| |
| |||||||
Log-Analyse und Auswertung: Windows 10: Chinesische SchadsoftwareWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
26.05.2016, 18:44
| #1 |
 |  Windows 10: Chinesische Schadsoftware Hi Leute, mein Name ist Ariel und ich bräuchte eure Hilfe! Auf meinem PC hat sich seit 26.05.15 eine Software mit chinesischen Schriftzeichen verlaufen. Das Softwaresymbol sieht aus wie ein Besen in einem blauen Kreis und in der Taskleiste ist ein blaues Schild mit weißen Elementen zu finden. Bisweilen merke ich von dieser Software nicht viel, außer, dass eben die Symbole da sind und Firefox eine merkwürdige neue Suchleiste hat. Hinzu kommt, dass hin und wieder kleine Pop-Up-Fenster erscheinen. Es sieht so aus als würde darin die CPU und RAM Auslastung angezeigt werden. Unter "Programme deinstallieren" kann ich die Software leider nicht löschen und auch der Ordner auf der Systemplatte lässt sich nicht löschen, da mir die Berechtigungen fehlen, obwohl ich auf einem Admin-Windows-Benutzerkonto angemeldet bin. Hier die bereits erstellten Logs! Vielen Dank für eure Hilfe!!!! Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-05-2016 01 durchgeführt von Ariel (Administrator) auf ALPHAONE (26-05-2016 19:19:49) Gestartet von C:\Users\Ariel\Downloads Geladene Profile: Ariel (Verfügbare Profile: Ariel & UpdatusUser) Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe (Sanford, L.P.) C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe () C:\Windows\SysWOW64\WinService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe (Sophos Limited) C:\Program Files (x86)\Common Files\Sophos\Web Intelligence\swi_fc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTray.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Spotify Ltd) C:\Users\Ariel\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe () C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (腾讯公司) C:\Users\Ariel\AppData\Roaming\Tencent\AndroidServer\1.0.0.512\AndroidServer.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMDeskTopGC.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Users\Ariel\AppData\Local\Temp\Rar$EX00.281\x86\UnlockerAssistant.exe (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTray.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe (Tencent) C:\Program Files (x86)\Common Files\Tencent\QQDownload\130\Tencentdl.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] () HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [IDSCCOMK4K] => "C:\Program Files (x86)\Screenify\idsccom_K4K.exe" HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] () HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498720 2016-04-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [WinampAgent] => "C:\Program Files (x86)\Winamp\winampa.exe" HKLM-x32\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DLSService] => "C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe" HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation) HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files (x86)\Sophos\AutoUpdate\almon.exe [1531872 2016-04-15] (Sophos Limited) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [716224 2016-03-23] (Autodesk, Inc.) HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTRAY.EXE [362304 2016-05-26] (Tencent) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Spotify Web Helper] => C:\Users\Ariel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-04-01] (Spotify Ltd) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\Ariel\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\RunOnce: [Uninstall C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Policies\Explorer: [] HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-2244333554-3036078685-3373813463-1001\$ebb3d03b2dc924761cba554f164c6fa2\n. ACHTUNG HKU\S-1-5-18\...\Run: [EPSON Stylus Photo R1800] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATI9LA.EXE [211968 2007-01-12] (SEIKO EPSON CORPORATION) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.) AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => Keine Datei AppInit_DLLs: ,C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll [231936 2016-04-15] (Sophos Limited) AppInit_DLLs-x32: C:\PROGRA~2\Sophos\SOPHOS~1\\SOPHOS~1.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\\sophos_detoured.dll [289040 2016-04-15] (Sophos Limited) AppInit_DLLs-x32: ,C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll [289040 2016-04-15] (Sophos Limited) ShellExecuteHooks: - {7AD1C0F5-07A2-40E5-8608-C6EAA0FF362F} - C:\Users\Ariel\AppData\Local\Microsoft\Windows\INetCookies\x64explibss.dll [416440 2016-05-26] () ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMGCShellExt64.dll [2016-05-26] (Tencent) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v2 Smart Wizard.lnk [2015-10-08] ShortcutTarget: NETGEAR WG111v2 Smart Wizard.lnk -> C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Spyder3Utility.lnk [2013-12-25] ShortcutTarget: Spyder3Utility.lnk -> C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe () GroupPolicy: Beschränkung - Chrome <======= ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{38eaf853-75bf-4bf7-91de-847373b8bd69}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{5ae0ab0c-aeb1-47d0-a28c-2061da49df3b}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{8648d16e-4ddc-4775-b61b-569b01c87ecf}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Internet Explorer: ================== HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSWebMon64.dat [2016-05-26] (Tencent) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-05] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-05] (Oracle Corporation) BHO-x32: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) FireFox: ======== FF ProfilePath: C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default FF NewTab: hxxp://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqB38rBXYnBk..&v=20160526&uid=A9053FCB716AB504442777C263B44072&ptid=icb&mode=loadm FF DefaultSearchEngine: hohosearch FF SelectedSearchEngine: hohosearch FF Homepage: www.google.de FF Keyword.URL: hxxp://d2ucfwpxlh3zh3.cloudfront.net/chrome.php?uid=A9053FCB716AB504442777C263B44072&ptid=icb&ts=AHEqB38rBXYnBk..&v=20160526&mode=ffexttoolbar&q= FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [Keine Datei] FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @dymo.com/DymoLabelFramework -> C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll [2014-03-20] ( Sanford L.P.) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-05] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-12-19] (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-11-11] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-11-11] (NVIDIA Corporation) FF Plugin-x32: @qq.com/QQPCMgr -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\npQMExtensionsMozilla.dll [2016-05-26] (Tencent Technology (Shenzhen) Company Limited) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems) FF Plugin HKU\S-1-5-21-2244333554-3036078685-3373813463-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ariel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2244333554-3036078685-3373813463-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF SearchPlugin: C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default\searchplugins\15i7orzo.xml [2016-05-26] FF Extension: Flash and Video Download - C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-05-26] FF Extension: Flash and Video Download - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\cf1typ6d.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-05-26] FF Extension: GsearchFinder - C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi [2016-05-26] FF Extension: TSearch - C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default\Extensions\{6E727987-C8EA-44DA-8749-310C0FBE3C3E} [2016-05-26] [ist nicht signiert] FF Extension: VK+OK AdBlock - C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default\Extensions\{FF20459C-DA6E-41A7-80BC-8F4FEFD9C575} [2016-05-26] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2016-05-12] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2016-04-23] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1231376 2016-03-23] (Autodesk Inc.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 DymoPnpService; C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [33072 2014-03-20] (Sanford, L.P.) R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation) R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Datei ist nicht signiert] S2 ProntSpooler; C:\Users\Ariel\AppData\Local\Apps\2.0\abril.exe [134656 2016-05-19] () [Datei ist nicht signiert] R2 QQPCRTP; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe [313936 2016-05-26] (Tencent) U2 QQRepair11ce; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepair11ce [147176 2016-05-26] () S2 QQRepairFixSVC; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepairFixSVC [147176 2016-05-26] () R2 SAVAdminService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [311544 2016-04-15] (Sophos Limited) R2 SAVService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [285136 2016-04-15] (Sophos Limited) R2 SCM_Service; C:\Windows\SysWOW64\WinService.exe [186848 2010-05-10] () R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [604000 2016-04-15] (Sophos Limited) R2 Sophos Web Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [341800 2014-10-14] (Sophos Limited) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 swi_filter; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe [471520 2016-04-15] (Sophos Limited) R2 swi_service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3339736 2016-04-15] (Sophos Limited) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) S2 Anqhstservice; "C:\Program Files (x86)\Anaqatoch\Anqhstservice.exe" {79740E79-A383-47A7-B513-3DF6563D007F} {A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2014-05-27] (Google Inc) S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [20992 2014-05-27] (LG Electronics Inc.) S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2014-05-27] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2014-05-27] (LG Electronics Inc.) R1 EterlogicVirtualSerialDriver; C:\WINDOWS\system32\drivers\VSPE.sys [40928 2016-05-10] () R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] () S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert] R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation) R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMUdisk64.sys [184952 2016-05-18] (Tencent) R2 QQSysMonX64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQSysMonX64.sys [154744 2016-05-26] (电脑管家) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) S3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3870464 2015-10-01] (Realtek Semiconductor Corporation ) R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [161024 2014-10-14] (Sophos Limited) S3 sdcfilter; C:\Windows\system32\DRIVERS\sdcfilter.sys [38144 2016-04-15] (Sophos Limited) R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\softaal64.sys [44664 2016-05-26] (Tencent) S4 SophosBootDriver; C:\Windows\system32\DRIVERS\SophosBootDriver.sys [27904 2016-04-15] (Sophos Limited) S3 Spyder3; C:\Windows\System32\drivers\Spyder3.sys [15360 2010-03-30] () R1 SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\SRepairDrv [179320 2016-05-26] () R1 swi_callout; C:\Windows\system32\DRIVERS\swi_callout.sys [32512 2015-04-16] (Sophos Limited) R3 TAOAccelerator; C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys [99480 2016-05-26] (Tencent) R2 TAOKernelDriver; C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys [143992 2016-05-26] (Tencent Technology(Shenzhen) Company Limited) R3 TcHardWare; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCHW-x64.sys [16552 2016-05-26] (Tencent) R3 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [97400 2016-05-26] (电脑管家) R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TS888x64.sys [38520 2016-05-26] (Tencent) S1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSDefenseBT64.sys [28984 2016-05-26] (Tencent) R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TsNetHlpX64.sys [57976 2016-05-26] () R4 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSSysKit64.sys [96888 2016-05-26] (电脑管家) S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2015-10-30] (Microsoft Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-02] (Wondershare) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-26 19:19 - 2016-05-26 19:20 - 00029383 _____ C:\Users\Ariel\Downloads\FRST.txt 2016-05-26 19:19 - 2016-05-26 19:19 - 02383360 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe 2016-05-26 19:19 - 2016-05-26 19:19 - 00000000 ____D C:\FRST 2016-05-26 19:06 - 2016-05-26 19:06 - 00003654 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-ariel.karwacki@gmx.de 2016-05-26 18:34 - 2016-05-26 18:34 - 00113964 _____ C:\Users\Ariel\Downloads\unlocker1.9.0-portable.zip 2016-05-26 18:22 - 2016-05-26 18:22 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-26 18:22 - 2016-05-26 18:22 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-26 18:22 - 2016-05-26 18:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-26 18:20 - 2016-05-26 18:20 - 00242320 _____ C:\Users\Ariel\Downloads\Firefox Setup Stub 46.0.1.exe 2016-05-26 17:43 - 2016-05-26 17:43 - 00038520 _____ (Tencent) C:\WINDOWS\SysWOW64\Drivers\TS888x64.sys 2016-05-26 17:43 - 2016-05-26 17:43 - 00000306 __RSH C:\Users\Ariel\ntuser.pol 2016-05-26 17:38 - 2016-05-26 17:43 - 00000000 ____D C:\ProgramData\TXQMPC 2016-05-26 17:38 - 2016-05-26 17:38 - 00000000 ____D C:\Program Files\Common Files\Tencent 2016-05-26 17:38 - 2016-05-26 17:38 - 00000000 _____ C:\Users\Ariel\Desktop\$电脑管家-清理垃圾$.qmgc 2016-05-26 17:38 - 2016-05-26 17:37 - 00143992 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys 2016-05-26 17:38 - 2016-05-26 17:37 - 00099480 _____ (Tencent) C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys 2016-05-26 17:38 - 2016-05-26 17:37 - 00097400 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFltX64.sys 2016-05-26 17:37 - 2016-05-26 17:40 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Tencent 2016-05-26 17:37 - 2016-05-26 17:40 - 00000000 ____D C:\ProgramData\Tencent 2016-05-26 17:37 - 2016-05-26 17:37 - 00000000 ____D C:\Program Files (x86)\Tencent 2016-05-26 17:36 - 2016-05-26 17:36 - 00008894 _____ C:\WINDOWS\System32\Tasks\Anaqatoch