-15 05:06 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Bitdefender 2016-05-15 03:51 - 2014-11-12 01:50 - 00000000 ____D C:\Users\Ben\AppData\LocalLow\boost_interprocess 2016-05-14 04:13 - 2014-04-05 20:01 - 00000000 ____D C:\Users\Ben\Desktop\CS 2014 2016-05-13 21:19 - 2016-03-29 01:26 - 00004230 _____ C:\Windows\System32\Tasks\AMD Updater 2016-05-13 21:17 - 2016-03-29 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-05-13 21:17 - 2013-12-29 21:05 - 00000000 ____D C:\Program Files\AMD 2016-05-13 20:04 - 2015-03-04 23:19 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Dropbox 2016-05-13 07:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-13 07:38 - 2015-08-15 12:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-13 07:38 - 2015-07-23 00:54 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-13 07:38 - 2015-07-23 00:54 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-12 22:29 - 2012-08-16 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative 2016-05-12 22:29 - 2012-08-16 20:56 - 00000000 ____D C:\Program Files (x86)\Creative 2016-05-12 08:09 - 2015-04-15 19:16 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-12 08:04 - 2014-12-23 18:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 02:19 - 2014-08-20 22:58 - 00000000 ____D C:\Users\Ben\AppData\Local\Adobe 2016-05-12 00:44 - 2015-05-02 22:15 - 00005528 _____ C:\Users\Ben\Desktop\Kosten.txt 2016-05-11 23:25 - 2012-08-16 20:50 - 00000000 ____D C:\AMD 2016-05-11 22:53 - 2013-07-11 11:30 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 21:51 - 2009-07-14 06:45 - 05050848 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 21:50 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 18:01 - 2012-08-16 21:20 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-10 21:58 - 2012-08-16 20:47 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Adobe 2016-05-08 18:39 - 2012-10-28 19:22 - 00000000 ____D C:\Users\Ben\AppData\Local\CrashDumps 2016-05-06 17:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-05-06 17:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\system32\GWX 2016-05-06 15:06 - 2016-04-14 23:26 - 00000000 ____D C:\Users\Ben\AppData\Local\bvyvavay 2016-05-05 22:28 - 2013-09-13 21:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-27 21:43 - 2012-08-16 20:53 - 00120496 _____ C:\Users\Ben\AppData\Local\GDIPFONTCACHEV1.DAT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-01-12 00:56 - 2016-01-12 00:56 - 15566737 _____ () C:\Program Files\FileZilla3141.zip 2012-08-19 16:49 - 2016-05-19 19:15 - 0000000 _____ () C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2012-10-13 19:23 - 2013-12-12 01:51 - 0005632 _____ () C:\Users\Ben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-11-17 22:30 - 2015-11-17 22:30 - 0000842 _____ () C:\Users\Ben\AppData\Local\recently-used.xbel 2012-09-12 20:33 - 2013-04-21 19:02 - 0007605 _____ () C:\Users\Ben\AppData\Local\resmon.resmoncfg 2015-06-24 02:06 - 2015-06-24 02:06 - 0043682 _____ () C:\Users\Ben\AppData\Local\Tempdivxa6f9 2015-05-19 02:43 - 2015-05-19 02:43 - 0247298 _____ () C:\Users\Ben\AppData\Local\Tempdivxfe74 2016-05-15 05:07 - 2016-05-15 05:07 - 0390241 _____ () C:\ProgramData\1463281564.bdinstall.bin 2016-05-15 05:08 - 2016-05-15 05:08 - 0093711 _____ () C:\ProgramData\1463281683.bdinstall.bin 2016-05-15 05:10 - 2016-05-15 05:10 - 0394940 _____ () C:\ProgramData\1463281764.bdinstall.bin 2016-05-15 16:31 - 2016-05-15 16:31 - 0025965 _____ () C:\ProgramData\1463322708.bdinstall.bin Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\Public\AlexaNSISPlugin.6936.dll Einige Dateien in TEMP: ==================== C:\Users\Ben\AppData\Local\Temp\$avantbrowser$.update.exe C:\Users\Ben\AppData\Local\Temp\AMDCleanupUtility.exe C:\Users\Ben\AppData\Local\Temp\avgnt.exe C:\Users\Ben\AppData\Local\Temp\cdo1138856251.dll C:\Users\Ben\AppData\Local\Temp\cdo1148406675.dll C:\Users\Ben\AppData\Local\Temp\cdo1190206193.dll C:\Users\Ben\AppData\Local\Temp\cdo1268291816.dll C:\Users\Ben\AppData\Local\Temp\cdo1594728973.dll C:\Users\Ben\AppData\Local\Temp\cdo1630582100.dll C:\Users\Ben\AppData\Local\Temp\cdo1650198476.dll C:\Users\Ben\AppData\Local\Temp\cdo1680738936.dll C:\Users\Ben\AppData\Local\Temp\cdo2299574333.dll C:\Users\Ben\AppData\Local\Temp\cdo2334430240.dll C:\Users\Ben\AppData\Local\Temp\cdo2434732372.dll C:\Users\Ben\AppData\Local\Temp\cdo2445184739.dll C:\Users\Ben\AppData\Local\Temp\cdo262939885.dll C:\Users\Ben\AppData\Local\Temp\cdo272904227.dll C:\Users\Ben\AppData\Local\Temp\cdo2742429460.dll C:\Users\Ben\AppData\Local\Temp\cdo2816061061.dll C:\Users\Ben\AppData\Local\Temp\cdo3019167050.dll C:\Users\Ben\AppData\Local\Temp\cdo3268099613.dll C:\Users\Ben\AppData\Local\Temp\cdo340310218.dll C:\Users\Ben\AppData\Local\Temp\cdo3432201221.dll C:\Users\Ben\AppData\Local\Temp\cdo3453013635.dll C:\Users\Ben\AppData\Local\Temp\cdo3505807980.dll C:\Users\Ben\AppData\Local\Temp\cdo3608878176.dll C:\Users\Ben\AppData\Local\Temp\cdo374867413.dll C:\Users\Ben\AppData\Local\Temp\cdo3932243946.dll C:\Users\Ben\AppData\Local\Temp\cdo3967037980.dll C:\Users\Ben\AppData\Local\Temp\cdo4045656951.dll C:\Users\Ben\AppData\Local\Temp\cdo4072745525.dll C:\Users\Ben\AppData\Local\Temp\cdo521549086.dll C:\Users\Ben\AppData\Local\Temp\cdo561457612.dll C:\Users\Ben\AppData\Local\Temp\cdo759103143.dll C:\Users\Ben\AppData\Local\Temp\cdo865636502.dll C:\Users\Ben\AppData\Local\Temp\cdo973371756.dll C:\Users\Ben\AppData\Local\Temp\Cleanup.dll C:\Users\Ben\AppData\Local\Temp\ddu.exe C:\Users\Ben\AppData\Local\Temp\difxapi.dll C:\Users\Ben\AppData\Local\Temp\DivXSetup.exe C:\Users\Ben\AppData\Local\Temp\msvcm80.dll C:\Users\Ben\AppData\Local\Temp\msvcp80.dll C:\Users\Ben\AppData\Local\Temp\msvcr80.dll C:\Users\Ben\AppData\Local\Temp\playstv_patch.exe C:\Users\Ben\AppData\Local\Temp\radeon-crimson-16.3.2-minimalsetup.exe C:\Users\Ben\AppData\Local\Temp\raptrpatch.exe C:\Users\Ben\AppData\Local\Temp\raptr_stub.exe C:\Users\Ben\AppData\Local\Temp\tmp4FE3.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-18 07:54 ==================== Ende von FRST.txt ============================ |
|
20.05.2016, 23:39
| #4 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernen [CODE] Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:19-05-2016
durchgeführt von Ben (2016-05-21 00:22:14)
Gestartet von C:\Users\Ben\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-08-16 18:37:21)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2410925410-2808068811-915591143-500 - Administrator - Disabled)
Ben (S-1-5-21-2410925410-2808068811-915591143-1000 - Administrator - Enabled) => C:\Users\Ben
Gast (S-1-5-21-2410925410-2808068811-915591143-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2410925410-2808068811-915591143-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avant Browser (remove only) (HKLM-x32\...\AvantBrowser) (Version: 12.5.0.0 - Avant Force)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.16.282 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{bfb60b68-92b8-481b-b416-7e05b4ea01c9}) (Version: 1.1.61.18979 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.61.18979 - Avira Operations GmbH & Co. KG) Hidden
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.17.1000 - Bitdefender)
Bitdefender Total Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.28.1478 - Bitdefender)
BitLord 2.1 (HKLM-x32\...\BitLord) (Version: 2.1.1-91 - House of Life)
Catalyst Control Center Next Localization BR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Creative Music Server (HKLM-x32\...\Music Server) (Version: 1.01 - Creative Technology Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.77 - DivX, LLC)
Dropbox (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Dropbox) (Version: 3.20.1 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.16483 - Landesfinanzdirektion Thüringen)
Extended Update (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\UpdaterEX) (Version: - ) <==== ACHTUNG
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
FilmConvert Pro 2.1 AE (HKLM\...\{CC62E726-2E52-4E16-9AF5-8991119A3667}) (Version: 2.12 - Rubber Monkey Software)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free Pdf Perfect Prereq (HKLM-x32\...\{8a8f0ec0-a24b-4eb8-b811-2cf05c4d1c85}) (Version: 1.1.0.80 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.1.0.80 - Covus Freemium GmbH) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 11.5.1.0 - Lightworks)
Logitech Gaming Software 8.78 (HKLM\...\Logitech Gaming Software) (Version: 8.78.129 - Logitech Inc.)
Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{E7676EF4-3896-4B7E-B030-1356EEC477CE}) (Version: 11.4.4 - Red Giant)
Magic Bullet Suite 64-bit (Version: 11.4.4 - Red Giant) Hidden
MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Motorola Driver Installation 3.2.0 (HKLM\...\{A7B9041E-9635-4AFF-BB1E-EFAF490A231B}) (Version: 3.2.0 - Motorola Inc.)
Motorola Phone Tools (HKLM-x32\...\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}) (Version: 4.60 - Avanquest Software)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Multi-Card Reader & Flash Disk (HKLM-x32\...\{83F3EED2-DDE2-4434-8FBE-9D2A1E7C2BC9}) (Version: 1.00.0000 - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.10.1-r112682-release - Plays.tv, LLC)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.0-r112326-release - Raptr, Inc)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Sonic Foundry Preset Manager 1.0 (HKLM-x32\...\{7266C898-F9CB-4122-9452-2AA1DACE245E}) (Version: 1.0.73 - Sonic Foundry)
Sound Blaster Recon3D PCIe (HKLM-x32\...\{F380C602-98E8-49AB-8C3F-8A73BACA45DD}) (Version: 1.00.22 - Creative Technology Limited)
Sound Blaster Recon3D PCIe Extras (HKLM-x32\...\{204FCF73-1450-407D-BCF9-1233EC5F5787}) (Version: 1.0 - Creative Technology Limited)
Spotify (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)
Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Test Drive Unlimited (HKLM-x32\...\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}) (Version: 1.00.0000 - Atari)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1-3) (Version: 1.0.3.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (Version: 1.0.3.1 - LunarG, Inc.) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {047D8A27-C9C0-4509-B54B-0DAAE60A46CF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {108EC6FD-E65D-4308-A188-EAC5ABBB8E77} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe
Task: {1D70820A-630E-4F59-82B4-BF7CF33CECF1} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {2439EA23-D503-4688-8E37-FBFA8EB9AD95} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-03-30] (Bitdefender)
Task: {3169177F-2AA2-4BEF-BCC6-B0D125EB68A2} - System32\Tasks\{A9CE6C82-5B6C-4C81-9C82-F507E1E7B46A} => c:\program files (x86)\avant browser\avant.exe [2016-01-04] (Avant Force)
Task: {5E002749-4D84-4067-A8DF-04F377230DC6} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe
Task: {5E7983E5-5405-40E6-AE09-95A1217116F8} - System32\Tasks\{3AAAF176-F7EF-41D0-AFD3-9F269021114C} => pcalua.exe -a C:\Users\Ben\Downloads\winessentials2012-all.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {72547DC8-E3C9-4B18-93FE-F570C6E6321F} - \Browser Updater\Browser Updater -> Keine Datei <==== ACHTUNG
Task: {8D528501-7480-4A00-86D1-D12981FF9E0B} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {96E7E24E-45B0-4A1A-8C08-D03C85F54B46} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {C9D881A2-1624-42AF-9730-0C1C0E03AA6D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {DB598486-F771-4C91-BDF3-6B16D26723ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated)
Task: {E3D8DC2C-B845-49CA-85F1-FE7A92BE57E0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-05-15 05:09 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-05-15 05:09 - 2016-05-09 11:29 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl
2015-10-16 12:02 - 2015-10-16 12:02 - 00043480 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2012-08-19 01:01 - 2014-06-28 22:53 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2012-03-19 22:09 - 2012-03-19 22:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-01-06 21:43 - 2016-01-06 21:43 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-01-06 21:43 - 2016-01-06 21:43 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00028160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\servicemanager.pyd
2015-11-24 22:46 - 2015-11-24 22:46 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes26.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00041472 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32service.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_hashlib.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00017920 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32event.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00019968 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32evtlog.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_socket.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ssl.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ctypes.pyd
2015-11-24 22:46 - 2015-11-24 22:46 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom26.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 01980928 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd
2015-12-07 22:57 - 2015-12-07 22:57 - 00077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 01862144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00516608 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 04060160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\select.pyd
2015-03-12 13:39 - 2016-04-28 00:44 - 47503472 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libcef.dll
2015-12-12 13:39 - 2016-04-19 21:47 - 00034768 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-05-13 20:04 - 2016-04-19 21:48 - 00019408 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2016-05-13 20:04 - 2016-04-19 21:47 - 00116688 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-12 13:39 - 2016-04-19 21:47 - 00093640 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-12 13:39 - 2016-04-19 21:47 - 00018376 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00019760 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00105928 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-05-13 20:04 - 2016-04-19 21:47 - 00392144 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2015-12-12 13:39 - 2016-05-07 00:35 - 00381752 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-12 13:39 - 2016-04-19 21:47 - 00692688 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00020816 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-12 13:39 - 2016-04-19 21:48 - 00121296 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 01682760 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00020808 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00021840 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00038696 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\fastpath.pyd
2016-05-13 20:04 - 2016-04-19 21:49 - 00020936 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00024528 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00114640 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00124880 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00021832 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00024016 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00175560 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00030160 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00043472 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00028616 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32ts.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00048592 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00026456 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00057808 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00024016 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00117056 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00052024 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2015-12-12 13:39 - 2016-04-19 21:47 - 00134608 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2016-05-13 20:04 - 2016-04-19 21:47 - 00134088 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-05-13 20:04 - 2016-04-19 21:48 - 00240584 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00020800 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00021824 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00019776 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00020800 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00024392 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-05-13 20:04 - 2016-04-19 21:50 - 00036296 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\librsync.dll
2016-05-13 20:04 - 2016-05-07 00:34 - 00020280 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00023376 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00350152 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00022352 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00084280 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2016-05-13 20:04 - 2016-05-07 00:34 - 01826096 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-12 13:39 - 2016-04-19 21:48 - 00083912 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\sip.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 03928880 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 01971504 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00531248 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00132912 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00223544 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00207672 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00060880 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32print.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00024904 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00546096 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00357680 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2012-02-23 12:56 - 2012-02-23 12:56 - 00593920 _____ () C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\de-DE\SBRnPCIe.resources.dll
2015-03-12 13:39 - 2016-04-28 00:44 - 01584240 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libglesv2.dll
2015-03-12 13:39 - 2016-04-28 00:44 - 00082032 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libegl.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\winsound.pyd
2015-10-21 22:29 - 2015-10-21 22:29 - 00113171 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libvlc.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 02396691 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\unicodedata.pyd
2011-05-10 21:01 - 2011-05-10 21:01 - 00030208 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\simplejson._speedups.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PIL._imaging.pyd
2015-06-27 01:09 - 2015-06-27 01:09 - 00271872 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32com.shell.shell.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00044544 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_sqlite3.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00387072 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sqlite3.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 00113171 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\libvlc.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 02396691 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\libvlccore.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00111104 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32file.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00216064 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWebKitWidgets.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00118784 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWebKit.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00199680 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtPrintSupport.pyd
2015-06-27 01:09 - 2015-06-27 01:09 - 00271872 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\amd_ags.dll
2015-11-24 22:47 - 2015-11-24 22:47 - 00263168 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32com.shell.shell.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00583680 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\unicodedata.pyd
2015-10-21 22:29 - 2015-10-21 22:29 - 00027667 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\plugins\audio_output\libdirectsound_plugin.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 00031251 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\plugins\audio_output\libwaveout_plugin.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 00066579 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\plugins\video_output\libdirectdraw_plugin.dll
2016-05-09 23:02 - 2016-05-09 23:02 - 02619144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\ltc_host_ex.DLL
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\gobject._gobject.pyd
2016-04-19 19:08 - 2016-04-19 19:08 - 02717595 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Ben\Downloads\autodetectutility.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\LGS_8.78.129_x64_Logitech.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe:BDU [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-21 00:13 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 80.69.96.12 - 81.210.129.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{82260939-98DA-4CF5-9C00-9AFA5E95AA50}] => (Allow) C:\Users\Ben\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{25154B17-4D55-4FE8-8E67-FCD87680A227}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{628A90DC-41D2-444F-A67F-E1BD8E4F0E41}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8F23AC69-6661-4809-9743-AF44604219F2}] => (Allow) LPort=2869
FirewallRules: [{4832E087-A6A2-4E70-B1A2-E0B398DACAFE}] => (Allow) LPort=1900
FirewallRules: [{1922A093-3790-4EC7-A53A-6CADAE8A44C5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E99B4A98-D497-414D-9FD1-5884C0234449}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{73212083-FF94-47C4-8E36-3440751A49BC}D:\programme\bitlord 2\bitlord files\bitlord.exe] => (Allow) D:\programme\bitlord 2\bitlord files\bitlord.exe
FirewallRules: [UDP Query User{D6D56F54-6194-46B0-ACA7-2E4B12A0F787}D:\programme\bitlord 2\bitlord files\bitlord.exe] => (Allow) D:\programme\bitlord 2\bitlord files\bitlord.exe
FirewallRules: [TCP Query User{206CF8F8-DC43-4B9D-9704-95CB89DFA822}C:\games\gta 4\gta 4eflc\eflc.exe] => (Allow) C:\games\gta 4\gta 4eflc\eflc.exe
FirewallRules: [UDP Query User{CF287F40-8FC9-4BE4-A0F1-CB8931BA45FD}C:\games\gta 4\gta 4eflc\eflc.exe] => (Allow) C:\games\gta 4\gta 4eflc\eflc.exe
FirewallRules: [{393B2B65-7498-446E-9454-31AF969079A6}] => (Allow) C:\Games\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe
FirewallRules: [{2A4F1161-4EAB-445E-B3B0-83FCEE695245}] => (Allow) C:\Games\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe
FirewallRules: [{45AC98BB-E418-4060-979A-CC8CDECBFFAC}] => (Allow) C:\Games\GTA 4\EFLC\LaunchEFLC.exe
FirewallRules: [{541DBC10-74B6-4AD2-AE3F-C380AE5A2C9F}] => (Allow) C:\Games\GTA 4\EFLC\LaunchEFLC.exe
FirewallRules: [{11A821F3-0F61-4472-835D-D3252B192DA2}] => (Allow) C:\Games\Battlefield 3\Battlefield 3\bf3.exe
FirewallRules: [{5F3835D6-4C80-4333-BC5A-08C34ED914EB}] => (Allow) C:\Games\Battlefield 3\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{41B15344-3A5A-4636-9C3F-35DA75AF76B3}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{A8AE8963-A576-47D4-98F6-DEDB80BC85B8}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{6FB41EF5-9FAB-4581-B977-1689EC9AA7EF}D:\games\testdriveunlimited.exe] => (Allow) D:\games\testdriveunlimited.exe
FirewallRules: [UDP Query User{64387FEB-814E-4783-B293-7A5B606EECF7}D:\games\testdriveunlimited.exe] => (Allow) D:\games\testdriveunlimited.exe
FirewallRules: [TCP Query User{FEEE3324-D95D-467A-9D64-BCFEB5CDE67A}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe] => (Allow) C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe
FirewallRules: [UDP Query User{FF0A685C-670E-438D-9F26-DD577A62366E}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe] => (Allow) C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe
FirewallRules: [TCP Query User{AEFFE17A-1F00-4847-A1EF-F493A03005F5}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3AE65D60-5D1B-47CE-9586-7C55D5EC00D2}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5BB8176F-A8A6-4DE3-B257-D8C3F3A80DC0}] => (Allow) D:\Games\Counterstrike Source\Steam.exe
FirewallRules: [{3087D8F2-2770-4EB3-93FA-1CB8D9EBE2BA}] => (Allow) D:\Games\Counterstrike Source\Steam.exe
FirewallRules: [{7910C34F-3285-45AA-BFD7-FAD0D88395F3}] => (Allow) D:\Games\Counterstrike Source\SteamApps\benda88\counter-strike source\hl2.exe
FirewallRules: [{94D2A57D-B23E-4A9C-AAB7-8C1D21B4D964}] => (Allow) D:\Games\Counterstrike Source\SteamApps\benda88\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{14C97613-0E21-4D44-9852-CF90EC1611D7}D:\programme\bitlord 2\bitlord files\bitlord.exe] => (Allow) D:\programme\bitlord 2\bitlord files\bitlord.exe
FirewallRules: [UDP Query User{2BA87064-65EA-4D89-8EB7-DA85FFB26328}D:\programme\bitlord 2\bitlord files\bitlord.exe] => (Allow) D:\programme\bitlord 2\bitlord files\bitlord.exe
FirewallRules: [TCP Query User{04BD9203-48D0-43FB-ADB5-3B4BEEFAC68D}D:\programme\winamp\winamp.exe] => (Allow) D:\programme\winamp\winamp.exe
FirewallRules: [UDP Query User{97B7F389-B7F6-4E29-816C-B6AFF4B0851F}D:\programme\winamp\winamp.exe] => (Allow) D:\programme\winamp\winamp.exe
FirewallRules: [{5E377E07-10F7-4290-834F-BE58812E6F76}] => (Block) D:\programme\winamp\winamp.exe
FirewallRules: [{FE01EF9E-1888-4F86-816C-13FEC81B8906}] => (Block) D:\programme\winamp\winamp.exe
FirewallRules: [{9EB42E62-BF36-468A-AD79-7BFA198420FB}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{0E8F294B-AA4C-4C0C-A89A-8DCB2B379F97}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [TCP Query User{AD4C25ED-3062-4A43-972C-A164F892CA4A}D:\games\testdrive unlimited\testdriveunlimited.exe] => (Allow) D:\games\testdrive unlimited\testdriveunlimited.exe
FirewallRules: [UDP Query User{03D42D7C-D749-47C3-A115-92052FC7BA6C}D:\games\testdrive unlimited\testdriveunlimited.exe] => (Allow) D:\games\testdrive unlimited\testdriveunlimited.exe
FirewallRules: [{C5E1FB36-5032-4614-AEE7-111A4A869A4D}] => (Allow) C:\Program Files (x86)\HomeTab\ProtectedSearch.exe
FirewallRules: [{87AA13B1-170B-4425-A1D4-2301676480F2}] => (Allow) C:\Program Files (x86)\HomeTab\ProtectedSearch.exe
FirewallRules: [{473BC8D5-B3DC-4067-BCEC-857EE4923E13}] => (Allow) C:\Program Files (x86)\HomeTab\TBUpdater.dll
FirewallRules: [{C298F8E5-CEA7-43A9-B81E-137211018874}] => (Allow) C:\Program Files (x86)\HomeTab\TBUpdater.dll
FirewallRules: [{DDFA1555-97C2-46B0-9EA2-F23A325CBE60}] => (Allow) C:\SoloApp\SoloApp.exe
FirewallRules: [{16B8A47D-851E-4B3B-B421-09DE3FBAF84A}] => (Allow) C:\SoloApp\SoloApp.exe
FirewallRules: [{0BABDB57-3DB9-4296-8910-3C3A458E26C3}] => (Allow) C:\SoloApp\WebDriver.dll
FirewallRules: [{C42BDDA3-6536-4111-B58A-A4DC604596D4}] => (Allow) C:\SoloApp\WebDriver.dll
FirewallRules: [{2E552CE9-5D38-4D4B-9261-9D0479D260E6}] => (Allow) C:\SoloApp\chromedriver.exe
FirewallRules: [{EA72BB57-06FA-43A8-809F-A8E0BD324793}] => (Allow) C:\SoloApp\chromedriver.exe
FirewallRules: [{85327394-1EA3-41C3-8295-882DA9AABA80}] => (Allow) C:\SoloApp\IEDriverServer.exe
FirewallRules: [{59E3AD89-526E-4CE5-A319-A0FD621B228B}] => (Allow) C:\SoloApp\IEDriverServer.exe
FirewallRules: [{E024DEBB-03E5-47CA-B70E-92766CED54DE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{3ABAA23A-8BFB-4EB2-8DA1-82123A967CF1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [TCP Query User{5874D941-0FC7-42EF-8050-2C2DCC96B2D0}D:\games\driver by r.g recoding\driver san francisco\driver.exe] => (Allow) D:\games\driver by r.g recoding\driver san francisco\driver.exe
FirewallRules: [UDP Query User{68DB7F72-1DD4-4DCF-91BE-72184861371D}D:\games\driver by r.g recoding\driver san francisco\driver.exe] => (Allow) D:\games\driver by r.g recoding\driver san francisco\driver.exe
FirewallRules: [{9ACC3141-D46C-4D44-A2DB-1BD3E96D978C}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{885550AC-3588-4E68-B087-C790349D8D90}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{2BE45B6C-8AD5-44E9-81D1-AF5402FBF669}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{DADD3DCA-1071-472C-92A9-E64CA531B2C9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F917194D-DDAD-4861-95EA-9DEFC1FEDE99}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{094439D1-78A6-4465-BA4F-0AF00A70C56A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{E528D144-291B-47AE-B1A7-438F69209663}] => (Allow) C:\Program Files\Lightworks\Lightworks.exe
FirewallRules: [{9414D52A-356D-4445-AF87-65B2F30D3EDB}] => (Allow) C:\Program Files\Lightworks\Lightworks.exe
FirewallRules: [{47DAECFD-815F-49A6-8F87-D70715039F47}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{C06619D5-7B86-42D5-AE32-FC84F9C87B28}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{7A120E79-F033-4AA1-A9FF-615F241D0D66}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe
FirewallRules: [{8A374DED-2F2B-4F9E-AF22-9C454D7F1CCE}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe
FirewallRules: [{EDCCE99B-1EA3-47CE-A180-32C6A54CB100}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe
FirewallRules: [{25280AF1-DB85-4D61-A3EB-2666FEE353F6}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe
FirewallRules: [{DAFA6341-541B-4258-89DC-21E508D66D0C}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe
FirewallRules: [{1B92803D-78EE-4CA3-917A-54A56465E2D7}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe
FirewallRules: [{197BADFC-8B73-4AEC-B698-81FB4A986367}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4BB326BF-F30F-473A-B678-121F376A2CAC}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A6405B9B-8E9C-4C96-B865-ED3BB17D5B35}] => (Allow) D:\Games\Counterstrike Source\bin\steamwebhelper.exe
FirewallRules: [{15F40517-A2A2-417E-A022-14C5740432A3}] => (Allow) D:\Games\Counterstrike Source\bin\steamwebhelper.exe
FirewallRules: [{81E16F13-F192-4E70-A1C3-997E8C7EBFC2}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{2BBE5E67-77A6-4186-9DF8-FBC55AE854AC}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{3C063478-BCEF-4476-9EBC-2A5E4FE4E773}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{5CC72709-3E1A-4EB0-B840-F286F819C1D5}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{DD965C84-3B6D-4725-B883-4324E8C77DC9}] => (Allow) C:\Program Files (x86)\Lightworks\Lightworks.exe
FirewallRules: [{9DB1D22C-05A8-4712-A437-9B0B47EB855D}] => (Allow) C:\Program Files (x86)\Lightworks\Lightworks.exe
FirewallRules: [{6913B43D-9873-4FBB-B769-1A82F9F15375}] => (Allow) C:\Program Files (x86)\Lightworks\ntcardvt.exe
FirewallRules: [{691A9809-E0E6-443C-B66D-3F95929112B8}] => (Allow) C:\Program Files (x86)\Lightworks\ntcardvt.exe
FirewallRules: [{3C5FFFA2-1690-4AF5-923A-3455D97B987D}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{C81672B3-E8B7-4F92-B618-BA3F20058B0B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{28FE4EA2-EC33-4F6A-9C64-412962B618BA}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{1C26F5D9-7121-4C1D-97DD-B5F8D311F2B9}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [TCP Query User{5FB64045-55F3-4905-9CFE-2BC184BEAD15}G:\games\assetto corsa\acs.exe] => (Allow) G:\games\assetto corsa\acs.exe
FirewallRules: [UDP Query User{0A3FA8DF-6667-4D0F-B51B-D5A10AA30E69}G:\games\assetto corsa\acs.exe] => (Allow) G:\games\assetto corsa\acs.exe
FirewallRules: [{237FCB0F-7306-470C-9EF6-FB3973916181}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1E0450BC-05C4-483E-8F71-31642CD5145F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B94E786B-2B31-4018-A9E2-CABDE7FA9381}] => (Allow) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F39379B5-8A6C-4A8F-AF86-FB60705DEB9F}] => (Allow) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{692FB58F-7447-47AF-AFBE-468926958B4C}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{EDA28318-E5DF-4C2C-B95D-CEB4B21AF016}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{21D44B44-2146-4C8D-952B-F032F505A26E}D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{27E6EA01-198F-4D61-A04F-8CCEF56F6594}D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{01F55C7A-CE01-4CD8-B34D-66EE1F235B3C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{BEC734A2-5A94-47DB-9023-6865E154C06F}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{772F2A32-23D0-4CF1-9990-26E68FB7AF1D}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{3F46ADF1-FC33-442F-83B3-ADFFA3655183}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{D4AC49EE-A302-441E-944B-DFBB845C72D3}C:\program files\sony\vegas pro 13.0\vegas130.exe] => (Allow) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [UDP Query User{AC5B96E9-3181-45A3-8DC9-866DFF01A97C}C:\program files\sony\vegas pro 13.0\vegas130.exe] => (Allow) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{BFBFE7AD-DC80-4191-A1A1-FE127D60855A}] => (Block) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{0A3F3D33-B641-4E8C-8939-0AA423B31C71}] => (Block) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{495B296D-931F-4890-8686-77CC51E21F4F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B108BE5-D3BB-4FCC-A009-DAC30E3A342A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{24B5DB29-7B0B-4004-A38B-6E91FB5403F0}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{A23EC090-1F9D-44E5-8AFC-FC1E787F5764}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{2D753C63-80CC-420A-9EA7-0EEB52A36DBD}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{BEB9B362-B23E-41B7-9F83-584EAAB333FC}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{27B604C1-5D3C-4A20-8B24-E73A3D26D894}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{361501C3-EF2F-4CA3-BA08-CA1F0B1F4703}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{B4D90F43-B272-4298-98BF-D2790D44E0B3}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B2187E78-48B7-4D95-9904-D50A4B212B83}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{3B402AEC-BC41-41D3-AB15-E5F484850458}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{C347660E-084E-4C67-B862-147417EF0B2A}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/12/2016 07:52:19 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ben-PC)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F104E4700}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (05/08/2016 06:39:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DivX Player.exe, Version: 11.3.10.75, Zeitstempel: 0x55ce1f99
Name des fehlerhaften Moduls: DMFContainer.dll, Version: 1.5.0.3, Zeitstempel: 0x55cd83fd
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0008cc21
ID des fehlerhaften Prozesses: 0x1d30
Startzeit der fehlerhaften Anwendung: 0xDivX Player.exe0
Pfad der fehlerhaften Anwendung: DivX Player.exe1
Pfad des fehlerhaften Moduls: DivX Player.exe2
Berichtskennung: DivX Player.exe3
Error: (05/08/2016 06:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DivX Player.exe, Version: 11.3.10.75, Zeitstempel: 0x55ce1f99
Name des fehlerhaften Moduls: DMFContainer.dll, Version: 1.5.0.3, Zeitstempel: 0x55cd83fd
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0008cc21
ID des fehlerhaften Prozesses: 0x990
Startzeit der fehlerhaften Anwendung: 0xDivX Player.exe0
Pfad der fehlerhaften Anwendung: DivX Player.exe1
Pfad des fehlerhaften Moduls: DivX Player.exe2
Berichtskennung: DivX Player.exe3
Error: (05/05/2016 07:40:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Name des fehlerhaften Moduls: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000664856
ID des fehlerhaften Prozesses: 0x1f70
Startzeit der fehlerhaften Anwendung: 0xGTA5.exe0
Pfad der fehlerhaften Anwendung: GTA5.exe1
Pfad des fehlerhaften Moduls: GTA5.exe2
Berichtskennung: GTA5.exe3
Error: (04/04/2016 07:47:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Spotify.exe, Version 1.0.25.127 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: e10
Startzeit: 01d18e99f23f6467
Endzeit: 0
Anwendungspfad: C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe
Berichts-ID: 4a812025-fa8d-11e5-92eb-bc5ff44945d9
Error: (03/28/2016 04:09:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 15f4
Startzeit: 01d188fb213b5fbe
Endzeit: 121
Anwendungspfad: D:\Games\Counterstrike Source\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Berichts-ID:
Error: (03/25/2016 02:57:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Name des fehlerhaften Moduls: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000359135b
ID des fehlerhaften Prozesses: 0x141c
Startzeit der fehlerhaften Anwendung: 0xGTA5.exe0
Pfad der fehlerhaften Anwendung: GTA5.exe1
Pfad des fehlerhaften Moduls: GTA5.exe2
Berichtskennung: GTA5.exe3
Error: (03/19/2016 08:50:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm vlc.exe, Version 2.2.1.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1838
Startzeit: 01d1821010e13c8a
Endzeit: 5
Anwendungspfad: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
Berichts-ID:
Error: (03/19/2016 03:17:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avant.exe, Version: 12.5.0.0, Zeitstempel: 0x5689f08e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.19160, Zeitstempel: 0x56bcd51f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f644
ID des fehlerhaften Prozesses: 0x1230
Startzeit der fehlerhaften Anwendung: 0xavant.exe0
Pfad der fehlerhaften Anwendung: avant.exe1
Pfad des fehlerhaften Moduls: avant.exe2
Berichtskennung: avant.exe3
Error: (03/09/2016 10:06:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2bc
Startzeit: 01d17a3f110dce49
Endzeit: 11
Anwendungspfad: D:\Games\Counterstrike Source\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Berichts-ID:
Systemfehler:
=============
Error: (05/21/2016 12:13:22 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT)
Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147942402.