Host 2016-05-26 17:36 - 2016-05-26 17:36 - 00000000 ____D C:\WINDOWS\system32\SSL 2016-05-26 17:35 - 2016-05-26 17:35 - 00000000 ____D C:\Users\Ariel\AppData\Local\csdi_monetize_120160526 2016-05-24 17:03 - 2016-05-24 17:03 - 00056322 _____ C:\Users\Ariel\Downloads\Table_bottom_mount_for_a_Kingston_memory_card_reader.zip 2016-05-24 17:03 - 2015-04-08 20:28 - 00034484 _____ C:\Users\Ariel\Desktop\card_reader_holder.stl 2016-05-24 16:51 - 2016-05-24 16:51 - 00000000 ____D C:\ProgramData\FLEXnet 2016-05-24 16:46 - 2016-05-23 08:29 - 00081151 _____ C:\Users\Ariel\Desktop\filament_holder_p01.stl 2016-05-24 16:45 - 2016-05-24 16:46 - 00055280 _____ C:\Users\Ariel\Downloads\Filament_holder_for_Dreamer_and_Creator_Pro.zip 2016-05-23 22:20 - 2016-05-23 22:21 - 00003478 _____ C:\Users\Ariel\Downloads\Swiss_Army_Knife_toothpick.zip 2016-05-22 17:49 - 2016-05-22 17:49 - 00473674 _____ C:\Users\Ariel\Downloads\20160404_backoefele_spargelkarte_web.pdf 2016-05-21 21:35 - 2016-05-21 21:35 - 00000197 ____H C:\Users\Ariel\Documents\Zeichnung1.dwl2 2016-05-21 21:35 - 2016-05-21 21:35 - 00000047 ____H C:\Users\Ariel\Documents\Zeichnung1.dwl 2016-05-21 17:13 - 2016-05-21 17:13 - 00002684 _____ C:\Users\Ariel\Documents\Zeichnung8.stl 2016-05-21 11:08 - 2016-05-21 11:16 - 00039084 _____ C:\Users\Ariel\Documents\Zeichnung7.stl 2016-05-21 10:37 - 2016-05-21 10:37 - 00004284 _____ C:\Users\Ariel\Desktop\Zeichnung4.stl 2016-05-20 20:22 - 2016-05-20 20:22 - 00001441 _____ C:\Users\Public\Desktop\Autodesk Desktop-App.lnk 2016-05-20 20:18 - 2016-05-20 20:18 - 00002076 _____ C:\Users\Public\Desktop\A360 Desktop.lnk 2016-05-20 20:09 - 2016-05-20 20:09 - 00002148 _____ C:\Users\Public\Desktop\Autodesk ReCap 360.lnk 2016-05-20 20:09 - 2016-05-20 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 360 2016-05-20 19:58 - 2016-05-24 16:51 - 00000000 ____D C:\Users\Ariel\AppData\Local\Autodesk 2016-05-20 19:58 - 2016-05-20 20:22 - 00000000 ____D C:\Program Files (x86)\Autodesk 2016-05-20 19:58 - 2016-05-20 19:58 - 00002173 _____ C:\Users\Public\Desktop\AutoCAD 2017 - Deutsch (German).lnk 2016-05-20 19:58 - 2016-05-20 19:58 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2016-05-20 19:58 - 2016-05-20 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 - Deutsch (German) 2016-05-20 19:57 - 2016-05-20 19:57 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2016-05-20 19:56 - 2016-05-20 19:56 - 00000000 ____D C:\Users\Ariel\Documents\Inventor Server SDK ACAD 2017 2016-05-20 19:54 - 2016-05-20 20:18 - 00000000 ____D C:\Program Files\Autodesk 2016-05-20 19:54 - 2016-05-20 19:57 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2016-05-20 19:32 - 2016-05-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2016-05-20 19:21 - 2016-05-24 16:51 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Autodesk 2016-05-20 19:21 - 2016-05-24 16:51 - 00000000 ____D C:\ProgramData\Autodesk 2016-05-20 19:16 - 2016-05-20 19:16 - 18698272 _____ C:\Users\Ariel\Downloads\AutoCAD_2017_German_Win_32_64bit_wi_de-DE_Setup.exe 2016-05-20 19:16 - 2016-05-20 19:16 - 00000000 ____D C:\Autodesk 2016-05-20 19:15 - 2016-05-20 19:15 - 00338256 _____ (Autodesk Inc.) C:\Users\Ariel\Downloads\AutoCAD_2017_German_Win_32_64bit_wi_de-DE_Setup_webinstall.exe 2016-05-20 19:12 - 2016-05-20 19:12 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Trimble Connect for SketchUp 2016-05-20 19:10 - 2016-05-20 19:10 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\SketchUp 2016-05-20 19:09 - 2016-05-20 19:09 - 00000000 ____D C:\ProgramData\Reprise 2016-05-20 19:08 - 2016-05-20 19:08 - 00000000 ____D C:\ProgramData\SketchUp 2016-05-17 17:41 - 2016-05-17 17:41 - 00300032 _____ C:\Users\Ariel\Downloads\6ZivilrechtlicheRechtsfolgenArt101Abs2AEUV.ppt 2016-05-14 09:39 - 2016-05-14 09:39 - 01047858 _____ C:\Users\Ariel\Downloads\Universal_CD-car_slot_PHONE_holder_mount._iPhone5_iPhone6_etc._Quick_change__.zip 2016-05-13 20:20 - 2016-05-13 20:20 - 12851868 _____ C:\Users\Ariel\Downloads\Air_Raid_Siren_-_hand_crank_version.zip 2016-05-12 22:12 - 2016-05-12 22:12 - 01595457 _____ C:\Users\Ariel\Downloads\All_Alphabet_Letters_A-Z.zip 2016-05-12 17:55 - 2016-05-12 17:59 - 01879017 _____ C:\Users\Ariel\Downloads\Echo__3_tone_whistle.zip 2016-05-12 17:10 - 2016-05-12 17:18 - 00235682 _____ C:\Users\Ariel\Desktop\Unbenannt.pdf 2016-05-10 22:52 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-05-10 22:52 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-05-10 22:52 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-05-10 22:52 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-05-10 22:52 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-05-10 22:52 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-05-10 22:52 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-05-10 22:52 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-05-10 22:52 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-05-10 22:52 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-05-10 22:52 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-05-10 22:52 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-05-10 22:52 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-05-10 22:52 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-05-10 22:52 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-05-10 22:52 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-05-10 22:52 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2016-05-10 22:52 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2016-05-10 22:52 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-05-10 22:52 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-05-10 22:52 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-05-10 22:52 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-05-10 22:52 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-05-10 22:52 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-05-10 22:52 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-05-10 22:52 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-05-10 22:52 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-05-10 22:52 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-05-10 22:52 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-05-10 22:52 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-05-10 22:52 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-05-10 22:52 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-05-10 22:52 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-05-10 22:52 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-05-10 22:52 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-05-10 22:52 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-05-10 22:52 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-05-10 22:52 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-05-10 22:52 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-05-10 22:52 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-05-10 22:52 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-05-10 22:52 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-05-10 22:52 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-05-10 22:52 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-05-10 22:52 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-05-10 22:52 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-05-10 22:52 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-05-10 22:52 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2016-05-10 22:51 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys 2016-05-10 22:51 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-05-10 22:51 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-05-10 22:51 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2016-05-10 22:51 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2016-05-10 22:51 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2016-05-10 22:51 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2016-05-10 22:51 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2016-05-10 22:51 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-05-10 22:51 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-05-10 22:51 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-05-10 22:51 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2016-05-10 22:51 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2016-05-10 22:51 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2016-05-10 22:51 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2016-05-10 22:51 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-05-10 22:51 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2016-05-10 22:51 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-05-10 22:51 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-05-10 22:51 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2016-05-10 22:51 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-05-10 22:51 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-05-10 22:51 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-05-10 22:51 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-05-10 22:51 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2016-05-10 22:51 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys 2016-05-10 22:51 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-05-10 22:51 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-05-10 22:51 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2016-05-10 22:51 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-05-10 22:51 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll 2016-05-10 22:51 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2016-05-10 22:51 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-05-10 22:51 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-05-10 22:51 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll 2016-05-10 22:51 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2016-05-10 22:51 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-05-10 22:51 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-05-10 22:51 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll 2016-05-10 22:51 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys 2016-05-10 22:51 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe 2016-05-10 22:51 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-05-10 22:51 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2016-05-10 22:51 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys 2016-05-10 22:51 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2016-05-10 22:51 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe 2016-05-10 22:51 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-05-10 22:51 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2016-05-10 22:51 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2016-05-10 22:51 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-05-10 22:51 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-05-10 22:51 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-05-10 22:51 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-05-10 22:51 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll 2016-05-10 22:51 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll 2016-05-10 22:51 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2016-05-10 22:51 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-05-10 22:51 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-05-10 22:51 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2016-05-10 22:51 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-05-10 22:51 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-05-10 22:51 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2016-05-10 22:51 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2016-05-10 22:51 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2016-05-10 22:51 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-05-10 22:51 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2016-05-10 22:51 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-05-10 22:51 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml 2016-05-10 22:51 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml 2016-05-10 21:57 - 2016-05-10 21:57 - 00040928 _____ C:\WINDOWS\system32\Drivers\VSPE.sys 2016-05-10 21:57 - 2016-05-10 21:57 - 00002330 _____ C:\Users\Ariel\Desktop\VSPE.lnk 2016-05-10 21:57 - 2016-05-10 21:57 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtual Serial Ports Emulator 2016-05-10 21:57 - 2016-05-10 21:57 - 00000000 ____D C:\Program Files (x86)\Eterlogic.com 2016-05-10 21:17 - 2016-05-10 21:25 - 00000000 ____D C:\Users\Ariel\AppData\Local\Arduino15 2016-05-10 21:17 - 2016-05-10 21:17 - 00000000 ____D C:\Users\Ariel\Documents\Arduino 2016-05-10 21:17 - 2016-05-10 21:17 - 00000000 ____D C:\Users\Ariel\.oracle_jre_usage 2016-05-10 20:46 - 2016-05-10 20:46 - 00001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk 2016-05-10 20:45 - 2016-05-10 20:46 - 00000000 ____D C:\Program Files (x86)\Arduino 2016-05-10 20:26 - 2016-05-10 20:26 - 02124768 _____ C:\Users\Ariel\Downloads\CDM21216_Setup.exe 2016-05-10 20:25 - 2016-05-10 20:26 - 01352960 _____ C:\Users\Ariel\Downloads\CDM v2.12.16 WHQL Certified.zip 2016-05-10 20:18 - 2016-05-10 20:18 - 00000000 ____D C:\Users\Ariel\AppData\Local\Simplify3D 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\ms-drivers 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\icsxml 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\DIBsection 2016-05-10 20:02 - 2016-05-10 20:03 - 00000000 ____D C:\Program Files\Simplify3D-3.0.2 2016-05-10 20:02 - 2016-05-10 20:02 - 00001863 _____ C:\Users\Public\Desktop\Simplify3D.lnk 2016-05-10 20:02 - 2016-05-10 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Simplify3D Software 2016-05-04 18:02 - 2015-04-16 19:45 - 00032512 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\swi_callout.sys 2016-05-02 23:00 - 2016-05-02 23:00 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\java 2016-05-02 22:54 - 2016-05-02 22:54 - 00002241 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Knuddels.lnk 2016-05-02 22:54 - 2016-05-02 22:54 - 00002211 _____ C:\Users\Ariel\Desktop\Knuddels.lnk 2016-05-02 22:53 - 2016-05-23 22:40 - 00000000 ____D C:\Users\Ariel\Knuddels-Stapp 2016-05-02 22:53 - 2016-05-02 22:53 - 01994832 _____ C:\Users\Ariel\Downloads\KnuddelsSetup.KC3PZ8J.