Error: (05/20/2016 11:19:25 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 20.05.2016 um 23:17:31 unerwartet heruntergefahren.
Error: (05/20/2016 08:56:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Search Protect Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/20/2016 07:10:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/20/2016 01:12:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/20/2016 12:32:07 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/20/2016 12:30:03 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 20.05.2016 um 00:28:27 unerwartet heruntergefahren.
Error: (05/19/2016 07:04:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/18/2016 11:41:35 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (05/18/2016 10:57:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
CodeIntegrity:
===================================
Date: 2014-10-14 06:39:27.577
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.576
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.574
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.572
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.571
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.570
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.619
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.618
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.617
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.615
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 31%
Installierter physikalischer RAM: 16279.03 MB
Verfügbarer physikalischer RAM: 11072.17 MB
Summe virtueller Speicher: 32556.25 MB
Verfügbarer virtueller Speicher: 26384.65 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:70.36 GB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:503.98 GB) NTFS
Drive f: (20141018_012547) (CDROM) (Total:5.36 GB) (Free:0 GB) UDF
Drive g: (Extern) (Fixed) (Total:1863.01 GB) (Free:646.34 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: A357D397)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 038D8719)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
21.05.2016, 14:00
| #5 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernen [CODE] Code:
ATTFilter 00:22:30.0046 0x1248 TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12
00:22:36.0330 0x1248 ============================================================
00:22:36.0330 0x1248 Current date / time: 2016/05/21 00:22:36.0330
00:22:36.0330 0x1248 SystemInfo:
00:22:36.0330 0x1248
00:22:36.0330 0x1248 OS Version: 6.1.7601 ServicePack: 1.0
00:22:36.0330 0x1248 Product type: Workstation
00:22:36.0330 0x1248 ComputerName: BEN-PC
00:22:36.0331 0x1248 UserName: Ben
00:22:36.0331 0x1248 Windows directory: C:\Windows
00:22:36.0331 0x1248 System windows directory: C:\Windows
00:22:36.0331 0x1248 Running under WOW64
00:22:36.0331 0x1248 Processor architecture: Intel x64
00:22:36.0331 0x1248 Number of processors: 8
00:22:36.0331 0x1248 Page size: 0x1000
00:22:36.0331 0x1248 Boot type: Normal boot
00:22:36.0331 0x1248 ============================================================
00:22:36.0792 0x1248 KLMD registered as C:\Windows\system32\drivers\26090604.sys
00:22:37.0051 0x1248 System UUID: {BF8E2337-2640-B207-E1C8-CFCF4EA1BC0F}
00:22:37.0529 0x1248 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:22:37.0530 0x1248 Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:22:37.0533 0x1248 Drive \Device\Harddisk2\DR2 - Size: 0x1D1C0F00000 ( 1863.01 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
00:22:37.0535 0x1248 ============================================================
00:22:37.0535 0x1248 \Device\Harddisk1\DR1:
00:22:37.0535 0x1248 MBR partitions:
00:22:37.0535 0x1248 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
00:22:37.0535 0x1248 \Device\Harddisk0\DR0:
00:22:37.0535 0x1248 MBR partitions:
00:22:37.0535 0x1248 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
00:22:37.0535 0x1248 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1DCC0000
00:22:37.0535 0x1248 \Device\Harddisk2\DR2:
00:22:37.0535 0x1248 MBR partitions:
00:22:37.0535 0x1248 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E07000
00:22:37.0535 0x1248 ============================================================
00:22:37.0537 0x1248 C: <-> \Device\Harddisk0\DR0\Partition2
00:22:37.0561 0x1248 D: <-> \Device\Harddisk1\DR1\Partition1
00:22:37.0994 0x1248 G: <-> \Device\Harddisk2\DR2\Partition1
00:22:37.0994 0x1248 ============================================================
00:22:37.0994 0x1248 Initialize success
00:22:37.0994 0x1248 ============================================================
00:26:53.0252 0x1050 ============================================================
00:26:53.0252 0x1050 Scan started
00:26:53.0252 0x1050 Mode: Manual; SigCheck; TDLFS;
00:26:53.0252 0x1050 ============================================================
00:26:53.0252 0x1050 KSN ping started
00:26:56.0114 0x1050 KSN ping finished: true
00:26:56.0373 0x1050 ================ Scan system memory ========================
00:26:56.0373 0x1050 System memory - ok
00:26:56.0374 0x1050 ================ Scan services =============================
00:26:56.0399 0x1050 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
00:26:56.0443 0x1050 1394ohci - ok
00:26:56.0458 0x1050 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
00:26:56.0471 0x1050 ACPI - ok
00:26:56.0473 0x1050 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
00:26:56.0487 0x1050 AcpiPmi - ok
00:26:56.0494 0x1050 [ 36114214BF8D7C464D1E92E4EB6B2DD3, 8E7CB266D4ABCDF332A3D4D341753811D51B72985E36F24A7E757DCA11A65A2A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
00:26:56.0509 0x1050 AdobeARMservice - ok
00:26:56.0526 0x1050 [ 6A050671F2C76FB48131F12786802807, 71B37A9CEAE5AB1B069FB010BC547E14445461885B74FA879E63F9F2DAF644A5 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
00:26:56.0550 0x1050 AdobeFlashPlayerUpdateSvc - ok
00:26:56.0560 0x1050 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
00:26:56.0575 0x1050 adp94xx - ok
00:26:56.0583 0x1050 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys
00:26:56.0598 0x1050 adpahci - ok
00:26:56.0604 0x1050 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
00:26:56.0614 0x1050 adpu320 - ok
00:26:56.0618 0x1050 [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
00:26:56.0628 0x1050 AeLookupSvc - ok
00:26:56.0639 0x1050 [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD C:\Windows\system32\drivers\afd.sys
00:26:56.0654 0x1050 AFD - ok
00:26:56.0658 0x1050 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
00:26:56.0667 0x1050 agp440 - ok
00:26:56.0670 0x1050 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
00:26:56.0680 0x1050 ALG - ok
00:26:56.0683 0x1050 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
00:26:56.0691 0x1050 aliide - ok
00:26:56.0698 0x1050 [ 4220D92C6A757BF67C0E65D61D9F7BE8, E06104B89FB991C28FE212B7DAEAB20C42910E2AF77FD9379192DD881A0B5995 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
00:26:56.0713 0x1050 AMD External Events Utility - ok
00:26:56.0716 0x1050 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
00:26:56.0724 0x1050 amdide - ok
00:26:56.0727 0x1050 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
00:26:56.0737 0x1050 AmdK8 - ok
00:26:56.0740 0x1050 amdkmdag - ok
00:26:56.0754 0x1050 [ 1FE14B9C86B8C17F741BE4619CD2E421, 3036BCAE66661A8EBA7A902C0A4FC17CCF75FE5481714F11B72110B2E5F8B131 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
00:26:56.0773 0x1050 amdkmdap - ok
00:26:56.0777 0x1050 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
00:26:56.0787 0x1050 AmdPPM - ok
00:26:56.0791 0x1050 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
00:26:56.0800 0x1050 amdsata - ok
00:26:56.0806 0x1050 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
00:26:56.0817 0x1050 amdsbs - ok
00:26:56.0819 0x1050 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
00:26:56.0828 0x1050 amdxata - ok
00:26:56.0850 0x1050 [ 37CD9EB03B36D8329F96BA921470DB54, 0CD3BFBA51F84D83E3B208D2BED7CE8E91B447B2037014663EC7CB8E5A925201 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
00:26:56.0888 0x1050 AntiVirMailService - ok
00:26:56.0899 0x1050 [ 98C06275DB53A1E70AB8CB94013B20D4, 5DE48C829A66B0F4C8119E75D985D63C1020FA318696BD19E44E0A07CD6F1ED0 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
00:26:56.0919 0x1050 AntiVirSchedulerService - ok
00:26:56.0929 0x1050 [ 98C06275DB53A1E70AB8CB94013B20D4, 5DE48C829A66B0F4C8119E75D985D63C1020FA318696BD19E44E0A07CD6F1ED0 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
00:26:56.0949 0x1050 AntiVirService - ok
00:26:56.0973 0x1050 [ 1F5CC3C23E10290A3FF9CAA74AA30D07, A4F1F3465A5E0A914EE5A4FEF4A6B639956BA04B7145EF68820BC2A15DEE4162 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
00:26:57.0010 0x1050 AntiVirWebService - ok
00:26:57.0015 0x1050 [ 6474F8823C7188D2DA579F01FB6CED6B, 81D4E9D026CA60FB8840D520D151B8C2F4745A75DF90A4D6C80641F1A23AB605 ] AppID C:\Windows\system32\drivers\appid.sys
00:26:57.0027 0x1050 AppID - ok
00:26:57.0030 0x1050 [ 8F58BA1F7772D6D7CE45F03309608001, CDB109E0DD241042C058F7D81A1BDEBC34435CB2DC4A7A7A3692193DD5806097 ] AppIDSvc C:\Windows\System32\appidsvc.dll
00:26:57.0040 0x1050 AppIDSvc - ok
00:26:57.0048 0x1050 [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo C:\Windows\System32\appinfo.dll
00:26:57.0058 0x1050 Appinfo - ok
00:26:57.0062 0x1050 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys
00:26:57.0071 0x1050 arc - ok
00:26:57.0075 0x1050 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys
00:26:57.0085 0x1050 arcsas - ok
00:26:57.0093 0x1050 [ 660D597B7A78256734D7F3230B21B355, CAA19E8EFAD63B8975A4CD8EFD5CE5F21E056856D36BC5A9E48517F1E574ABBA ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
00:26:57.0105 0x1050 aspnet_state - ok
00:26:57.0108 0x1050 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
00:26:57.0129 0x1050 AsyncMac - ok
00:26:57.0132 0x1050 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
00:26:57.0140 0x1050 atapi - ok
00:26:57.0145 0x1050 [ E265A0DFE19E601D604D469CC53076EE, B6142D9D550C2464336A67DA520C9E56C81ED20529A90A33C22704EE7518C137 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
00:26:57.0155 0x1050 AtiHDAudioService - ok
00:26:57.0168 0x1050 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
00:26:57.0187 0x1050 AudioEndpointBuilder - ok
00:26:57.0199 0x1050 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv C:\Windows\System32\Audiosrv.dll
00:26:57.0217 0x1050 AudioSrv - ok
00:26:57.0244 0x1050 [ 2E81F74AB70EDC4B14EB6F1EED7D4E9E, 829ACFA43743E757DE8907D1B111AE3B6030AF8C981AC7B3F3646B2180AF127E ] avc3 C:\Windows\system32\DRIVERS\avc3.sys
00:26:57.0278 0x1050 avc3 - ok
00:26:57.0296 0x1050 [ 32612167C1BF3F6B41BFF12FEF3E5E4C, 87E6BC09894CA005556F8759495AB5C62E33C8B104526A052681553A36AAE370 ] avckf C:\Windows\system32\DRIVERS\avckf.sys
00:26:57.0317 0x1050 avckf - ok
00:26:57.0324 0x1050 [ 742D578C28F6F58B8B576F91A1D8EB4E, 6C49EC198E67CE40728F0C19CB2BDCB59310BA59324F58E4D456DA2C8CC28BA6 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
00:26:57.0333 0x1050 avgntflt - ok
00:26:57.0338 0x1050 [ FBC2483AD62FBC8BD76A4254C50874BA, 04398AB0221535DD5D0A1AF6CA107F815CD607E668E2E7887D061FCED7373728 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
00:26:57.0348 0x1050 avipbb - ok
00:26:57.0355 0x1050 [ 125DFFF37D51A45A72934C3BF89A64CD, 19208A6544DC822D5010C835A6FA5E8AC5406CBFB277C4C9E034EF6309B113EE ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
00:26:57.0371 0x1050 Avira.ServiceHost - ok
00:26:57.0375 0x1050 [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
00:26:57.0382 0x1050 avkmgr - ok
00:26:57.0386 0x1050 [ 7FDC860B34BDFFDFCE98622F81F24FA9, 3EF774A7F2EB741633611400161B6D4F642F9357BF6E957E14E70D1645BE6466 ] avnetflt C:\Windows\system32\DRIVERS\avnetflt.sys
00:26:57.0395 0x1050 avnetflt - ok
00:26:57.0399 0x1050 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
00:26:57.0415 0x1050 AxInstSV - ok
00:26:57.0417 0x1050 b06bdrv - ok
00:26:57.0424 0x1050 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
00:26:57.0437 0x1050 b57nd60a - ok
00:26:57.0442 0x1050 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
00:26:57.0453 0x1050 BDESVC - ok
00:26:57.0459 0x1050 [ F662FA5B57F6BAD1022814A49C6E3733, 8B0A9BF9AF18769BAC67138037F3D167F195AE932DD417A8393D0D8A760CA9B2 ] bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys
00:26:57.0469 0x1050 bdfwfpf - ok
00:26:57.0473 0x1050 [ D8FAF7CFBC81E5E15CA7A7EC8EE1B409, 75E60DF2147DFB109E628FDF80EB1BFA5360E5935BB9237B67053588F906E1B1 ] BDVEDISK C:\Windows\system32\DRIVERS\bdvedisk.sys
00:26:57.0482 0x1050 BDVEDISK - ok
00:26:57.0485 0x1050 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
00:26:57.0506 0x1050 Beep - ok
00:26:57.0519 0x1050 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
00:26:57.0538 0x1050 BFE - ok
00:26:57.0553 0x1050 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
00:26:57.0586 0x1050 BITS - ok
00:26:57.0590 0x1050 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
00:26:57.0599 0x1050 blbdrive - ok
00:26:57.0603 0x1050 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
00:26:57.0613 0x1050 bowser - ok
00:26:57.0616 0x1050 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
00:26:57.0626 0x1050 BrFiltLo - ok
00:26:57.0629 0x1050 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
00:26:57.0639 0x1050 BrFiltUp - ok
00:26:57.0643 0x1050 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
00:26:57.0655 0x1050 Browser - ok
00:26:57.0661 0x1050 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
00:26:57.0675 0x1050 Brserid - ok
00:26:57.0678 0x1050 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
00:26:57.0689 0x1050 BrSerWdm - ok
00:26:57.0691 0x1050 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
00:26:57.0702 0x1050 BrUsbMdm - ok
00:26:57.0705 0x1050 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
00:26:57.0714 0x1050 BrUsbSer - ok
00:26:57.0717 0x1050 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
00:26:57.0729 0x1050 BTHMODEM - ok
00:26:57.0733 0x1050 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
00:26:57.0756 0x1050 bthserv - ok
00:26:57.0761 0x1050 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
00:26:57.0784 0x1050 cdfs - ok
00:26:57.0788 0x1050 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
00:26:57.0799 0x1050 cdrom - ok
00:26:57.0804 0x1050 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
00:26:57.0826 0x1050 CertPropSvc - ok
00:26:57.0829 0x1050 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys
00:26:57.0840 0x1050 circlass - ok
00:26:57.0848 0x1050 [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS C:\Windows\system32\CLFS.sys
00:26:57.0862 0x1050 CLFS - ok
00:26:57.0866 0x1050 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:26:57.0881 0x1050 clr_optimization_v2.0.50727_32 - ok
00:26:57.0886 0x1050 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
00:26:57.0896 0x1050 clr_optimization_v2.0.50727_64 - ok
00:26:57.0903 0x1050 [ AB4CD527BEFCC43EE441E6C50CCE54C8, 13B776AE63049FFBA7E35EA0A4C26EBB57B10D973E05C4CF1214249754DC46E4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
00:26:57.0926 0x1050 clr_optimization_v4.0.30319_32 - ok
00:26:57.0930 0x1050 [ 1400C75FF021D6CFACE46AC41B60770E, 3FCB8D7714A79522F2738037D559F1FFFB2F05C5406D2A038EF5DDB4629CA1CE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
00:26:57.0948 0x1050 clr_optimization_v4.0.30319_64 - ok
00:26:57.0951 0x1050 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
00:26:57.0960 0x1050 CmBatt - ok
00:26:57.0963 0x1050 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
00:26:57.0971 0x1050 cmdide - ok
00:26:57.0981 0x1050 [ CA3FB5A6B626D8A00A89E049CF95954E, CD5E3E40972513195108BA46CEC1D0AEA6B09A67EEBDD17EB759BD1729B07C06 ] CNG C:\Windows\system32\Drivers\cng.sys
00:26:57.0999 0x1050 CNG - ok
00:26:58.0002 0x1050 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
00:26:58.0010 0x1050 Compbatt - ok
00:26:58.0013 0x1050 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
00:26:58.0024 0x1050 CompositeBus - ok
00:26:58.0026 0x1050 COMSysApp - ok
00:26:58.0041 0x1050 [ F08C6020E57F5E5BF2FD034DB10BEDFB, 288EA64A57057EAD135685F2C46CA53BA0319EA28B7B7A2ECBE29E50ED807FCA ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
00:26:58.0064 0x1050 cphs - ok
00:26:58.0067 0x1050 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
00:26:58.0075 0x1050 crcdisk - ok
00:26:58.0080 0x1050 [ C8BD651E13895B93ED9EC5B4F1DF42BC, D86D6BF0BA3C09B49B3A52C86A7F3B3856A27F79EDD86A8FFA469D9A5F196E8D ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
00:26:58.0091 0x1050 Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
00:26:59.0678 0x07f4 Object required for P2P: [ 6A050671F2C76FB48131F12786802807 ] AdobeFlashPlayerUpdateSvc
00:27:00.0371 0x05a8 Object required for P2P: [ 2E81F74AB70EDC4B14EB6F1EED7D4E9E ] avc3
00:27:00.0800 0x1050 Detect skipped due to KSN trusted
00:27:00.0800 0x1050 Creative ALchemy AL6 Licensing Service - ok
00:27:00.0803 0x1050 [ C0EAD9F8AB83D41FF07303C75589C2B8, C89CAC39BCD2FA2DCC56D7EE84FF66127BCECCAE400E119FE41BF4C4D769504B ] Creative Audio Engine Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
00:27:00.0814 0x1050 Creative Audio Engine Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
00:27:02.0380 0x07f4 Object send P2P result: true
00:27:02.0381 0x07f4 Object required for P2P: [ 1FE14B9C86B8C17F741BE4619CD2E421 ] amdkmdap
00:27:03.0073 0x05a8 Object send P2P result: true
00:27:03.0073 0x05a8 Object required for P2P: [ 32612167C1BF3F6B41BFF12FEF3E5E4C ] avckf
00:27:03.0411 0x1050 Detect skipped due to KSN trusted
00:27:03.0411 0x1050 Creative Audio Engine Licensing Service - ok
00:27:03.0417 0x1050 [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc C:\Windows\system32\cryptsvc.dll
00:27:03.0430 0x1050 CryptSvc - ok
00:27:03.0440 0x1050 [ EDBA1382E5D7D1E71442B43E170CF8D4, 10E7A90FDC8498EBB8043A4B8BAD14104E68EBAE91149C5D1C1660E0D73995C9 ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
00:27:03.0460 0x1050 CTAudSvcService - detected UnsignedFile.Multi.Generic ( 1 )
00:27:05.0069 0x07f4 Object send P2P result: true
00:27:05.0069 0x07f4 Object required for P2P: [ 37CD9EB03B36D8329F96BA921470DB54 ] AntiVirMailService
00:27:05.0769 0x05a8 Object send P2P result: true
00:27:05.0769 0x05a8 Object required for P2P: [ 125DFFF37D51A45A72934C3BF89A64CD ] Avira.ServiceHost
00:27:06.0153 0x1050 Detect skipped due to KSN trusted
00:27:06.0153 0x1050 CTAudSvcService - ok
00:27:06.0171 0x1050 [ CBACE8DFA420B78DD2225CAEA798612D, 392FD8BB32275B35C6706675C0C945566AFA47D7BDD2D7CC33092655D462F11B ] cthda C:\Windows\system32\drivers\cthda.sys
00:27:06.0193 0x1050 cthda - ok
00:27:06.0198 0x1050 [ 3E43F0C5456ECA8A3F083804FAD1C405, BDFFDB61D90792C1C16407D72E9CC005A1A51B278AEAB438D7AB5562377634B8 ] CtHdaSvc C:\Windows\sysWow64\CtHdaSvc.exe
00:27:06.0214 0x1050 CtHdaSvc - ok
00:27:06.0217 0x1050 [ D02C0CA5A3461CEDDD90B5CAE8FA4B6E, 3E1CFADADC1331474156F3099308E81062D9F7D39DBB413636473D919CBBBDD3 ] CTHDB C:\Windows\system32\DRIVERS\CtHDb.sys
00:27:06.0225 0x1050 CTHDB - ok
00:27:06.0236 0x1050 [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] DcomLaunch C:\Windows\system32\rpcss.dll
00:27:06.0253 0x1050 DcomLaunch - ok
00:27:06.0260 0x1050 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
00:27:06.0286 0x1050 defragsvc - ok
00:27:06.0290 0x1050 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
00:27:06.0311 0x1050 DfsC - ok
00:27:06.0319 0x1050 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
00:27:06.0332 0x1050 Dhcp - ok
00:27:06.0356 0x1050 [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack C:\Windows\system32\diagtrack.dll
00:27:06.0384 0x1050 DiagTrack - ok
00:27:06.0387 0x1050 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
00:27:06.0409 0x1050 discache - ok
00:27:06.0413 0x1050 [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk C:\Windows\system32\drivers\disk.sys
00:27:06.0422 0x1050 Disk - ok
00:27:06.0427 0x1050 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
00:27:06.0439 0x1050 Dnscache - ok
00:27:06.0445 0x1050 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
00:27:06.0469 0x1050 dot3svc - ok
00:27:06.0475 0x1050 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
00:27:06.0497 0x1050 DPS - ok
00:27:06.0500 0x1050 [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
00:27:06.0508 0x1050 drmkaud - ok
00:27:06.0515 0x1050 [ 46571ED73AE84469DCA53081D33CF3C8, 8BB386BB4F6AD39F06A8607CD1DF3D67CFA45BBE52E40EDB90EB8C862283EBFF ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
00:27:06.0526 0x1050 dtsoftbus01 - ok
00:27:06.0543 0x1050 [ 3A9D7D464BDB3B70D7ECF689ADABBD4D, B4F5B23705EA1BA453FE30791CA245E1A5F7FBEABAD026E4A8A15A9FC44E8C9C ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
00:27:06.0564 0x1050 DXGKrnl - ok
00:27:06.0569 0x1050 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
00:27:06.0591 0x1050 EapHost - ok
00:27:06.0637 0x1050 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys
00:27:06.0689 0x1050 ebdrv - ok
00:27:06.0694 0x1050 [ 54C0E3156872881F6AB017210278E27E, 8C3C71535FAC3897E1AE5505302387D7EC7C93D9DB6CA8AD6C1E1B26FE33D367 ] EFS C:\Windows\System32\lsass.exe
00:27:06.0704 0x1050 EFS - ok
00:27:06.0718 0x1050 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
00:27:06.0737 0x1050 ehRecvr - ok
00:27:06.0741 0x1050 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
00:27:06.0753 0x1050 ehSched - ok
00:27:06.0763 0x1050 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
00:27:06.0779 0x1050 elxstor - ok
00:27:06.0781 0x1050 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
00:27:06.0791 0x1050 ErrDev - ok
00:27:06.0803 0x1050 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
00:27:06.0830 0x1050 EventSystem - ok
00:27:06.0839 0x1050 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
00:27:06.0862 0x1050 exfat - ok
00:27:06.0868 0x1050 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
00:27:06.0892 0x1050 fastfat - ok
00:27:06.0905 0x1050 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
00:27:06.0924 0x1050 Fax - ok
00:27:06.0928 0x1050 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys
00:27:06.0937 0x1050 fdc - ok
00:27:06.0940 0x1050 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
00:27:06.0962 0x1050 fdPHost - ok
00:27:06.0965 0x1050 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
00:27:06.0988 0x1050 FDResPub - ok
00:27:06.0991 0x1050 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
00:27:07.0001 0x1050 FileInfo - ok
00:27:07.0004 0x1050 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
00:27:07.0026 0x1050 Filetrace - ok
00:27:07.0028 0x1050 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
00:27:07.0038 0x1050 flpydisk - ok
00:27:07.0045 0x1050 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
00:27:07.0057 0x1050 FltMgr - ok
00:27:07.0077 0x1050 [ BCB16AE33AA58E0042F3EF34CFB6396A, E8ADA10DE60A94E4BABE9FCA6D0AA83B11520C092D49057E17F6C6059D35A323 ] FontCache C:\Windows\system32\FntCache.dll
00:27:07.0103 0x1050 FontCache - ok
00:27:07.0107 0x1050 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
00:27:07.0119 0x1050 FontCache3.0.0.0 - ok
00:27:07.0122 0x1050 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
00:27:07.0132 0x1050 FsDepends - ok
00:27:07.0135 0x1050 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
00:27:07.0143 0x1050 Fs_Rec - ok
00:27:07.0149 0x1050 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
00:27:07.0162 0x1050 fvevol - ok
00:27:07.0165 0x1050 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
00:27:07.0174 0x1050 gagp30kx - ok
00:27:07.0189 0x1050 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
00:27:07.0222 0x1050 gpsvc - ok
00:27:07.0229 0x1050 [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
00:27:07.0246 0x1050 gusvc - ok
00:27:07.0251 0x1050 [ E4B7F2553A127E86E11343ED15320A99, A4EA52DF5D24EF8210192669934D3D0DD1A0E4CCAAD014D52F58D58A9D3C886A ] gzflt C:\Windows\system32\DRIVERS\gzflt.sys
00:27:07.0263 0x1050 gzflt - ok
00:27:07.0266 0x1050 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
00:27:07.0274 0x1050 hcw85cir - ok
00:27:07.0282 0x1050 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
00:27:07.0296 0x1050 HdAudAddService - ok
00:27:07.0301 0x1050 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
00:27:07.0313 0x1050 HDAudBus - ok
00:27:07.0316 0x1050 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
00:27:07.0327 0x1050 HidBatt - ok
00:27:07.0335 0x1050 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys
00:27:07.0347 0x1050 HidBth - ok
00:27:07.0350 0x1050 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys
00:27:07.0360 0x1050 HidIr - ok
00:27:07.0363 0x1050 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
00:27:07.0385 0x1050 hidserv - ok
00:27:07.0388 0x1050 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
00:27:07.0397 0x1050 HidUsb - ok
00:27:07.0401 0x1050 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
00:27:07.0424 0x1050 hkmsvc - ok
00:27:07.0430 0x1050 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
00:27:07.0443 0x1050 HomeGroupListener - ok
00:27:07.0448 0x1050 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
00:27:07.0461 0x1050 HomeGroupProvider - ok
00:27:07.0465 0x1050 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
00:27:07.0474 0x1050 HpSAMD - ok
00:27:07.0488 0x1050 [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP C:\Windows\system32\drivers\HTTP.sys
00:27:07.0508 0x1050 HTTP - ok
00:27:07.0510 0x1050 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
00:27:07.0518 0x1050 hwpolicy - ok
00:27:07.0522 0x1050 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
00:27:07.0533 0x1050 i8042prt - ok
00:27:07.0542 0x1050 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
00:27:07.0556 0x1050 iaStorV - ok
00:27:07.0560 0x1050 [ 1CF03C69B49ACB70C722DF92755C0C8C, C227850C133F29BB9DED91A26A22AE077FD69629CEF35B67D305F016C4BDAA81 ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
00:27:07.0624 0x1050 IDriverT - detected UnsignedFile.Multi.Generic ( 1 )
00:27:07.0782 0x07f4 Object send P2P result: true