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-26 19:02 - 2012-12-05 14:32 - 00000000 ____D C:\Users\Ariel\Documents\Outlook-Dateien 2016-05-26 18:24 - 2012-12-04 23:45 - 00000000 ____D C:\Users\Ariel\AppData\Local\VirtualStore 2016-05-26 18:22 - 2013-12-26 00:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-05-26 17:49 - 2015-10-30 20:35 - 00780072 _____ C:\WINDOWS\system32\perfh007.dat 2016-05-26 17:49 - 2015-10-30 20:35 - 00156884 _____ C:\WINDOWS\system32\perfc007.dat 2016-05-26 17:49 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-05-26 17:49 - 2015-08-10 21:52 - 01811252 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-05-26 17:43 - 2015-12-14 05:02 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-05-26 17:43 - 2015-12-14 04:54 - 00000000 ____D C:\Users\Ariel 2016-05-26 17:43 - 2015-12-14 04:53 - 00000000 ____D C:\ProgramData\NVIDIA 2016-05-26 17:43 - 2015-12-14 04:52 - 05056176 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-05-26 17:42 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-05-26 17:35 - 2015-08-10 21:50 - 00002756 __RSH C:\ProgramData\ntuser.pol 2016-05-26 17:35 - 2014-08-02 11:36 - 00000000 ____D C:\Users\Ariel\AppData\Local\Apps\2.0 2016-05-26 17:35 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-05-26 16:35 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-05-26 16:35 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-05-26 13:25 - 2013-10-22 20:22 - 00004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C8A17187-61BE-4023-AD7E-A979B4EEBD52} 2016-05-26 13:25 - 2012-12-07 14:14 - 00000000 ____D C:\Users\Ariel\AppData\Local\Adobe 2016-05-26 00:37 - 2014-12-26 15:52 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\FileAdvisor 2016-05-25 14:51 - 2014-12-25 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Type Advisor 2016-05-24 16:51 - 2013-02-23 15:53 - 00000000 ____D C:\ProgramData\boost_interprocess 2016-05-21 11:08 - 2015-11-08 11:12 - 00000000 ___RD C:\Users\Ariel\3D Objects 2016-05-20 19:56 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2016-05-20 19:50 - 2015-01-11 12:51 - 00000000 ____D C:\Users\Ariel\AppData\Local\Spotify 2016-05-20 19:49 - 2015-01-11 12:49 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Spotify 2016-05-20 19:29 - 2012-12-18 23:07 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-05-20 19:29 - 2012-12-18 22:36 - 00000000 ____D C:\Program Files (x86)\Steam 2016-05-20 19:28 - 2015-03-03 11:30 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\DVDVideoSoft 2016-05-20 19:23 - 2013-12-07 21:51 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-19 22:38 - 2015-08-10 21:52 - 00002425 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-05-19 22:38 - 2015-08-10 21:52 - 00000000 ___RD C:\Users\Ariel\OneDrive 2016-05-18 12:27 - 2016-04-17 08:57 - 00000000 ____D C:\Users\Ariel\Desktop\Magisterarbeit 2016-05-14 14:30 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-05-12 15:48 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-05-12 08:11 - 2013-06-30 17:58 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk 2016-05-12 08:11 - 2013-06-30 17:58 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk 2016-05-12 08:11 - 2013-06-30 17:58 - 00002126 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk 2016-05-12 08:09 - 2015-06-24 22:12 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 07:57 - 2015-08-10 21:50 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-05-12 03:31 - 2015-10-30 20:47 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-05-12 03:30 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-11 16:38 - 2013-08-31 15:26 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-05-11 16:30 - 2012-12-12 22:41 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-05-04 17:58 - 2012-12-04 23:45 - 00000000 ____D C:\Users\Ariel\AppData\Local\Packages ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-16 14:30 - 2015-02-16 14:31 - 0044120 __RSH () C:\Program Files (x86)\DLS8Uninstall.log 2013-04-13 10:13 - 2013-04-13 10:13 - 0000000 _____ () C:\Users\Ariel\AppData\Roaming\.NANotifyHere 2014-03-18 19:35 - 2014-03-18 19:35 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen 2013-06-20 17:38 - 2015-12-18 13:51 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen 2013-01-20 20:15 - 2013-01-20 20:15 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen 2012-12-24 15:13 - 2013-01-12 12:00 - 0000125 ___SH () C:\ProgramData\.zreglib 2015-12-14 04:52 - 2015-12-14 04:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2012-12-20 19:29 - 2015-03-19 15:06 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt ZeroAccess: C:\Users\Ariel\AppData\Local\Google\Desktop\Install ZeroAccess: C:\Program Files (x86)\Google\Desktop\Install Einige Dateien in TEMP: ==================== C:\Users\Ariel\AppData\Local\Temp\AcDeltree.exe C:\Users\Ariel\AppData\Local\Temp\Babolka.mp3.exe C:\Users\Ariel\AppData\Local\Temp\cct.dll C:\Users\Ariel\AppData\Local\Temp\dpnWjSldSxxnpCSj.exe C:\Users\Ariel\AppData\Local\Temp\Execute2App.exe C:\Users\Ariel\AppData\Local\Temp\JavaIC.dll C:\Users\Ariel\AppData\Local\Temp\jre-8u66-windows-au.exe C:\Users\Ariel\AppData\Local\Temp\msscct32.dll C:\Users\Ariel\AppData\Local\Temp\msvcp90.dll C:\Users\Ariel\AppData\Local\Temp\msvcr90.dll C:\Users\Ariel\AppData\Local\Temp\P4DV3EYO6V.exe C:\Users\Ariel\AppData\Local\Temp\pps-qq-19.exe C:\Users\Ariel\AppData\Local\Temp\qqpcmgr_v11.5.17490.219_45479_Silence.exe C:\Users\Ariel\AppData\Local\Temp\setup.exe C:\Users\Ariel\AppData\Local\Temp\ts_10051.exe C:\Users\Ariel\AppData\Local\Temp\vk_ok_adblock.exe C:\Users\Ariel\AppData\Local\Temp\VY5II8VDLD.exe C:\Users\Ariel\AppData\Local\Temp\wajam_install.exe C:\Users\Ariel\AppData\Local\Temp\YSearchUtil.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-23 11:06 ==================== Ende von FRST.txt ============================ Geändert von Brandon_K (26.05.2016 um 19:10 Uhr) |
|
26.05.2016, 18:45
| #2 |
| | Windows 10: Chinesische SchadsoftwareCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-05-2016 01
durchgeführt von Ariel (2016-05-26 19:20:33)
Gestartet von C:\Users\Ariel\Downloads
Windows 10 Pro Version 1511 (X64) (2015-12-14 03:04:32)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2244333554-3036078685-3373813463-500 - Administrator - Disabled)
Ariel (S-1-5-21-2244333554-3036078685-3373813463-1001 - Administrator - Enabled) => C:\Users\Ariel
DefaultAccount (S-1-5-21-2244333554-3036078685-3373813463-503 - Limited - Disabled)
Gast (S-1-5-21-2244333554-3036078685-3373813463-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2244333554-3036078685-3373813463-1003 - Limited - Enabled)
SophosSAUALPHAONE0 (S-1-5-21-2244333554-3036078685-3373813463-1045 - Limited - Enabled)
UpdatusUser (S-1-5-21-2244333554-3036078685-3373813463-1044 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: 电脑管家系统防护 (Enabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Sophos Anti-Virus (Enabled - Up to date) {6BABF8F7-3EB6-BD1D-9167-8C5ECA060A29}
AS: Sophos Anti-Virus (Enabled - Up to date) {D0CA1913-188C-B293-ABD7-B72CB1814094}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: 电脑管家系统防护 (Enabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4K Video Downloader 3.8 (HKLM-x32\...\4K Video Downloader_is1) (Version: 3.8.0.1830 - Open Media LLC)
A360 Desktop (HKLM\...\{7758802D-9486-4883-9927-CCAC366A3BA4}) (Version: 7.2.3.1800 - Autodesk)
ACA & MEP 2017 Object Enabler (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (Version: 21.0.52.0 - Autodesk) Hidden
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.16 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.600 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Flash Player Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
allTunes (HKLM-x32\...\{2209F58F-1316-401B-A2E7-1F68AD729310}_is1) (Version: 1.2.44 - allTunes, Inc.)
AnySend (HKLM-x32\...\ASPackage) (Version: 1.0.0.0 - CMI Limited) <==== ACHTUNG
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arduino (HKLM-x32\...\Arduino) (Version: 1.6.9 - Arduino LLC)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 3.5 - Auslogics Software Pty Ltd)
AutoCAD 2017 - Deutsch (German) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 Language Pack - Deutsch (German) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - Deutsch (German) (HKLM\...\AutoCAD 2017 - Deutsch (German)) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit (HKLM\...\{276A67E0-71EB-4827-B5F7-2ACF02BC1A5B}) (Version: 4.37.6853 - Autodesk)
Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 6.0.108.150 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk ReCap 360 (HKLM\...\Autodesk ReCap 360) (Version: 3.0.0.52 - Autodesk)
Autodesk ReCap 360 (Version: 3.0.0.52 - Autodesk) Hidden
AviSynth+ 2013-11-25 (HKLM-x32\...\{AC78780F-BACA-4805-8D4F-AE1B52B7E7D3}_is1) (Version: 2.6.0.5 - The Public)
Backuptrans iPhone WhatsApp to Android Transfer (x64) 3.2.34 (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Backuptrans iPhone WhatsApp to Android Transfer (x64)) (Version: 3.2.34 - Backuptrans)
Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-3 - Wacom Technology Corp.)
Bamboo Dock (HKLM-x32\...\Bamboo Dock) (Version: 4.1 - Wacom Co., Ltd.)
Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden
Bamboo Tablets Tutorial (x32 Version: 3.0.20 - Wacom) Hidden
Battlefield: Bad Company 2 (HKLM-x32\...\Steam App 24960) (Version: - DICE)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Blu-ray Copy 1.0.50 (HKLM-x32\...\{EE56B531-B655-4afa-9664-0C0970E5798B}_is1) (Version: - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version: - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version: - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version: - Treyarch)
Call of Duty: Modern Warfare 3 - Dedicated Server (HKLM-x32\...\Steam App 42750) (Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version: - Infinity Ward - Sledgehammer Games)
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Digital Anarchy Flicker Free AE v1.0.2 (HKLM\...\Flicker Free AE_is1) (Version: 1.0.2 - Team V.R)
Dräger UCF Serie 6/7/8/9000 (HKLM-x32\...\{A5DDBE6E-F103-474E-B888-15AFEBC98D73}) (Version: 3.0.0 - Dräger)
DYMO Label v.8 (HKLM-x32\...\DYMO Label v.8) (Version: 8.5.1.1816 - Sanford, L.P.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.0.18598 - Landesfinanzdirektion Thüringen)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.20.00 - SEIKO EPSON CORPORATION)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production)
ffdshow v1.3.4527 [2013-12-03] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4527.0 - )
File Type Advisor 1.6 (HKLM-x32\...\File Type Advisor_is1) (Version: - )
Flashgrabber 1.1 (HKLM-x32\...\{AFAFBCB0-0044-49C8-93F4-75FE8B21740B}) (Version: 1.1.0 - biu software)
FMS32-PRO Version 3.1.5 (HKLM-x32\...\ST6UNST #2) (Version: - )
Free M4a to MP3 Converter 8.3 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
iPhone Backup Extractor (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\iPhone Backup Extractor) (Version: 6.0.2.715 - Reincubate Ltd)
iPhone Backup Extractor (x32 Version: 6.0.2.715 - Reincubate Ltd) Hidden
iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
KG-UV8D (HKLM-x32\...\KG-UV8DB2.V1.00(140415)) (Version: B2.V1.00(140415) - Quanzhou Wouxun Electronics Co.£¬Ltd. Right)
Knuddels Standalone App (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Knuddels App ) (Version: "2015.12.6.0" - "Knuddels App")
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.22.20141205 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{15A5D29A-F209-49FD-BA47-5E4C882FF496}) (Version: 3.12.1.0 - LG Electronics)
Logitech Unifying-Software 2.10 (HKLM\...\Logitech Unifying) (Version: 2.10.37 - Logitech)
MAGIX Web Designer 9 Premium (32-Bit) (HKLM-x32\...\MX.{1CC91196-D629-4C67-9547-FA76E6A5C3E1}) (Version: 9.0.1.27343 - MAGIX AG)
MAGIX Web Designer 9 Premium (Version: 9.0.1.27343 - MAGIX AG) Hidden
Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 12.10.10.3 - Marvell)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.0.1 - CEWE COLOR AG u Co. OHG)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\MyFreeCodec) (Version: - )
Nero 7 Premium (HKLM-x32\...\{98EFD8F0-08DE-48DB-B922-A2EBAB711031}) (Version: 7.03.1151 - Nero AG)
NETGEAR WG111v2 wireless USB 2.0 adapter (HKLM-x32\...\{4102037D-E8E0-48E0-B203-E521D194FB71}) (Version: 1.0.0.133 - NETGEAR)
NVIDIA 3D Vision Controller-Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.7.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.9 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.9 - NVIDIA Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Photomatix Pro version 4.1.4 (HKLM\...\PhotomatixPro41x64_is1) (Version: 4.1.4 - HDRsoft Sarl)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.7.0 - Prolific Technology INC)
POIbase 1.071 (HKLM-x32\...\POIbase_is1) (Version: - POIbase)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu)
Portrait Professional 11.3 (HKLM-x32\...\PortraitProfessional11_is1) (Version: 11.3 - Anthropics Technology Ltd.)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
PSWx29 4.50 (HKLM-x32\...\{66825DF7-B55E-4A91-8B94-99C11C7DC27C}_is1) (Version: - Swissphone Telecom AG)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
RescuePRO Deluxe 5.2.2.5 (HKLM-x32\...\{38D9AAB8-116B-40BB-A801-50B71DF82D24}_is1) (Version: 5.2.2.5 - LC Technology International, Inc.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.05.45.00(23.05.2014) - Samsung Electronics Co., Ltd.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version: - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version: - )
Samsung PC Studio 3 (HKLM-x32\...\{C4A4722E-79F9-417C-BD72-8D359A090C97}) (Version: 3.2.2.80601 - Samsung Electronics Co., Ltd.)
Samsung PC Studio 3 (x32 Version: 3.0.0.80601 - Samsung Electronics Co., Ltd.) Hidden
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Assistant (HKLM-x32\...\Samsung Scan Assistant) (Version: 1.05.07 (20.07.2012) - Samsung Electronics Co., Ltd.)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.19.0 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
SHIELD Streaming (Version: 1.6.53 - NVIDIA Corporation) Hidden
Simplify3D Software (HKLM\...\Simplify3D Software 3.0.2) (Version: 3.0.2 - Simplify3D)
SketchUp-Import 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16034.4 - Samsung Electronics Co., Ltd.)
Smart Switch (x32 Version: 4.1.16034.4 - Samsung Electronics Co., Ltd.) Hidden
Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)
Sony RAW Driver (HKLM-x32\...\{166FCF01-AC98-4288-A01C-90BEB808C059}) (Version: 2.0.00.08130 - Sony Corporation)
Sophos Anti-Virus (HKLM-x32\...\{09863DA9-7A9B-4430-9561-E04D178D7017}) (Version: 10.6.3.537 - Sophos Limited)
Sophos AutoUpdate (HKLM-x32\...\{BCF53039-A7FC-4C79-A3E3-437AE28FD918}) (Version: 5.2.0.276 - Sophos Limited)
Spotify (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Spotify) (Version: 1.0.25.127.g58007b4c - Spotify AB)
Spyder3Elite (HKLM-x32\...\Spyder3Elite) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SUPER © v2015.build.64+Recorder (2015/02/13) Version v2015.buil (HKLM-x32\...\{8E2A29E2-96BF-8759-4DA7-5C16C90729A4}_is1) (Version: v2015.build.64+Recorder - eRightSoft)
TinyWall (HKLM-x32\...\{CAD35000-E28E-44A1-B4D4-93D820C8539E}) (Version: 2.0.1.0 - Károly Pados)
TuneUp 3.0.7.0 (HKLM-x32\...\TuneUpMedia) (Version: 3.0.7.0 - TuneUp Media, Inc.)
Unity Web Player (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)
Verfügbare Autodesk-Apps 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
Virtual Serial Ports Emulator (HKLM-x32\...\{8F3F769D-E9C4-42E5-9B35-82DDCE0790C1}) (Version: 0.938 - Eterlogic.com)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.)
Welcome App (Start-up experience) (x32 Version: 12.0.15000 - Nero AG) Hidden
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB (04/21/2011 01.0.0.0) (HKLM\...\BEA7B05370C19B9C86893BB484FD6B9CC52B0CD8) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
WN111v2 (x32 Version: 3.0.0.5 - NETGEAR) Hidden
Wondershare MobileTrans ( Version 5.7.0 ) (HKLM-x32\...\{18CDCEAA-A9E4-4A4C-AC0E-C15E87C30EA5}_is1) (Version: 5.7.0 - Wondershare)
Wondershare Streaming Audio Recorder(Build 2.3.5) (HKLM-x32\...\Wondershare Streaming Audio Recorder_is1) (Version: 2.3.5.0 - Wondershare Software)
电脑管家11.5 (HKLM-x32\...\QQPCMgr) (Version: 11.5.17490.219 - 腾讯科技(深圳)有限公司) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ariel\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => Keine Datei
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\de-DE\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 -> C:\$Recycle.Bin ()
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {339834DF-F0A2-4073-B848-E1B8462A91D3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3B239A8F-8B54-45E6-8CDB-B93E95AD5A62} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {44990DEB-DAD9-49AA-91E7-5DD773B2BED3} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {44EF2B3A-5812-469A-8FBB-4C0B8CDE118B} - System32\Tasks\Anaqatoch Host => C:\Program Files (x86)\Anaqatoch\Anqhsttask.exe <==== ACHTUNG
Task: {457A50DD-0431-4EFF-9886-A7AADE95857A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {4C3AF02A-5F76-4DF0-AA8E-2C76EAD8D004} - System32\Tasks\AdobeAAMUpdater-1.0-AlphaOne-Ariel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07] (Adobe Systems Incorporated)
Task: {88C0BA05-4BD5-4933-923A-62EF5A3D535A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {97C1CDB7-7364-45D8-A1B7-90092B1F4BEA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {99799BDC-BBAE-4D3C-8595-AC20D7763708} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A95B1EA5-F660-4FD3-B444-1DB3031ECCE3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {B8CBA4AE-8DC4-45A5-A67A-2B8362D56E28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {BDD14C49-821B-423C-8260-D7641BFF6F6B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {CC0CD124-B07E-4E73-8B14-15B05E097639} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D32BBFA0-9183-4D6B-B9C6-7AA3E86CE1A3} - System32\Tasks\{94BE0F1C-C694-4A4A-BA0E-74E2D429860F} => pcalua.exe -a C:\Users\Ariel\AppData\Local\Temp\InstallFlashPlayer.exe -d C:\Users\Ariel\Desktop
Task: {D5CA69C7-9F7D-4C94-9902-142D8BC9E076} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-05-11] (Microsoft Corporation)
Task: {E7FB7022-8B29-40D9-98B7-6E48F7AD3AF1} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {E9E0BAC2-341A-4447-99C6-93DAA9811985} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-ariel.karwacki@gmx.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07] (Adobe Systems Incorporated)
Task: {FA4A48A7-3C2D-44CD-AACD-CCFFDEC5C490} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {FB774584-D4DD-49EC-9832-B8C9C7597691} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-14 04:53 - 2015-08-07 02:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-03 10:44 - 2014-12-03 10:44 - 00029184 _____ () C:\WINDOWS\System32\ssa6mlm.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-06-03 17:20 - 2013-10-04 06:53 - 00734720 _____ () C:\WINDOWS\system32\SnMinDrv.dll
2014-06-03 17:20 - 2013-06-28 16:36 - 00091136 _____ () C:\WINDOWS\system32\SSDEVM64.DLL
2014-06-03 17:20 - 2013-02-22 06:29 - 00365568 _____ () C:\WINDOWS\system32\SaMinDrv.dll
2015-10-08 10:41 - 2010-05-10 12:14 - 00186848 _____ () C:\Windows\SysWOW64\WinService.exe
2013-01-04 19:29 - 2011-07-06 00:01 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2016-04-13 10:34 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-13 10:34 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-05-19 22:38 - 2016-05-19 22:38 - 00959168 _____ () C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-12-07 14:13 - 2010-03-15 12:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2016-04-18 22:45 - 2016-04-18 22:46 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-20 12:33 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-10 22:51 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-05-10 22:52 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-05-10 22:52 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-05-10 22:52 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-05-10 22:52 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00165376 _____ () C:\Program Files\Autodesk\Autodesk Sync\qjson_Ad_0.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00050176 _____ () C:\Program Files\Autodesk\Autodesk Sync\QtSolutions_MFCMigrationFramework_Ad_2.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00062464 _____ () C:\Program Files\Autodesk\Autodesk Sync\qoauth_Ad_1.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00932864 _____ () C:\Program Files\Autodesk\Autodesk Sync\qca_Ad_2.dll
2015-10-08 10:50 - 2010-05-10 12:13 - 01268192 _____ () C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe
2010-06-04 14:32 - 2010-07-07 17:00 - 07667970 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe
2012-10-16 11:39 - 2012-10-16 11:39 - 00646744 _____ () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
2016-05-26 18:35 - 2010-07-04 12:51 - 00017408 _____ () C:\Users\Ariel\AppData\Local\Temp\Rar$EX00.281\x86\UnlockerAssistant.exe
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-05-11 12:38 - 2013-05-11 12:38 - 00131072 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Locale\de_de\PDFMaker\PDFMOutlookAddin.DEU
2015-12-18 00:27 - 2015-12-18 00:27 - 04890848 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\PDFMaker\Common\X64\AdobePDFMakerX.dll
2013-05-11 12:38 - 2013-05-11 12:38 - 01446912 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Locale\de_DE\PDFMaker\AdobePDFMakerX.DEU
2015-11-11 03:49 - 2015-11-11 03:49 - 01557160 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00115904 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMAntiInject.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00088416 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\zlib.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00488640 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\sqlite.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00100704 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\tinyxml.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00046784 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00070848 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll
2016-05-26 17:37 - 2016-02-28 00:55 - 00036128 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\oDayProtect.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00128192 _____ () c:\program files (x86)\tencent\qqpcmgr\11.5.17490.219\qmrtpcontroller.dll
2016-05-20 20:22 - 2016-03-23 12:02 - 00110608 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2016-05-20 20:22 - 2016-03-23 12:02 - 00061968 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head.dll
2016-04-18 22:45 - 2016-04-18 22:46 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-18 22:45 - 2016-04-18 22:46 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00194912 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\xImage.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00342368 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\arkGraphic.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 02156896 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\GF.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00158048 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\libpng.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00092512 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\xGraphic32.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00285024 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\libjpegturbo.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00137568 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\libexpatw.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00045408 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\jgImage.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00014176 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\jgIOStub.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00083136 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\MemDefrag.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00169152 _____ () c:\program files (x86)\tencent\qqpcmgr\11.5.17490.219\qmhipslogpolicy.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00337088 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\OperationFileCloudMgr.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00379232 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\DlForQd.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00264896 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\Win10ToastNotification.dll
2016-05-26 17:37 - 2016-05-26 17:37 - 00251072 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMWlanMacDll.dll
2014-08-09 10:13 - 2014-06-25 10:13 - 01457664 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-08-09 10:13 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2016-05-19 22:38 - 2016-05-19 22:38 - 00679624 _____ () C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2015-12-12 14:35 - 2012-04-30 11:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2015-12-12 14:35 - 2015-10-20 18:44 - 00242176 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2015-11-06 12:46 - 2015-11-06 12:46 - 02385280 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\libxt.dll
2015-12-12 14:35 - 2015-04-21 13:22 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2015-09-07 17:01 - 2015-09-07 17:01 - 00237440 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00139264 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\Appearance Pak.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00147456 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\RegEx.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00868352 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\RBScript.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00098304 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\Shell.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00762368 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\XML.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00266240 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\CGamma.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00065536 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\CSensor.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00028672 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\MBSRegistrationPlugin16042.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00025600 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\MBSPluginVersionPlugin16042.dll
2016-05-26 18:35 - 2010-07-04 14:32 - 00004608 _____ () C:\Users\Ariel\AppData\Local\Temp\Rar$EX00.281\x86\UnlockerHook.dll
2016-05-20 20:22 - 2013-09-23 19:52 - 00043912 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_MFCMigrationFramework_Ad_2.dll
2016-05-20 20:22 - 2015-11-05 14:07 - 00052224 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qoauth_Ad_1.dll
2016-05-20 20:22 - 2015-11-05 14:07 - 00195584 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson_Ad_0.dll
2016-05-20 20:22 - 2015-11-05 14:07 - 00742400 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qca_Ad_2.dll
2016-05-20 20:22 - 2016-03-23 11:35 - 00287168 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\de-DE\AdWingManRes.dll
2016-03-23 09:01 - 2016-03-23 09:01 - 00083560 _____ () C:\Users\Ariel\AppData\Roaming\Tencent\AndroidServer\1.0.0.512\zlib.dll
2016-05-20 20:22 - 2015-09-08 08:31 - 40640808 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libcef.dll
2016-05-20 20:22 - 2014-09-03 02:29 - 00912384 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libglesv2.dll
2016-05-20 20:22 - 2014-09-03 02:29 - 00134144 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libegl.dll
2016-05-20 20:22 - 2014-09-03 02:29 - 00950272 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\ffmpegsumo.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\knuddels.com -> www.knuddels.com
IE trusted site: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\knuddels.de -> hxxp://www.knuddels.de
IE trusted site: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\mainfranken-chat.de -> hxxp://www.mainfranken-chat.de
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2012-07-26 07:26 - 2012-06-30 23:49 - 00001476 ____A C:\WINDOWS\system32\Drivers\etc\hosts
****
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ariel\Desktop\nature-wallpaper-1920x1080-039.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\StartupApproved\Run: => "BrowserChoice"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{CAC57404-5ACB-4486-8B32-1D25A3513F6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp_server.exe
FirewallRules: [{95E11D8D-D988-4381-8E47-ADD7B159C13C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp_server.exe
FirewallRules: [{C957FF6B-534C-4B8A-98C2-157B2ED763F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp.exe
FirewallRules: [{D5E3EDBA-9FDF-481C-8289-0074823FBF5A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp.exe
FirewallRules: [UDP Query User{A3ED6E89-7056-499D-8848-9188C1573785}C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6sp.exe
FirewallRules: [TCP Query User{47E9783A-C897-417B-851F-38226986C74D}C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6sp.exe