00:27:08.0481 0x05a8 Object send P2P result: true
00:27:10.0221 0x1050 Detect skipped due to KSN trusted
00:27:10.0221 0x1050 IDriverT - ok
00:27:10.0247 0x1050 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
00:27:10.0279 0x1050 idsvc - ok
00:27:10.0284 0x1050 IEEtwCollectorService - ok
00:27:10.0498 0x1050 [ 371D7F91C0D2314EB984A4A6CBEABC92, DD4B04308596C1E6C75B8772D4421137F3A83285DBCFD4DF54166D2B0B45A317 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
00:27:10.0712 0x1050 igfx - ok
00:27:10.0730 0x1050 [ 357FCAD00EF02194519D54270849B032, ED2ACF63DD8A1F5C4B846C6F51336CA3B2170BA15A4E95739CCEFD8D6FEA3522 ] ignis C:\Windows\system32\DRIVERS\ignis.sys
00:27:10.0745 0x1050 ignis - ok
00:27:10.0748 0x1050 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
00:27:10.0757 0x1050 iirsp - ok
00:27:10.0773 0x1050 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
00:27:10.0794 0x1050 IKEEXT - ok
00:27:10.0798 0x1050 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
00:27:10.0806 0x1050 intelide - ok
00:27:10.0809 0x1050 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
00:27:10.0819 0x1050 intelppm - ok
00:27:10.0823 0x1050 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
00:27:10.0846 0x1050 IPBusEnum - ok
00:27:10.0849 0x1050 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
00:27:10.0871 0x1050 IpFilterDriver - ok
00:27:10.0882 0x1050 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
00:27:10.0899 0x1050 iphlpsvc - ok
00:27:10.0903 0x1050 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
00:27:10.0913 0x1050 IPMIDRV - ok
00:27:10.0917 0x1050 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
00:27:10.0940 0x1050 IPNAT - ok
00:27:10.0943 0x1050 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
00:27:10.0954 0x1050 IRENUM - ok
00:27:10.0957 0x1050 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
00:27:10.0965 0x1050 isapnp - ok
00:27:10.0972 0x1050 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
00:27:10.0983 0x1050 iScsiPrt - ok
00:27:10.0986 0x1050 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
00:27:10.0995 0x1050 kbdclass - ok
00:27:10.0998 0x1050 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
00:27:11.0007 0x1050 kbdhid - ok
00:27:11.0010 0x1050 [ 54C0E3156872881F6AB017210278E27E, 8C3C71535FAC3897E1AE5505302387D7EC7C93D9DB6CA8AD6C1E1B26FE33D367 ] KeyIso C:\Windows\system32\lsass.exe
00:27:11.0020 0x1050 KeyIso - ok
00:27:11.0024 0x1050 [ 0878723427BA190E5ABA5AA0112FA4D4, E332C83D3F4DF71761AA3DAC2C721FC2029F71ECC88A66E175BA56510855C4D4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
00:27:11.0033 0x1050 KSecDD - ok
00:27:11.0038 0x1050 [ C08CCCE2BE68D04E6C142614736959DA, AEC0AFC5C28DDC14DD6918BB6E236FA1C85CC30D69DA9AE40F9962D88248040F ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
00:27:11.0048 0x1050 KSecPkg - ok
00:27:11.0051 0x1050 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
00:27:11.0071 0x1050 ksthunk - ok
00:27:11.0079 0x1050 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
00:27:11.0106 0x1050 KtmRm - ok
00:27:11.0112 0x1050 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
00:27:11.0136 0x1050 LanmanServer - ok
00:27:11.0141 0x1050 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
00:27:11.0164 0x1050 LanmanWorkstation - ok
00:27:11.0168 0x1050 [ 17325C9B9ADB2BB99049936D0C9812C8, 70ADDC85FD5757BC9C4B97F382B25A19851FF8275021FFC04A81E208A604F83E ] LGBusEnum C:\Windows\system32\drivers\LGBusEnum.sys
00:27:11.0181 0x1050 LGBusEnum - ok
00:27:11.0193 0x1050 [ 2D7F1C02B94D6F0F3E10107E5EA8E141, 93B266F38C3C3EAAB475D81597ABBD7CC07943035068BB6FD670DBBE15DE0131 ] LGCoreTemp C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys
00:27:11.0201 0x1050 LGCoreTemp - ok
00:27:11.0205 0x1050 [ C7AF05942E041D4B1F345ACF79993BB3, E8FAAE356C99A11F6CF17640FD9C67F87AFBFEFB70C458CB85178F2AD94DF848 ] LGJoyXlCore C:\Windows\system32\drivers\LGJoyXlCore.sys
00:27:11.0217 0x1050 LGJoyXlCore - ok
00:27:11.0219 0x1050 [ 1DDB8DE3D6EEF31EDCF4977B2D2FAACC, 24291B522A596E2D9A1CDAC192DB1C7422D5DD0E87E5C8A5F5E2CAA90296BF23 ] LGVirHid C:\Windows\system32\drivers\LGVirHid.sys
00:27:11.0230 0x1050 LGVirHid - ok
00:27:11.0233 0x1050 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
00:27:11.0255 0x1050 lltdio - ok
00:27:11.0262 0x1050 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
00:27:11.0288 0x1050 lltdsvc - ok
00:27:11.0292 0x1050 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
00:27:11.0314 0x1050 lmhosts - ok
00:27:11.0320 0x1050 [ 6A854F3F93AAE34005A3C2EB21B2256C, 71FF43EEFAB7FD9E79C75E5E78F813FEF6F4E906CC52A8A7EFEF3E64C3D96A1F ] LogiRegistryService C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
00:27:11.0331 0x1050 LogiRegistryService - ok
00:27:11.0336 0x1050 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
00:27:11.0346 0x1050 LSI_FC - ok
00:27:11.0349 0x1050 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
00:27:11.0359 0x1050 LSI_SAS - ok
00:27:11.0362 0x1050 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
00:27:11.0370 0x1050 LSI_SAS2 - ok
00:27:11.0375 0x1050 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
00:27:11.0384 0x1050 LSI_SCSI - ok
00:27:11.0388 0x1050 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
00:27:11.0410 0x1050 luafv - ok
00:27:11.0414 0x1050 [ 78BFF5425E044086E74E78650A359FBB, 294738C10F3ED933D4EC40EA0659372FCF19A3C6D45D356917438CA495F2CB45 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
00:27:11.0422 0x1050 MBAMProtector - ok
00:27:11.0447 0x1050 [ 9611577752E293259C7DCE19E9026362, 8CB5DFD63FA15603BB6FA6B501E09ED7F4DE0E8F68CB28B78CECAC3711BEFD24 ] MBAMScheduler C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
00:27:11.0481 0x1050 MBAMScheduler - ok
00:27:11.0502 0x1050 [ F1A89A34388B5626F1548D393B23ECB1, EA00AC76C4C8C9340753B58A3313C9177A9B98F9F1BDE08F184CD0F53D0C186F ] MBAMService C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
00:27:11.0532 0x1050 MBAMService - ok
00:27:11.0536 0x1050 [ 452ACB7A9914398D9E18CCCFFCF92208, 754AF45C19731C356E7E84497B04E0333759AC86DC553BA275EFC09845E43E4D ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
00:27:11.0547 0x1050 MBAMWebAccessControl - ok
00:27:11.0551 0x1050 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
00:27:11.0562 0x1050 Mcx2Svc - ok
00:27:11.0565 0x1050 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys
00:27:11.0574 0x1050 megasas - ok
00:27:11.0581 0x1050 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
00:27:11.0594 0x1050 MegaSR - ok
00:27:11.0598 0x1050 [ 6B01B7414A105B9E51652089A03027CF, 9B113DC22F7D0D0B376E577C6D7083F9EDC09BBFE47726393E16D4FDAAAE21FE ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
00:27:11.0606 0x1050 MEIx64 - ok
00:27:11.0611 0x1050 [ 123271BD5237AB991DC5C21FDF8835EB, 004F8F9228EE291A0E36CE33078D572D61733516F9AA5CFC832AF204C6869E89 ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
00:27:11.0624 0x1050 Microsoft Office Groove Audit Service - ok
00:27:11.0627 0x1050 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
00:27:11.0650 0x1050 MMCSS - ok
00:27:11.0653 0x1050 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
00:27:11.0675 0x1050 Modem - ok
00:27:11.0678 0x1050 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
00:27:11.0690 0x1050 monitor - ok
00:27:11.0693 0x1050 [ CBF48C75743F9A2E027410C49FF64F07, BA170C4264BC6E3D2C3C0F883ED7E612136CF93BD402915F6F42EA28BF9A07F3 ] motccgp C:\Windows\system32\DRIVERS\motccgp.sys
00:27:11.0704 0x1050 motccgp - ok
00:27:11.0706 0x1050 [ D3D91686ADE9E75CD749E1C0757D9245, 3089A004BE9A4DE10FF077BFE702A6CF6A4C2BED4B5A15C722F26E6FCDF60DA7 ] motccgpfl C:\Windows\system32\DRIVERS\motccgpfl.sys
00:27:11.0716 0x1050 motccgpfl - ok
00:27:11.0719 0x1050 [ 940F4DA752E28E6C4B1090D21AEB7B80, D775B926F32B0A014C234DD703281AD71FD0ECEABA35AC5B354077BFEFC17497 ] motmodem C:\Windows\system32\DRIVERS\motmodem.sys
00:27:11.0729 0x1050 motmodem - ok
00:27:11.0732 0x1050 [ EBD05F60CAFC5BBA2602B8D7101082D3, 9144E1E7C4DD6150C0E97B4C628DE0216ED372062F5F0FB216C81CAF93DBBF07 ] MotoSwitchService C:\Windows\system32\DRIVERS\motswch.sys
00:27:11.0742 0x1050 MotoSwitchService - ok
00:27:11.0745 0x1050 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
00:27:11.0753 0x1050 mouclass - ok
00:27:11.0757 0x1050 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
00:27:11.0766 0x1050 mouhid - ok
00:27:11.0770 0x1050 [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
00:27:11.0779 0x1050 mountmgr - ok
00:27:11.0784 0x1050 [ FC9A9C09B35A93F76A03D5E355FA862C, B7ED57B9D39D547BA2927FC5F02C2475BF131FDB8AD40FFDE72C966506756B56 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
00:27:11.0800 0x1050 MozillaMaintenance - ok
00:27:11.0805 0x1050 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
00:27:11.0815 0x1050 mpio - ok
00:27:11.0819 0x1050 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
00:27:11.0841 0x1050 mpsdrv - ok
00:27:11.0856 0x1050 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
00:27:11.0888 0x1050 MpsSvc - ok
00:27:11.0893 0x1050 [ D7ADC2B83CA0B0381F75A98351F72CEE, 05476B7CA0486DF770AE492B5A90C85E3D3E7485152EB2FA30A19EC9BE44ED81 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
00:27:11.0905 0x1050 MRxDAV - ok
00:27:11.0910 0x1050 [ 035C0A9A63DF3F3A52B90D8F6BF0F166, F409C8A31156E31A6D16D2B34EEE3098CE0D76A4DB7B49810EDDA2E2E19B2E26 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
00:27:11.0921 0x1050 mrxsmb - ok
00:27:11.0928 0x1050 [ 8308FC2E9147D7632221E3279BB14660, 3051FF91493FD03B7EDD4EDB23B2DE8DD7E03D46E231BC5925502BE98E78B1CB ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
00:27:11.0941 0x1050 mrxsmb10 - ok
00:27:11.0945 0x1050 [ 1F8DA4ECAEA7E2BCD97E738795817431, FBEF64C7067F5AFF864EF7E220C8A47AC43EB0BFD9A4E4C908F9D9D159AC5139 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
00:27:11.0956 0x1050 mrxsmb20 - ok
00:27:11.0959 0x1050 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
00:27:11.0967 0x1050 msahci - ok
00:27:11.0972 0x1050 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
00:27:11.0982 0x1050 msdsm - ok
00:27:11.0986 0x1050 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
00:27:11.0998 0x1050 MSDTC - ok
00:27:12.0003 0x1050 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
00:27:12.0025 0x1050 Msfs - ok
00:27:12.0028 0x1050 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
00:27:12.0049 0x1050 mshidkmdf - ok
00:27:12.0051 0x1050 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
00:27:12.0059 0x1050 msisadrv - ok
00:27:12.0064 0x1050 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
00:27:12.0088 0x1050 MSiSCSI - ok
00:27:12.0090 0x1050 msiserver - ok
00:27:12.0093 0x1050 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
00:27:12.0114 0x1050 MSKSSRV - ok
00:27:12.0117 0x1050 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
00:27:12.0137 0x1050 MSPCLOCK - ok
00:27:12.0140 0x1050 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
00:27:12.0161 0x1050 MSPQM - ok
00:27:12.0168 0x1050 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
00:27:12.0182 0x1050 MsRPC - ok
00:27:12.0186 0x1050 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
00:27:12.0195 0x1050 mssmbios - ok
00:27:12.0197 0x1050 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
00:27:12.0218 0x1050 MSTEE - ok
00:27:12.0221 0x1050 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
00:27:12.0230 0x1050 MTConfig - ok
00:27:12.0233 0x1050 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
00:27:12.0242 0x1050 Mup - ok
00:27:12.0251 0x1050 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
00:27:12.0278 0x1050 napagent - ok
00:27:12.0285 0x1050 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
00:27:12.0301 0x1050 NativeWifiP - ok
00:27:12.0317 0x1050 [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS C:\Windows\system32\drivers\ndis.sys
00:27:12.0338 0x1050 NDIS - ok
00:27:12.0342 0x1050 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
00:27:12.0363 0x1050 NdisCap - ok
00:27:12.0365 0x1050 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
00:27:12.0387 0x1050 NdisTapi - ok
00:27:12.0390 0x1050 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
00:27:12.0411 0x1050 Ndisuio - ok
00:27:12.0416 0x1050 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
00:27:12.0438 0x1050 NdisWan - ok
00:27:12.0441 0x1050 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
00:27:12.0462 0x1050 NDProxy - ok
00:27:12.0466 0x1050 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
00:27:12.0487 0x1050 NetBIOS - ok
00:27:12.0494 0x1050 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
00:27:12.0518 0x1050 NetBT - ok
00:27:12.0521 0x1050 [ 54C0E3156872881F6AB017210278E27E, 8C3C71535FAC3897E1AE5505302387D7EC7C93D9DB6CA8AD6C1E1B26FE33D367 ] Netlogon C:\Windows\system32\lsass.exe
00:27:12.0531 0x1050 Netlogon - ok
00:27:12.0540 0x1050 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
00:27:12.0566 0x1050 Netman - ok
00:27:12.0573 0x1050 [ 15CBA881E10968E33B43D31BE6097BA3, 69449ACA82B67F308C9F7DAB7A4C75BD88A95B98FC7F9102C72AD3D233A48346 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:27:12.0591 0x1050 NetMsmqActivator - ok
00:27:12.0595 0x1050 [ 15CBA881E10968E33B43D31BE6097BA3, 69449ACA82B67F308C9F7DAB7A4C75BD88A95B98FC7F9102C72AD3D233A48346 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:27:12.0608 0x1050 NetPipeActivator - ok
00:27:12.0618 0x1050 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
00:27:12.0645 0x1050 netprofm - ok
00:27:12.0650 0x1050 [ 15CBA881E10968E33B43D31BE6097BA3, 69449ACA82B67F308C9F7DAB7A4C75BD88A95B98FC7F9102C72AD3D233A48346 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:27:12.0664 0x1050 NetTcpActivator - ok
00:27:12.0668 0x1050 [ 15CBA881E10968E33B43D31BE6097BA3, 69449ACA82B67F308C9F7DAB7A4C75BD88A95B98FC7F9102C72AD3D233A48346 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:27:12.0682 0x1050 NetTcpPortSharing - ok
00:27:12.0685 0x1050 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
00:27:12.0693 0x1050 nfrd960 - ok
00:27:12.0700 0x1050 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll
00:27:12.0714 0x1050 NlaSvc - ok
00:27:12.0717 0x1050 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
00:27:12.0738 0x1050 Npfs - ok
00:27:12.0741 0x1050 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
00:27:12.0763 0x1050 nsi - ok
00:27:12.0765 0x1050 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
00:27:12.0786 0x1050 nsiproxy - ok
00:27:12.0812 0x1050 [ 47B2D0B31BDC3EBE6090228E2BA3764D, 984A4B38300954164BCBF57EC1A09C18B53779E60A26E9618B50E26016735787 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
00:27:12.0846 0x1050 Ntfs - ok
00:27:12.0850 0x1050 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
00:27:12.0870 0x1050 Null - ok
00:27:12.0875 0x1050 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
00:27:12.0886 0x1050 nvraid - ok
00:27:12.0891 0x1050 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
00:27:12.0901 0x1050 nvstor - ok
00:27:12.0905 0x1050 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
00:27:12.0915 0x1050 nv_agp - ok
00:27:12.0925 0x1050 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
00:27:12.0946 0x1050 odserv - ok
00:27:12.0950 0x1050 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
00:27:12.0961 0x1050 ohci1394 - ok
00:27:12.0965 0x1050 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:27:12.0980 0x1050 ose - ok
00:27:12.0988 0x1050 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
00:27:13.0002 0x1050 p2pimsvc - ok
00:27:13.0011 0x1050 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
00:27:13.0027 0x1050 p2psvc - ok
00:27:13.0031 0x1050 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys
00:27:13.0042 0x1050 Parport - ok
00:27:13.0045 0x1050 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
00:27:13.0054 0x1050 partmgr - ok
00:27:13.0059 0x1050 [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc C:\Windows\System32\pcasvc.dll
00:27:13.0072 0x1050 PcaSvc - ok
00:27:13.0077 0x1050 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
00:27:13.0088 0x1050 pci - ok
00:27:13.0095 0x1050 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
00:27:13.0102 0x1050 pciide - ok
00:27:13.0108 0x1050 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
00:27:13.0119 0x1050 pcmcia - ok
00:27:13.0122 0x1050 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
00:27:13.0131 0x1050 pcw - ok
00:27:13.0143 0x1050 [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
00:27:13.0161 0x1050 PEAUTH - ok
00:27:13.0176 0x1050 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
00:27:13.0188 0x1050 PerfHost - ok
00:27:13.0213 0x1050 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
00:27:13.0252 0x1050 pla - ok
00:27:13.0262 0x1050 [ BDBD132ECB9FC08F8E2490BB8F62F9ED, F1574179393D1408568EC463311679E702BDAC904FAB85B47983AF3544C96064 ] PlaysService C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
00:27:13.0274 0x1050 PlaysService - ok
00:27:13.0282 0x1050 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
00:27:13.0297 0x1050 PlugPlay - ok
00:27:13.0300 0x1050 PnkBstrA - ok
00:27:13.0303 0x1050 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
00:27:13.0312 0x1050 PNRPAutoReg - ok
00:27:13.0320 0x1050 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
00:27:13.0334 0x1050 PNRPsvc - ok
00:27:13.0344 0x1050 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
00:27:13.0370 0x1050 PolicyAgent - ok
00:27:13.0376 0x1050 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
00:27:13.0401 0x1050 Power - ok
00:27:13.0406 0x1050 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
00:27:13.0427 0x1050 PptpMiniport - ok
00:27:13.0431 0x1050 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys
00:27:13.0440 0x1050 Processor - ok
00:27:13.0459 0x1050 [ 2DC4BE7BA723BC70D22597A3CF061125, 31013F2F51E1FD1B66403EF1BED6FC2E6722C3737F274E88A4660CF35A40192D ] ProductAgentService C:\Program Files\Bitdefender Agent\ProductAgentService.exe
00:27:13.0487 0x1050 ProductAgentService - ok
00:27:13.0493 0x1050 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll
00:27:13.0506 0x1050 ProfSvc - ok
00:27:13.0509 0x1050 [ 54C0E3156872881F6AB017210278E27E, 8C3C71535FAC3897E1AE5505302387D7EC7C93D9DB6CA8AD6C1E1B26FE33D367 ] ProtectedStorage C:\Windows\system32\lsass.exe
00:27:13.0518 0x1050 ProtectedStorage - ok
00:27:13.0522 0x1050 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
00:27:13.0544 0x1050 Psched - ok
00:27:13.0570 0x1050 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
00:27:13.0598 0x1050 ql2300 - ok
00:27:13.0603 0x1050 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
00:27:13.0612 0x1050 ql40xx - ok
00:27:13.0618 0x1050 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
00:27:13.0633 0x1050 QWAVE - ok
00:27:13.0637 0x1050 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
00:27:13.0649 0x1050 QWAVEdrv - ok
00:27:13.0652 0x1050 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
00:27:13.0673 0x1050 RasAcd - ok
00:27:13.0677 0x1050 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
00:27:13.0698 0x1050 RasAgileVpn - ok
00:27:13.0702 0x1050 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
00:27:13.0725 0x1050 RasAuto - ok
00:27:13.0729 0x1050 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
00:27:13.0751 0x1050 Rasl2tp - ok
00:27:13.0759 0x1050 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
00:27:13.0784 0x1050 RasMan - ok
00:27:13.0789 0x1050 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
00:27:13.0810 0x1050 RasPppoe - ok
00:27:13.0814 0x1050 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
00:27:13.0836 0x1050 RasSstp - ok
00:27:13.0843 0x1050 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
00:27:13.0866 0x1050 rdbss - ok
00:27:13.0869 0x1050 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
00:27:13.0880 0x1050 rdpbus - ok
00:27:13.0882 0x1050 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
00:27:13.0903 0x1050 RDPCDD - ok
00:27:13.0906 0x1050 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
00:27:13.0927 0x1050 RDPENCDD - ok
00:27:13.0930 0x1050 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
00:27:13.0951 0x1050 RDPREFMP - ok
00:27:13.0957 0x1050 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
00:27:13.0969 0x1050 RDPWD - ok
00:27:13.0975 0x1050 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
00:27:13.0985 0x1050 rdyboost - ok
00:27:13.0990 0x1050 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
00:27:14.0012 0x1050 RemoteAccess - ok
00:27:14.0017 0x1050 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
00:27:14.0041 0x1050 RemoteRegistry - ok
00:27:14.0045 0x1050 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
00:27:14.0067 0x1050 RpcEptMapper - ok
00:27:14.0070 0x1050 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
00:27:14.0080 0x1050 RpcLocator - ok
00:27:14.0090 0x1050 [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] RpcSs C:\Windows\system32\rpcss.dll
00:27:14.0106 0x1050 RpcSs - ok
00:27:14.0110 0x1050 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
00:27:14.0132 0x1050 rspndr - ok
00:27:14.0143 0x1050 [ 9140DB0911DE035FED0A9A77A2D156EA, 07C9D7E2978062ABD84B58B390360D4C0F72C6A5A2310444579DC095943BD008 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
00:27:14.0158 0x1050 RTL8167 - ok
00:27:14.0161 0x1050 [ 54C0E3156872881F6AB017210278E27E, 8C3C71535FAC3897E1AE5505302387D7EC7C93D9DB6CA8AD6C1E1B26FE33D367 ] SamSs C:\Windows\system32\lsass.exe
00:27:14.0170 0x1050 SamSs - ok
00:27:14.0174 0x1050 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
00:27:14.0184 0x1050 sbp2port - ok
00:27:14.0194 0x1050 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
00:27:14.0218 0x1050 SCardSvr - ok
00:27:14.0221 0x1050 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
00:27:14.0241 0x1050 scfilter - ok
00:27:14.0261 0x1050 [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule C:\Windows\system32\schedsvc.dll
00:27:14.0286 0x1050 Schedule - ok
00:27:14.0290 0x1050 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
00:27:14.0311 0x1050 SCPolicySvc - ok
00:27:14.0316 0x1050 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
00:27:14.0328 0x1050 SDRSVC - ok
00:27:14.0331 0x1050 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
00:27:14.0342 0x1050 secdrv - ok
00:27:14.0345 0x1050 [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon C:\Windows\system32\seclogon.dll
00:27:14.0355 0x1050 seclogon - ok
00:27:14.0359 0x1050 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
00:27:14.0381 0x1050 SENS - ok
00:27:14.0384 0x1050 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
00:27:14.0394 0x1050 SensrSvc - ok
00:27:14.0397 0x1050 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
00:27:14.0406 0x1050 Serenum - ok
00:27:14.0409 0x1050 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
00:27:14.0419 0x1050 Serial - ok
00:27:14.0422 0x1050 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys
00:27:14.0431 0x1050 sermouse - ok
00:27:14.0439 0x1050 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
00:27:14.0461 0x1050 SessionEnv - ok
00:27:14.0464 0x1050 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
00:27:14.0475 0x1050 sffdisk - ok
00:27:14.0477 0x1050 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
00:27:14.0488 0x1050 sffp_mmc - ok
00:27:14.0491 0x1050 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
00:27:14.0502 0x1050 sffp_sd - ok
00:27:14.0506 0x1050 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
00:27:14.0515 0x1050 sfloppy - ok
00:27:14.0523 0x1050 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
00:27:14.0549 0x1050 SharedAccess - ok
00:27:14.0557 0x1050 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
00:27:14.0583 0x1050 ShellHWDetection - ok
00:27:14.0587 0x1050 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
00:27:14.0596 0x1050 SiSRaid2 - ok
00:27:14.0599 0x1050 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
00:27:14.0610 0x1050 SiSRaid4 - ok
00:27:14.0617 0x1050 [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
00:27:14.0639 0x1050 SkypeUpdate - ok
00:27:14.0643 0x1050 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
00:27:14.0665 0x1050 Smb - ok
00:27:14.0670 0x1050 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
00:27:14.0680 0x1050 SNMPTRAP - ok
00:27:14.0683 0x1050 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
00:27:14.0691 0x1050 spldr - ok
00:27:14.0702 0x1050 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
00:27:14.0720 0x1050 Spooler - ok
00:27:14.0772 0x1050 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
00:27:14.0839 0x1050 sppsvc - ok
00:27:14.0845 0x1050 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
00:27:14.0867 0x1050 sppuinotify - ok
00:27:14.0876 0x1050 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
00:27:14.0891 0x1050 srv - ok
00:27:14.0900 0x1050 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
00:27:14.0914 0x1050 srv2 - ok
00:27:14.0920 0x1050 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
00:27:14.0931 0x1050 srvnet - ok
00:27:14.0937 0x1050 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
00:27:14.0961 0x1050 SSDPSRV - ok
00:27:14.0965 0x1050 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
00:27:14.0988 0x1050 SstpSvc - ok
00:27:15.0004 0x1050 [ BE826A247D22F2FDF24B92AD40049F89, 06996ECCE5A694DEFDC99DB56F45DD0ABD9A2150581F1FD132FBBD863C474DE3 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
00:27:15.0032 0x1050 Steam Client Service - ok
00:27:15.0036 0x1050 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys
00:27:15.0044 0x1050 stexstor - ok
00:27:15.0056 0x1050 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
00:27:15.0076 0x1050 stisvc - ok
00:27:15.0080 0x1050 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
00:27:15.0088 0x1050 swenum - ok
00:27:15.0098 0x1050 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
00:27:15.0126 0x1050 swprv - ok
00:27:15.0153 0x1050 [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain C:\Windows\system32\sysmain.dll
00:27:15.0186 0x1050 SysMain - ok