FirewallRules: [{01CA9A04-5B60-4CC0-A2E2-B9A7A8E76C70}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{64FDA1CD-DB33-4563-BEA4-3BBB86A231C6}C:\program files (x86)\heirue-soft\fms32-pro\fms32pro.exe] => (Allow) C:\program files (x86)\heirue-soft\fms32-pro\fms32pro.exe
FirewallRules: [UDP Query User{B0032435-5D7C-48C6-BC8F-C5803D39E56B}C:\program files (x86)\heirue-soft\fms32-pro\fms32pro.exe] => (Allow) C:\program files (x86)\heirue-soft\fms32-pro\fms32pro.exe
FirewallRules: [{C16E57F9-5749-40F3-90D8-B620B0CB6A78}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{BCC3811D-C9C2-413D-933C-635A94163AC7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{6734E18D-46FA-4156-884B-5C658AC2CF82}C:\program files\core temp\core temp.exe] => (Block) C:\program files\core temp\core temp.exe
FirewallRules: [UDP Query User{B8627264-FBDC-4BF3-A363-093B4CEE1FF8}C:\program files\core temp\core temp.exe] => (Block) C:\program files\core temp\core temp.exe
FirewallRules: [TCP Query User{91FE54F9-C6C4-4FF1-9545-4B8D33256373}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{5A82037F-22E6-48FD-8A99-6F30BA9CC13D}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [{08C8835F-18A2-4995-AD94-7736C41123AF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{B44E7E9D-2804-4B5A-891C-6DCF8D29115E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{F667C890-5AD9-4CD7-BDF1-A44F3DB77B0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{71C4E3BD-6FF9-44FB-9DE7-957C469111F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{6E25F071-8295-436A-9211-6437D6D348C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{919B3CE4-8A0E-465E-A1F4-4CF3CAA37932}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{4E27EF20-D0A8-4336-9E77-2D8C1E9B9CDA}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{D8A51385-EEE8-4B5A-8A0F-5E13CD6F97BC}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{CBA02607-AAB0-4AA5-BF63-9A4C11106211}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe
FirewallRules: [UDP Query User{49B77C47-7CA3-4370-ADE3-3BF553269412}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe
FirewallRules: [TCP Query User{663B1B8F-B6A8-43E7-A355-CD7BA85086C1}C:\windows\syswow64\msiexec.exe] => (Allow) C:\windows\syswow64\msiexec.exe
FirewallRules: [UDP Query User{15D73BB3-97D5-4080-87F3-11A31C2423B1}C:\windows\syswow64\msiexec.exe] => (Allow) C:\windows\syswow64\msiexec.exe
FirewallRules: [TCP Query User{F859A9DB-64B7-4B99-A06A-44D255CD8B4D}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{1FDF3787-A538-4B3A-A4D6-A1236E329647}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{C1EF6B82-8E2D-48B7-A461-63986FA80933}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe
FirewallRules: [UDP Query User{FF499415-86A1-4BD2-82B2-03BE66FBFAF2}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe
FirewallRules: [{B824B5B7-2E52-48A8-863B-DEAA0F88D711}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{CC54E4E1-53AC-427A-9BB1-CD2EEC86CF91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [TCP Query User{67D1EFD2-C3B1-475F-A8A3-1651F427A33D}C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6mp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6mp.exe
FirewallRules: [UDP Query User{54318BE1-4B64-46DD-B60D-D29B4A4C32A8}C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6mp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops ii\t6mp.exe
FirewallRules: [{EE43CD62-8814-4C00-AB69-97166DB55CCF}] => (Allow) C:\Program Files (x86)\Scan Assistant\USDAgent.exe
FirewallRules: [{4F6E0132-9D08-40BB-9E16-4CB61ECF8928}] => (Allow) C:\Program Files (x86)\Scan Assistant\USDAgent.exe
FirewallRules: [{17419E60-7D8C-46B3-928C-70D220775213}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ICCUpdater.exe
FirewallRules: [{C77D99CA-BA1B-4701-928A-F169A7CBD0C7}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ICCUpdater.exe
FirewallRules: [{B3424C8B-5301-4C7D-B0CD-18A3C291D4D1}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe
FirewallRules: [{822D30A9-0C21-4079-BA2B-BEF6AA45CB0C}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe
FirewallRules: [{EC814E62-7B9C-4952-A159-7F08ECF05976}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{2FBAECC1-F1D1-45E9-90E7-D201CADD2E1C}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{F3B9D2CD-3908-4F0A-8FD7-E86611784CBC}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{CB92485E-1017-4038-BA3F-A0BC28C401A3}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{6338841F-FB3B-4774-B2FE-B5BEC251BE8D}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{F1999B6C-B8FF-49A8-95FC-8BC349E9B4FE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{5078EC47-82D9-4DCE-95F3-E347D985B24F}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{6737EE70-2CB5-4FF1-BD58-CF8B359EADB9}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{D6A1AF9B-776B-41D2-9EE1-2E774A98D668}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{79E72A48-BF85-4C2E-810B-55A4216224BB}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{9E772686-D228-48E4-B4F6-4458A06C1A1A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{DDB1B4BD-1B85-409E-9BC2-C1B2CD279B61}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{1642B0C8-C636-4C11-8179-C7F982599089}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{6D8A8616-06E1-4DA5-958B-2E2DC8C538CD}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{0A7496A4-2CDB-4DE9-B1FE-428C46E59817}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{C99A1E75-5F6A-46DD-BB03-49B4DFBC5F01}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{15CD387B-29D7-4420-BA32-BC05FD3DA4F7}] => (Allow) C:\Program Files (x86)\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{372B2E09-86B6-4F60-AE3D-C743B0C76014}] => (Allow) C:\Program Files (x86)\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{E21E7F55-6953-4DFA-BFA2-DF32546A96AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{1219395C-F865-42BD-828D-0564B029BA8B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{7569B18C-7A53-4297-847D-C29817AF27A6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{091E581B-7719-4B81-BE6F-10AC41EF6436}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{4A6E0F84-DA9D-4670-B538-076944D43434}C:\users\ariel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ariel\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{1440555A-D464-4A0D-BA3A-3C8A6E0C6937}C:\users\ariel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ariel\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{4AA8C7A6-3239-4317-BFBD-63C9C4EE2325}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [UDP Query User{E626B176-D7A5-4ED7-A867-F5B8C3DC18F2}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [TCP Query User{87CBCB7E-0E29-4041-AF66-CF00A304AA10}C:\users\ariel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\ariel\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{3CCB752D-5E05-4B3C-B940-76234CF106DE}C:\users\ariel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\ariel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{F07E54CA-5B6D-43BA-911A-E8463025F7F6}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCmgrInstallGuide.exe
FirewallRules: [{187A2F24-23DE-45EB-8462-98FA81D62812}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTray.exe
FirewallRules: [{8C312F5A-778B-47C4-9F13-BDCB63A28972}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe
FirewallRules: [{4DA6D1F0-BF86-4D79-B298-39513D89C569}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe
FirewallRules: [{F118CE7F-FDD4-4268-A0DD-44BC9347C56F}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMDL.exe
FirewallRules: [{1EBE7DF9-8EB8-4A3C-830A-F94CD97ADCBB}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\bugreport.exe
FirewallRules: [{16099E6F-C2EE-4727-9AC2-360F7F2371A7}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCFileOpen.exe
FirewallRules: [{2F23D49C-111D-46C5-B61B-B278F35B8144}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCLeakScan.exe
FirewallRules: [{8BEFC8A1-F631-41DD-AA54-2605B643E2A8}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPConfig.exe
FirewallRules: [{CB70DA2B-5481-4585-AF23-1AB2C8F70626}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCSoftMgr.exe
FirewallRules: [{24E9EC9B-CC99-47F3-B7F5-8EB4C5C4D5C9}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\QMNetMon\QQPCNetFlow.exe
FirewallRules: [{04AFE42F-58BB-4438-A835-960216F123B2}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCBTU.exe
FirewallRules: [{30771D18-CE47-4919-82DB-73598190A3CE}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCClinic.exe
FirewallRules: [{A68B68AA-56D6-40B1-9D38-77A5CF006FF7}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCLaunch.exe
FirewallRules: [{71B6F3DF-ABD7-4C6B-9646-FA01C2EBAF35}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMUpdate\QQPCMgrUpdate.exe
FirewallRules: [{76CEF229-37F3-4BBB-AE0A-51A002822B9A}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCSoftGame.exe
FirewallRules: [{9B8AC1BB-264D-4E5B-8CC2-45095D280581}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCSysOptimize.exe
FirewallRules: [{805B31F2-AA2B-43BA-88D5-D62E034DA5D4}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCUpdateAVLib.exe
FirewallRules: [{D5172158-366F-4D27-B96F-09A48CC3B4AB}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQRepair.exe
FirewallRules: [{CEA1DE9B-7276-4198-9EEF-02BF94052C8B}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\Uninst.exe
FirewallRules: [{62467A4C-5E80-4C8F-8F68-6C0CFD59D102}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCPatch.exe
FirewallRules: [{545DCBCF-D334-4B0D-BEA5-0345945CD2D8}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TpkUpdate.exe
FirewallRules: [{5C8E2770-0EB2-4CA0-A9E0-C66B2FF94200}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMRouterMgr.exe
FirewallRules: [{1652542F-999B-4B91-B107-886EDE6262F0}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMAccountProtection.exe
FirewallRules: [{4E5706C5-1E4B-4C41-A9DD-D09C8D077433}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMAdBlock.exe
FirewallRules: [{CCCD0A23-B0A4-441D-8D46-97F8F886235E}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{A2086F88-CD2C-48E6-98DA-D402B09130DF}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{AA8E1C7F-9C79-41BD-95C0-8004EE3064A3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{799452EF-2135-4CB0-9676-3B43FADCCBDF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/26/2016 05:43:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: daemonu.exe, Version: 9.3.21.0, Zeitstempel: 0x527c918e
Name des fehlerhaften Moduls: daemonu.exe, Version: 9.3.21.0, Zeitstempel: 0x527c918e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0010950d
ID des fehlerhaften Prozesses: 0xf94
Startzeit der fehlerhaften Anwendung: 0xdaemonu.exe0
Pfad der fehlerhaften Anwendung: daemonu.exe1
Pfad des fehlerhaften Moduls: daemonu.exe2
Berichtskennung: daemonu.exe3
Vollständiger Name des fehlerhaften Pakets: daemonu.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: daemonu.exe5
Error: (05/26/2016 05:42:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xa20
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (05/26/2016 05:42:41 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2592) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (05/26/2016 05:38:03 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Error: (05/24/2016 04:51:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ReCap.exe, Version: 3.0.0.52, Zeitstempel: 0x56b0f984
Name des fehlerhaften Moduls: adlmint.dll_unloaded, Version: 12.0.32.0, Zeitstempel: 0x5662af88
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000cb41
ID des fehlerhaften Prozesses: 0x1a14
Startzeit der fehlerhaften Anwendung: 0xReCap.exe0
Pfad der fehlerhaften Anwendung: ReCap.exe1
Pfad des fehlerhaften Moduls: ReCap.exe2
Berichtskennung: ReCap.exe3
Vollständiger Name des fehlerhaften Pakets: ReCap.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ReCap.exe5
Error: (05/24/2016 12:09:40 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8
Error: (05/24/2016 01:45:19 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ALPHAONE)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/24/2016 01:45:19 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ALPHAONE)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (05/23/2016 11:25:08 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (05/23/2016 10:50:44 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsort "I:\" nicht abgeschlossen. Fehler: Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006).
Systemfehler:
=============
Error: (05/26/2016 06:35:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\Unlocker
Error: (05/26/2016 06:35:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\Unlocker
Error: (05/26/2016 06:35:15 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\Unlocker
Error: (05/26/2016 06:35:15 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\Unlocker
Error: (05/26/2016 06:18:24 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/26/2016 06:15:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Pront Spooler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/26/2016 06:15:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/26/2016 06:14:54 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/26/2016 05:50:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/26/2016 05:46:43 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}
CodeIntegrity:
===================================
Date: 2016-05-26 18:35:33.523
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:33.511
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:15.611
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:15.598
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-20 22:29:29.570
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-17 06:45:50.130
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-16 09:29:42.483
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 03:33:06.648
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-17 08:42:40.984
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-16 03:32:16.415
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7 CPU 950 @ 3.07GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 6135.06 MB
Verfügbarer physikalischer RAM: 2995.71 MB
Summe virtueller Speicher: 7159.06 MB
Verfügbarer virtueller Speicher: 3779.13 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.69 GB) (Free:5.95 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Data) (Fixed) (Total:1863.01 GB) (Free:739.45 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 7A20A528)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: C4B3B7B8)
Partition 1: (Not Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=237.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== Ende von Addition.txt ============================
Geändert von Brandon_K (26.05.2016 um 19:06 Uhr) |
|
29.05.2016, 19:08
| #3 |
| /// TB-Ausbilder /// Anleitungs-Guru  | Windows 10: Chinesische Schadsoftware Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das... 