00:27:15.0191 0x1050 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
00:27:15.0205 0x1050 TabletInputService - ok
00:27:15.0212 0x1050 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
00:27:15.0237 0x1050 TapiSrv - ok
00:27:15.0267 0x1050 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
00:27:15.0299 0x1050 Tcpip - ok
00:27:15.0329 0x1050 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
00:27:15.0361 0x1050 TCPIP6 - ok
00:27:15.0367 0x1050 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
00:27:15.0375 0x1050 tcpipreg - ok
00:27:15.0379 0x1050 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
00:27:15.0387 0x1050 TDPIPE - ok
00:27:15.0389 0x1050 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
00:27:15.0397 0x1050 TDTCP - ok
00:27:15.0401 0x1050 [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
00:27:15.0410 0x1050 tdx - ok
00:27:15.0413 0x1050 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
00:27:15.0421 0x1050 TermDD - ok
00:27:15.0434 0x1050 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll
00:27:15.0451 0x1050 TermService - ok
00:27:15.0454 0x1050 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
00:27:15.0466 0x1050 Themes - ok
00:27:15.0470 0x1050 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
00:27:15.0491 0x1050 THREADORDER - ok
00:27:15.0496 0x1050 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
00:27:15.0518 0x1050 TrkWks - ok
00:27:15.0529 0x1050 [ 879694CD080FAA9193C704DB42852A98, 272B087E8C4E9A106950801DE1EEED63C859EA66382A7F35790AEA6E595526B9 ] trufos C:\Windows\system32\DRIVERS\trufos.sys
00:27:15.0544 0x1050 trufos - ok
00:27:15.0551 0x1050 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
00:27:15.0572 0x1050 TrustedInstaller - ok
00:27:15.0576 0x1050 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
00:27:15.0585 0x1050 tssecsrv - ok
00:27:15.0588 0x1050 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
00:27:15.0596 0x1050 TsUsbFlt - ok
00:27:15.0599 0x1050 [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
00:27:15.0607 0x1050 TsUsbGD - ok
00:27:15.0611 0x1050 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
00:27:15.0631 0x1050 tunnel - ok
00:27:15.0635 0x1050 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
00:27:15.0642 0x1050 uagp35 - ok
00:27:15.0650 0x1050 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
00:27:15.0673 0x1050 udfs - ok
00:27:15.0678 0x1050 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
00:27:15.0688 0x1050 UI0Detect - ok
00:27:15.0691 0x1050 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
00:27:15.0698 0x1050 uliagpkx - ok
00:27:15.0702 0x1050 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
00:27:15.0710 0x1050 umbus - ok
00:27:15.0712 0x1050 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys
00:27:15.0720 0x1050 UmPass - ok
00:27:15.0724 0x1050 [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
00:27:15.0730 0x1050 UnlockerDriver5 - ok
00:27:15.0739 0x1050 [ 019EA723AE8288231C602F41343735DC, F3A2FE6FAD9BF2FD5A683F08C71CB5993CE450AB7D3FB488F6DCED573E2C4373 ] UPDATESRV C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe
00:27:15.0748 0x1050 UPDATESRV - ok
00:27:15.0757 0x1050 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
00:27:15.0782 0x1050 upnphost - ok
00:27:15.0786 0x1050 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
00:27:15.0795 0x1050 usbccgp - ok
00:27:15.0799 0x1050 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
00:27:15.0808 0x1050 usbcir - ok
00:27:15.0811 0x1050 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
00:27:15.0819 0x1050 usbehci - ok
00:27:15.0827 0x1050 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
00:27:15.0839 0x1050 usbhub - ok
00:27:15.0842 0x1050 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys
00:27:15.0850 0x1050 usbohci - ok
00:27:15.0853 0x1050 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
00:27:15.0863 0x1050 usbprint - ok
00:27:15.0866 0x1050 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
00:27:15.0874 0x1050 usbscan - ok
00:27:15.0878 0x1050 [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
00:27:15.0887 0x1050 USBSTOR - ok
00:27:15.0890 0x1050 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
00:27:15.0898 0x1050 usbuhci - ok
00:27:15.0901 0x1050 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
00:27:15.0922 0x1050 UxSms - ok
00:27:15.0924 0x1050 [ 54C0E3156872881F6AB017210278E27E, 8C3C71535FAC3897E1AE5505302387D7EC7C93D9DB6CA8AD6C1E1B26FE33D367 ] VaultSvc C:\Windows\system32\lsass.exe
00:27:15.0933 0x1050 VaultSvc - ok
00:27:15.0936 0x1050 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
00:27:15.0943 0x1050 vdrvroot - ok
00:27:15.0953 0x1050 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
00:27:15.0980 0x1050 vds - ok
00:27:15.0983 0x1050 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
00:27:15.0993 0x1050 vga - ok
00:27:15.0995 0x1050 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
00:27:16.0016 0x1050 VgaSave - ok
00:27:16.0021 0x1050 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
00:27:16.0031 0x1050 vhdmp - ok
00:27:16.0034 0x1050 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
00:27:16.0042 0x1050 viaide - ok
00:27:16.0045 0x1050 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
00:27:16.0053 0x1050 volmgr - ok
00:27:16.0060 0x1050 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
00:27:16.0072 0x1050 volmgrx - ok
00:27:16.0079 0x1050 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
00:27:16.0090 0x1050 volsnap - ok
00:27:16.0095 0x1050 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
00:27:16.0104 0x1050 vsmraid - ok
00:27:16.0130 0x1050 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
00:27:16.0172 0x1050 VSS - ok
00:27:16.0201 0x1050 [ 242BEF3CDCB8A707676C06A83E2F8ABB, BCBA394FC5B67BFFB28A5DB67AB96EDCF2F40143A48574AFFB7C7AD0365B134B ] VSSERV C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe
00:27:16.0233 0x1050 VSSERV - ok
00:27:16.0237 0x1050 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
00:27:16.0246 0x1050 vwifibus - ok
00:27:16.0254 0x1050 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
00:27:16.0280 0x1050 W32Time - ok
00:27:16.0284 0x1050 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
00:27:16.0292 0x1050 WacomPen - ok
00:27:16.0296 0x1050 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
00:27:16.0317 0x1050 WANARP - ok
00:27:16.0319 0x1050 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
00:27:16.0339 0x1050 Wanarpv6 - ok
00:27:16.0364 0x1050 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
00:27:16.0392 0x1050 wbengine - ok
00:27:16.0399 0x1050 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
00:27:16.0413 0x1050 WbioSrvc - ok
00:27:16.0421 0x1050 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
00:27:16.0437 0x1050 wcncsvc - ok
00:27:16.0440 0x1050 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
00:27:16.0450 0x1050 WcsPlugInService - ok
00:27:16.0452 0x1050 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys
00:27:16.0460 0x1050 Wd - ok
00:27:16.0474 0x1050 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
00:27:16.0492 0x1050 Wdf01000 - ok
00:27:16.0496 0x1050 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll
00:27:16.0506 0x1050 WdiServiceHost - ok
00:27:16.0509 0x1050 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll
00:27:16.0518 0x1050 WdiSystemHost - ok
00:27:16.0524 0x1050 [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient C:\Windows\System32\webclnt.dll
00:27:16.0536 0x1050 WebClient - ok
00:27:16.0542 0x1050 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
00:27:16.0565 0x1050 Wecsvc - ok
00:27:16.0569 0x1050 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
00:27:16.0591 0x1050 wercplsupport - ok
00:27:16.0594 0x1050 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
00:27:16.0615 0x1050 WerSvc - ok
00:27:16.0619 0x1050 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
00:27:16.0638 0x1050 WfpLwf - ok
00:27:16.0641 0x1050 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
00:27:16.0648 0x1050 WIMMount - ok
00:27:16.0650 0x1050 WinDefend - ok
00:27:16.0654 0x1050 WinHttpAutoProxySvc - ok
00:27:16.0662 0x1050 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
00:27:16.0685 0x1050 Winmgmt - ok
00:27:16.0717 0x1050 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll
00:27:16.0752 0x1050 WinRM - ok
00:27:16.0760 0x1050 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\drivers\WinUsb.sys
00:27:16.0769 0x1050 WinUsb - ok
00:27:16.0786 0x1050 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
00:27:16.0808 0x1050 Wlansvc - ok
00:27:16.0846 0x1050 [ 2BACD71123F42CEA603F4E205E1AE337, 1FEF20554110371D738F462ECFFA999158EFEED02062414C58C1B61C422BF0B9 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
00:27:16.0883 0x1050 wlidsvc - ok
00:27:16.0886 0x1050 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
00:27:16.0895 0x1050 WmiAcpi - ok
00:27:16.0901 0x1050 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
00:27:16.0912 0x1050 wmiApSrv - ok
00:27:16.0914 0x1050 WMPNetworkSvc - ok
00:27:16.0917 0x1050 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
00:27:16.0926 0x1050 WPCSvc - ok
00:27:16.0930 0x1050 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
00:27:16.0941 0x1050 WPDBusEnum - ok
00:27:16.0943 0x1050 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
00:27:16.0963 0x1050 ws2ifsl - ok
00:27:16.0967 0x1050 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
00:27:16.0980 0x1050 wscsvc - ok
00:27:16.0982 0x1050 WSearch - ok
00:27:17.0024 0x1050 [ 86F11B85102AFA6A1A6101DCE2F09386, 68A0F0E628C8F33FDAC114876DA8ED14776DD74E80AC5A6A52257E19DE011091 ] wuauserv C:\Windows\system32\wuaueng.dll
00:27:17.0068 0x1050 wuauserv - ok
00:27:17.0073 0x1050 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
00:27:17.0083 0x1050 WudfPf - ok
00:27:17.0089 0x1050 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
00:27:17.0100 0x1050 WUDFRd - ok
00:27:17.0104 0x1050 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
00:27:17.0114 0x1050 wudfsvc - ok
00:27:17.0120 0x1050 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
00:27:17.0133 0x1050 WwanSvc - ok
00:27:17.0135 0x1050 ================ Scan global ===============================
00:27:17.0138 0x1050 [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
00:27:17.0144 0x1050 [ E0E4D286839FC27F56A85B4710E16B6B, 6BBBADB8904D6159E6171A339E0BF30A41D14E885D560BFB8BB73B1FF7239E1A ] C:\Windows\system32\winsrv.dll
00:27:17.0153 0x1050 [ E0E4D286839FC27F56A85B4710E16B6B, 6BBBADB8904D6159E6171A339E0BF30A41D14E885D560BFB8BB73B1FF7239E1A ] C:\Windows\system32\winsrv.dll
00:27:17.0159 0x1050 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
00:27:17.0167 0x1050 [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
00:27:17.0173 0x1050 [ Global ] - ok
00:27:17.0173 0x1050 ================ Scan MBR ==================================
00:27:17.0174 0x1050 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
00:27:17.0221 0x1050 \Device\Harddisk1\DR1 - ok
00:27:17.0223 0x1050 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
00:27:17.0317 0x1050 \Device\Harddisk0\DR0 - ok
00:27:17.0322 0x1050 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2
00:27:17.0922 0x1050 \Device\Harddisk2\DR2 - ok
00:27:17.0922 0x1050 ================ Scan VBR ==================================
00:27:17.0923 0x1050 [ 2C6670263E348F9788F10F0E3ACC1D44 ] \Device\Harddisk1\DR1\Partition1
00:27:17.0960 0x1050 \Device\Harddisk1\DR1\Partition1 - ok
00:27:17.0964 0x1050 [ CCF002C3D859C36AC5E2646F0EA6FB0B ] \Device\Harddisk0\DR0\Partition1
00:27:17.0966 0x1050 \Device\Harddisk0\DR0\Partition1 - ok
00:27:17.0969 0x1050 [ 4874B9FDDF2D22B2D9D50913D70AAEC5 ] \Device\Harddisk0\DR0\Partition2
00:27:17.0970 0x1050 \Device\Harddisk0\DR0\Partition2 - ok
00:27:17.0974 0x1050 [ 8269DDDEC0B9761CA1580BB48F3EF7AE ] \Device\Harddisk2\DR2\Partition1
00:27:18.0044 0x1050 \Device\Harddisk2\DR2\Partition1 - ok
00:27:18.0045 0x1050 ================ Scan generic autorun ======================
00:27:18.0049 0x1050 [ ABAEEE966953092F013902849495E588, C1760F10AFCDF9F510A35508DD7DFB52FAE4BEB1C2F422C714E2587917CB8312 ] C:\Windows\system32\igfxtray.exe
00:27:18.0058 0x1050 IgfxTray - ok
00:27:18.0067 0x1050 [ 6200A37004340CBC2BA7BD585285513D, 44102F31F0223DA8633A9E44C4C15780D0CFDD9FD7D33F23F128C523087AB330 ] C:\Windows\system32\hkcmd.exe
00:27:18.0079 0x1050 HotKeysCmds - ok
00:27:18.0088 0x1050 [ C0798E90F54A10E37001CE26E51D3793, 58FCA9D3562138CF177E000DB1839FAF479F3A40139ABD366F4328F8D51FB917 ] C:\Windows\system32\igfxpers.exe
00:27:18.0101 0x1050 Persistence - ok
00:27:18.0110 0x1050 [ 320681DF28D82CDCA7E3EED0846625DB, 7F709ADFB0FE36BEC857A928E9CB29BB5B6C0BAD98824D0302C7BB7185100CB9 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
00:27:18.0123 0x1050 AdobeAAMUpdater-1.0 - ok
00:27:18.0376 0x1050 [ 222A34C1E04D3A8DAF9BA6A0414958FB, 5B32621DD9CAAC79CA798E7E6CA0D9EDD3B36CA87734FB37034B3B451EC9DECC ] C:\Program Files\Logitech Gaming Software\LCore.exe
00:27:18.0577 0x1050 Launch LCore - ok
00:27:18.0657 0x1050 [ E41245791F9B6F4022F8C46154C358E8, 3E1597352DC9DBBAD8262B8271FC532F38C39EBB2D7461DE6839880A0D099E2F ] C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
00:27:18.0728 0x1050 StartCN - ok
00:27:18.0757 0x1050 [ AAA919E2177D09C18603AFEB2809D667, 79F5DDCF0EFF39437AA460B9314B7DFAE057372CF8515A6C76C96D95DC99DBCE ] C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe
00:27:18.0789 0x1050 Bdagent - ok
00:27:18.0793 0x1050 [ C419DF63E0121D72411285780C2FC6CC, F47F854D327C589D174D3BB5B55D5C05F5ACA73DF52A6BEF47596B9010190291 ] C:\Windows\UpdReg.EXE
00:27:18.0798 0x1050 UpdReg - detected UnsignedFile.Multi.Generic ( 1 )
00:27:18.0914 0x12bc Object required for P2P: [ E4B7F2553A127E86E11343ED15320A99 ] gzflt
00:27:21.0408 0x1050 Detect skipped due to KSN trusted
00:27:21.0408 0x1050 UpdReg - ok
00:27:21.0437 0x1050 [ 055DFCD94924AE9DC8A6D1F2F1FB9687, DEA7A5336026DF55AE831B269C5E6005F30280C7EC4DEDA8ED012D77335A14E3 ] C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe
00:27:21.0468 0x1050 Sound Blaster Recon3D PCIe Control Panel - detected UnsignedFile.Multi.Generic ( 1 )
00:27:21.0592 0x12bc Object send P2P result: true
00:27:21.0612 0x12bc Object required for P2P: [ 879694CD080FAA9193C704DB42852A98 ] trufos
00:27:24.0070 0x1050 Detect skipped due to KSN trusted
00:27:24.0070 0x1050 Sound Blaster Recon3D PCIe Control Panel - ok
00:27:24.0076 0x1050 [ 61E4289E91E88C90478D7F4BEB10DCF7, 1D0F4034E0111CF5758F470C15A22A0A28EB8269CB5BF07222C9C0FB07A15C55 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
00:27:24.0091 0x1050 APSDaemon - ok
00:27:24.0096 0x1050 [ 0E34B7BB1FCF22BCC1E394D16F9E992B, 382CA8E6BAC301E2F277F8EDA03D263FF71272796A8EED582C36294EEE9191F9 ] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
00:27:24.0106 0x1050 GrooveMonitor - ok
00:27:24.0109 0x1050 [ D3ABDD76CBE85440451202A130286E21, 62B37BDA6DEBFC3D56D310004BCD60E507E117E86540C43C92AAA95EE3CC8F02 ] C:\Windows\Dit.exe
00:27:24.0114 0x1050 Dit - detected UnsignedFile.Multi.Generic ( 1 )
00:27:24.0299 0x12bc Object send P2P result: true
00:27:25.0052 0x1a58 Object required for P2P: [ E41245791F9B6F4022F8C46154C358E8 ] C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
00:27:26.0731 0x1050 Detect skipped due to KSN trusted
00:27:26.0731 0x1050 Dit - ok
00:27:26.0747 0x1050 [ 1F02F97238874324C4E371A41EFAE235, 0D546E150C1ADED852DD71762EB45CEF3799F7BA660EAF066E0B7B521EADA8CE ] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
00:27:26.0775 0x1050 DivXMediaServer - ok
00:27:26.0780 0x1050 [ 2199723879C9F75A709680E2935C052F, DDD5B5CC86463284D9137372CB8541D1258AC020EA811F1AD3735809F314B086 ] C:\Program Files (x86)\PDF24\pdf24.exe
00:27:26.0794 0x1050 PDFPrint - ok
00:27:26.0803 0x1050 [ 271B0D188430670509CB9943D5229205, 74CB5A9D8B5988AE08C0F65C601FC54F8745BAB6825B6FEEFBA8F068D656D8D7 ] C:\Program Files (x86)\QuickTime\QTTask.exe
00:27:26.0812 0x1050 QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
00:27:27.0752 0x1a58 Object send P2P result: true
00:27:29.0418 0x1050 Detect skipped due to KSN trusted
00:27:29.0418 0x1050 QuickTime Task - ok
00:27:29.0475 0x1050 [ 73C583DC51E6279EF9DBFE2B75D3BEEF, BD6AFDAB29E511DD01B772AB0BEA9717290D8E1151553DC1CC263D5628AC0BE7 ] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
00:27:29.0506 0x1050 DivXUpdate - ok
00:27:29.0514 0x1050 [ 5B157E747F5C6A98D7AC64597D10B3C5, D1CC7FB409A289BDBEAAD7ADD96D32A0F83014BE4D43CD81696898B067A3E047 ] C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe
00:27:29.0521 0x1050 PlaysTV - ok
00:27:29.0526 0x1050 [ F183BA59384CC417239A1A7194AEFA62, EBEBAE9F4609704CBD14E1C3099940C28EFE6E96CA7E77FCA3B26A671844B426 ] C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe
00:27:29.0534 0x1050 Raptr - ok
00:27:29.0553 0x1050 [ 1CE11C53E562D5F7EAFCF47E0E696516, 4E8264DB3CA9B2344905BC2CAE6A9E73190A3CCF3D154B3CBDAF4F73F8FCD64B ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
00:27:29.0571 0x1050 avgnt - ok
00:27:29.0575 0x1050 [ 62634246BADBB538F78309510CAAEFDA, 74AEF5CA769BF72AC64D22A5C8CFA84438DD7611011987D10DFD81D447B65F5D ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
00:27:29.0583 0x1050 Avira SystrayStartTrigger - ok
00:27:29.0603 0x1050 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
00:27:29.0655 0x1050 Sidebar - ok
00:27:29.0659 0x1050 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
00:27:29.0671 0x1050 mctadmin - ok
00:27:29.0692 0x1050 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
00:27:29.0716 0x1050 Sidebar - ok
00:27:29.0720 0x1050 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
00:27:29.0733 0x1050 mctadmin - ok
00:27:29.0789 0x1050 [ AFE3883FB37A5567C913E7DFCF2924A5, 3CA38EE302E0FF343DB87AE90DA868DCE5B7B490C2AA32164AF8DD4773482265 ] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
00:27:29.0843 0x1050 DAEMON Tools Lite - ok
00:27:29.0853 0x1050 [ 7C6D524C78A1722AD987B9E47AC1FEE2, FFDC6C92ABB547D0DCD2621EC423C755A78079B061A41FA1751A56799D1A79A5 ] C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
00:27:29.0861 0x1050 Dropbox Update - ok
00:27:29.0995 0x1050 [ 96C06D6C65559D1B7D6C5A62288725EE, 61CCCA9248742414AAE8973DF121CE2E7EC1385D219E3F3D306EAA3A2989C28C ] C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe
00:27:30.0091 0x1050 Spotify - ok
00:27:30.0119 0x1050 [ 8E3A4D64A060C5CAA90F3B0C15A7DFE9, 62CEE1449AF368A5FA16DDF9690526965C32979564CF66BD8B3BB534110A910C ] C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe
00:27:30.0146 0x1050 Spotify Web Helper - ok
00:27:30.0147 0x1050 Waiting for KSN requests completion. In queue: 15
00:27:31.0147 0x1050 Waiting for KSN requests completion. In queue: 15
00:27:32.0147 0x1050 Waiting for KSN requests completion. In queue: 15
00:27:32.0751 0x170c Object required for P2P: [ 96C06D6C65559D1B7D6C5A62288725EE ] C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe
00:27:33.0147 0x1050 Waiting for KSN requests completion. In queue: 2
00:27:34.0147 0x1050 Waiting for KSN requests completion. In queue: 2
00:27:35.0147 0x1050 Waiting for KSN requests completion. In queue: 2
00:27:35.0468 0x170c Object send P2P result: true
00:27:35.0468 0x170c Object required for P2P: [ 8E3A4D64A060C5CAA90F3B0C15A7DFE9 ] C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe
00:27:36.0147 0x1050 Waiting for KSN requests completion. In queue: 1
00:27:37.0147 0x1050 Waiting for KSN requests completion. In queue: 1
00:27:38.0147 0x1050 Waiting for KSN requests completion. In queue: 1
00:27:38.0162 0x170c Object send P2P result: true
00:27:39.0214 0x1050 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.16.273 ), 0x41000 ( enabled : updated )
00:27:39.0221 0x1050 AV detected via SS2: Bitdefender Antivirus, C:\Program Files\Bitdefender\Bitdefender 2016\wscfix.exe ( 20.0.26.1443 ), 0x41000 ( enabled : updated )
00:27:39.0226 0x1050 FW detected via SS2: Bitdefender Firewall, C:\Program Files\Bitdefender\Bitdefender 2016\wscfix.exe ( 20.0.26.1443 ), 0x41010 ( enabled )
00:27:41.0869 0x1050 ============================================================
00:27:41.0869 0x1050 Scan finished
00:27:41.0869 0x1050 ============================================================
00:27:41.0880 0x177c Detected object count: 0
00:27:41.0881 0x177c Actual detected object count: 0
|
|
21.05.2016, 21:35
| #6 | |||
| /// TB-Ausbilder | Trojaner "searchprotect" und "tmp00000be1" entfernenZitat:
 Zitat:
Code:
ATTFilter Bitdefender
Avira
Zukünftig bitte beachten: Zitat:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind. Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen. Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter. Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
|
22.05.2016, 18:15
| #7 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter # AdwCleaner v5.117 - Bericht erstellt am 22/05/2016 um 18:48:05
# Aktualisiert am 15/05/2016 von Xplode
# Datenbank : 2016-05-15.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Ben - BEN-PC
# Gestartet von : C:\Users\Ben\Desktop\AdwCleaner_5.117.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner gelöscht : C:\ProgramData\Babylon
[#] Ordner gelöscht : C:\ProgramData\Application Data\Babylon
[-] Ordner gelöscht : C:\Users\Ben\AppData\Local\bvyvavay
[-] Ordner gelöscht : C:\Users\Ben\AppData\LocalLow\SimplyTech
[-] Ordner gelöscht : C:\Users\Ben\AppData\Roaming\BitLord
[-] Ordner gelöscht : C:\Users\Ben\AppData\Roaming\RHEng
[-] Ordner gelöscht : C:\Users\Ben\Documents\BitLord
[-] Ordner gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
[#] Ordner gelöscht : C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
***** [ Dateien ] *****
[-] Datei gelöscht : C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\jid0-1kqApO5BUHwjBQft5BEUXHXZjCA@jetpack.xpi
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
[-] Geplante Aufgabe gelöscht : Browser Updater\Browser Updater
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C98BE86-CF79-4484-A2B2-DFE1EE126592}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6F7E26D7-C6AD-49BE-B48E-A5FCEE221C82}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B21E5B2D-2AF6-4182-9E8E-1FF00EE3EFD0}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
[-] Wert gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
[-] Wert gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
[-] Wert gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[-] Schlüssel gelöscht : HKCU\Software\BABSOLUTION
[-] Schlüssel gelöscht : HKCU\Software\OCS
[-] Schlüssel gelöscht : HKCU\Software\Softonic
[-] Schlüssel gelöscht : HKCU\Software\UpdaterEX
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UpdaterEX
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2410925410-2808068811-915591143-1000\Software\Softonic
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI [(Default)]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [TCP Query User{73212083-FF94-47C4-8E36-3440751A49BC}D:\programme\bitlord 2\bitlord files\bitlord.exe]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [UDP Query User{D6D56F54-6194-46B0-ACA7-2E4B12A0F787}D:\programme\bitlord 2\bitlord files\bitlord.exe]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [TCP Query User{14C97613-0E21-4D44-9852-CF90EC1611D7}D:\programme\bitlord 2\bitlord files\bitlord.exe]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [UDP Query User{2BA87064-65EA-4D89-8EB7-DA85FFB26328}D:\programme\bitlord 2\bitlord files\bitlord.exe]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C5E1FB36-5032-4614-AEE7-111A4A869A4D}]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{87AA13B1-170B-4425-A1D4-2301676480F2}]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{473BC8D5-B3DC-4067-BCEC-857EE4923E13}]
[-] Wert gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C298F8E5-CEA7-43A9-B81E-137211018874}]
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0C3286BA-7A37-4E59-A3F5-F4E06A97F97B}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{38C82963-9229-4D88-99F7-221997DB985B}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{94ABC068-6097-46F0-8AC3-5EBFF0AD0703}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{F280C5F1-262E-4024-AC35-47BEAEBFA6CF}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{F4ED6660-A91F-481D-A5DF-7DAC3E9994E2}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FD4E9F80-5AC9-44A3-8722-78CA6D2DC141}
[-] Wert gelöscht : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DisplayName]
[-] Wert gelöscht : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
[-] Wert gelöscht : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [TopResultURLFallback]
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{71588120-FC17-4463-B07D-2C71FE6E057B}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\searchgol.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\softonic.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.searchgol.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com
***** [ Internetbrowser ] *****
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.ClearSearchHistoryOnClose", "false");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.CurrentLanguageSelection", "English");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.CurrentNavigationSelection", "Current window");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.CurrentSearchEngineSelection", "US: United States of America");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.DisplayRecentSearches", "true");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.ShowButtonText2", "true");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.UpdateTime", "1382593909575");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.setupExtension", "true");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.userEnable", true);
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("HomeTab_6787.global.userID", "34235206784bd80dacfe4a29062a1903");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.cliqz.backup.homepage", "hxxp://search.conduit.com/?gd=&ctid=CT3324774&octid=EB_ORIGINAL_CTID&ISID=MA62C3147-8AE0-40E0-918E-AEDF8799F4C5&SearchSource=55&CUI=&UM=5&UP=SP62D14C1F-E[...]