 Hinweis:Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert. Adware & Co. können wir sehr gut entfernen. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean  bekommst.Los geht's: Schritt 1 Bitte deinstalliere folgende Programme: AnySend 电脑管家11.5 Versuche es bei Windows 10  mit der Windowstaste + X über  .Sollte das nicht gehen, lade Dir bitte Revo Uninstaller  hier herunter. Entpacke die zip-Datei auf den Desktop. Anleitung
Wenn Du ein Programm nicht deinstallieren kannst, mach mit dem nächsten weiter. Auch wenn am Ende noch Programme übrig geblieben sind, führe den nächsten Schritt aus: Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3  
Schritt 4   Bitte starte FRST erneut, markiere auch die checkbox  und drücke auf Untersuchen. Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ |
|
29.05.2016, 20:49
| #4 |
| | Windows 10: Chinesische Schadsoftware Hallo Jürgen, vielen Dank für deine Hilfsbereitschaft. Den adwcleaner habe ich schon am 26.05. laufen lassen, ohne vorher das von dir genannte Programm zu löschen (dieses ist jetzt nun nicht mehr da.). Nachdem der adwcleaner gelaufen ist, ist schon mal das Symbol der Software aus der Taskleiste verschwunden und das Desktopsymbol hat sich in ein weißes Blatt gewandelt. Hier der Log des adwcleaners. Code:
ATTFilter # AdwCleaner v5.118 - Bericht erstellt am 26/05/2016 um 20:50:44
# Aktualisiert am 23/05/2016 von Xplode
# Datenbank : 2016-05-26.2 [Server]
# Betriebssystem : Windows 10 Pro (X64)
# Benutzername : Ariel - ALPHAONE
# Gestartet von : C:\Users\Ariel\AppData\Local\Microsoft\Windows\INetCache\IE\00SOC4D4\adwcleaner_5.118.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
[-] Dienst gelöscht : QQPCRTP
[-] Dienst gelöscht : TAOAccelerator
[-] Dienst gelöscht : TSDefenseBt
[!] Dienst Nicht gelöscht : TSSysKit
[-] Dienst gelöscht : QMUdisk
[-] Dienst gelöscht : TS888x64
[-] Dienst gelöscht : QQSysMonX64
[-] Dienst gelöscht : TFsFlt
[-] Dienst gelöscht : TAOKernelDriver
[-] Dienst gelöscht : softaal
[-] Dienst gelöscht : SRepairDrv
[-] Dienst gelöscht : tsnethlpx64
[-] Dienst gelöscht : ProntSpooler
[-] Dienst gelöscht : QQRepairFixSVC
***** [ Ordner ] *****
[-] Ordner gelöscht : C:\ProgramData\apn
[-] Ordner gelöscht : C:\ProgramData\simplitec
[#] Ordner gelöscht : C:\ProgramData\tencent
[-] Ordner gelöscht : C:\ProgramData\TXQMPC
[#] Ordner gelöscht : C:\ProgramData\Application Data\tencent
[-] Ordner gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Ordner gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件
[-] Ordner gelöscht : C:\Users\Public\Documents\Downloaded Installers
[-] Ordner gelöscht : C:\Program Files (x86)\myfree codec
[-] Ordner gelöscht : C:\Program Files (x86)\simplitec
[#] Ordner gelöscht : C:\Program Files (x86)\tencent
[-] Ordner gelöscht : C:\Program Files (x86)\Common Files\tencent
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Local\Temp\tencent
[-] Ordner gelöscht : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\tencent
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Local\SlimWare Utilities, Inc
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Local\csdi_monetize_120160526
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Local\VirtualStore\ProgramData\Application Data\tencent
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Roaming\simplitec
[#] Ordner gelöscht : C:\Users\Ariel\AppData\Roaming\tencent
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Roaming\ASPackage
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
[-] Ordner gelöscht : C:\Users\Ariel\AppData\Roaming\Profiles\a9t5zdky.default\YourGSearchFinder_br
|
|
29.05.2016, 20:50
| #5 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 10: Chinesische Schadsoftware OK. 
__________________ Gruß deeprybka  Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
29.05.2016, 21:16
| #6 |
| | Windows 10: Chinesische SchadsoftwareCode:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 29.05.2016 Suchlaufzeit: 21:38 Protokolldatei: mbam.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.05.29.06 Rootkit-Datenbank: v2016.05.27.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: Ariel Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 488289 Abgelaufene Zeit: 27 Min., 31 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end)  |
|
29.05.2016, 21:19
| #7 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 10: Chinesische Schadsoftware Die Interpretation übernehme ich OK?  Einfach die Schritte abarbeiten...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
29.05.2016, 21:24
| #8 |
| | Windows 10: Chinesische Schadsoftware FRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:29-05-2016 02 durchgeführt von Ariel (Administrator) auf ALPHAONE (29-05-2016 22:18:52) Gestartet von C:\Users\Ariel\Downloads Geladene Profile: Ariel (Verfügbare Profile: Ariel & UpdatusUser) Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Sanford, L.P.) C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe () C:\Windows\SysWOW64\WinService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe (Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe (Sophos Limited) C:\Program Files (x86)\Common Files\Sophos\Web Intelligence\swi_fc.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\runonce.exe (Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe (Malwarebytes) C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Spotify Ltd) C:\Users\Ariel\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe () C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Farbar) C:\Users\Ariel\Downloads\FRST64 (1).exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] () HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] () HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498720 2016-04-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [WinampAgent] => "C:\Program Files (x86)\Winamp\winampa.exe" HKLM-x32\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DLSService] => "C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe" HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation) HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files (x86)\Sophos\AutoUpdate\almon.exe [1531872 2016-04-15] (Sophos Limited) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [716224 2016-03-23] (Autodesk, Inc.) HKLM-x32\...\Run: [ QQPCTray] => "C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTRAY.EXE" /regrun /qqrepair HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Spotify Web Helper] => C:\Users\Ariel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-04-01] (Spotify Ltd) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\Ariel\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\RunOnce: [Uninstall C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [EPSON Stylus Photo R1800] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATI9LA.EXE [211968 2007-01-12] (SEIKO EPSON CORPORATION) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMGCShellExt64.dll Keine Datei ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v2 Smart Wizard.lnk [2016-05-29] ShortcutTarget: NETGEAR WG111v2 Smart Wizard.lnk -> C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Spyder3Utility.lnk [2016-05-29] ShortcutTarget: Spyder3Utility.lnk -> C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe () GroupPolicy: Beschränkung - Chrome <======= ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{38eaf853-75bf-4bf7-91de-847373b8bd69}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{5ae0ab0c-aeb1-47d0-a28c-2061da49df3b}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{8648d16e-4ddc-4775-b61b-569b01c87ecf}: [DhcpNameServer] 192.168.2.1 192.168.2.1 ManualProxies: Internet Explorer: ================== HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSWebMon64.dat => Keine Datei BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Kein Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Keine Datei BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-05] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-05] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) FireFox: ======== FF ProfilePath: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\cf1typ6d.default FF Homepage: about:home FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [Keine Datei] FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @dymo.com/DymoLabelFramework -> C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll [2014-03-20] ( Sanford L.P.) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-05] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-12-19] (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-11-11] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-11-11] (NVIDIA Corporation) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems) FF Plugin HKU\S-1-5-21-2244333554-3036078685-3373813463-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ariel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2244333554-3036078685-3373813463-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Extension: Flash and Video Download - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\cf1typ6d.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-05-26] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2016-05-12] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2016-04-23] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1231376 2016-03-23] (Autodesk Inc.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 DymoPnpService; C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [33072 2014-03-20] (Sanford, L.P.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation) R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Datei ist nicht signiert] R2 SAVAdminService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [311544 2016-04-15] (Sophos Limited) R2 SAVService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [285136 2016-04-15] (Sophos Limited) R2 SCM_Service; C:\Windows\SysWOW64\WinService.exe [186848 2010-05-10] () R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [604000 2016-04-15] (Sophos Limited) R2 Sophos Web Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [341800 2014-10-14] (Sophos Limited) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 swi_filter; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe [471520 2016-04-15] (Sophos Limited) R2 swi_service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3339736 2016-04-15] (Sophos Limited) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2014-05-27] (Google Inc) S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [20992 2014-05-27] (LG Electronics Inc.) S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2014-05-27] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2014-05-27] (LG Electronics Inc.) R1 EterlogicVirtualSerialDriver; C:\WINDOWS\system32\drivers\VSPE.sys [40928 2016-05-10] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-29] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] () S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert] R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) S3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3870464 2015-10-01] (Realtek Semiconductor Corporation ) R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [161024 2014-10-14] (Sophos Limited) S3 sdcfilter; C:\Windows\system32\DRIVERS\sdcfilter.sys [38144 2016-04-15] (Sophos Limited) S4 SophosBootDriver; C:\Windows\system32\DRIVERS\SophosBootDriver.sys [27904 2016-04-15] (Sophos Limited) S3 Spyder3; C:\Windows\System32\drivers\Spyder3.sys [15360 2010-03-30] () R1 swi_callout; C:\Windows\system32\DRIVERS\swi_callout.sys [32512 2015-04-16] (Sophos Limited) S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2015-10-30] (Microsoft Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-02] (Wondershare) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-29 22:12 - 2016-05-29 22:12 - 00001183 _____ C:\Users\Ariel\Desktop\mbam.txt 2016-05-29 22:08 - 2016-05-29 22:08 - 02383872 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64 (1).exe 2016-05-29 21:36 - 2016-05-29 22:10 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-05-29 21:36 - 2016-05-29 22:08 - 00001169 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-05-29 21:36 - 2016-05-29 22:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-05-29 21:36 - 2016-05-29 21:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-05-29 21:36 - 2016-05-29 21:36 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-05-29 21:36 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-05-29 21:36 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-05-29 21:36 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-05-29 21:35 - 2016-05-29 21:35 - 22851472 _____ (Malwarebytes ) C:\Users\Ariel\Downloads\mbam-setup-2.2.1.1043.exe 2016-05-27 16:44 - 2016-05-27 16:44 - 00000000 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1) (1).exe.pp1zolw.partial 2016-05-27 16:43 - 2016-05-27 16:45 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1).exe 2016-05-27 16:43 - 2016-05-27 16:44 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1).exe.2oeomtf.partial 2016-05-27 16:43 - 2016-05-27 16:43 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1).exe.6s35d7b.partial 2016-05-27 16:40 - 2016-05-27 16:43 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118.exe 2016-05-26 20:42 - 2016-05-27 17:05 - 00000000 ____D C:\AdwCleaner 2016-05-26 19:20 - 2016-05-26 19:21 - 00068575 _____ C:\Users\Ariel\Downloads\Addition.txt 2016-05-26 19:19 - 2016-05-29 22:19 - 00025351 _____ C:\Users\Ariel\Downloads\FRST.txt 2016-05-26 19:19 - 2016-05-29 22:18 - 00000000 ____D C:\FRST 2016-05-26 19:19 - 2016-05-26 19:19 - 02383360 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe 2016-05-26 18:34 - 2016-05-26 18:34 - 00113964 _____ C:\Users\Ariel\Downloads\unlocker1.9.0-portable.zip 2016-05-26 18:22 - 2016-05-29 22:08 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-26 18:22 - 2016-05-29 22:08 - 00001214 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-26 18:22 - 2016-05-26 18:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-26 18:20 - 2016-05-26 18:20 - 00242320 _____ C:\Users\Ariel\Downloads\Firefox Setup Stub 46.0.1.exe 2016-05-26 17:43 - 2016-05-26 17:43 - 00000306 __RSH C:\Users\Ariel\ntuser.pol 2016-05-26 17:38 - 2016-05-26 17:38 - 00000000 _____ C:\Users\Ariel\Desktop\$电脑管家-清理垃圾$.qmgc 2016-05-26 17:36 - 2016-05-26 17:36 - 00000000 ____D C:\WINDOWS\system32\SSL 2016-05-24 17:03 - 2016-05-24 17:03 - 00056322 _____ C:\Users\Ariel\Downloads\Table_bottom_mount_for_a_Kingston_memory_card_reader.zip 2016-05-24 17:03 - 2015-04-08 20:28 - 00034484 _____ C:\Users\Ariel\Desktop\card_reader_holder.stl 2016-05-24 16:51 - 2016-05-24 16:51 - 00000000 ____D C:\ProgramData\FLEXnet 2016-05-24 16:46 - 2016-05-23 08:29 - 00081151 _____ C:\Users\Ariel\Desktop\filament_holder_p01.stl 2016-05-24 16:45 - 2016-05-24 16:46 - 00055280 _____ C:\Users\Ariel\Downloads\Filament_holder_for_Dreamer_and_Creator_Pro.zip 