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.dealply.channel", "_candoc1");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.dealply.installId", "_v24873208591066528344302013101614460524");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.dealply.installIdSource", "_inst");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.dealply.lastHeartBitDate", "2013_9_24");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.dealply.partner", "_cand");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("extensions.dealply.sampleGroup", "4");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent111", "1363041758071");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent112", "1363041761000");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent122", "1363041758074");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent140", "1363047512328");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent134", "1363048334704");
[-] [C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js] gelöscht : user_pref("wtbg.global.storedbrowserversion", "24.0");
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [13879 Bytes] - [22/05/2016 18:48:05]
C:\AdwCleaner\AdwCleaner[R0].txt - [34641 Bytes] - [12/10/2013 19:29:03]
C:\AdwCleaner\AdwCleaner[S0].txt - [31788 Bytes] - [12/10/2013 19:29:24]
C:\AdwCleaner\AdwCleaner[S1].txt - [15392 Bytes] - [22/05/2016 18:47:02]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [14175 Bytes] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 22.05.2016 Suchlaufzeit: 18:53 Protokolldatei: mbam.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.05.22.04 Rootkit-Datenbank: v2016.05.20.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Ben Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 333187 Abgelaufene Zeit: 6 Min., 19 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 4 PUP.Optional.Iminent, C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\prefs.js, Gut: (), Schlecht: (user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent112", "1363041761000");), Ersetzt,[44a835a39603b0861931fc72976df20e] PUP.Optional.Iminent, C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\prefs.js, Gut: (), Schlecht: (", "false"); user_pref("HomeTab_6787.global.CurrentLanguageSelection", "English"); user), Ersetzt,[a745c6120990989e0446f37b887cf60a] PUP.Optional.Iminent, C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\prefs.js, Gut: (), Schlecht: (", "false"); user_pref("HomeTab_6787.global.CurrentLanguageSelection", "E), Ersetzt,[a4489b3d5c3dbe78bc8ecaa4ce36b749] PUP.Optional.Iminent, C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\prefs.js, Gut: (), Schlecht: (ill be overwrit", "false"); user_pref("HomeTab_6787.global.CurrentLanguageSelection", "Engl), Ersetzt,[21cbba1eabee5adcd575a5c9aa5a916f] Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 7 Home Premium x64
Ran by Ben (Administrator) on 22.05.2016 at 19:06:21,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 31
Successfully deleted: C:\ProgramData\1463281564.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1463281683.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1463281764.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1463322708.bdinstall.bin (File)
Successfully deleted: C:\Users\Ben\AppData\Local\Tempdivxa6f9 (File)
Successfully deleted: C:\Users\Ben\AppData\Local\Tempdivxfe74 (File)
Successfully deleted: C:\Windows\wininit.ini (File)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\07CI8I18 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5TMMV0XF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\691O05RJ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7P8LRZXC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AG8KETMM (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B8M8VYL1 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CNF2C9SO (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E6FW3YQ8 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9KCU10S (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SZ5O224E (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YEQC1DEY (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ben\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z8W0DCZV (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\07CI8I18 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5TMMV0XF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\691O05RJ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7P8LRZXC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AG8KETMM (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B8M8VYL1 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CNF2C9SO (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E6FW3YQ8 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9KCU10S (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SZ5O224E (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YEQC1DEY (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z8W0DCZV (Temporary Internet Files Folder)
Deleted the following from C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\prefs.js
user_pref(extensions.AMAZONNEW_NS_PH.toolbarXMLText, <?xml version=\1.0\ encoding=\utf-8\?>\n<toolbar>\n <replacements>\n <replacement>\n <key><![CDATA[__REGIO
user_pref(extensions.ae180d6e852cd41d990029e43f22d4c917466a5f305bd4c4da0e99442a8ea8a0ecom32000.32000.internaldb.cache/286965653b415f505622ea74d2bd3bbe_DE.value, %22var%20ca
user_pref(extensions.ae180d6e852cd41d990029e43f22d4c917466a5f305bd4c4da0e99442a8ea8a0ecom32000.32000.internaldb.cache/530e52021dc20843b1aa62957edeb9f8.value, %22var%20adsDe
user_pref(extensions.ae180d6e852cd41d990029e43f22d4c917466a5f305bd4c4da0e99442a8ea8a0ecom32000.32000.internaldb.cache/833447eaff04548ccb80787286a7cad9_DE.value, %22var%20ca
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.05.2016 at 19:08:54,90
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:22-05-2016 01 durchgeführt von Ben (Administrator) auf BEN-PC (22-05-2016 19:13:31) Gestartet von C:\Users\Ben\Desktop Geladene Profile: Ben (Verfügbare Profile: Ben) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15053944 2016-01-06] (Logitech Inc.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [5006536 2016-03-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1651600 2016-04-25] (Bitdefender) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE HKLM-x32\...\Run: [Sound Blaster Recon3D PCIe Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe [885760 2012-02-22] (Creative Technology Ltd) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Dit] => C:\Windows\Dit.exe [90112 2004-08-05] (ICSI Technology Ltd.) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-06-24] (DivX, LLC) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861640 2015-06-27] (DivX, LLC) HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-05-09] (Plays.tv, LLC) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-04-27] (Raptr, Inc) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Dropbox Update] => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify] => C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe [6890608 2016-04-28] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-28] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: F - F:\Setup.exe autorun HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: {0cffc0e7-918d-11e2-ba83-bc5ff44945d9} - F:\setup.exe HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-21] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-05-21] ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2016-05-21] ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4 Tcpip\..\Interfaces\{93459425-DE5C-4808-9F97-6026C69CD4BC}: [DhcpNameServer] 80.69.96.12 81.210.129.4 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default FF NewTab: about:home FF Homepage: about:home FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-08-05] (DivX, LLC) FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Photoshop CS6\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [Keine Datei] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-03-22] (Apple Inc.) FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-images.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-maps.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\youtube.xml [2015-11-12] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{58827B9B-1E67-4411-915F-922793B7986B}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{A31C05CC-0B97-428B-80B9-224FF9550200}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{D3ED56D7-F8F1-4998-87F7-9D409CB38784}.xml [2012-08-26] FF Extension: NoScript - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-04-07] FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\artur.dubovoy@gmail.com [2016-05-17] FF Extension: Cliqz - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\cliqz@cliqz.com.xpi [2016-04-19] FF Extension: Blur - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\donottrackplus@abine.com.xpi [2015-12-17] FF Extension: TopLine - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid0-uIWxKlEIWnV1103pH2C8N6RsUe0@jetpack.xpi [2012-10-28] [ist nicht signiert] FF Extension: Mailvelope - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2015-12-08] FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\vdpure@link64.xpi [2016-01-22] FF Extension: Video DownloadHelper - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-05-09] FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-05-12] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-05-12] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\cliqz@cliqz.com => nicht gefunden Chrome: ======= CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-17] CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17] CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17] CHR Extension: (Google-Suche) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-07-03] CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-03] CHR Extension: (Google Mail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-07-03] CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Datei ist nicht signiert] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [103424 2013-02-14] (Creative Technology Ltd) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2016-01-06] (Logitech Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-09] (Plays.tv, LLC) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-28] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [947640 2016-03-30] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-04-25] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-05-11] (Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-03-18] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-03-18] (BitDefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [118608 2016-02-09] (BitDefender LLC) R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1044760 2013-02-14] (Creative Technology Ltd) R3 CTHDB; C:\Windows\System32\DRIVERS\CtHDb.sys [23640 2012-02-29] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2015-12-16] (BitDefender LLC) R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [298736 2016-03-03] (Bitdefender) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-22] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-02-22] (BitDefender S.R.L.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 b06bdrv; \SystemRoot\system32\drivers\bxvbda.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-22 19:12 - 2016-05-22 19:12 - 00000000 ____D C:\Users\Ben\Desktop\FRST-OlderVersion 2016-05-22 19:08 - 2016-05-22 19:08 - 00005747 _____ C:\Users\Ben\Desktop\JRT.txt 2016-05-22 19:05 - 2016-05-22 19:05 - 01610816 _____ (Malwarebytes) C:\Users\Ben\Desktop\JRT.exe 2016-05-22 19:04 - 2016-05-22 19:04 - 00002160 _____ C:\Users\Ben\Desktop\mbam.txt 2016-05-22 18:53 - 2016-05-22 18:53 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-05-22 18:52 - 2016-05-22 18:52 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Desktop\mbam-setup-2.2.1.1043(1).exe 2016-05-22 18:50 - 2016-05-22 18:50 - 00014306 _____ C:\Users\Ben\Desktop\AdwCleaner[C1].txt 2016-05-22 18:24 - 2016-05-22 18:24 - 00001229 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-05-22 18:24 - 2016-05-22 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2016-05-22 16:39 - 2016-05-22 19:13 - 00025332 _____ C:\Users\Ben\Desktop\FRST.txt 2016-05-22 16:39 - 2016-05-22 19:12 - 02383360 _____ (Farbar) C:\Users\Ben\Desktop\FRST64.exe 2016-05-22 16:39 - 2016-05-22 16:39 - 03651136 _____ C:\Users\Ben\Desktop\AdwCleaner_5.117.exe 2016-05-22 16:39 - 2016-05-21 00:25 - 00071121 _____ C:\Users\Ben\Desktop\Addition.txt 2016-05-22 16:39 - 2016-05-21 00:22 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Ben\Desktop\tdsskiller.exe 2016-05-22 16:39 - 2016-05-21 00:14 - 00001132 _____ C:\Users\Ben\Desktop\Avira Launcher.lnk 2016-05-21 00:22 - 2016-05-21 00:33 - 00220424 _____ C:\TDSSKiller.3.1.0.9_21.05.2016_00.22.30_log.txt 2016-05-21 00:22 - 2016-05-21 00:22 - 00071121 _____ C:\Users\Ben\Downloads\Addition.txt 2016-05-21 00:21 - 2016-05-22 19:13 - 00000000 ____D C:\FRST 2016-05-21 00:21 - 2016-05-21 00:22 - 00077166 _____ C:\Users\Ben\Downloads\FRST.txt 2016-05-20 22:59 - 2016-05-20 22:59 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe 2016-05-20 20:40 - 2016-05-21 00:45 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Avira 2016-05-20 20:38 - 2016-05-21 00:48 - 00000000 ____D C:\ProgramData\Avira 2016-05-15 16:33 - 2016-05-15 16:33 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2016-05-15 05:09 - 2016-05-21 00:14 - 00002116 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk 2016-05-15 05:09 - 2016-05-15 05:09 - 00253404 ____H C:\bdr-ld02 2016-05-15 05:09 - 2016-05-15 05:09 - 00009216 ____H C:\bdr-ld02.mbr 2016-05-15 05:09 - 2016-05-15 05:09 - 00000684 ____H C:\bdr-cf02 2016-05-15 05:09 - 2016-05-15 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016 2016-05-15 05:09 - 2016-03-03 01:36 - 00298736 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys 2016-05-15 05:09 - 2016-02-22 15:13 - 00511320 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2016-05-15 05:09 - 2015-12-16 05:53 - 00182936 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2016-05-15 05:09 - 2015-12-15 21:35 - 49760229 ____H C:\bdr-im02.gz 2016-05-15 05:09 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz02 2016-05-15 05:07 - 2016-05-15 05:10 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Bitdefender 2016-05-15 05:07 - 2016-03-18 06:58 - 00842152 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2016-05-15 05:07 - 2016-03-18 06:56 - 01623536 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2016-05-15 05:07 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2016-05-15 05:06 - 2016-05-15 05:26 - 00000000 ____D C:\ProgramData\Bitdefender 2016-05-15 05:05 - 2016-05-22 18:50 - 00000000 ____D C:\Program Files\Bitdefender Agent 2016-05-14 18:18 - 2016-05-14 18:18 - 00000000 ____D C:\Users\Ben\Desktop\AST Fahrwerk 2016-05-13 21:20 - 2016-05-15 03:45 - 00000000 ____D C:\Users\Ben\AppData\Local\AMD 2016-05-13 21:19 - 2016-05-13 21:19 - 00000000 _____ C:\Windows\ativpsrm.bin 2016-05-13 21:18 - 2016-05-13 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved 2016-05-13 21:17 - 2016-05-13 21:18 - 00000000 ____D C:\Program Files (x86)\Raptr 2016-05-13 21:17 - 2016-05-13 21:17 - 00000000 ____D C:\Program Files (x86)\AMD 2016-05-13 21:10 - 2016-05-13 21:10 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Ben\Downloads\autodetectutility.exe 2016-05-13 20:04 - 2016-05-13 20:04 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-05-13 07:13 - 2016-05-22 18:50 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Raptr 2016-05-12 22:32 - 2016-05-12 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV 2016-05-12 07:36 - 2016-05-22 18:50 - 00000000 ____D C:\Users\Ben\AppData\Roaming\PlaysTV 2016-05-12 07:35 - 2016-05-12 07:35 - 00000000 ____D C:\Program Files (x86)\Raptr Inc 2016-05-11 16:52 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 16:52 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 16:52 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 16:52 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 16:52 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 16:52 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 16:52 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 16:52 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 16:52 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 16:52 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 16:52 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 16:52 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 16:52 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 16:52 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 16:52 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 16:52 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 16:52 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 16:52 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 16:52 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 16:52 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 16:52 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 16:52 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 16:52 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 16:52 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 16:52 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 16:52 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 16:52 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 16:52 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 16:52 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 16:52 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 16:52 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 16:52 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 16:52 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 16:52 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 16:52 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 16:52 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 16:52 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-05 14:35 - 2016-05-05 22:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-04 18:30 - 2016-05-04 19:39 - 00000000 ____D C:\Users\Public\CineForm 2016-05-04 18:30 - 2016-05-04 19:29 - 00000000 ____D C:\Users\Ben\AppData\Roaming\GoPro 2016-05-04 18:30 - 2016-05-04 18:30 - 00000000 ____D C:\Users\Ben\AppData\Local\GoPro 2016-05-04 18:29 - 2016-05-04 18:29 - 00000000 ____D C:\Program Files (x86)\OpenAL 2016-04-27 21:28 - 2016-04-27 21:28 - 08306382 _____ C:\Users\Ben\Desktop\Infiltrate template.rar 2016-04-25 20:04 - 2014-12-29 21:16 - 00000000 ____D C:\Users\Ben\Desktop\Template ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-22 19:11 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Spotify 2016-05-22 19:11 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Local\Spotify 2016-05-22 18:57 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-05-22 18:57 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-05-22 18:54 - 2011-04-12 09:43 - 00699432 _____ C:\Windows\system32\perfh007.dat 2016-05-22 18:54 - 2011-04-12 09:43 - 00149572 _____ C:\Windows\system32\perfc007.dat 2016-05-22 18:54 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-22 18:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-05-22 18:53 - 2015-03-11 20:44 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-05-22 18:53 - 2015-03-11 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-05-22 18:53 - 2015-03-11 20:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-05-22 18:50 - 2015-03-04 23:19 - 00000000 ___RD C:\Users\Ben\Dropbox 2016-05-22 18:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-05-22 18:48 - 2015-12-26 07:38 - 00296592 _____ C:\bdlog.txt 2016-05-22 18:48 - 2013-10-12 19:28 - 00000000 ____D C:\AdwCleaner 2016-05-22 18:38 - 2015-08-15 12:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-05-22 18:38 - 2015-06-18 18:28 - 00001216 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job 2016-05-22 18:26 - 2014-04-06 17:25 - 00000000 ____D C:\ProgramData\elsterformular 2016-05-22 18:24 - 2014-04-06 17:25 - 00000000 ____D C:\Program Files (x86)\ElsterFormular 2016-05-22 18:24 - 2012-08-16 20:37 - 00000000 ____D C:\Users\Ben 2016-05-22 07:00 - 2012-08-17 03:18 - 00000000 ____D C:\Users\Ben\AppData\Roaming\vlc 2016-05-22 06:26 - 2015-11-02 20:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-05-22 06:01 - 2015-04-14 01:51 - 00000080 _____ C:\Users\Ben\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2016-05-22 05:27 - 2015-05-02 22:15 - 00005536 _____ C:\Users\Ben\Desktop\Kosten.txt 2016-05-21 19:38 - 2015-06-18 18:28 - 00001164 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job 2016-05-21 17:56 - 2012-08-19 16:49 - 00000000 _____ C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2016-05-21 16:50 - 2014-02-01 17:31 - 00000201 _____ C:\Users\Ben\Desktop\TO DO! BICHT!!!.txt 2016-05-21 14:51 - 2015-03-04 23:19 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Dropbox 2016-05-21 00:48 - 2013-08-26 11:01 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-21 00:15 - 2014-09-13 14:31 - 00001530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2016-05-21 00:15 - 2013-11-27 20:47 - 00000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-05-21 00:15 - 2013-09-13 21:51 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-21 00:15 - 2012-08-17 03:21 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-05-21 00:15 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-05-21 00:14 - 2016-03-28 20:56 - 00002165 _____ C:\Users\Public\Desktop\Preset Manager 1.0.lnk 2016-05-21 00:14 - 2016-01-12 00:56 - 00001831 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2016-05-21 00:14 - 2015-03-21 03:54 - 00002168 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2016-05-21 00:14 - 2014-11-30 20:11 - 00000761 _____ C:\Users\Public\Desktop\Assetto Corsa.lnk 2016-05-21 00:14 - 2014-08-31 01:09 - 00000953 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk 2016-05-21 00:14 - 2014-04-20 21:02 - 00001101 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk 2016-05-21 00:14 - 2014-04-13 19:36 - 00001100 _____ C:\Users\Public\Desktop\Picasa 3.lnk 2016-05-21 00:14 - 2013-09-13 21:51 - 00001141 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-21 00:14 - 2013-08-23 01:01 - 00001060 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-05-21 00:14 - 2013-03-20 21:54 - 00001944 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2016-05-21 00:14 - 2012-12-25 18:54 - 00000704 _____ C:\Users\Public\Desktop\Winamp.lnk 2016-05-21 00:14 - 2012-09-21 01:34 - 00001779 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001923 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001911 _____ C:\Users\Public\Desktop\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-16 20:38 - 00001321 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-05-21 00:14 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-05-21 00:14 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-05-21 00:13 - 2015-10-13 23:16 - 00000941 _____ C:\Users\Ben\Desktop\Magic Bullet Looks.lnk 2016-05-21 00:13 - 2015-03-04 23:19 - 00001009 _____ C:\Users\Ben\Desktop\Drobox.lnk 2016-05-21 00:13 - 2014-12-17 22:53 - 00001827 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk 2016-05-21 00:13 - 2014-10-19 19:41 - 00000905 _____ C:\Users\Ben\Desktop\GTR2.lnk 2016-05-21 00:13 - 2014-09-13 15:19 - 00001038 _____ C:\Users\Ben\Desktop\Vegas Pro 13.0 (64-bit).lnk 2016-05-21 00:13 - 2014-07-10 01:26 - 00000783 _____ C:\Users\Ben\Desktop\Zeug vom Desktop.lnk 2016-05-21 00:13 - 2013-11-27 23:49 - 00000924 _____ C:\Users\Ben\Desktop\GIMP.lnk 2016-05-21 00:13 - 2013-03-20 22:03 - 00000763 _____ C:\Users\Ben\Desktop\GTR Evolution.lnk 2016-05-21 00:13 - 2012-12-30 04:03 - 00001563 _____ C:\Users\Ben\Desktop\Counter-Strike Source.lnk 2016-05-21 00:13 - 2012-11-06 22:55 - 00000961 _____ C:\Users\Ben\Desktop\TeamSpeak 3 Client.lnk 2016-05-21 00:13 - 2012-10-03 14:32 - 00000684 _____ C:\Users\Ben\Desktop\Free PDF to Word Doc Converter.lnk 2016-05-21 00:13 - 2012-09-21 01:34 - 00001793 _____ C:\Users\Ben\Desktop\Spotify.lnk 2016-05-21 00:13 - 2012-08-19 16:49 - 00000842 _____ C:\Users\Ben\Desktop\BitLord.lnk 2016-05-21 00:13 - 2012-08-16 21:17 - 00000355 _____ C:\Users\Ben\Desktop\Arbeitsplatz.lnk 2016-05-21 00:05 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-05-20 21:00 - 2012-11-06 22:56 - 00000000 ____D C:\Users\Ben\AppData\Roaming\TS3Client 2016-05-20 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-05-16 20:18 - 2012-09-01 01:53 - 00000371 _____ C:\Users\Ben\Desktop\TO DO.txt 2016-05-15 05:09 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2016-05-15 05:06 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Bitdefender 2016-05-15 03:51 - 2014-11-12 01:50 - 00000000 ____D C:\Users\Ben\AppData\LocalLow\boost_interprocess 2016-05-14 04:13 - 2014-04-05 20:01 - 00000000 ____D C:\Users\Ben\Desktop\CS 2014 2016-05-13 21:19 - 2016-03-29 01:26 - 00004230 _____ C:\Windows\System32\Tasks\AMD Updater 2016-05-13 21:17 - 2016-03-29 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-05-13 21:17 - 2013-12-29 21:05 - 00000000 ____D C:\Program Files\AMD 2016-05-13 07:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-13 07:38 - 2015-08-15 12:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-13 07:38 - 2015-07-23 00:54 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-13 07:38 - 2015-07-23 00:54 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-12 22:29 - 2012-08-16 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative 2016-05-12 22:29 - 2012-08-16 20:56 - 00000000 ____D C:\Program Files (x86)\Creative 2016-05-12 08:09 - 2015-04-15 19:16 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-12 08:04 - 2014-12-23 18:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 02:19 - 2014-08-20 22:58 - 00000000 ____D C:\Users\Ben\AppData\Local\Adobe 2016-05-11 23:25 - 2012-08-16 20:50 - 00000000 ____D C:\AMD 2016-05-11 22:53 - 2013-07-11 11:30 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 21:51 - 2009-07-14 06:45 - 05050848 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 21:50 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 18:01 - 2012-08-16 21:20 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-10 21:58 - 2012-08-16 20:47 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Adobe 2016-05-08 18:39 - 2012-10-28 19:22 - 00000000 ____D C:\Users\Ben\AppData\Local\CrashDumps 2016-05-06 17:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-05-06 17:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\system32\GWX 2016-05-05 22:28 - 2013-09-13 21:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-27 21:43 - 2012-08-16 20:53 - 00120496 _____ C:\Users\Ben\AppData\Local\GDIPFONTCACHEV1.DAT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-01-12 00:56 - 2016-01-12 00:56 - 15566737 _____ () C:\Program Files\FileZilla3141.zip 2012-08-19 16:49 - 2016-05-21 17:56 - 0000000 _____ () C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2012-10-13 19:23 - 2013-12-12 01:51 - 0005632 _____ () C:\Users\Ben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-11-17 22:30 - 2015-11-17 22:30 - 0000842 _____ () C:\Users\Ben\AppData\Local\recently-used.xbel 2012-09-12 20:33 - 2013-04-21 19:02 - 0007605 _____ () C:\Users\Ben\AppData\Local\resmon.resmoncfg Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\Public\AlexaNSISPlugin.6936.dll Einige Dateien in TEMP: ==================== C:\Users\Ben\AppData\Local\Temp\$avantbrowser$.update.exe C:\Users\Ben\AppData\Local\Temp\AMDCleanupUtility.exe C:\Users\Ben\AppData\Local\Temp\avgnt.exe C:\Users\Ben\AppData\Local\Temp\cdo1138856251.dll C:\Users\Ben\AppData\Local\Temp\cdo1148406675.dll C:\Users\Ben\AppData\Local\Temp\cdo1190206193.dll C:\Users\Ben\AppData\Local\Temp\cdo1268291816.dll C:\Users\Ben\AppData\Local\Temp\cdo1594728973.dll C:\Users\Ben\AppData\Local\Temp\cdo1630582100.dll C:\Users\Ben\AppData\Local\Temp\cdo1650198476.dll C:\Users\Ben\AppData\Local\Temp\cdo1680738936.dll C:\Users\Ben\AppData\Local\Temp\cdo2299574333.dll C:\Users\Ben\AppData\Local\Temp\cdo2334430240.dll C:\Users\Ben\AppData\Local\Temp\cdo2434732372.dll C:\Users\Ben\AppData\Local\Temp\cdo2445184739.dll C:\Users\Ben\AppData\Local\Temp\cdo262939885.dll C:\Users\Ben\AppData\Local\Temp\cdo272904227.dll C:\Users\Ben\AppData\Local\Temp\cdo2742429460.dll C:\Users\Ben\AppData\Local\Temp\cdo2816061061.dll C:\Users\Ben\AppData\Local\Temp\cdo3019167050.dll C:\Users\Ben\AppData\Local\Temp\cdo3268099613.dll C:\Users\Ben\AppData\Local\Temp\cdo340310218.dll C:\Users\Ben\AppData\Local\Temp\cdo3432201221.dll C:\Users\Ben\AppData\Local\Temp\cdo3453013635.dll C:\Users\Ben\AppData\Local\Temp\cdo3505807980.dll C:\Users\Ben\AppData\Local\Temp\cdo3608878176.dll C:\Users\Ben\AppData\Local\Temp\cdo374867413.dll C:\Users\Ben\AppData\Local\Temp\cdo3932243946.dll C:\Users\Ben\AppData\Local\Temp\cdo3967037980.dll C:\Users\Ben\AppData\Local\Temp\cdo4045656951.dll C:\Users\Ben\AppData\Local\Temp\cdo4072745525.dll C:\Users\Ben\AppData\Local\Temp\cdo521549086.dll C:\Users\Ben\AppData\Local\Temp\cdo561457612.dll C:\Users\Ben\AppData\Local\Temp\cdo759103143.dll C:\Users\Ben\AppData\Local\Temp\cdo865636502.dll C:\Users\Ben\AppData\Local\Temp\cdo973371756.dll C:\Users\Ben\AppData\Local\Temp\Cleanup.dll C:\Users\Ben\AppData\Local\Temp\ddu.exe C:\Users\Ben\AppData\Local\Temp\difxapi.dll C:\Users\Ben\AppData\Local\Temp\DivXSetup.exe C:\Users\Ben\AppData\Local\Temp\libeay32.dll C:\Users\Ben\AppData\Local\Temp\msvcm80.dll C:\Users\Ben\AppData\Local\Temp\msvcp80.dll C:\Users\Ben\AppData\Local\Temp\msvcr120.dll C:\Users\Ben\AppData\Local\Temp\msvcr80.dll C:\Users\Ben\AppData\Local\Temp\playstv_patch.exe C:\Users\Ben\AppData\Local\Temp\radeon-crimson-16.3.2-minimalsetup.exe C:\Users\Ben\AppData\Local\Temp\raptrpatch.exe C:\Users\Ben\AppData\Local\Temp\raptr_stub.exe C:\Users\Ben\AppData\Local\Temp\sqlite3.dll C:\Users\Ben\AppData\Local\Temp\tmp4FE3.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-18 07:54 ==================== Ende von FRST.txt ============================ |
|
22.05.2016, 18:16
| #8 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:22-05-2016 01
durchgeführt von Ben (2016-05-22 19:13:47)
Gestartet von C:\Users\Ben\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-08-16 18:37:21)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2410925410-2808068811-915591143-500 - Administrator - Disabled)
Ben (S-1-5-21-2410925410-2808068811-915591143-1000 - Administrator - Enabled) => C:\Users\Ben
Gast (S-1-5-21-2410925410-2808068811-915591143-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2410925410-2808068811-915591143-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avant Browser (remove only) (HKLM-x32\...\AvantBrowser) (Version: 12.5.0.0 - Avant Force)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.17.1000 - Bitdefender)
Bitdefender Total Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.28.1478 - Bitdefender)
BitLord 2.1 (HKLM-x32\...\BitLord) (Version: 2.1.1-91 - House of Life)
Catalyst Control Center Next Localization BR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Creative Music Server (HKLM-x32\...\Music Server) (Version: 1.01 - Creative Technology Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.77 - DivX, LLC)
Dropbox (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Dropbox) (Version: 3.20.1 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.3.19290 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
FilmConvert Pro 2.1 AE (HKLM\...\{CC62E726-2E52-4E16-9AF5-8991119A3667}) (Version: 2.12 - Rubber Monkey Software)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free Pdf Perfect Prereq (HKLM-x32\...\{8a8f0ec0-a24b-4eb8-b811-2cf05c4d1c85}) (Version: 1.1.0.80 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.1.0.80 - Covus Freemium GmbH) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 11.5.1.0 - Lightworks)
Logitech Gaming Software 8.78 (HKLM\...\Logitech Gaming Software) (Version: 8.78.129 - Logitech Inc.)
Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{E7676EF4-3896-4B7E-B030-1356EEC477CE}) (Version: 11.4.4 - Red Giant)
Magic Bullet Suite 64-bit (Version: 11.4.4 - Red Giant) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Motorola Driver Installation 3.2.0 (HKLM\...\{A7B9041E-9635-4AFF-BB1E-EFAF490A231B}) (Version: 3.2.0 - Motorola Inc.)
Motorola Phone Tools (HKLM-x32\...\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}) (Version: 4.60 - Avanquest Software)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Multi-Card Reader & Flash Disk (HKLM-x32\...\{83F3EED2-DDE2-4434-8FBE-9D2A1E7C2BC9}) (Version: 1.00.0000 - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.10.1-r112682-release - Plays.tv, LLC)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.0-r112326-release - Raptr, Inc)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Sonic Foundry Preset Manager 1.0 (HKLM-x32\...\{7266C898-F9CB-4122-9452-2AA1DACE245E}) (Version: 1.0.73 - Sonic Foundry)
Sound Blaster Recon3D PCIe (HKLM-x32\...\{F380C602-98E8-49AB-8C3F-8A73BACA45DD}) (Version: 1.00.22 - Creative Technology Limited)
Sound Blaster Recon3D PCIe Extras (HKLM-x32\...\{204FCF73-1450-407D-BCF9-1233EC5F5787}) (Version: 1.0 - Creative Technology Limited)
Spotify (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)
Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Test Drive Unlimited (HKLM-x32\...\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}) (Version: 1.00.0000 - Atari)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1-3) (Version: 1.0.3.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (Version: 1.0.3.1 - LunarG, Inc.) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {047D8A27-C9C0-4509-B54B-0DAAE60A46CF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {108EC6FD-E65D-4308-A188-EAC5ABBB8E77} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe
Task: {1D70820A-630E-4F59-82B4-BF7CF33CECF1} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {2439EA23-D503-4688-8E37-FBFA8EB9AD95} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-03-30] (Bitdefender)
Task: {3169177F-2AA2-4BEF-BCC6-B0D125EB68A2} - System32\Tasks\{A9CE6C82-5B6C-4C81-9C82-F507E1E7B46A} => c:\program files (x86)\avant browser\avant.exe [2016-01-04] (Avant Force)
Task: {5E002749-4D84-4067-A8DF-04F377230DC6} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe
Task: {5E7983E5-5405-40E6-AE09-95A1217116F8} - System32\Tasks\{3AAAF176-F7EF-41D0-AFD3-9F269021114C} => pcalua.exe -a C:\Users\Ben\Downloads\winessentials2012-all.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {8D528501-7480-4A00-86D1-D12981FF9E0B} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {96E7E24E-45B0-4A1A-8C08-D03C85F54B46} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {C9D881A2-1624-42AF-9730-0C1C0E03AA6D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {DB598486-F771-4C91-BDF3-6B16D26723ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated)
Task: {E3D8DC2C-B845-49CA-85F1-FE7A92BE57E0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-05-15 05:09 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-05-15 05:09 - 2016-05-09 11:29 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl
2015-10-16 12:02 - 2015-10-16 12:02 - 00043480 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2012-08-19 01:01 - 2014-06-28 22:53 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-11-24 22:48 - 2015-11-24 22:48 - 00028160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\servicemanager.pyd
2015-11-24 22:46 - 2015-11-24 22:46 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes26.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00041472 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32service.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_hashlib.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00017920 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32event.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00019968 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32evtlog.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_socket.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ssl.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ctypes.pyd
2015-11-24 22:46 - 2015-11-24 22:46 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom26.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 01980928 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd
2015-12-07 22:57 - 2015-12-07 22:57 - 00077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 01862144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00516608 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 04060160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\select.pyd
2015-03-12 13:39 - 2016-04-28 00:44 - 47503472 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libcef.dll
2015-03-12 13:39 - 2016-04-28 00:44 - 01584240 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libglesv2.dll
2015-03-12 13:39 - 2016-04-28 00:44 - 00082032 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Ben\Desktop\AdwCleaner_5.117.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\JRT.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\mbam-setup-2.2.1.1043(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\tdsskiller.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\autodetectutility.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\LGS_8.78.129_x64_Logitech.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe:BDU [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-22 18:50 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 80.69.96.12 - 81.210.129.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{82260939-98DA-4CF5-9C00-9AFA5E95AA50}] => (Allow) C:\Users\Ben\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{25154B17-4D55-4FE8-8E67-FCD87680A227}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{628A90DC-41D2-444F-A67F-E1BD8E4F0E41}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8F23AC69-6661-4809-9743-AF44604219F2}] => (Allow) LPort=2869
FirewallRules: [{4832E087-A6A2-4E70-B1A2-E0B398DACAFE}] => (Allow) LPort=1900
FirewallRules: [{1922A093-3790-4EC7-A53A-6CADAE8A44C5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E99B4A98-D497-414D-9FD1-5884C0234449}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{206CF8F8-DC43-4B9D-9704-95CB89DFA822}C:\games\gta 4\gta 4eflc\eflc.exe] => (Allow) C:\games\gta 4\gta 4eflc\eflc.exe
FirewallRules: [UDP Query User{CF287F40-8FC9-4BE4-A0F1-CB8931BA45FD}C:\games\gta 4\gta 4eflc\eflc.exe] => (Allow) C:\games\gta 4\gta 4eflc\eflc.exe
FirewallRules: [{393B2B65-7498-446E-9454-31AF969079A6}] => (Allow) C:\Games\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe
FirewallRules: [{2A4F1161-4EAB-445E-B3B0-83FCEE695245}] => (Allow) C:\Games\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe
FirewallRules: [{45AC98BB-E418-4060-979A-CC8CDECBFFAC}] => (Allow) C:\Games\GTA 4\EFLC\LaunchEFLC.exe
FirewallRules: [{541DBC10-74B6-4AD2-AE3F-C380AE5A2C9F}] => (Allow) C:\Games\GTA 4\EFLC\LaunchEFLC.exe
FirewallRules: [{11A821F3-0F61-4472-835D-D3252B192DA2}] => (Allow) C:\Games\Battlefield 3\Battlefield 3\bf3.exe
FirewallRules: [{5F3835D6-4C80-4333-BC5A-08C34ED914EB}] => (Allow) C:\Games\Battlefield 3\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{41B15344-3A5A-4636-9C3F-35DA75AF76B3}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{A8AE8963-A576-47D4-98F6-DEDB80BC85B8}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{6FB41EF5-9FAB-4581-B977-1689EC9AA7EF}D:\games\testdriveunlimited.exe] => (Allow) D:\games\testdriveunlimited.exe
FirewallRules: [UDP Query User{64387FEB-814E-4783-B293-7A5B606EECF7}D:\games\testdriveunlimited.exe] => (Allow) D:\games\testdriveunlimited.exe
FirewallRules: [TCP Query User{FEEE3324-D95D-467A-9D64-BCFEB5CDE67A}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe] => (Allow) C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe
FirewallRules: [UDP Query User{FF0A685C-670E-438D-9F26-DD577A62366E}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe] => (Allow) C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe
FirewallRules: [TCP Query User{AEFFE17A-1F00-4847-A1EF-F493A03005F5}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3AE65D60-5D1B-47CE-9586-7C55D5EC00D2}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5BB8176F-A8A6-4DE3-B257-D8C3F3A80DC0}] => (Allow) D:\Games\Counterstrike Source\Steam.exe
FirewallRules: [{3087D8F2-2770-4EB3-93FA-1CB8D9EBE2BA}] => (Allow) D:\Games\Counterstrike Source\Steam.exe
FirewallRules: [{7910C34F-3285-45AA-BFD7-FAD0D88395F3}] => (Allow) D:\Games\Counterstrike Source\SteamApps\benda88\counter-strike source\hl2.exe
FirewallRules: [{94D2A57D-B23E-4A9C-AAB7-8C1D21B4D964}] => (Allow) D:\Games\Counterstrike Source\SteamApps\benda88\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{04BD9203-48D0-43FB-ADB5-3B4BEEFAC68D}D:\programme\winamp\winamp.exe] => (Allow) D:\programme\winamp\winamp.exe
FirewallRules: [UDP Query User{97B7F389-B7F6-4E29-816C-B6AFF4B0851F}D:\programme\winamp\winamp.exe] => (Allow) D:\programme\winamp\winamp.exe
FirewallRules: [{5E377E07-10F7-4290-834F-BE58812E6F76}] => (Block) D:\programme\winamp\winamp.exe
FirewallRules: [{FE01EF9E-1888-4F86-816C-13FEC81B8906}] => (Block) D:\programme\winamp\winamp.exe
FirewallRules: [{9EB42E62-BF36-468A-AD79-7BFA198420FB}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{0E8F294B-AA4C-4C0C-A89A-8DCB2B379F97}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [TCP Query User{AD4C25ED-3062-4A43-972C-A164F892CA4A}D:\games\testdrive unlimited\testdriveunlimited.exe] => (Allow) D:\games\testdrive unlimited\testdriveunlimited.exe
FirewallRules: [UDP Query User{03D42D7C-D749-47C3-A115-92052FC7BA6C}D:\games\testdrive unlimited\testdriveunlimited.exe] => (Allow) D:\games\testdrive unlimited\testdriveunlimited.exe
FirewallRules: [{DDFA1555-97C2-46B0-9EA2-F23A325CBE60}] => (Allow) C:\SoloApp\SoloApp.exe
FirewallRules: [{16B8A47D-851E-4B3B-B421-09DE3FBAF84A}] => (Allow) C:\SoloApp\SoloApp.exe
FirewallRules: [{0BABDB57-3DB9-4296-8910-3C3A458E26C3}] => (Allow) C:\SoloApp\WebDriver.dll
FirewallRules: [{C42BDDA3-6536-4111-B58A-A4DC604596D4}] => (Allow) C:\SoloApp\WebDriver.dll
FirewallRules: [{2E552CE9-5D38-4D4B-9261-9D0479D260E6}] => (Allow) C:\SoloApp\chromedriver.exe
FirewallRules: [{EA72BB57-06FA-43A8-809F-A8E0BD324793}] => (Allow) C:\SoloApp\chromedriver.exe
FirewallRules: [{85327394-1EA3-41C3-8295-882DA9AABA80}] => (Allow) C:\SoloApp\IEDriverServer.exe
FirewallRules: [{59E3AD89-526E-4CE5-A319-A0FD621B228B}] => (Allow) C:\SoloApp\IEDriverServer.exe
FirewallRules: [{E024DEBB-03E5-47CA-B70E-92766CED54DE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{3ABAA23A-8BFB-4EB2-8DA1-82123A967CF1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [TCP Query User{5874D941-0FC7-42EF-8050-2C2DCC96B2D0}D:\games\driver by r.g recoding\driver san francisco\driver.exe] => (Allow) D:\games\driver by r.g recoding\driver san francisco\driver.exe
FirewallRules: [UDP Query User{68DB7F72-1DD4-4DCF-91BE-72184861371D}D:\games\driver by r.g recoding\driver san francisco\driver.exe] => (Allow) D:\games\driver by r.g recoding\driver san francisco\driver.exe
FirewallRules: [{9ACC3141-D46C-4D44-A2DB-1BD3E96D978C}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{885550AC-3588-4E68-B087-C790349D8D90}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{2BE45B6C-8AD5-44E9-81D1-AF5402FBF669}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{DADD3DCA-1071-472C-92A9-E64CA531B2C9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F917194D-DDAD-4861-95EA-9DEFC1FEDE99}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{094439D1-78A6-4465-BA4F-0AF00A70C56A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{E528D144-291B-47AE-B1A7-438F69209663}] => (Allow) C:\Program Files\Lightworks\Lightworks.exe
FirewallRules: [{9414D52A-356D-4445-AF87-65B2F30D3EDB}] => (Allow) C:\Program Files\Lightworks\Lightworks.exe
FirewallRules: [{47DAECFD-815F-49A6-8F87-D70715039F47}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{C06619D5-7B86-42D5-AE32-FC84F9C87B28}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{7A120E79-F033-4AA1-A9FF-615F241D0D66}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe
FirewallRules: [{8A374DED-2F2B-4F9E-AF22-9C454D7F1CCE}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe
FirewallRules: [{EDCCE99B-1EA3-47CE-A180-32C6A54CB100}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe
FirewallRules: [{25280AF1-DB85-4D61-A3EB-2666FEE353F6}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe
FirewallRules: [{DAFA6341-541B-4258-89DC-21E508D66D0C}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe
FirewallRules: [{1B92803D-78EE-4CA3-917A-54A56465E2D7}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe
FirewallRules: [{197BADFC-8B73-4AEC-B698-81FB4A986367}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4BB326BF-F30F-473A-B678-121F376A2CAC}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A6405B9B-8E9C-4C96-B865-ED3BB17D5B35}] => (Allow) D:\Games\Counterstrike Source\bin\steamwebhelper.exe
FirewallRules: [{15F40517-A2A2-417E-A022-14C5740432A3}] => (Allow) D:\Games\Counterstrike Source\bin\steamwebhelper.exe
FirewallRules: [{81E16F13-F192-4E70-A1C3-997E8C7EBFC2}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{2BBE5E67-77A6-4186-9DF8-FBC55AE854AC}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{3C063478-BCEF-4476-9EBC-2A5E4FE4E773}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{5CC72709-3E1A-4EB0-B840-F286F819C1D5}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{DD965C84-3B6D-4725-B883-4324E8C77DC9}] => (Allow) C:\Program Files (x86)\Lightworks\Lightworks.exe
FirewallRules: [{9DB1D22C-05A8-4712-A437-9B0B47EB855D}] => (Allow) C:\Program Files (x86)\Lightworks\Lightworks.exe
FirewallRules: [{6913B43D-9873-4FBB-B769-1A82F9F15375}] => (Allow) C:\Program Files (x86)\Lightworks\ntcardvt.exe
FirewallRules: [{691A9809-E0E6-443C-B66D-3F95929112B8}] => (Allow) C:\Program Files (x86)\Lightworks\ntcardvt.exe
FirewallRules: [{3C5FFFA2-1690-4AF5-923A-3455D97B987D}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{C81672B3-E8B7-4F92-B618-BA3F20058B0B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{28FE4EA2-EC33-4F6A-9C64-412962B618BA}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{1C26F5D9-7121-4C1D-97DD-B5F8D311F2B9}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [TCP Query User{5FB64045-55F3-4905-9CFE-2BC184BEAD15}G:\games\assetto corsa\acs.exe] => (Allow) G:\games\assetto corsa\acs.exe
FirewallRules: [UDP Query User{0A3FA8DF-6667-4D0F-B51B-D5A10AA30E69}G:\games\assetto corsa\acs.exe] => (Allow) G:\games\assetto corsa\acs.exe
FirewallRules: [{237FCB0F-7306-470C-9EF6-FB3973916181}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1E0450BC-05C4-483E-8F71-31642CD5145F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B94E786B-2B31-4018-A9E2-CABDE7FA9381}] => (Allow) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F39379B5-8A6C-4A8F-AF86-FB60705DEB9F}] => (Allow) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{692FB58F-7447-47AF-AFBE-468926958B4C}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{EDA28318-E5DF-4C2C-B95D-CEB4B21AF016}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{21D44B44-2146-4C8D-952B-F032F505A26E}D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{27E6EA01-198F-4D61-A04F-8CCEF56F6594}D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{01F55C7A-CE01-4CD8-B34D-66EE1F235B3C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{BEC734A2-5A94-47DB-9023-6865E154C06F}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{772F2A32-23D0-4CF1-9990-26E68FB7AF1D}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{3F46ADF1-FC33-442F-83B3-ADFFA3655183}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{D4AC49EE-A302-441E-944B-DFBB845C72D3}C:\program files\sony\vegas pro 13.0\vegas130.exe] => (Allow) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [UDP Query User{AC5B96E9-3181-45A3-8DC9-866DFF01A97C}C:\program files\sony\vegas pro 13.0\vegas130.exe] => (Allow) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{BFBFE7AD-DC80-4191-A1A1-FE127D60855A}] => (Block) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{0A3F3D33-B641-4E8C-8939-0AA423B31C71}] => (Block) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{495B296D-931F-4890-8686-77CC51E21F4F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B108BE5-D3BB-4FCC-A009-DAC30E3A342A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{24B5DB29-7B0B-4004-A38B-6E91FB5403F0}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{A23EC090-1F9D-44E5-8AFC-FC1E787F5764}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{2D753C63-80CC-420A-9EA7-0EEB52A36DBD}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{BEB9B362-B23E-41B7-9F83-584EAAB333FC}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{27B604C1-5D3C-4A20-8B24-E73A3D26D894}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{361501C3-EF2F-4CA3-BA08-CA1F0B1F4703}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{B4D90F43-B272-4298-98BF-D2790D44E0B3}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B2187E78-48B7-4D95-9904-D50A4B212B83}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{3B402AEC-BC41-41D3-AB15-E5F484850458}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{C347660E-084E-4C67-B862-147417EF0B2A}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
==================== Wiederherstellungspunkte =========================
21-05-2016 18:30:45 Geplanter Prüfpunkt
22-05-2016 19:06:22 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/12/2016 07:52:19 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ben-PC)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F104E4700}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (05/08/2016 06:39:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DivX Player.exe, Version: 11.3.10.75, Zeitstempel: 0x55ce1f99
Name des fehlerhaften Moduls: DMFContainer.dll, Version: 1.5.0.3, Zeitstempel: 0x55cd83fd
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0008cc21
ID des fehlerhaften Prozesses: 0x1d30
Startzeit der fehlerhaften Anwendung: 0xDivX Player.exe0
Pfad der fehlerhaften Anwendung: DivX Player.exe1
Pfad des fehlerhaften Moduls: DivX Player.exe2
Berichtskennung: DivX Player.exe3
Error: (05/08/2016 06:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DivX Player.exe, Version: 11.3.10.75, Zeitstempel: 0x55ce1f99
Name des fehlerhaften Moduls: DMFContainer.dll, Version: 1.5.0.3, Zeitstempel: 0x55cd83fd
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0008cc21
ID des fehlerhaften Prozesses: 0x990
Startzeit der fehlerhaften Anwendung: 0xDivX Player.exe0
Pfad der fehlerhaften Anwendung: DivX Player.exe1
Pfad des fehlerhaften Moduls: DivX Player.exe2
Berichtskennung: DivX Player.exe3
Error: (05/05/2016 07:40:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Name des fehlerhaften Moduls: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000664856
ID des fehlerhaften Prozesses: 0x1f70
Startzeit der fehlerhaften Anwendung: 0xGTA5.exe0
Pfad der fehlerhaften Anwendung: GTA5.exe1
Pfad des fehlerhaften Moduls: GTA5.exe2
Berichtskennung: GTA5.exe3
Error: (04/04/2016 07:47:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Spotify.exe, Version 1.0.25.127 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: e10
Startzeit: 01d18e99f23f6467
Endzeit: 0
Anwendungspfad: C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe
Berichts-ID: 4a812025-fa8d-11e5-92eb-bc5ff44945d9
Error: (03/28/2016 04:09:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 15f4
Startzeit: 01d188fb213b5fbe
Endzeit: 121
Anwendungspfad: D:\Games\Counterstrike Source\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Berichts-ID:
Error: (03/25/2016 02:57:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Name des fehlerhaften Moduls: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000359135b
ID des fehlerhaften Prozesses: 0x141c
Startzeit der fehlerhaften Anwendung: 0xGTA5.exe0
Pfad der fehlerhaften Anwendung: GTA5.exe1
Pfad des fehlerhaften Moduls: GTA5.exe2
Berichtskennung: GTA5.exe3
Error: (03/19/2016 08:50:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm vlc.exe, Version 2.2.1.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1838
Startzeit: 01d1821010e13c8a
Endzeit: 5
Anwendungspfad: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
Berichts-ID:
Error: (03/19/2016 03:17:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avant.exe, Version: 12.5.0.0, Zeitstempel: 0x5689f08e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.19160, Zeitstempel: 0x56bcd51f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f644
ID des fehlerhaften Prozesses: 0x1230
Startzeit der fehlerhaften Anwendung: 0xavant.exe0
Pfad der fehlerhaften Anwendung: avant.exe1
Pfad des fehlerhaften Moduls: avant.exe2
Berichtskennung: avant.exe3
Error: (03/09/2016 10:06:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2bc
Startzeit: 01d17a3f110dce49
Endzeit: 11
Anwendungspfad: D:\Games\Counterstrike Source\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Berichts-ID:
Systemfehler:
=============
Error: (05/22/2016 06:48:34 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Error: (05/22/2016 06:48:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/22/2016 06:48:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/22/2016 06:48:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/22/2016 06:48:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/22/2016 06:48:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ProductAgentService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/22/2016 06:48:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/22/2016 06:48:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Plays.tv Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/22/2016 06:48:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/22/2016 06:48:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2014-10-14 06:39:27.577
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.576
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.574
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.572
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.571
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.570
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.619
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.618
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.617
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.615
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 22%
Installierter physikalischer RAM: 16279.03 MB
Verfügbarer physikalischer RAM: 12631.7 MB
Summe virtueller Speicher: 32556.25 MB
Verfügbarer virtueller Speicher: 29025.22 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:68.02 GB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:503.98 GB) NTFS
Drive f: (20141018_012547) (CDROM) (Total:5.36 GB) (Free:0 GB) UDF
Drive g: (Extern) (Fixed) (Total:1863.01 GB) (Free:646.23 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: A357D397)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 038D8719)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00273BB2)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
23.05.2016, 09:55
| #9 |
| /// TB-Ausbilder | Trojaner "searchprotect" und "tmp00000be1" entfernen Servus, gut gemacht.   Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
FF NewTab: about:home
FF Homepage: about:home
C:\Users\Public\AlexaNSISPlugin.6936.dll
Task: {1D70820A-630E-4F59-82B4-BF7CF33CECF1} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {5E7983E5-5405-40E6-AE09-95A1217116F8} - System32\Tasks\{3AAAF176-F7EF-41D0-AFD3-9F269021114C} => pcalua.exe -a C:\Users\Ben\Downloads\winessentials2012-all.exe -d "C:\Program Files (x86)\Mozilla Firefox"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
|
24.05.2016, 06:47
| #10 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:22-05-2016 01
durchgeführt von Ben (2016-05-24 07:38:53) Run:1
Gestartet von C:\Users\Ben\Desktop
Geladene Profile: Ben (Verfügbare Profile: Ben)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
SearchScopes: HKU\S-1-5-21-2410925410-2808068811-915591143-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
FF NewTab: about:home
FF Homepage: about:home
C:\Users\Public\AlexaNSISPlugin.6936.dll
Task: {1D70820A-630E-4F59-82B4-BF7CF33CECF1} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {5E7983E5-5405-40E6-AE09-95A1217116F8} - System32\Tasks\{3AAAF176-F7EF-41D0-AFD3-9F269021114C} => pcalua.exe -a C:\Users\Ben\Downloads\winessentials2012-all.exe -d "C:\Program Files (x86)\Mozilla Firefox"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
HKU\S-1-5-21-2410925410-2808068811-915591143-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich entfernt
Firefox "newtab" erfolgreich entfernt
Firefox "homepage" erfolgreich entfernt
C:\Users\Public\AlexaNSISPlugin.6936.dll => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1D70820A-630E-4F59-82B4-BF7CF33CECF1}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D70820A-630E-4F59-82B4-BF7CF33CECF1}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProtectedSearch\Protected Search => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5E7983E5-5405-40E6-AE09-95A1217116F8}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5E7983E5-5405-40E6-AE09-95A1217116F8}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{3AAAF176-F7EF-41D0-AFD3-9F269021114C} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3AAAF176-F7EF-41D0-AFD3-9F269021114C}" => Schlüssel erfolgreich entfernt
========= RemoveProxy: =========
HKU\S-1-5-21-2410925410-2808068811-915591143-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2410925410-2808068811-915591143-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl�sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zur�ckgesetzt.
Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en.
========= Ende von CMD: =========
EmptyTemp: => 3.1 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 07:40:30 ====
Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 07:44 on 24/05/2016 by Ben
Administrator - Elevation successful
========== regfind ==========
Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
Searching for "bvyvavay"
No data found.
Searching for "SimplyTech"
No data found.
Searching for "HomeTab"
No data found.
Searching for "Browser Updater"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater]
Searching for "ProtectedSearch"
No data found.
-= EOF =-
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:22-05-2016 01 durchgeführt von Ben (Administrator) auf BEN-PC (24-05-2016 07:46:18) Gestartet von C:\Users\Ben\Desktop Geladene Profile: Ben (Verfügbare Profile: Ben) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Windows\System32\igfxpers.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe (ICSI Technology Ltd.) C:\Windows\Dit.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (ICSI) C:\Windows\DitExp.exe (DivX, LLC) C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_ep64.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_ep64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Avant Force) C:\Program Files (x86)\Avant Browser\avant.exe (Avant Force) C:\Program Files (x86)\Avant Browser\avantvw.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15053944 2016-01-06] (Logitech Inc.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [5006536 2016-03-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1651600 2016-04-25] (Bitdefender) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE HKLM-x32\...\Run: [Sound Blaster Recon3D PCIe Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe [885760 2012-02-22] (Creative Technology Ltd) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Dit] => C:\Windows\Dit.exe [90112 2004-08-05] (ICSI Technology Ltd.) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-06-24] (DivX, LLC) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861640 2015-06-27] (DivX, LLC) HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-05-09] (Plays.tv, LLC) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-04-27] (Raptr, Inc) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Dropbox Update] => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify] => C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe [6890608 2016-04-28] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-28] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: F - F:\Setup.exe autorun HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: {0cffc0e7-918d-11e2-ba83-bc5ff44945d9} - F:\setup.exe HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-21] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-05-21] ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2016-05-21] ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4 Tcpip\..\Interfaces\{93459425-DE5C-4808-9F97-6026C69CD4BC}: [DhcpNameServer] 80.69.96.12 81.210.129.4 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-08-05] (DivX, LLC) FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Photoshop CS6\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [Keine Datei] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-03-22] (Apple Inc.) FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-images.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-maps.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\youtube.xml [2015-11-12] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{58827B9B-1E67-4411-915F-922793B7986B}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{A31C05CC-0B97-428B-80B9-224FF9550200}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{D3ED56D7-F8F1-4998-87F7-9D409CB38784}.xml [2012-08-26] FF Extension: NoScript - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-04-07] FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\artur.dubovoy@gmail.com [2016-05-17] FF Extension: Cliqz - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\cliqz@cliqz.com.xpi [2016-04-19] FF Extension: Blur - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\donottrackplus@abine.com.xpi [2015-12-17] FF Extension: TopLine - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid0-uIWxKlEIWnV1103pH2C8N6RsUe0@jetpack.xpi [2012-10-28] [ist nicht signiert] FF Extension: Mailvelope - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2015-12-08] FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\vdpure@link64.xpi [2016-01-22] FF Extension: Video DownloadHelper - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-05-09] FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-05-12] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-05-12] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\cliqz@cliqz.com => nicht gefunden Chrome: ======= CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-17] CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17] CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17] CHR Extension: (Google-Suche) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-07-03] CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-03] CHR Extension: (Google Mail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-07-03] CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Datei ist nicht signiert] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [103424 2013-02-14] (Creative Technology Ltd) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2016-01-06] (Logitech Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-09] (Plays.tv, LLC) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-28] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [947640 2016-03-30] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-04-25] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-05-11] (Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-03-18] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-03-18] (BitDefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [118608 2016-02-09] (BitDefender LLC) R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1044760 2013-02-14] (Creative Technology Ltd) R3 CTHDB; C:\Windows\System32\DRIVERS\CtHDb.sys [23640 2012-02-29] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2015-12-16] (BitDefender LLC) R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [298736 2016-03-03] (Bitdefender) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-24] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-02-22] (BitDefender S.R.L.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 b06bdrv; \SystemRoot\system32\drivers\bxvbda.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-24 07:44 - 2016-05-24 07:45 - 00002966 _____ C:\Users\Ben\Desktop\SystemLook.txt 2016-05-24 07:43 - 2016-05-24 07:43 - 00165376 _____ C:\Users\Ben\Desktop\SystemLook_x64.exe 2016-05-24 07:38 - 2016-05-24 07:40 - 00003232 _____ C:\Users\Ben\Desktop\Fixlog.txt 2016-05-23 21:03 - 2016-05-23 22:10 - 00000000 ____D C:\Users\Ben\Documents\BitLord 2016-05-23 21:03 - 2016-05-23 21:18 - 00000000 ____D C:\Users\Ben\AppData\Roaming\BitLord 2016-05-22 20:59 - 2016-05-22 20:59 - 00006386 _____ C:\Users\Ben\Desktop\ESt2015_Hassenzahl_Benedict.elfo 2016-05-22 19:12 - 2016-05-22 19:12 - 00000000 ____D C:\Users\Ben\Desktop\FRST-OlderVersion 2016-05-22 19:08 - 2016-05-22 19:08 - 00005747 _____ C:\Users\Ben\Desktop\JRT.txt 2016-05-22 19:05 - 2016-05-22 19:05 - 01610816 _____ (Malwarebytes) C:\Users\Ben\Desktop\JRT.exe 2016-05-22 19:04 - 2016-05-22 19:04 - 00002160 _____ C:\Users\Ben\Desktop\mbam.txt 2016-05-22 18:53 - 2016-05-22 18:53 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-05-22 18:52 - 2016-05-22 18:52 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Desktop\mbam-setup-2.2.1.1043(1).exe 2016-05-22 18:50 - 2016-05-22 18:50 - 00014306 _____ C:\Users\Ben\Desktop\AdwCleaner[C1].txt 2016-05-22 18:24 - 2016-05-22 18:24 - 00001229 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-05-22 18:24 - 2016-05-22 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2016-05-22 16:39 - 2016-05-24 07:46 - 00027151 _____ C:\Users\Ben\Desktop\FRST.txt 2016-05-22 16:39 - 2016-05-22 19:14 - 00055221 _____ C:\Users\Ben\Desktop\Addition.txt 2016-05-22 16:39 - 2016-05-22 19:12 - 02383360 _____ (Farbar) C:\Users\Ben\Desktop\FRST64.exe 2016-05-22 16:39 - 2016-05-22 16:39 - 03651136 _____ C:\Users\Ben\Desktop\AdwCleaner_5.117.exe 2016-05-22 16:39 - 2016-05-21 00:22 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Ben\Desktop\tdsskiller.exe 2016-05-22 16:39 - 2016-05-21 00:14 - 00001132 _____ C:\Users\Ben\Desktop\Avira Launcher.lnk 2016-05-21 00:22 - 2016-05-21 00:33 - 00220424 _____ C:\TDSSKiller.3.1.0.9_21.05.2016_00.22.30_log.txt 2016-05-21 00:22 - 2016-05-21 00:22 - 00071121 _____ C:\Users\Ben\Downloads\Addition.txt 2016-05-21 00:21 - 2016-05-24 07:46 - 00000000 ____D C:\FRST 2016-05-21 00:21 - 2016-05-21 00:22 - 00077166 _____ C:\Users\Ben\Downloads\FRST.txt 2016-05-20 22:59 - 2016-05-20 22:59 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe 2016-05-20 20:40 - 2016-05-21 00:45 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Avira 2016-05-20 20:38 - 2016-05-21 00:48 - 00000000 ____D C:\ProgramData\Avira 2016-05-15 16:33 - 2016-05-15 16:33 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2016-05-15 05:09 - 2016-05-21 00:14 - 00002116 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk 2016-05-15 05:09 - 2016-05-15 05:09 - 00253404 ____H C:\bdr-ld02 2016-05-15 05:09 - 2016-05-15 05:09 - 00009216 ____H C:\bdr-ld02.mbr 2016-05-15 05:09 - 2016-05-15 05:09 - 00000684 ____H C:\bdr-cf02 2016-05-15 05:09 - 2016-05-15 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016 2016-05-15 05:09 - 2016-03-03 01:36 - 00298736 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys 2016-05-15 05:09 - 2016-02-22 15:13 - 00511320 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2016-05-15 05:09 - 2015-12-16 05:53 - 00182936 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2016-05-15 05:09 - 2015-12-15 21:35 - 49760229 ____H C:\bdr-im02.gz 2016-05-15 05:09 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz02 2016-05-15 05:07 - 2016-05-15 05:10 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Bitdefender 2016-05-15 05:07 - 2016-03-18 06:58 - 00842152 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2016-05-15 05:07 - 2016-03-18 06:56 - 01623536 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2016-05-15 05:07 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2016-05-15 05:06 - 2016-05-15 05:26 - 00000000 ____D C:\ProgramData\Bitdefender 2016-05-15 05:05 - 2016-05-24 07:41 - 00000000 ____D C:\Program Files\Bitdefender Agent 2016-05-14 18:18 - 2016-05-14 18:18 - 00000000 ____D C:\Users\Ben\Desktop\AST Fahrwerk 2016-05-13 21:20 - 2016-05-15 03:45 - 00000000 ____D C:\Users\Ben\AppData\Local\AMD 2016-05-13 21:19 - 2016-05-13 21:19 - 00000000 _____ C:\Windows\ativpsrm.bin 2016-05-13 21:18 - 2016-05-13 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved 2016-05-13 21:17 - 2016-05-13 21:18 - 00000000 ____D C:\Program Files (x86)\Raptr 2016-05-13 21:17 - 2016-05-13 21:17 - 00000000 ____D C:\Program Files (x86)\AMD 2016-05-13 21:10 - 2016-05-13 21:10 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Ben\Downloads\autodetectutility.exe 2016-05-13 20:04 - 2016-05-13 20:04 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-05-13 07:13 - 2016-05-24 07:41 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Raptr 2016-05-12 22:32 - 2016-05-12 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV 2016-05-12 07:36 - 2016-05-24 07:41 - 00000000 ____D C:\Users\Ben\AppData\Roaming\PlaysTV 2016-05-12 07:35 - 2016-05-12 07:35 - 00000000 ____D C:\Program Files (x86)\Raptr Inc 2016-05-11 16:52 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 16:52 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 16:52 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 16:52 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 16:52 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 16:52 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 16:52 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 16:52 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 16:52 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 16:52 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 16:52 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 16:52 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 16:52 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 16:52 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 16:52 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 16:52 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 16:52 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 16:52 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 16:52 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 16:52 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 16:52 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 16:52 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 16:52 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 16:52 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 16:52 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 16:52 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 16:52 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 16:52 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 16:52 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 16:52 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 16:52 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 16:52 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 16:52 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 16:52 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 16:52 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 16:52 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 16:52 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-05 14:35 - 2016-05-05 22:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-04 18:30 - 2016-05-04 19:39 - 00000000 ____D C:\Users\Public\CineForm 2016-05-04 18:30 - 2016-05-04 19:29 - 00000000 ____D C:\Users\Ben\AppData\Roaming\GoPro 2016-05-04 18:30 - 2016-05-04 18:30 - 00000000 ____D C:\Users\Ben\AppData\Local\GoPro 2016-05-04 18:29 - 2016-05-04 18:29 - 00000000 ____D C:\Program Files (x86)\OpenAL 2016-04-27 21:28 - 2016-04-27 21:28 - 08306382 _____ C:\Users\Ben\Desktop\Infiltrate template.rar 2016-04-25 20:04 - 2014-12-29 21:16 - 00000000 ____D C:\Users\Ben\Desktop\Template ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-24 07:46 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Spotify 2016-05-24 07:45 - 2011-04-12 09:43 - 00699432 _____ C:\Windows\system32\perfh007.dat 2016-05-24 07:45 - 2011-04-12 09:43 - 00149572 _____ C:\Windows\system32\perfc007.dat 2016-05-24 07:45 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-24 07:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-05-24 07:41 - 2015-03-11 20:44 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-05-24 07:41 - 2015-03-04 23:19 - 00000000 ___RD C:\Users\Ben\Dropbox 2016-05-24 07:41 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Local\Spotify 2016-05-24 07:41 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-05-24 07:40 - 2015-12-26 07:38 - 00301283 _____ C:\bdlog.txt 2016-05-24 07:38 - 2015-08-15 12:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-05-24 07:38 - 2015-06-18 18:28 - 00001216 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job 2016-05-24 07:30 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-05-24 07:30 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-05-23 23:25 - 2012-08-17 03:18 - 00000000 ____D C:\Users\Ben\AppData\Roaming\vlc 2016-05-23 21:19 - 2015-04-14 01:51 - 00000080 _____ C:\Users\Ben\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2016-05-23 21:08 - 2012-08-19 16:49 - 00000000 _____ C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2016-05-23 19:38 - 2015-06-18 18:28 - 00001164 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job 2016-05-22 18:53 - 2015-03-11 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-05-22 18:53 - 2015-03-11 20:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-05-22 18:48 - 2013-10-12 19:28 - 00000000 ____D C:\AdwCleaner 2016-05-22 18:26 - 2014-04-06 17:25 - 00000000 ____D C:\ProgramData\elsterformular 2016-05-22 18:24 - 2014-04-06 17:25 - 00000000 ____D C:\Program Files (x86)\ElsterFormular 2016-05-22 18:24 - 2012-08-16 20:37 - 00000000 ____D C:\Users\Ben 2016-05-22 06:26 - 2015-11-02 20:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-05-22 05:27 - 2015-05-02 22:15 - 00005536 _____ C:\Users\Ben\Desktop\Kosten.txt 2016-05-21 16:50 - 2014-02-01 17:31 - 00000201 _____ C:\Users\Ben\Desktop\TO DO! BICHT!!!.txt 2016-05-21 14:51 - 2015-03-04 23:19 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Dropbox 2016-05-21 00:48 - 2013-08-26 11:01 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-21 00:15 - 2014-09-13 14:31 - 00001530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2016-05-21 00:15 - 2013-11-27 20:47 - 00000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-05-21 00:15 - 2013-09-13 21:51 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-21 00:15 - 2012-08-17 03:21 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-05-21 00:15 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-05-21 00:14 - 2016-03-28 20:56 - 00002165 _____ C:\Users\Public\Desktop\Preset Manager 1.0.lnk 2016-05-21 00:14 - 2016-01-12 00:56 - 00001831 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2016-05-21 00:14 - 2015-03-21 03:54 - 00002168 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2016-05-21 00:14 - 2014-11-30 20:11 - 00000761 _____ C:\Users\Public\Desktop\Assetto Corsa.lnk 2016-05-21 00:14 - 2014-08-31 01:09 - 00000953 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk 2016-05-21 00:14 - 2014-04-20 21:02 - 00001101 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk 2016-05-21 00:14 - 2014-04-13 19:36 - 00001100 _____ C:\Users\Public\Desktop\Picasa 3.lnk 2016-05-21 00:14 - 2013-09-13 21:51 - 00001141 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-21 00:14 - 2013-08-23 01:01 - 00001060 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-05-21 00:14 - 2013-03-20 21:54 - 00001944 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2016-05-21 00:14 - 2012-12-25 18:54 - 00000704 _____ C:\Users\Public\Desktop\Winamp.lnk 2016-05-21 00:14 - 2012-09-21 01:34 - 00001779 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001923 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001911 _____ C:\Users\Public\Desktop\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-16 20:38 - 00001321 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-05-21 00:14 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-05-21 00:14 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-05-21 00:13 - 2015-10-13 23:16 - 00000941 _____ C:\Users\Ben\Desktop\Magic Bullet Looks.lnk 2016-05-21 00:13 - 2015-03-04 23:19 - 00001009 _____ C:\Users\Ben\Desktop\Drobox.lnk 2016-05-21 00:13 - 2014-12-17 22:53 - 00001827 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk 2016-05-21 00:13 - 2014-10-19 19:41 - 00000905 _____ C:\Users\Ben\Desktop\GTR2.lnk 2016-05-21 00:13 - 2014-09-13 15:19 - 00001038 _____ C:\Users\Ben\Desktop\Vegas Pro 13.0 (64-bit).lnk 2016-05-21 00:13 - 2014-07-10 01:26 - 00000783 _____ C:\Users\Ben\Desktop\Zeug vom Desktop.lnk 2016-05-21 00:13 - 2013-11-27 23:49 - 00000924 _____ C:\Users\Ben\Desktop\GIMP.lnk 2016-05-21 00:13 - 2013-03-20 22:03 - 00000763 _____ C:\Users\Ben\Desktop\GTR Evolution.lnk 2016-05-21 00:13 - 2012-12-30 04:03 - 00001563 _____ C:\Users\Ben\Desktop\Counter-Strike Source.lnk 2016-05-21 00:13 - 2012-11-06 22:55 - 00000961 _____ C:\Users\Ben\Desktop\TeamSpeak 3 Client.lnk 2016-05-21 00:13 - 2012-10-03 14:32 - 00000684 _____ C:\Users\Ben\Desktop\Free PDF to Word Doc Converter.lnk 2016-05-21 00:13 - 2012-09-21 01:34 - 00001793 _____ C:\Users\Ben\Desktop\Spotify.lnk 2016-05-21 00:13 - 2012-08-19 16:49 - 00000842 _____ C:\Users\Ben\Desktop\BitLord.lnk 2016-05-21 00:13 - 2012-08-16 21:17 - 00000355 _____ C:\Users\Ben\Desktop\Arbeitsplatz.lnk 2016-05-21 00:05 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-05-20 21:00 - 2012-11-06 22:56 - 00000000 ____D C:\Users\Ben\AppData\Roaming\TS3Client 2016-05-20 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-05-16 20:18 - 2012-09-01 01:53 - 00000371 _____ C:\Users\Ben\Desktop\TO DO.txt 2016-05-15 05:09 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2016-05-15 05:06 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Bitdefender 2016-05-15 03:51 - 2014-11-12 01:50 - 00000000 ____D C:\Users\Ben\AppData\LocalLow\boost_interprocess 2016-05-14 04:13 - 2014-04-05 20:01 - 00000000 ____D C:\Users\Ben\Desktop\CS 2014 2016-05-13 21:19 - 2016-03-29 01:26 - 00004230 _____ C:\Windows\System32\Tasks\AMD Updater 2016-05-13 21:17 - 2016-03-29 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-05-13 21:17 - 2013-12-29 21:05 - 00000000 ____D C:\Program Files\AMD 2016-05-13 07:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-13 07:38 - 2015-08-15 12:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-13 07:38 - 2015-07-23 00:54 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-13 07:38 - 2015-07-23 00:54 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-12 22:29 - 2012-08-16 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative 2016-05-12 22:29 - 2012-08-16 20:56 - 00000000 ____D C:\Program Files (x86)\Creative 2016-05-12 08:09 - 2015-04-15 19:16 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-12 08:04 - 2014-12-23 18:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 02:19 - 2014-08-20 22:58 - 00000000 ____D C:\Users\Ben\AppData\Local\Adobe 2016-05-11 23:25 - 2012-08-16 20:50 - 00000000 ____D C:\AMD 2016-05-11 22:53 - 2013-07-11 11:30 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 21:51 - 2009-07-14 06:45 - 05050848 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 21:50 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 18:01 - 2012-08-16 21:20 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-10 21:58 - 2012-08-16 20:47 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Adobe 2016-05-08 18:39 - 2012-10-28 19:22 - 00000000 ____D C:\Users\Ben\AppData\Local\CrashDumps 2016-05-06 17:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-05-06 17:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\system32\GWX 2016-05-05 22:28 - 2013-09-13 21:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-27 21:43 - 2012-08-16 20:53 - 00120496 _____ C:\Users\Ben\AppData\Local\GDIPFONTCACHEV1.DAT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-01-12 00:56 - 2016-01-12 00:56 - 15566737 _____ () C:\Program Files\FileZilla3141.zip 2012-08-19 16:49 - 2016-05-23 21:08 - 0000000 _____ () C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2012-10-13 19:23 - 2013-12-12 01:51 - 0005632 _____ () C:\Users\Ben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-11-17 22:30 - 2015-11-17 22:30 - 0000842 _____ () C:\Users\Ben\AppData\Local\recently-used.xbel 2012-09-12 20:33 - 2013-04-21 19:02 - 0007605 _____ () C:\Users\Ben\AppData\Local\resmon.resmoncfg ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-18 07:54 ==================== Ende von FRST.txt ============================ |
|
24.05.2016, 06:48
| #11 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:22-05-2016 01
durchgeführt von Ben (2016-05-24 07:46:40)
Gestartet von C:\Users\Ben\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-08-16 18:37:21)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2410925410-2808068811-915591143-500 - Administrator - Disabled)
Ben (S-1-5-21-2410925410-2808068811-915591143-1000 - Administrator - Enabled) => C:\Users\Ben
Gast (S-1-5-21-2410925410-2808068811-915591143-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2410925410-2808068811-915591143-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avant Browser (remove only) (HKLM-x32\...\AvantBrowser) (Version: 12.5.0.0 - Avant Force)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.17.1000 - Bitdefender)
Bitdefender Total Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.28.1478 - Bitdefender)
BitLord 2.1 (HKLM-x32\...\BitLord) (Version: 2.1.1-91 - House of Life)
Catalyst Control Center Next Localization BR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0321.1015.16463 - Advanced Micro Devices, Inc.) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Creative Music Server (HKLM-x32\...\Music Server) (Version: 1.01 - Creative Technology Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.77 - DivX, LLC)
Dropbox (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Dropbox) (Version: 3.20.1 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.3.19290 - Landesfinanzdirektion Thüringen)
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
FilmConvert Pro 2.1 AE (HKLM\...\{CC62E726-2E52-4E16-9AF5-8991119A3667}) (Version: 2.12 - Rubber Monkey Software)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free Pdf Perfect Prereq (HKLM-x32\...\{8a8f0ec0-a24b-4eb8-b811-2cf05c4d1c85}) (Version: 1.1.0.80 - Covus Freemium GmbH)
Free Pdf Perfect Prereq (x32 Version: 1.1.0.80 - Covus Freemium GmbH) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 11.5.1.0 - Lightworks)
Logitech Gaming Software 8.78 (HKLM\...\Logitech Gaming Software) (Version: 8.78.129 - Logitech Inc.)
Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{E7676EF4-3896-4B7E-B030-1356EEC477CE}) (Version: 11.4.4 - Red Giant)
Magic Bullet Suite 64-bit (Version: 11.4.4 - Red Giant) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Motorola Driver Installation 3.2.0 (HKLM\...\{A7B9041E-9635-4AFF-BB1E-EFAF490A231B}) (Version: 3.2.0 - Motorola Inc.)
Motorola Phone Tools (HKLM-x32\...\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}) (Version: 4.60 - Avanquest Software)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Multi-Card Reader & Flash Disk (HKLM-x32\...\{83F3EED2-DDE2-4434-8FBE-9D2A1E7C2BC9}) (Version: 1.00.0000 - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.10.1-r112682-release - Plays.tv, LLC)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.0-r112326-release - Raptr, Inc)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)
Sonic Foundry Preset Manager 1.0 (HKLM-x32\...\{7266C898-F9CB-4122-9452-2AA1DACE245E}) (Version: 1.0.73 - Sonic Foundry)
Sound Blaster Recon3D PCIe (HKLM-x32\...\{F380C602-98E8-49AB-8C3F-8A73BACA45DD}) (Version: 1.00.22 - Creative Technology Limited)
Sound Blaster Recon3D PCIe Extras (HKLM-x32\...\{204FCF73-1450-407D-BCF9-1233EC5F5787}) (Version: 1.0 - Creative Technology Limited)
Spotify (HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)
Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Test Drive Unlimited (HKLM-x32\...\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}) (Version: 1.00.0000 - Atari)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1-3) (Version: 1.0.3.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (Version: 1.0.3.1 - LunarG, Inc.) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2410925410-2808068811-915591143-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {047D8A27-C9C0-4509-B54B-0DAAE60A46CF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {108EC6FD-E65D-4308-A188-EAC5ABBB8E77} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe
Task: {2439EA23-D503-4688-8E37-FBFA8EB9AD95} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-03-30] (Bitdefender)
Task: {3169177F-2AA2-4BEF-BCC6-B0D125EB68A2} - System32\Tasks\{A9CE6C82-5B6C-4C81-9C82-F507E1E7B46A} => c:\program files (x86)\avant browser\avant.exe [2016-01-04] (Avant Force)
Task: {5E002749-4D84-4067-A8DF-04F377230DC6} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe
Task: {8D528501-7480-4A00-86D1-D12981FF9E0B} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {96E7E24E-45B0-4A1A-8C08-D03C85F54B46} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {C9D881A2-1624-42AF-9730-0C1C0E03AA6D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {DB598486-F771-4C91-BDF3-6B16D26723ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated)
Task: {E3D8DC2C-B845-49CA-85F1-FE7A92BE57E0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-05-15 05:09 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-05-15 05:09 - 2016-05-09 11:29 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl
2016-05-15 05:09 - 2016-05-09 11:29 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl
2012-08-19 01:01 - 2014-06-28 22:53 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2012-03-19 22:09 - 2012-03-19 22:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-01-06 21:43 - 2016-01-06 21:43 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-01-06 21:43 - 2016-01-06 21:43 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00028160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\servicemanager.pyd
2015-11-24 22:46 - 2015-11-24 22:46 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes26.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00041472 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32service.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_hashlib.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00017920 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32event.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00019968 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32evtlog.pyd
2015-11-24 22:48 - 2015-11-24 22:48 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_socket.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ssl.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ctypes.pyd
2015-11-24 22:46 - 2015-11-24 22:46 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom26.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 01980928 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd
2015-12-07 22:57 - 2015-12-07 22:57 - 00077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 01862144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00516608 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 04060160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\select.pyd
2015-03-12 13:39 - 2016-04-28 00:44 - 47503472 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libcef.dll
2015-12-12 13:39 - 2016-04-19 21:47 - 00034768 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-05-13 20:04 - 2016-04-19 21:48 - 00019408 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2016-05-13 20:04 - 2016-04-19 21:47 - 00116688 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-12 13:39 - 2016-04-19 21:47 - 00093640 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-12 13:39 - 2016-04-19 21:47 - 00018376 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00019760 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00105928 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-05-13 20:04 - 2016-04-19 21:47 - 00392144 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2015-12-12 13:39 - 2016-05-07 00:35 - 00381752 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-12 13:39 - 2016-04-19 21:47 - 00692688 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00020816 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-12 13:39 - 2016-04-19 21:48 - 00121296 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 01682760 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00020808 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00021840 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00038696 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\fastpath.pyd
2016-05-13 20:04 - 2016-04-19 21:49 - 00020936 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00024528 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00114640 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00124880 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00021832 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00024016 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00175560 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00030160 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00043472 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00028616 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32ts.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00048592 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00026456 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00057808 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00024016 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00117056 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00052024 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2015-12-12 13:39 - 2016-04-19 21:47 - 00134608 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2016-05-13 20:04 - 2016-04-19 21:47 - 00134088 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-05-13 20:04 - 2016-04-19 21:48 - 00240584 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00020800 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00021824 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00019776 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00020800 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00024392 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-05-13 20:04 - 2016-04-19 21:50 - 00036296 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\librsync.dll
2016-05-13 20:04 - 2016-05-07 00:34 - 00020280 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00023376 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00350152 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-19 21:39 - 2016-05-07 00:35 - 00022352 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00084280 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2016-05-13 20:04 - 2016-05-07 00:34 - 01826096 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-12 13:39 - 2016-04-19 21:48 - 00083912 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\sip.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 03928880 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 01971504 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00531248 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00132912 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00223544 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2016-05-13 20:04 - 2016-05-07 00:34 - 00207672 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2015-12-12 13:39 - 2016-04-19 21:49 - 00060880 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\win32print.pyd
2015-12-12 13:39 - 2016-05-07 00:35 - 00024904 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00546096 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2016-05-13 20:04 - 2016-05-07 00:35 - 00357680 _____ () C:\Users\Ben\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2012-02-23 12:56 - 2012-02-23 12:56 - 00593920 _____ () C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\de-DE\SBRnPCIe.resources.dll
2015-03-12 13:39 - 2016-04-28 00:44 - 01584240 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libglesv2.dll
2015-03-12 13:39 - 2016-04-28 00:44 - 00082032 _____ () C:\Users\Ben\AppData\Roaming\Spotify\libegl.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\winsound.pyd
2015-10-21 22:29 - 2015-10-21 22:29 - 00113171 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libvlc.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 02396691 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\unicodedata.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\PIL._imaging.pyd
2011-05-10 21:01 - 2011-05-10 21:01 - 00030208 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\simplejson._speedups.pyd
2015-06-27 01:09 - 2015-06-27 01:09 - 00271872 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\win32com.shell.shell.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00044544 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_sqlite3.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00387072 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sqlite3.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 00113171 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\libvlc.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 02396691 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\libvlccore.dll
2015-11-24 22:48 - 2015-11-24 22:48 - 00111104 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32file.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00216064 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWebKitWidgets.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00118784 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWebKit.pyd
2015-11-24 22:47 - 2015-11-24 22:47 - 00199680 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtPrintSupport.pyd
2015-06-27 01:09 - 2015-06-27 01:09 - 00271872 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\amd_ags.dll
2015-11-24 22:47 - 2015-11-24 22:47 - 00263168 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32com.shell.shell.pyd
2015-11-24 22:43 - 2015-11-24 22:43 - 00583680 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\unicodedata.pyd
2015-10-21 22:29 - 2015-10-21 22:29 - 00027667 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\plugins\audio_output\libdirectsound_plugin.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 00031251 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\plugins\audio_output\libwaveout_plugin.dll
2015-10-21 22:29 - 2015-10-21 22:29 - 00066579 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\plugins\video_output\libdirectdraw_plugin.dll
2016-05-09 23:02 - 2016-05-09 23:02 - 02619144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\ltc_host_ex.DLL
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\gobject._gobject.pyd
2016-04-19 19:08 - 2016-04-19 19:08 - 02717595 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl.dll
2014-06-26 06:00 - 2016-01-04 06:26 - 00677376 _____ () C:\Program Files (x86)\Avant Browser\_sqlite3.dll
2012-08-17 00:39 - 2016-01-04 06:26 - 01453056 _____ () C:\Program Files (x86)\Avant Browser\avantshell.dll
2015-10-16 12:02 - 2015-10-16 12:02 - 00039384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2016-01-25 22:09 - 2016-01-04 06:26 - 01576960 _____ () C:\Program Files (x86)\Avant Browser\webkit\libglesv2.dll
2016-01-25 22:09 - 2016-01-04 06:26 - 00074752 _____ () C:\Program Files (x86)\Avant Browser\webkit\libegl.dll
2016-01-25 22:09 - 2016-01-04 06:26 - 16573256 _____ () C:\Program Files (x86)\Avant Browser\webkit\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Ben\Desktop\AdwCleaner_5.117.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\JRT.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\mbam-setup-2.2.1.1043(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\SystemLook_x64.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Desktop\tdsskiller.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\autodetectutility.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\LGS_8.78.129_x64_Logitech.exe:BDU [0]
AlternateDataStreams: C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe:BDU [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-05-24 07:41 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 80.69.96.12 - 81.210.129.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{82260939-98DA-4CF5-9C00-9AFA5E95AA50}] => (Allow) C:\Users\Ben\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{25154B17-4D55-4FE8-8E67-FCD87680A227}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{628A90DC-41D2-444F-A67F-E1BD8E4F0E41}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8F23AC69-6661-4809-9743-AF44604219F2}] => (Allow) LPort=2869
FirewallRules: [{4832E087-A6A2-4E70-B1A2-E0B398DACAFE}] => (Allow) LPort=1900
FirewallRules: [{1922A093-3790-4EC7-A53A-6CADAE8A44C5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E99B4A98-D497-414D-9FD1-5884C0234449}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{206CF8F8-DC43-4B9D-9704-95CB89DFA822}C:\games\gta 4\gta 4eflc\eflc.exe] => (Allow) C:\games\gta 4\gta 4eflc\eflc.exe
FirewallRules: [UDP Query User{CF287F40-8FC9-4BE4-A0F1-CB8931BA45FD}C:\games\gta 4\gta 4eflc\eflc.exe] => (Allow) C:\games\gta 4\gta 4eflc\eflc.exe
FirewallRules: [{393B2B65-7498-446E-9454-31AF969079A6}] => (Allow) C:\Games\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe
FirewallRules: [{2A4F1161-4EAB-445E-B3B0-83FCEE695245}] => (Allow) C:\Games\GTA 4\Rockstar Games Social Club\RGSCLauncher.exe
FirewallRules: [{45AC98BB-E418-4060-979A-CC8CDECBFFAC}] => (Allow) C:\Games\GTA 4\EFLC\LaunchEFLC.exe
FirewallRules: [{541DBC10-74B6-4AD2-AE3F-C380AE5A2C9F}] => (Allow) C:\Games\GTA 4\EFLC\LaunchEFLC.exe
FirewallRules: [{11A821F3-0F61-4472-835D-D3252B192DA2}] => (Allow) C:\Games\Battlefield 3\Battlefield 3\bf3.exe
FirewallRules: [{5F3835D6-4C80-4333-BC5A-08C34ED914EB}] => (Allow) C:\Games\Battlefield 3\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{41B15344-3A5A-4636-9C3F-35DA75AF76B3}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{A8AE8963-A576-47D4-98F6-DEDB80BC85B8}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{6FB41EF5-9FAB-4581-B977-1689EC9AA7EF}D:\games\testdriveunlimited.exe] => (Allow) D:\games\testdriveunlimited.exe
FirewallRules: [UDP Query User{64387FEB-814E-4783-B293-7A5B606EECF7}D:\games\testdriveunlimited.exe] => (Allow) D:\games\testdriveunlimited.exe
FirewallRules: [TCP Query User{FEEE3324-D95D-467A-9D64-BCFEB5CDE67A}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe] => (Allow) C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe
FirewallRules: [UDP Query User{FF0A685C-670E-438D-9F26-DD577A62366E}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe] => (Allow) C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe
FirewallRules: [TCP Query User{AEFFE17A-1F00-4847-A1EF-F493A03005F5}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3AE65D60-5D1B-47CE-9586-7C55D5EC00D2}C:\users\ben\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ben\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5BB8176F-A8A6-4DE3-B257-D8C3F3A80DC0}] => (Allow) D:\Games\Counterstrike Source\Steam.exe
FirewallRules: [{3087D8F2-2770-4EB3-93FA-1CB8D9EBE2BA}] => (Allow) D:\Games\Counterstrike Source\Steam.exe
FirewallRules: [{7910C34F-3285-45AA-BFD7-FAD0D88395F3}] => (Allow) D:\Games\Counterstrike Source\SteamApps\benda88\counter-strike source\hl2.exe
FirewallRules: [{94D2A57D-B23E-4A9C-AAB7-8C1D21B4D964}] => (Allow) D:\Games\Counterstrike Source\SteamApps\benda88\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{04BD9203-48D0-43FB-ADB5-3B4BEEFAC68D}D:\programme\winamp\winamp.exe] => (Allow) D:\programme\winamp\winamp.exe
FirewallRules: [UDP Query User{97B7F389-B7F6-4E29-816C-B6AFF4B0851F}D:\programme\winamp\winamp.exe] => (Allow) D:\programme\winamp\winamp.exe
FirewallRules: [{5E377E07-10F7-4290-834F-BE58812E6F76}] => (Block) D:\programme\winamp\winamp.exe
FirewallRules: [{FE01EF9E-1888-4F86-816C-13FEC81B8906}] => (Block) D:\programme\winamp\winamp.exe
FirewallRules: [{9EB42E62-BF36-468A-AD79-7BFA198420FB}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{0E8F294B-AA4C-4C0C-A89A-8DCB2B379F97}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [TCP Query User{AD4C25ED-3062-4A43-972C-A164F892CA4A}D:\games\testdrive unlimited\testdriveunlimited.exe] => (Allow) D:\games\testdrive unlimited\testdriveunlimited.exe
FirewallRules: [UDP Query User{03D42D7C-D749-47C3-A115-92052FC7BA6C}D:\games\testdrive unlimited\testdriveunlimited.exe] => (Allow) D:\games\testdrive unlimited\testdriveunlimited.exe
FirewallRules: [{DDFA1555-97C2-46B0-9EA2-F23A325CBE60}] => (Allow) C:\SoloApp\SoloApp.exe
FirewallRules: [{16B8A47D-851E-4B3B-B421-09DE3FBAF84A}] => (Allow) C:\SoloApp\SoloApp.exe
FirewallRules: [{0BABDB57-3DB9-4296-8910-3C3A458E26C3}] => (Allow) C:\SoloApp\WebDriver.dll
FirewallRules: [{C42BDDA3-6536-4111-B58A-A4DC604596D4}] => (Allow) C:\SoloApp\WebDriver.dll
FirewallRules: [{2E552CE9-5D38-4D4B-9261-9D0479D260E6}] => (Allow) C:\SoloApp\chromedriver.exe
FirewallRules: [{EA72BB57-06FA-43A8-809F-A8E0BD324793}] => (Allow) C:\SoloApp\chromedriver.exe
FirewallRules: [{85327394-1EA3-41C3-8295-882DA9AABA80}] => (Allow) C:\SoloApp\IEDriverServer.exe
FirewallRules: [{59E3AD89-526E-4CE5-A319-A0FD621B228B}] => (Allow) C:\SoloApp\IEDriverServer.exe
FirewallRules: [{E024DEBB-03E5-47CA-B70E-92766CED54DE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{3ABAA23A-8BFB-4EB2-8DA1-82123A967CF1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [TCP Query User{5874D941-0FC7-42EF-8050-2C2DCC96B2D0}D:\games\driver by r.g recoding\driver san francisco\driver.exe] => (Allow) D:\games\driver by r.g recoding\driver san francisco\driver.exe
FirewallRules: [UDP Query User{68DB7F72-1DD4-4DCF-91BE-72184861371D}D:\games\driver by r.g recoding\driver san francisco\driver.exe] => (Allow) D:\games\driver by r.g recoding\driver san francisco\driver.exe
FirewallRules: [{9ACC3141-D46C-4D44-A2DB-1BD3E96D978C}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{885550AC-3588-4E68-B087-C790349D8D90}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{2BE45B6C-8AD5-44E9-81D1-AF5402FBF669}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{DADD3DCA-1071-472C-92A9-E64CA531B2C9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F917194D-DDAD-4861-95EA-9DEFC1FEDE99}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{094439D1-78A6-4465-BA4F-0AF00A70C56A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{E528D144-291B-47AE-B1A7-438F69209663}] => (Allow) C:\Program Files\Lightworks\Lightworks.exe
FirewallRules: [{9414D52A-356D-4445-AF87-65B2F30D3EDB}] => (Allow) C:\Program Files\Lightworks\Lightworks.exe
FirewallRules: [{47DAECFD-815F-49A6-8F87-D70715039F47}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{C06619D5-7B86-42D5-AE32-FC84F9C87B28}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe
FirewallRules: [{7A120E79-F033-4AA1-A9FF-615F241D0D66}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe
FirewallRules: [{8A374DED-2F2B-4F9E-AF22-9C454D7F1CCE}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe
FirewallRules: [{EDCCE99B-1EA3-47CE-A180-32C6A54CB100}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe
FirewallRules: [{25280AF1-DB85-4D61-A3EB-2666FEE353F6}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe
FirewallRules: [{DAFA6341-541B-4258-89DC-21E508D66D0C}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe
FirewallRules: [{1B92803D-78EE-4CA3-917A-54A56465E2D7}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe
FirewallRules: [{197BADFC-8B73-4AEC-B698-81FB4A986367}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4BB326BF-F30F-473A-B678-121F376A2CAC}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A6405B9B-8E9C-4C96-B865-ED3BB17D5B35}] => (Allow) D:\Games\Counterstrike Source\bin\steamwebhelper.exe
FirewallRules: [{15F40517-A2A2-417E-A022-14C5740432A3}] => (Allow) D:\Games\Counterstrike Source\bin\steamwebhelper.exe
FirewallRules: [{81E16F13-F192-4E70-A1C3-997E8C7EBFC2}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{2BBE5E67-77A6-4186-9DF8-FBC55AE854AC}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{3C063478-BCEF-4476-9EBC-2A5E4FE4E773}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{5CC72709-3E1A-4EB0-B840-F286F819C1D5}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{DD965C84-3B6D-4725-B883-4324E8C77DC9}] => (Allow) C:\Program Files (x86)\Lightworks\Lightworks.exe
FirewallRules: [{9DB1D22C-05A8-4712-A437-9B0B47EB855D}] => (Allow) C:\Program Files (x86)\Lightworks\Lightworks.exe
FirewallRules: [{6913B43D-9873-4FBB-B769-1A82F9F15375}] => (Allow) C:\Program Files (x86)\Lightworks\ntcardvt.exe
FirewallRules: [{691A9809-E0E6-443C-B66D-3F95929112B8}] => (Allow) C:\Program Files (x86)\Lightworks\ntcardvt.exe
FirewallRules: [{3C5FFFA2-1690-4AF5-923A-3455D97B987D}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{C81672B3-E8B7-4F92-B618-BA3F20058B0B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
FirewallRules: [{28FE4EA2-EC33-4F6A-9C64-412962B618BA}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{1C26F5D9-7121-4C1D-97DD-B5F8D311F2B9}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [TCP Query User{5FB64045-55F3-4905-9CFE-2BC184BEAD15}G:\games\assetto corsa\acs.exe] => (Allow) G:\games\assetto corsa\acs.exe
FirewallRules: [UDP Query User{0A3FA8DF-6667-4D0F-B51B-D5A10AA30E69}G:\games\assetto corsa\acs.exe] => (Allow) G:\games\assetto corsa\acs.exe
FirewallRules: [{237FCB0F-7306-470C-9EF6-FB3973916181}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1E0450BC-05C4-483E-8F71-31642CD5145F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B94E786B-2B31-4018-A9E2-CABDE7FA9381}] => (Allow) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F39379B5-8A6C-4A8F-AF86-FB60705DEB9F}] => (Allow) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{692FB58F-7447-47AF-AFBE-468926958B4C}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{EDA28318-E5DF-4C2C-B95D-CEB4B21AF016}] => (Allow) D:\Games\Counterstrike Source\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{21D44B44-2146-4C8D-952B-F032F505A26E}D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{27E6EA01-198F-4D61-A04F-8CCEF56F6594}D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\games\counterstrike source\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{01F55C7A-CE01-4CD8-B34D-66EE1F235B3C}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{BEC734A2-5A94-47DB-9023-6865E154C06F}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{772F2A32-23D0-4CF1-9990-26E68FB7AF1D}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{3F46ADF1-FC33-442F-83B3-ADFFA3655183}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{D4AC49EE-A302-441E-944B-DFBB845C72D3}C:\program files\sony\vegas pro 13.0\vegas130.exe] => (Allow) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [UDP Query User{AC5B96E9-3181-45A3-8DC9-866DFF01A97C}C:\program files\sony\vegas pro 13.0\vegas130.exe] => (Allow) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{BFBFE7AD-DC80-4191-A1A1-FE127D60855A}] => (Block) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{0A3F3D33-B641-4E8C-8939-0AA423B31C71}] => (Block) C:\program files\sony\vegas pro 13.0\vegas130.exe
FirewallRules: [{495B296D-931F-4890-8686-77CC51E21F4F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B108BE5-D3BB-4FCC-A009-DAC30E3A342A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{24B5DB29-7B0B-4004-A38B-6E91FB5403F0}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{A23EC090-1F9D-44E5-8AFC-FC1E787F5764}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{2D753C63-80CC-420A-9EA7-0EEB52A36DBD}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{BEB9B362-B23E-41B7-9F83-584EAAB333FC}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{27B604C1-5D3C-4A20-8B24-E73A3D26D894}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{361501C3-EF2F-4CA3-BA08-CA1F0B1F4703}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{B4D90F43-B272-4298-98BF-D2790D44E0B3}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B2187E78-48B7-4D95-9904-D50A4B212B83}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{3B402AEC-BC41-41D3-AB15-E5F484850458}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{C347660E-084E-4C67-B862-147417EF0B2A}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
==================== Wiederherstellungspunkte =========================
21-05-2016 18:30:45 Geplanter Prüfpunkt
22-05-2016 19:06:22 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/12/2016 07:52:19 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ben-PC)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F104E4700}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (05/08/2016 06:39:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DivX Player.exe, Version: 11.3.10.75, Zeitstempel: 0x55ce1f99
Name des fehlerhaften Moduls: DMFContainer.dll, Version: 1.5.0.3, Zeitstempel: 0x55cd83fd
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0008cc21
ID des fehlerhaften Prozesses: 0x1d30
Startzeit der fehlerhaften Anwendung: 0xDivX Player.exe0
Pfad der fehlerhaften Anwendung: DivX Player.exe1
Pfad des fehlerhaften Moduls: DivX Player.exe2
Berichtskennung: DivX Player.exe3
Error: (05/08/2016 06:39:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DivX Player.exe, Version: 11.3.10.75, Zeitstempel: 0x55ce1f99
Name des fehlerhaften Moduls: DMFContainer.dll, Version: 1.5.0.3, Zeitstempel: 0x55cd83fd
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x0008cc21
ID des fehlerhaften Prozesses: 0x990
Startzeit der fehlerhaften Anwendung: 0xDivX Player.exe0
Pfad der fehlerhaften Anwendung: DivX Player.exe1
Pfad des fehlerhaften Moduls: DivX Player.exe2
Berichtskennung: DivX Player.exe3
Error: (05/05/2016 07:40:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Name des fehlerhaften Moduls: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000664856
ID des fehlerhaften Prozesses: 0x1f70
Startzeit der fehlerhaften Anwendung: 0xGTA5.exe0
Pfad der fehlerhaften Anwendung: GTA5.exe1
Pfad des fehlerhaften Moduls: GTA5.exe2
Berichtskennung: GTA5.exe3
Error: (04/04/2016 07:47:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Spotify.exe, Version 1.0.25.127 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: e10
Startzeit: 01d18e99f23f6467
Endzeit: 0
Anwendungspfad: C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe
Berichts-ID: 4a812025-fa8d-11e5-92eb-bc5ff44945d9
Error: (03/28/2016 04:09:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 15f4
Startzeit: 01d188fb213b5fbe
Endzeit: 121
Anwendungspfad: D:\Games\Counterstrike Source\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Berichts-ID:
Error: (03/25/2016 02:57:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Name des fehlerhaften Moduls: GTA5.exe, Version: 1.0.678.1, Zeitstempel: 0x56e2b38c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000359135b
ID des fehlerhaften Prozesses: 0x141c
Startzeit der fehlerhaften Anwendung: 0xGTA5.exe0
Pfad der fehlerhaften Anwendung: GTA5.exe1
Pfad des fehlerhaften Moduls: GTA5.exe2
Berichtskennung: GTA5.exe3
Error: (03/19/2016 08:50:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm vlc.exe, Version 2.2.1.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1838
Startzeit: 01d1821010e13c8a
Endzeit: 5
Anwendungspfad: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
Berichts-ID:
Error: (03/19/2016 03:17:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avant.exe, Version: 12.5.0.0, Zeitstempel: 0x5689f08e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.19160, Zeitstempel: 0x56bcd51f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f644
ID des fehlerhaften Prozesses: 0x1230
Startzeit der fehlerhaften Anwendung: 0xavant.exe0
Pfad der fehlerhaften Anwendung: avant.exe1
Pfad des fehlerhaften Moduls: avant.exe2
Berichtskennung: avant.exe3
Error: (03/09/2016 10:06:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2bc
Startzeit: 01d17a3f110dce49
Endzeit: 11
Anwendungspfad: D:\Games\Counterstrike Source\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Berichts-ID:
Systemfehler:
=============
Error: (05/24/2016 07:39:23 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ProductAgentService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Plays.tv Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/24/2016 07:38:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2014-10-14 06:39:27.577
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.576
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.574
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.572
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.571
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-14 06:39:27.570
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.619
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.618
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.617
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-10-13 00:27:08.615
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 31%
Installierter physikalischer RAM: 16279.03 MB
Verfügbarer physikalischer RAM: 11201.02 MB
Summe virtueller Speicher: 32556.25 MB
Verfügbarer virtueller Speicher: 26444.61 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:69.09 GB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:503.98 GB) NTFS
Drive f: (20141018_012547) (CDROM) (Total:5.36 GB) (Free:0 GB) UDF
Drive g: (Extern) (Fixed) (Total:1863.01 GB) (Free:646.12 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: A357D397)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 038D8719)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00273BB2)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
24.05.2016, 09:28
| #12 |
| /// TB-Ausbilder | Trojaner "searchprotect" und "tmp00000be1" entfernen Servus, wir entfernen die letzten Reste und kontrollieren nochmal alles.  Hinweis: Der Suchlauf mit ESET kann länger dauern. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 4
Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?Bitte poste mit deiner nächsten Antwort
|
|
25.05.2016, 06:41
| #13 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:24-05-2016 01
durchgeführt von Ben (2016-05-25 01:08:41) Run:2
Gestartet von C:\Users\Ben\Desktop
Geladene Profile: Ben (Verfügbare Profile: Ben)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater => Schlüssel erfolgreich entfernt
EmptyTemp: => 362.4 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 01:08:43 ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=ab567c4a07a1ba46bb79c7d90f147c7f
# end=init
# utc_time=2016-05-24 11:12:05
# local_time=2016-05-25 01:12:05 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29579
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=ab567c4a07a1ba46bb79c7d90f147c7f
# end=updated
# utc_time=2016-05-24 11:31:34
# local_time=2016-05-25 01:31:34 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=ab567c4a07a1ba46bb79c7d90f147c7f
# engine=29579
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-05-25 12:57:37
# local_time=2016-05-25 02:57:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Bitdefender Antivirus'
# compatibility_mode=2071 16777213 100 99 6398 161450522 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 8833822 215767707 0 0
# scanned=470908
# found=73
# cleaned=73
# scan_time=5162
sh=AAF11F1D85F2917144A2FA298F037F00150B1D85 ft=1 fh=48d573ff6de029f5 vn="JS/SecurityDisabler.B evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvidCodec.com\hdvidextsetup.exe.vir"
sh=A9AAC7CA705AEF1BB44D100D3D0E72E10E7F61B0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\chrome\content\core\xhr.js.vir"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\101_cortica_m.js.vir"
sh=957E505E027C2F899F844C27AC8B82EF94AEBB68 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\102_dealply_m.js.vir"
sh=17F6E2411B6C3A285257D050832B0890BBEC046F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\103_intext_5_m.js.vir"
sh=EB047CB7862459E0F74832AEF6A7954A3663373F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\104_jollywallet_m.js.vir"
sh=F2126D68553053F0A5A411866DEC205E27283EDA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\105_corticas_m.js.vir"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\107_coupish_m.js.vir"