2016-05-23 22:20 - 2016-05-23 22:21 - 00003478 _____ C:\Users\Ariel\Downloads\Swiss_Army_Knife_toothpick.zip 2016-05-22 17:49 - 2016-05-22 17:49 - 00473674 _____ C:\Users\Ariel\Downloads\20160404_backoefele_spargelkarte_web.pdf 2016-05-21 21:35 - 2016-05-21 21:35 - 00000197 ____H C:\Users\Ariel\Documents\Zeichnung1.dwl2 2016-05-21 21:35 - 2016-05-21 21:35 - 00000047 ____H C:\Users\Ariel\Documents\Zeichnung1.dwl 2016-05-21 17:13 - 2016-05-21 17:13 - 00002684 _____ C:\Users\Ariel\Documents\Zeichnung8.stl 2016-05-21 11:08 - 2016-05-21 11:16 - 00039084 _____ C:\Users\Ariel\Documents\Zeichnung7.stl 2016-05-21 10:37 - 2016-05-21 10:37 - 00004284 _____ C:\Users\Ariel\Desktop\Zeichnung4.stl 2016-05-20 20:22 - 2016-05-29 22:08 - 00001447 _____ C:\Users\Public\Desktop\Autodesk Desktop-App.lnk 2016-05-20 20:18 - 2016-05-29 22:08 - 00002044 _____ C:\Users\Public\Desktop\A360 Desktop.lnk 2016-05-20 20:09 - 2016-05-29 22:08 - 00002142 _____ C:\Users\Public\Desktop\Autodesk ReCap 360.lnk 2016-05-20 20:09 - 2016-05-20 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 360 2016-05-20 19:58 - 2016-05-29 22:08 - 00002101 _____ C:\Users\Public\Desktop\AutoCAD 2017 - Deutsch (German).lnk 2016-05-20 19:58 - 2016-05-24 16:51 - 00000000 ____D C:\Users\Ariel\AppData\Local\Autodesk 2016-05-20 19:58 - 2016-05-20 20:22 - 00000000 ____D C:\Program Files (x86)\Autodesk 2016-05-20 19:58 - 2016-05-20 19:58 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2016-05-20 19:58 - 2016-05-20 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 - Deutsch (German) 2016-05-20 19:57 - 2016-05-20 19:57 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2016-05-20 19:56 - 2016-05-20 19:56 - 00000000 ____D C:\Users\Ariel\Documents\Inventor Server SDK ACAD 2017 2016-05-20 19:54 - 2016-05-20 20:18 - 00000000 ____D C:\Program Files\Autodesk 2016-05-20 19:54 - 2016-05-20 19:57 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2016-05-20 19:32 - 2016-05-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2016-05-20 19:21 - 2016-05-24 16:51 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Autodesk 2016-05-20 19:21 - 2016-05-24 16:51 - 00000000 ____D C:\ProgramData\Autodesk 2016-05-20 19:16 - 2016-05-20 19:16 - 18698272 _____ C:\Users\Ariel\Downloads\AutoCAD_2017_German_Win_32_64bit_wi_de-DE_Setup.exe 2016-05-20 19:16 - 2016-05-20 19:16 - 00000000 ____D C:\Autodesk 2016-05-20 19:15 - 2016-05-20 19:15 - 00338256 _____ (Autodesk Inc.) C:\Users\Ariel\Downloads\AutoCAD_2017_German_Win_32_64bit_wi_de-DE_Setup_webinstall.exe 2016-05-20 19:12 - 2016-05-20 19:12 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Trimble Connect for SketchUp 2016-05-20 19:10 - 2016-05-20 19:10 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\SketchUp 2016-05-20 19:09 - 2016-05-20 19:09 - 00000000 ____D C:\ProgramData\Reprise 2016-05-20 19:08 - 2016-05-20 19:08 - 00000000 ____D C:\ProgramData\SketchUp 2016-05-17 17:41 - 2016-05-17 17:41 - 00300032 _____ C:\Users\Ariel\Downloads\6ZivilrechtlicheRechtsfolgenArt101Abs2AEUV.ppt 2016-05-14 09:39 - 2016-05-14 09:39 - 01047858 _____ C:\Users\Ariel\Downloads\Universal_CD-car_slot_PHONE_holder_mount._iPhone5_iPhone6_etc._Quick_change__.zip 2016-05-13 20:20 - 2016-05-13 20:20 - 12851868 _____ C:\Users\Ariel\Downloads\Air_Raid_Siren_-_hand_crank_version.zip 2016-05-12 22:12 - 2016-05-12 22:12 - 01595457 _____ C:\Users\Ariel\Downloads\All_Alphabet_Letters_A-Z.zip 2016-05-12 17:55 - 2016-05-12 17:59 - 01879017 _____ C:\Users\Ariel\Downloads\Echo__3_tone_whistle.zip 2016-05-12 17:10 - 2016-05-12 17:18 - 00235682 _____ C:\Users\Ariel\Desktop\Unbenannt.pdf 2016-05-10 22:52 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-05-10 22:52 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-05-10 22:52 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-05-10 22:52 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-05-10 22:52 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-05-10 22:52 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-05-10 22:52 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-05-10 22:52 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-05-10 22:52 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-05-10 22:52 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-05-10 22:52 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-05-10 22:52 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-05-10 22:52 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-05-10 22:52 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-05-10 22:52 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-05-10 22:52 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-05-10 22:52 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2016-05-10 22:52 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2016-05-10 22:52 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-05-10 22:52 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-05-10 22:52 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-05-10 22:52 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-05-10 22:52 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-05-10 22:52 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-05-10 22:52 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-05-10 22:52 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-05-10 22:52 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-05-10 22:52 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-05-10 22:52 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-05-10 22:52 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-05-10 22:52 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-05-10 22:52 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-05-10 22:52 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-05-10 22:52 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-05-10 22:52 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-05-10 22:52 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-05-10 22:52 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-05-10 22:52 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-05-10 22:52 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-05-10 22:52 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-05-10 22:52 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-05-10 22:52 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-05-10 22:52 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-05-10 22:52 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-05-10 22:52 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-05-10 22:52 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-05-10 22:52 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-05-10 22:52 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2016-05-10 22:51 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys 2016-05-10 22:51 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-05-10 22:51 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-05-10 22:51 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2016-05-10 22:51 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2016-05-10 22:51 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2016-05-10 22:51 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2016-05-10 22:51 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2016-05-10 22:51 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-05-10 22:51 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-05-10 22:51 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-05-10 22:51 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2016-05-10 22:51 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2016-05-10 22:51 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2016-05-10 22:51 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2016-05-10 22:51 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-05-10 22:51 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2016-05-10 22:51 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-05-10 22:51 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-05-10 22:51 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2016-05-10 22:51 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-05-10 22:51 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-05-10 22:51 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-05-10 22:51 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-05-10 22:51 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2016-05-10 22:51 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys 2016-05-10 22:51 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-05-10 22:51 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-05-10 22:51 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2016-05-10 22:51 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-05-10 22:51 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll 2016-05-10 22:51 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2016-05-10 22:51 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-05-10 22:51 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-05-10 22:51 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll 2016-05-10 22:51 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2016-05-10 22:51 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-05-10 22:51 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-05-10 22:51 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll 2016-05-10 22:51 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys 2016-05-10 22:51 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe 2016-05-10 22:51 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-05-10 22:51 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2016-05-10 22:51 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys 2016-05-10 22:51 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2016-05-10 22:51 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe 2016-05-10 22:51 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-05-10 22:51 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2016-05-10 22:51 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2016-05-10 22:51 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-05-10 22:51 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-05-10 22:51 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-05-10 22:51 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-05-10 22:51 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll 2016-05-10 22:51 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll 2016-05-10 22:51 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2016-05-10 22:51 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-05-10 22:51 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-05-10 22:51 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2016-05-10 22:51 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-05-10 22:51 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-05-10 22:51 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2016-05-10 22:51 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2016-05-10 22:51 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2016-05-10 22:51 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-05-10 22:51 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2016-05-10 22:51 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-05-10 22:51 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml 2016-05-10 22:51 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml 2016-05-10 21:57 - 2016-05-29 22:06 - 00002330 _____ C:\Users\Ariel\Desktop\VSPE.lnk 2016-05-10 21:57 - 2016-05-10 21:57 - 00040928 _____ C:\WINDOWS\system32\Drivers\VSPE.sys 2016-05-10 21:57 - 2016-05-10 21:57 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtual Serial Ports Emulator 2016-05-10 21:57 - 2016-05-10 21:57 - 00000000 ____D C:\Program Files (x86)\Eterlogic.com 2016-05-10 21:17 - 2016-05-10 21:25 - 00000000 ____D C:\Users\Ariel\AppData\Local\Arduino15 2016-05-10 21:17 - 2016-05-10 21:17 - 00000000 ____D C:\Users\Ariel\Documents\Arduino 2016-05-10 21:17 - 2016-05-10 21:17 - 00000000 ____D C:\Users\Ariel\.oracle_jre_usage 2016-05-10 20:46 - 2016-05-29 22:08 - 00001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk 2016-05-10 20:45 - 2016-05-10 20:46 - 00000000 ____D C:\Program Files (x86)\Arduino 2016-05-10 20:26 - 2016-05-10 20:26 - 02124768 _____ C:\Users\Ariel\Downloads\CDM21216_Setup.exe 2016-05-10 20:25 - 2016-05-10 20:26 - 01352960 _____ C:\Users\Ariel\Downloads\CDM v2.12.16 WHQL Certified.zip 2016-05-10 20:18 - 2016-05-10 20:18 - 00000000 ____D C:\Users\Ariel\AppData\Local\Simplify3D 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\ms-drivers 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\icsxml 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\DIBsection 2016-05-10 20:02 - 2016-05-29 22:08 - 00001913 _____ C:\Users\Public\Desktop\Simplify3D.lnk 2016-05-10 20:02 - 2016-05-10 20:03 - 00000000 ____D C:\Program Files\Simplify3D-3.0.2 2016-05-10 20:02 - 2016-05-10 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Simplify3D Software 2016-05-04 18:02 - 2015-04-16 19:45 - 00032512 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\swi_callout.sys 2016-05-02 23:00 - 2016-05-02 23:00 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\java 2016-05-02 22:54 - 2016-05-29 22:07 - 00002169 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Knuddels.lnk 2016-05-02 22:54 - 2016-05-29 22:06 - 00002139 _____ C:\Users\Ariel\Desktop\Knuddels.lnk 2016-05-02 22:53 - 2016-05-23 22:40 - 00000000 ____D C:\Users\Ariel\Knuddels-Stapp 2016-05-02 22:53 - 2016-05-02 22:53 - 01994832 _____ C:\Users\Ariel\Downloads\KnuddelsSetup.KC3PZ8J.