sh=6FD52BE8732402A681159484442B6AA0351C4243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\108_icm_m.js.vir"
sh=F0D9BB17EC343592F74C53A4E3E5E460B90DD3E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\116_ads_only_5_m.js.vir"
sh=DFB11E05B62F57EDA18112BC002C17EAFD79BEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=9495814AE107F6739D62A09B1829E5A2DCDA1354 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\119_similar_web_m.js.vir"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\120_luck_m.js.vir"
sh=B985E49C6E0E423954A36327BE2EA87F0F287145 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\123_intext_adv_m.js.vir"
sh=EAAF312959AC9CCF5138825927B5E2D38F57E2E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\125_arcadi2_m.js.vir"
sh=C59CEF5A69DF0E225184EBB231C005F0042767F0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=5B79E1012732BA64F2D1FDF7DBF44CAD28FE7CDD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\127_revizer_p_m.js.vir"
sh=4A86247BDE5D2225473389037FA942819FD677CF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\129_widdit_m.js.vir"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\135_arcadi3_m.js.vir"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\142_intext_fa_m.js.vir"
sh=F2B6C01B0C8E3FDDC1D1FF717405839AF5E87C45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\14_CrossriderUtils.js.vir"
sh=786B0C8D3A9F6EFBCDB103B0FA7F9460D38C5D7B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=A28CB6571CE8071F7AC0A6BA249259A684E96292 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js.vir"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=BCAFAD8B3BF149BFB7F337DF5FD07A9B3391AFFE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\170_icm1_5_m.js.vir"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"
sh=9968E7101A0C09D5340EE60D45B074AB1C8302C2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.S evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\22_resources.js.vir"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\28_initializer.js.vir"
sh=2EBC101982648313FFE20510A6C6754410F9D89B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\47_resources_background.js.vir"
sh=148CA44D7C0A3E2F5E2A3D38EFC5D999D2701A84 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\64_appApiMessage.js.vir"
sh=CB95B247FABF95831A2974B87B334DBE4597CEB2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\92_superfish_m.js.vir"
sh=17455E3C3ACDC5230501BB3BA992829B8669DDC5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=A9AAC7CA705AEF1BB44D100D3D0E72E10E7F61B0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\chrome\content\core\xhr.js.vir"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\101_cortica_m.js.vir"
sh=957E505E027C2F899F844C27AC8B82EF94AEBB68 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\102_dealply_m.js.vir"
sh=17F6E2411B6C3A285257D050832B0890BBEC046F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\103_intext_5_m.js.vir"
sh=EB047CB7862459E0F74832AEF6A7954A3663373F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\104_jollywallet_m.js.vir"
sh=F2126D68553053F0A5A411866DEC205E27283EDA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\105_corticas_m.js.vir"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\107_coupish_m.js.vir"
sh=6FD52BE8732402A681159484442B6AA0351C4243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\108_icm_m.js.vir"
sh=F0D9BB17EC343592F74C53A4E3E5E460B90DD3E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\116_ads_only_5_m.js.vir"
sh=DFB11E05B62F57EDA18112BC002C17EAFD79BEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=9495814AE107F6739D62A09B1829E5A2DCDA1354 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\119_similar_web_m.js.vir"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\120_luck_m.js.vir"
sh=B985E49C6E0E423954A36327BE2EA87F0F287145 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\123_intext_adv_m.js.vir"
sh=EAAF312959AC9CCF5138825927B5E2D38F57E2E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\125_arcadi2_m.js.vir"
sh=E254E0BD5C202A441B4F7415C762F7D537A79E24 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=5B79E1012732BA64F2D1FDF7DBF44CAD28FE7CDD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\127_revizer_p_m.js.vir"
sh=4A86247BDE5D2225473389037FA942819FD677CF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\129_widdit_m.js.vir"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\135_arcadi3_m.js.vir"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\142_intext_fa_m.js.vir"
sh=F2B6C01B0C8E3FDDC1D1FF717405839AF5E87C45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\14_CrossriderUtils.js.vir"
sh=786B0C8D3A9F6EFBCDB103B0FA7F9460D38C5D7B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=A28CB6571CE8071F7AC0A6BA249259A684E96292 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js.vir"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=9968E7101A0C09D5340EE60D45B074AB1C8302C2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.S evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\22_resources.js.vir"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\28_initializer.js.vir"
sh=2EBC101982648313FFE20510A6C6754410F9D89B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\47_resources_background.js.vir"
sh=148CA44D7C0A3E2F5E2A3D38EFC5D999D2701A84 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\64_appApiMessage.js.vir"
sh=CB95B247FABF95831A2974B87B334DBE4597CEB2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\92_superfish_m.js.vir"
sh=DEF8CB14886F5A427CEB5E70D8C1D395AC135F4A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_147573\Extensions\e180d6e8-52cd-41d9-9002-9e43f22d4c91@7466a5f3-05bd-4c4d-a0e9-9442a8ea8a0e.com\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=0B95EB315772FE78834796A9676287069026F7AF ft=1 fh=e13dc6e6bc45bf40 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\Ben\Downloads\Dxtory - CHIP-Installer.exe"
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit.S evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Programme\BitLord 2\StubInstaller.exe"
Beim ESET Online Scanner soll ich nicht die Quarantäne löschen? |
|
25.05.2016, 11:19
| #14 | |
| /// TB-Ausbilder | Trojaner "searchprotect" und "tmp00000be1" entfernenZitat:
 Generell ist das aber nicht zu empfehlen, da (wie bei dir jetzt auch) ESET nur Elemente gefunden hat, die sich in der Quarantäne von AdwCleaner befinden und dort sowieso keinen Schaden mehr anrichten können... Fehlen noch HitmanPro und FRST... |
|
26.05.2016, 15:22
| #15 |
| | Trojaner "searchprotect" und "tmp00000be1" entfernenCode:
ATTFilter
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-05-2016 01 durchgeführt von Ben (Administrator) auf BEN-PC (26-05-2016 16:21:23) Gestartet von C:\Users\Ben\Desktop Geladene Profile: Ben (Verfügbare Profile: Ben) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Windows\System32\igfxpers.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe (ICSI Technology Ltd.) C:\Windows\Dit.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (ICSI) C:\Windows\DitExp.exe (DivX, LLC) C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Spotify Ltd) C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe (Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_ep64.exe (Raptr Inc.) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_ep64.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_242.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_242.exe (Avant Force) C:\Program Files (x86)\Avant Browser\avant.exe (Avant Force) C:\Program Files (x86)\Avant Browser\avantvw.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (The Chromium Authors) C:\Program Files (x86)\Avant Browser\webkit\webkit.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15053944 2016-01-06] (Logitech Inc.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [5006536 2016-03-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1651600 2016-04-25] (Bitdefender) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE HKLM-x32\...\Run: [Sound Blaster Recon3D PCIe Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe [885760 2012-02-22] (Creative Technology Ltd) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Dit] => C:\Windows\Dit.exe [90112 2004-08-05] (ICSI Technology Ltd.) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-06-24] (DivX, LLC) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861640 2015-06-27] (DivX, LLC) HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-05-09] (Plays.tv, LLC) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-04-27] (Raptr, Inc) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Dropbox Update] => C:\Users\Ben\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify] => C:\Users\Ben\AppData\Roaming\Spotify\Spotify.exe [6858864 2016-05-25] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Run: [Spotify Web Helper] => C:\Users\Ben\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-05-25] (Spotify Ltd) HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: F - F:\Setup.exe autorun HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\MountPoints2: {0cffc0e7-918d-11e2-ba83-bc5ff44945d9} - F:\setup.exe HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-21] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ben\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-05-21] ShortcutTarget: Dropbox.lnk -> C:\Users\Ben\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2016-05-21] ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4 Tcpip\..\Interfaces\{93459425-DE5C-4808-9F97-6026C69CD4BC}: [DhcpNameServer] 80.69.96.12 81.210.129.4 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2410925410-2808068811-915591143-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-04-05] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-04-05] (Bitdefender) DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default FF Session Restore: -> ist aktiviert. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei] FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-08-05] (DivX, LLC) FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei] FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Photoshop CS6\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [Keine Datei] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-05-03] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-03-22] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-03-22] (Apple Inc.) FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-images.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\google-maps.xml [2014-12-18] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\youtube.xml [2015-11-12] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{58827B9B-1E67-4411-915F-922793B7986B}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{A31C05CC-0B97-428B-80B9-224FF9550200}.xml [2012-08-26] FF SearchPlugin: C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\searchplugins\{D3ED56D7-F8F1-4998-87F7-9D409CB38784}.xml [2012-08-26] FF Extension: NoScript - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-04-07] FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\artur.dubovoy@gmail.com [2016-05-17] FF Extension: Cliqz - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\cliqz@cliqz.com.xpi [2016-04-19] FF Extension: Blur - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\donottrackplus@abine.com.xpi [2016-05-26] FF Extension: TopLine - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid0-uIWxKlEIWnV1103pH2C8N6RsUe0@jetpack.xpi [2012-10-28] [ist nicht signiert] FF Extension: Mailvelope - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2015-12-08] FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\vdpure@link64.xpi [2016-01-22] FF Extension: Video DownloadHelper - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-05-24] FF Extension: Adblock Plus - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2016-05-12] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2016-05-12] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF HKU\S-1-5-21-2410925410-2808068811-915591143-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Ben\AppData\Roaming\Mozilla\Firefox\Profiles\mpkx4s0h.default\extensions\cliqz@cliqz.com => nicht gefunden Chrome: ======= CHR Profile: C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-17] CHR Extension: (Google Drive) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17] CHR Extension: (YouTube) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17] CHR Extension: (Google-Suche) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-07-03] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-07-03] CHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-03] CHR Extension: (Google Mail) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17] CHR Extension: (Store) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-07-03] CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-08-16] (Creative Labs) [Datei ist nicht signiert] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Datei ist nicht signiert] R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [103424 2013-02-14] (Creative Technology Ltd) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2016-01-06] (Logitech Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-05-09] (Plays.tv, LLC) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-28] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [947640 2016-03-30] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-04-25] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-05-11] (Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-03-18] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-03-18] (BitDefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [118608 2016-02-09] (BitDefender LLC) R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender) R3 cthda; C:\Windows\System32\drivers\cthda.sys [1044760 2013-02-14] (Creative Technology Ltd) R3 CTHDB; C:\Windows\System32\DRIVERS\CtHDb.sys [23640 2012-02-29] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2015-12-16] (BitDefender LLC) R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [298736 2016-03-03] (Bitdefender) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-26] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-02-22] (BitDefender S.R.L.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 b06bdrv; \SystemRoot\system32\drivers\bxvbda.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-26 16:14 - 2016-05-26 16:18 - 00000000 ____D C:\ProgramData\HitmanPro 2016-05-26 16:14 - 2016-05-26 16:14 - 11438608 _____ (SurfRight B.V.) C:\Users\Ben\Desktop\HitmanPro_x64.exe 2016-05-25 01:11 - 2016-05-25 01:11 - 02870984 _____ (ESET) C:\Users\Ben\Desktop\esetsmartinstaller_deu.exe 2016-05-25 01:11 - 2016-05-25 01:11 - 00000000 ____D C:\Program Files (x86)\ESET 2016-05-24 07:44 - 2016-05-24 07:45 - 00002966 _____ C:\Users\Ben\Desktop\SystemLook.txt 2016-05-24 07:43 - 2016-05-24 07:43 - 00165376 _____ C:\Users\Ben\Desktop\SystemLook_x64.exe 2016-05-24 07:38 - 2016-05-25 01:08 - 00000811 _____ C:\Users\Ben\Desktop\Fixlog.txt 2016-05-23 21:03 - 2016-05-23 22:10 - 00000000 ____D C:\Users\Ben\Documents\BitLord 2016-05-23 21:03 - 2016-05-23 21:18 - 00000000 ____D C:\Users\Ben\AppData\Roaming\BitLord 2016-05-22 20:59 - 2016-05-22 20:59 - 00006386 _____ C:\Users\Ben\Desktop\ESt2015_Hassenzahl_Benedict.elfo 2016-05-22 19:12 - 2016-05-26 16:21 - 00000000 ____D C:\Users\Ben\Desktop\FRST-OlderVersion 2016-05-22 19:08 - 2016-05-22 19:08 - 00005747 _____ C:\Users\Ben\Desktop\JRT.txt 2016-05-22 19:05 - 2016-05-22 19:05 - 01610816 _____ (Malwarebytes) C:\Users\Ben\Desktop\JRT.exe 2016-05-22 19:04 - 2016-05-22 19:04 - 00002160 _____ C:\Users\Ben\Desktop\mbam.txt 2016-05-22 18:53 - 2016-05-22 18:53 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-05-22 18:52 - 2016-05-22 18:52 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Desktop\mbam-setup-2.2.1.1043(1).exe 2016-05-22 18:50 - 2016-05-22 18:50 - 00014306 _____ C:\Users\Ben\Desktop\AdwCleaner[C1].txt 2016-05-22 18:24 - 2016-05-22 18:24 - 00001229 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-05-22 18:24 - 2016-05-22 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2016-05-22 16:39 - 2016-05-26 16:21 - 02383360 _____ (Farbar) C:\Users\Ben\Desktop\FRST64.exe 2016-05-22 16:39 - 2016-05-26 16:21 - 00027327 _____ C:\Users\Ben\Desktop\FRST.txt 2016-05-22 16:39 - 2016-05-24 07:47 - 00070574 _____ C:\Users\Ben\Desktop\Addition.txt 2016-05-22 16:39 - 2016-05-22 16:39 - 03651136 _____ C:\Users\Ben\Desktop\AdwCleaner_5.117.exe 2016-05-22 16:39 - 2016-05-21 00:22 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Ben\Desktop\tdsskiller.exe 2016-05-22 16:39 - 2016-05-21 00:14 - 00001132 _____ C:\Users\Ben\Desktop\Avira Launcher.lnk 2016-05-21 00:22 - 2016-05-21 00:33 - 00220424 _____ C:\TDSSKiller.3.1.0.9_21.05.2016_00.22.30_log.txt 2016-05-21 00:22 - 2016-05-21 00:22 - 00071121 _____ C:\Users\Ben\Downloads\Addition.txt 2016-05-21 00:21 - 2016-05-26 16:21 - 00000000 ____D C:\FRST 2016-05-21 00:21 - 2016-05-21 00:22 - 00077166 _____ C:\Users\Ben\Downloads\FRST.txt 2016-05-20 22:59 - 2016-05-20 22:59 - 22851472 _____ (Malwarebytes ) C:\Users\Ben\Downloads\mbam-setup-2.2.1.1043.exe 2016-05-20 20:40 - 2016-05-21 00:45 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Avira 2016-05-20 20:38 - 2016-05-21 00:48 - 00000000 ____D C:\ProgramData\Avira 2016-05-15 16:33 - 2016-05-15 16:33 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2016-05-15 05:09 - 2016-05-21 00:14 - 00002116 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk 2016-05-15 05:09 - 2016-05-15 05:09 - 00253404 ____H C:\bdr-ld02 2016-05-15 05:09 - 2016-05-15 05:09 - 00009216 ____H C:\bdr-ld02.mbr 2016-05-15 05:09 - 2016-05-15 05:09 - 00000684 ____H C:\bdr-cf02 2016-05-15 05:09 - 2016-05-15 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016 2016-05-15 05:09 - 2016-03-03 01:36 - 00298736 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys 2016-05-15 05:09 - 2016-02-22 15:13 - 00511320 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2016-05-15 05:09 - 2015-12-16 05:53 - 00182936 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2016-05-15 05:09 - 2015-12-15 21:35 - 49760229 ____H C:\bdr-im02.gz 2016-05-15 05:09 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz02 2016-05-15 05:07 - 2016-05-15 05:10 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Bitdefender 2016-05-15 05:07 - 2016-03-18 06:58 - 00842152 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2016-05-15 05:07 - 2016-03-18 06:56 - 01623536 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2016-05-15 05:07 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2016-05-15 05:06 - 2016-05-15 05:26 - 00000000 ____D C:\ProgramData\Bitdefender 2016-05-15 05:05 - 2016-05-26 15:42 - 00000000 ____D C:\Program Files\Bitdefender Agent 2016-05-14 18:18 - 2016-05-14 18:18 - 00000000 ____D C:\Users\Ben\Desktop\AST Fahrwerk 2016-05-13 21:20 - 2016-05-15 03:45 - 00000000 ____D C:\Users\Ben\AppData\Local\AMD 2016-05-13 21:19 - 2016-05-13 21:19 - 00000000 _____ C:\Windows\ativpsrm.bin 2016-05-13 21:18 - 2016-05-13 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved 2016-05-13 21:17 - 2016-05-13 21:18 - 00000000 ____D C:\Program Files (x86)\Raptr 2016-05-13 21:17 - 2016-05-13 21:17 - 00000000 ____D C:\Program Files (x86)\AMD 2016-05-13 21:10 - 2016-05-13 21:10 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\Ben\Downloads\autodetectutility.exe 2016-05-13 20:04 - 2016-05-13 20:04 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-05-13 07:13 - 2016-05-26 04:21 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Raptr 2016-05-12 22:32 - 2016-05-12 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV 2016-05-12 07:36 - 2016-05-25 07:09 - 00000000 ____D C:\Users\Ben\AppData\Roaming\PlaysTV 2016-05-12 07:35 - 2016-05-12 07:35 - 00000000 ____D C:\Program Files (x86)\Raptr Inc 2016-05-11 16:52 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 16:52 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 16:52 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 16:52 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 16:52 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 16:52 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 16:52 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 16:52 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 16:52 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 16:52 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 16:52 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 16:52 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 16:52 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 16:52 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 16:52 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 16:52 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 16:52 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 16:52 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 16:52 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 16:52 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 16:52 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 16:52 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 16:52 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 16:52 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 16:52 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 16:52 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 16:52 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 16:52 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 16:52 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 16:52 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 16:52 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 16:52 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 16:52 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 16:52 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 16:52 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 16:52 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 16:52 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 16:52 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 16:52 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 16:52 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 16:52 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 16:52 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 16:52 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 16:52 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 16:52 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 16:52 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 16:52 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 16:52 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 16:52 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 16:52 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 16:52 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 16:52 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 16:52 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 16:52 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 16:52 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 16:52 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 16:52 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 16:52 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 16:52 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 16:52 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-11 16:52 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 16:52 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 16:52 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-05 14:35 - 2016-05-05 22:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-04 18:30 - 2016-05-04 19:39 - 00000000 ____D C:\Users\Public\CineForm 2016-05-04 18:30 - 2016-05-04 19:29 - 00000000 ____D C:\Users\Ben\AppData\Roaming\GoPro 2016-05-04 18:30 - 2016-05-04 18:30 - 00000000 ____D C:\Users\Ben\AppData\Local\GoPro 2016-05-04 18:29 - 2016-05-04 18:29 - 00000000 ____D C:\Program Files (x86)\OpenAL 2016-04-27 21:28 - 2016-04-27 21:28 - 08306382 _____ C:\Users\Ben\Desktop\Infiltrate template.rar ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-26 15:57 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-05-26 15:57 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-05-26 15:49 - 2015-03-11 20:44 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-05-26 15:47 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Spotify 2016-05-26 15:46 - 2011-04-12 09:43 - 00699432 _____ C:\Windows\system32\perfh007.dat 2016-05-26 15:46 - 2011-04-12 09:43 - 00149572 _____ C:\Windows\system32\perfc007.dat 2016-05-26 15:46 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-26 15:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-05-26 15:43 - 2015-03-04 23:19 - 00000000 ___RD C:\Users\Ben\Dropbox 2016-05-26 15:42 - 2012-09-21 01:34 - 00000000 ____D C:\Users\Ben\AppData\Local\Spotify 2016-05-26 15:42 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-05-26 05:46 - 2015-12-26 07:38 - 00305198 _____ C:\bdlog.txt 2016-05-26 05:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-05-26 05:46 - 2015-04-04 22:48 - 00000000 ___SD C:\Windows\system32\GWX 2016-05-26 05:38 - 2015-08-15 12:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-05-26 05:38 - 2015-06-18 18:28 - 00001216 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000UA.job 2016-05-26 05:16 - 2015-04-14 01:51 - 00000080 _____ C:\Users\Ben\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 2016-05-26 04:30 - 2015-05-02 22:15 - 00005543 _____ C:\Users\Ben\Desktop\Kosten.txt 2016-05-26 04:20 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2016-05-25 19:38 - 2015-06-18 18:28 - 00001164 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2410925410-2808068811-915591143-1000Core.job 2016-05-24 23:57 - 2012-08-19 16:49 - 00000000 _____ C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2016-05-23 23:25 - 2012-08-17 03:18 - 00000000 ____D C:\Users\Ben\AppData\Roaming\vlc 2016-05-22 18:53 - 2015-03-11 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-05-22 18:53 - 2015-03-11 20:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-05-22 18:48 - 2013-10-12 19:28 - 00000000 ____D C:\AdwCleaner 2016-05-22 18:26 - 2014-04-06 17:25 - 00000000 ____D C:\ProgramData\elsterformular 2016-05-22 18:24 - 2014-04-06 17:25 - 00000000 ____D C:\Program Files (x86)\ElsterFormular 2016-05-22 18:24 - 2012-08-16 20:37 - 00000000 ____D C:\Users\Ben 2016-05-22 06:26 - 2015-11-02 20:43 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-05-21 16:50 - 2014-02-01 17:31 - 00000201 _____ C:\Users\Ben\Desktop\TO DO! BICHT!!!.txt 2016-05-21 14:51 - 2015-03-04 23:19 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Dropbox 2016-05-21 00:48 - 2013-08-26 11:01 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-21 00:15 - 2014-09-13 14:31 - 00001530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2016-05-21 00:15 - 2013-11-27 20:47 - 00000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-05-21 00:15 - 2013-09-13 21:51 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-21 00:15 - 2012-08-17 03:21 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-05-21 00:15 - 2012-08-16 20:34 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-05-21 00:15 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-05-21 00:15 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-05-21 00:14 - 2016-03-28 20:56 - 00002165 _____ C:\Users\Public\Desktop\Preset Manager 1.0.lnk 2016-05-21 00:14 - 2016-01-12 00:56 - 00001831 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2016-05-21 00:14 - 2015-03-21 03:54 - 00002168 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2016-05-21 00:14 - 2014-11-30 20:11 - 00000761 _____ C:\Users\Public\Desktop\Assetto Corsa.lnk 2016-05-21 00:14 - 2014-08-31 01:09 - 00000953 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk 2016-05-21 00:14 - 2014-04-20 21:02 - 00001101 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk 2016-05-21 00:14 - 2014-04-13 19:36 - 00001100 _____ C:\Users\Public\Desktop\Picasa 3.lnk 2016-05-21 00:14 - 2013-09-13 21:51 - 00001141 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-21 00:14 - 2013-08-23 01:01 - 00001060 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-05-21 00:14 - 2013-03-20 21:54 - 00001944 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2016-05-21 00:14 - 2012-12-25 18:54 - 00000704 _____ C:\Users\Public\Desktop\Winamp.lnk 2016-05-21 00:14 - 2012-09-21 01:34 - 00001779 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001923 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-17 00:39 - 00001911 _____ C:\Users\Public\Desktop\Avant Browser.lnk 2016-05-21 00:14 - 2012-08-16 20:38 - 00001321 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-05-21 00:14 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-05-21 00:14 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-05-21 00:13 - 2015-10-13 23:16 - 00000941 _____ C:\Users\Ben\Desktop\Magic Bullet Looks.lnk 2016-05-21 00:13 - 2015-03-04 23:19 - 00001009 _____ C:\Users\Ben\Desktop\Drobox.lnk 2016-05-21 00:13 - 2014-12-17 22:53 - 00001827 _____ C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk 2016-05-21 00:13 - 2014-10-19 19:41 - 00000905 _____ C:\Users\Ben\Desktop\GTR2.lnk 2016-05-21 00:13 - 2014-09-13 15:19 - 00001038 _____ C:\Users\Ben\Desktop\Vegas Pro 13.0 (64-bit).lnk 2016-05-21 00:13 - 2014-07-10 01:26 - 00000783 _____ C:\Users\Ben\Desktop\Zeug vom Desktop.lnk 2016-05-21 00:13 - 2013-11-27 23:49 - 00000924 _____ C:\Users\Ben\Desktop\GIMP.lnk 2016-05-21 00:13 - 2013-03-20 22:03 - 00000763 _____ C:\Users\Ben\Desktop\GTR Evolution.lnk 2016-05-21 00:13 - 2012-12-30 04:03 - 00001563 _____ C:\Users\Ben\Desktop\Counter-Strike Source.lnk 2016-05-21 00:13 - 2012-11-06 22:55 - 00000961 _____ C:\Users\Ben\Desktop\TeamSpeak 3 Client.lnk 2016-05-21 00:13 - 2012-10-03 14:32 - 00000684 _____ C:\Users\Ben\Desktop\Free PDF to Word Doc Converter.lnk 2016-05-21 00:13 - 2012-09-21 01:34 - 00001793 _____ C:\Users\Ben\Desktop\Spotify.lnk 2016-05-21 00:13 - 2012-08-19 16:49 - 00000842 _____ C:\Users\Ben\Desktop\BitLord.lnk 2016-05-21 00:13 - 2012-08-16 21:17 - 00000355 _____ C:\Users\Ben\Desktop\Arbeitsplatz.lnk 2016-05-21 00:05 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-05-20 21:00 - 2012-11-06 22:56 - 00000000 ____D C:\Users\Ben\AppData\Roaming\TS3Client 2016-05-20 19:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-05-16 20:18 - 2012-09-01 01:53 - 00000371 _____ C:\Users\Ben\Desktop\TO DO.txt 2016-05-15 05:09 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2016-05-15 05:06 - 2016-02-14 19:14 - 00000000 ____D C:\Program Files\Bitdefender 2016-05-15 03:51 - 2014-11-12 01:50 - 00000000 ____D C:\Users\Ben\AppData\LocalLow\boost_interprocess 2016-05-14 04:13 - 2014-04-05 20:01 - 00000000 ____D C:\Users\Ben\Desktop\CS 2014 2016-05-13 21:19 - 2016-03-29 01:26 - 00004230 _____ C:\Windows\System32\Tasks\AMD Updater 2016-05-13 21:17 - 2016-03-29 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-05-13 21:17 - 2013-12-29 21:05 - 00000000 ____D C:\Program Files\AMD 2016-05-13 07:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-13 07:38 - 2015-08-15 12:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-13 07:38 - 2015-07-23 00:54 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-13 07:38 - 2015-07-23 00:54 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-12 22:29 - 2012-08-16 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative 2016-05-12 22:29 - 2012-08-16 20:56 - 00000000 ____D C:\Program Files (x86)\Creative 2016-05-12 08:09 - 2015-04-15 19:16 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-12 08:04 - 2014-12-23 18:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 02:19 - 2014-08-20 22:58 - 00000000 ____D C:\Users\Ben\AppData\Local\Adobe 2016-05-11 23:25 - 2012-08-16 20:50 - 00000000 ____D C:\AMD 2016-05-11 22:53 - 2013-07-11 11:30 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 21:51 - 2009-07-14 06:45 - 05050848 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 21:50 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 18:01 - 2012-08-16 21:20 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-10 21:58 - 2012-08-16 20:47 - 00000000 ____D C:\Users\Ben\AppData\Roaming\Adobe 2016-05-08 18:39 - 2012-10-28 19:22 - 00000000 ____D C:\Users\Ben\AppData\Local\CrashDumps 2016-05-05 22:28 - 2013-09-13 21:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-27 21:43 - 2012-08-16 20:53 - 00120496 _____ C:\Users\Ben\AppData\Local\GDIPFONTCACHEV1.DAT ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-01-12 00:56 - 2016-01-12 00:56 - 15566737 _____ () C:\Program Files\FileZilla3141.zip 2012-08-19 16:49 - 2016-05-24 23:57 - 0000000 _____ () C:\Users\Ben\AppData\Roaming\bitlord_log.txt 2012-10-13 19:23 - 2013-12-12 01:51 - 0005632 _____ () C:\Users\Ben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-11-17 22:30 - 2015-11-17 22:30 - 0000842 _____ () C:\Users\Ben\AppData\Local\recently-used.xbel 2012-09-12 20:33 - 2013-04-21 19:02 - 0007605 _____ () C:\Users\Ben\AppData\Local\resmon.resmoncfg ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-18 07:54 ==================== Ende von FRST.txt ============================ |
|
| Themen zu Trojaner "searchprotect" und "tmp00000be1" entfernen |
| antivirus, avira, browser, defender, email, entfernen, error, file, google, home, internet, internet explorer, log, löschen, modul, pdf, programm, prozesse, services.exe, software, svchost.exe, temp, trojaner, windows, winlogon.exe |
, ,[e345e8f07d1c5cda634c5319966e827e]
und 
und speichere die Logdatei auf Deinem Desktop.
Linear-Darstellung