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-29 22:19 - 2012-12-05 14:32 - 00000000 ____D C:\Users\Ariel\Documents\Outlook-Dateien 2016-05-29 22:16 - 2015-10-30 20:35 - 00780072 _____ C:\WINDOWS\system32\perfh007.dat 2016-05-29 22:16 - 2015-10-30 20:35 - 00156884 _____ C:\WINDOWS\system32\perfc007.dat 2016-05-29 22:16 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-05-29 22:16 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-05-29 22:16 - 2015-08-10 21:52 - 01811252 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-05-29 22:10 - 2015-12-14 05:02 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-05-29 22:10 - 2015-12-14 04:53 - 00000000 ____D C:\ProgramData\NVIDIA 2016-05-29 22:09 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-05-29 22:08 - 2015-12-14 04:58 - 00001552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-05-29 22:08 - 2015-10-20 23:52 - 00002089 _____ C:\Users\Public\Desktop\Draeger UCF Series.lnk 2016-05-29 22:08 - 2015-08-23 17:53 - 00001816 _____ C:\Users\Public\Desktop\iTunes.lnk 2016-05-29 22:08 - 2015-01-27 13:44 - 00001312 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-05-29 22:08 - 2013-12-26 00:09 - 00002091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.3 64-Bit.lnk 2016-05-29 22:08 - 2013-06-30 17:58 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk 2016-05-29 22:08 - 2013-06-30 17:58 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk 2016-05-29 22:08 - 2013-06-30 17:58 - 00002126 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk 2016-05-29 22:08 - 2012-12-08 00:31 - 00001097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk 2016-05-29 22:08 - 2012-12-08 00:30 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-05-29 22:08 - 2012-12-07 19:22 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk 2016-05-29 22:08 - 2012-12-05 14:40 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-05-29 22:07 - 2015-08-10 21:52 - 00002425 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-05-29 22:07 - 2015-01-11 12:51 - 00001837 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-29 22:07 - 2014-10-04 15:32 - 00002016 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\PokerStars.eu.lnk 2016-05-29 22:07 - 2014-08-08 21:07 - 00001132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite.Lnk 2016-05-29 22:07 - 2013-12-26 00:17 - 00003095 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlashGrabber.lnk 2016-05-29 22:06 - 2015-10-20 16:09 - 00001597 _____ C:\Users\Ariel\Desktop\Backuptrans iPhone WhatsApp to Android Transfer (x64).lnk 2016-05-29 22:06 - 2015-10-20 00:22 - 00001335 _____ C:\Users\Ariel\Desktop\iPhone Backup Extractor.lnk 2016-05-29 22:06 - 2014-08-02 11:36 - 00000000 ____D C:\Users\Ariel\AppData\Local\Apps\2.0 2016-05-29 22:06 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-05-29 18:12 - 2013-10-22 20:22 - 00004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C8A17187-61BE-4023-AD7E-A979B4EEBD52} 2016-05-29 17:50 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-05-29 11:42 - 2012-12-07 14:14 - 00000000 ____D C:\Users\Ariel\AppData\Local\Adobe 2016-05-26 18:24 - 2012-12-04 23:45 - 00000000 ____D C:\Users\Ariel\AppData\Local\VirtualStore 2016-05-26 18:22 - 2013-12-26 00:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-05-26 17:43 - 2015-12-14 04:54 - 00000000 ____D C:\Users\Ariel 2016-05-26 17:43 - 2015-12-14 04:52 - 05056176 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-05-26 17:35 - 2015-08-10 21:50 - 00002756 __RSH C:\ProgramData\ntuser.pol 2016-05-26 00:37 - 2014-12-26 15:52 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\FileAdvisor 2016-05-25 14:51 - 2014-12-25 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Type Advisor 2016-05-24 16:51 - 2013-02-23 15:53 - 00000000 ____D C:\ProgramData\boost_interprocess 2016-05-21 11:08 - 2015-11-08 11:12 - 00000000 ___RD C:\Users\Ariel\3D Objects 2016-05-20 19:56 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2016-05-20 19:50 - 2015-01-11 12:51 - 00000000 ____D C:\Users\Ariel\AppData\Local\Spotify 2016-05-20 19:49 - 2015-01-11 12:49 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Spotify 2016-05-20 19:29 - 2012-12-18 23:07 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-05-20 19:29 - 2012-12-18 22:36 - 00000000 ____D C:\Program Files (x86)\Steam 2016-05-20 19:28 - 2015-03-03 11:30 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\DVDVideoSoft 2016-05-20 19:23 - 2013-12-07 21:51 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-19 22:38 - 2015-08-10 21:52 - 00000000 ___RD C:\Users\Ariel\OneDrive 2016-05-18 12:27 - 2016-04-17 08:57 - 00000000 ____D C:\Users\Ariel\Desktop\Magisterarbeit 2016-05-14 14:30 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-05-12 15:48 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-05-12 08:09 - 2015-06-24 22:12 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 07:57 - 2015-08-10 21:50 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-05-12 03:31 - 2015-10-30 20:47 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-05-12 03:30 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-11 16:38 - 2013-08-31 15:26 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-05-11 16:30 - 2012-12-12 22:41 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-05-04 17:58 - 2012-12-04 23:45 - 00000000 ____D C:\Users\Ariel\AppData\Local\Packages ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-16 14:30 - 2015-02-16 14:31 - 0044120 __RSH () C:\Program Files (x86)\DLS8Uninstall.log 2013-04-13 10:13 - 2013-04-13 10:13 - 0000000 _____ () C:\Users\Ariel\AppData\Roaming\.NANotifyHere 2014-03-18 19:35 - 2014-03-18 19:35 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen 2013-06-20 17:38 - 2015-12-18 13:51 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen 2013-01-20 20:15 - 2013-01-20 20:15 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen 2012-12-24 15:13 - 2013-01-12 12:00 - 0000125 ___SH () C:\ProgramData\.zreglib 2015-12-14 04:52 - 2015-12-14 04:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2012-12-20 19:29 - 2015-03-19 15:06 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt ZeroAccess: C:\Users\Ariel\AppData\Local\Google\Desktop\Install ZeroAccess: C:\Program Files (x86)\Google\Desktop\Install Einige Dateien in TEMP: ==================== C:\Users\Ariel\AppData\Local\Temp\AcDeltree.exe C:\Users\Ariel\AppData\Local\Temp\Babolka.mp3.exe C:\Users\Ariel\AppData\Local\Temp\cct.dll C:\Users\Ariel\AppData\Local\Temp\Execute2App.exe C:\Users\Ariel\AppData\Local\Temp\JavaIC.dll C:\Users\Ariel\AppData\Local\Temp\jre-8u66-windows-au.exe C:\Users\Ariel\AppData\Local\Temp\libeay32.dll C:\Users\Ariel\AppData\Local\Temp\msscct32.dll C:\Users\Ariel\AppData\Local\Temp\msvcp90.dll C:\Users\Ariel\AppData\Local\Temp\msvcr120.dll C:\Users\Ariel\AppData\Local\Temp\msvcr90.dll C:\Users\Ariel\AppData\Local\Temp\pps-qq-19.exe C:\Users\Ariel\AppData\Local\Temp\qqpcmgr_v11.5.17490.219_45479_Silence.exe C:\Users\Ariel\AppData\Local\Temp\sqlite3.dll C:\Users\Ariel\AppData\Local\Temp\ts_10051.exe C:\Users\Ariel\AppData\Local\Temp\YSearchUtil.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-23 11:06 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:29-05-2016 02
durchgeführt von Ariel (2016-05-29 22:19:27)
Gestartet von C:\Users\Ariel\Downloads
Windows 10 Pro Version 1511 (X64) (2015-12-14 03:04:32)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2244333554-3036078685-3373813463-500 - Administrator - Disabled)
Ariel (S-1-5-21-2244333554-3036078685-3373813463-1001 - Administrator - Enabled) => C:\Users\Ariel
DefaultAccount (S-1-5-21-2244333554-3036078685-3373813463-503 - Limited - Disabled)
Gast (S-1-5-21-2244333554-3036078685-3373813463-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2244333554-3036078685-3373813463-1003 - Limited - Enabled)
SophosSAUALPHAONE0 (S-1-5-21-2244333554-3036078685-3373813463-1045 - Limited - Enabled)
UpdatusUser (S-1-5-21-2244333554-3036078685-3373813463-1044 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Sophos Anti-Virus (Enabled - Up to date) {6BABF8F7-3EB6-BD1D-9167-8C5ECA060A29}
AS: Sophos Anti-Virus (Enabled - Up to date) {D0CA1913-188C-B293-ABD7-B72CB1814094}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4K Video Downloader 3.8 (HKLM-x32\...\4K Video Downloader_is1) (Version: 3.8.0.1830 - Open Media LLC)
A360 Desktop (HKLM\...\{7758802D-9486-4883-9927-CCAC366A3BA4}) (Version: 7.2.3.1800 - Autodesk)
ACA & MEP 2017 Object Enabler (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (Version: 21.0.52.0 - Autodesk) Hidden
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.16 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.600 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Flash Player Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
allTunes (HKLM-x32\...\{2209F58F-1316-401B-A2E7-1F68AD729310}_is1) (Version: 1.2.44 - allTunes, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arduino (HKLM-x32\...\Arduino) (Version: 1.6.9 - Arduino LLC)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 3.5 - Auslogics Software Pty Ltd)
AutoCAD 2017 - Deutsch (German) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 Language Pack - Deutsch (German) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - Deutsch (German) (HKLM\...\AutoCAD 2017 - Deutsch (German)) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit (HKLM\...\{276A67E0-71EB-4827-B5F7-2ACF02BC1A5B}) (Version: 4.37.6853 - Autodesk)
Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 6.0.108.150 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk ReCap 360 (HKLM\...\Autodesk ReCap 360) (Version: 3.0.0.52 - Autodesk)
Autodesk ReCap 360 (Version: 3.0.0.52 - Autodesk) Hidden
AviSynth+ 2013-11-25 (HKLM-x32\...\{AC78780F-BACA-4805-8D4F-AE1B52B7E7D3}_is1) (Version: 2.6.0.5 - The Public)
Backuptrans iPhone WhatsApp to Android Transfer (x64) 3.2.34 (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Backuptrans iPhone WhatsApp to Android Transfer (x64)) (Version: 3.2.34 - Backuptrans)
Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-3 - Wacom Technology Corp.)
Bamboo Dock (HKLM-x32\...\Bamboo Dock) (Version: 4.1 - Wacom Co., Ltd.)
Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden
Bamboo Tablets Tutorial (x32 Version: 3.0.20 - Wacom) Hidden
Battlefield: Bad Company 2 (HKLM-x32\...\Steam App 24960) (Version: - DICE)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Blu-ray Copy 1.0.50 (HKLM-x32\...\{EE56B531-B655-4afa-9664-0C0970E5798B}_is1) (Version: - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version: - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version: - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version: - Treyarch)
Call of Duty: Modern Warfare 3 - Dedicated Server (HKLM-x32\...\Steam App 42750) (Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version: - Infinity Ward - Sledgehammer Games)
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Digital Anarchy Flicker Free AE v1.0.2 (HKLM\...\Flicker Free AE_is1) (Version: 1.0.2 - Team V.R)
Dräger UCF Serie 6/7/8/9000 (HKLM-x32\...\{A5DDBE6E-F103-474E-B888-15AFEBC98D73}) (Version: 3.0.0 - Dräger)
DYMO Label v.8 (HKLM-x32\...\DYMO Label v.8) (Version: 8.5.1.1816 - Sanford, L.P.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.0.18598 - Landesfinanzdirektion Thüringen)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.20.00 - SEIKO EPSON CORPORATION)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production)
ffdshow v1.3.4527 [2013-12-03] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4527.0 - )
Flashgrabber 1.1 (HKLM-x32\...\{AFAFBCB0-0044-49C8-93F4-75FE8B21740B}) (Version: 1.1.0 - biu software)
FMS32-PRO Version 3.1.5 (HKLM-x32\...\ST6UNST #2) (Version: - )
Free M4a to MP3 Converter 8.3 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
iPhone Backup Extractor (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\iPhone Backup Extractor) (Version: 6.0.2.715 - Reincubate Ltd)
iPhone Backup Extractor (x32 Version: 6.0.2.715 - Reincubate Ltd) Hidden
iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
KG-UV8D (HKLM-x32\...\KG-UV8DB2.V1.00(140415)) (Version: B2.V1.00(140415) - Quanzhou Wouxun Electronics Co.£¬Ltd. Right)
Knuddels Standalone App (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Knuddels App ) (Version: "2015.12.6.0" - "Knuddels App")
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.22.20141205 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{15A5D29A-F209-49FD-BA47-5E4C882FF496}) (Version: 3.12.1.0 - LG Electronics)
Logitech Unifying-Software 2.10 (HKLM\...\Logitech Unifying) (Version: 2.10.37 - Logitech)
MAGIX Web Designer 9 Premium (32-Bit) (HKLM-x32\...\MX.{1CC91196-D629-4C67-9547-FA76E6A5C3E1}) (Version: 9.0.1.27343 - MAGIX AG)
MAGIX Web Designer 9 Premium (Version: 9.0.1.27343 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 12.10.10.3 - Marvell)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.0.1 - CEWE COLOR AG u Co. OHG)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero 7 Premium (HKLM-x32\...\{98EFD8F0-08DE-48DB-B922-A2EBAB711031}) (Version: 7.03.1151 - Nero AG)
NETGEAR WG111v2 wireless USB 2.0 adapter (HKLM-x32\...\{4102037D-E8E0-48E0-B203-E521D194FB71}) (Version: 1.0.0.133 - NETGEAR)
NVIDIA 3D Vision Controller-Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.7.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.9 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.9 - NVIDIA Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Photomatix Pro version 4.1.4 (HKLM\...\PhotomatixPro41x64_is1) (Version: 4.1.4 - HDRsoft Sarl)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.7.0 - Prolific Technology INC)
POIbase 1.071 (HKLM-x32\...\POIbase_is1) (Version: - POIbase)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu)
Portrait Professional 11.3 (HKLM-x32\...\PortraitProfessional11_is1) (Version: 11.3 - Anthropics Technology Ltd.)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
PSWx29 4.50 (HKLM-x32\...\{66825DF7-B55E-4A91-8B94-99C11C7DC27C}_is1) (Version: - Swissphone Telecom AG)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
RescuePRO Deluxe 5.2.2.5 (HKLM-x32\...\{38D9AAB8-116B-40BB-A801-50B71DF82D24}_is1) (Version: 5.2.2.5 - LC Technology International, Inc.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.05.45.00(23.05.2014) - Samsung Electronics Co., Ltd.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version: - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version: - )
Samsung PC Studio 3 (HKLM-x32\...\{C4A4722E-79F9-417C-BD72-8D359A090C97}) (Version: 3.2.2.80601 - Samsung Electronics Co., Ltd.)
Samsung PC Studio 3 (x32 Version: 3.0.0.80601 - Samsung Electronics Co., Ltd.) Hidden
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Assistant (HKLM-x32\...\Samsung Scan Assistant) (Version: 1.05.07 (20.07.2012) - Samsung Electronics Co., Ltd.)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.19.0 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
SHIELD Streaming (Version: 1.6.53 - NVIDIA Corporation) Hidden
Simplify3D Software (HKLM\...\Simplify3D Software 3.0.2) (Version: 3.0.2 - Simplify3D)
SketchUp-Import 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16034.4 - Samsung Electronics Co., Ltd.)
Smart Switch (x32 Version: 4.1.16034.4 - Samsung Electronics Co., Ltd.) Hidden
Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)
Sony RAW Driver (HKLM-x32\...\{166FCF01-AC98-4288-A01C-90BEB808C059}) (Version: 2.0.00.08130 - Sony Corporation)
Sophos Anti-Virus (HKLM-x32\...\{09863DA9-7A9B-4430-9561-E04D178D7017}) (Version: 10.6.3.537 - Sophos Limited)
Sophos AutoUpdate (HKLM-x32\...\{BCF53039-A7FC-4C79-A3E3-437AE28FD918}) (Version: 5.2.0.276 - Sophos Limited)
Spotify (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Spotify) (Version: 1.0.25.127.g58007b4c - Spotify AB)
Spyder3Elite (HKLM-x32\...\Spyder3Elite) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SUPER © v2015.build.64+Recorder (2015/02/13) Version v2015.buil (HKLM-x32\...\{8E2A29E2-96BF-8759-4DA7-5C16C90729A4}_is1) (Version: v2015.build.64+Recorder - eRightSoft)
TinyWall (HKLM-x32\...\{CAD35000-E28E-44A1-B4D4-93D820C8539E}) (Version: 2.0.1.0 - Károly Pados)
TuneUp 3.0.7.0 (HKLM-x32\...\TuneUpMedia) (Version: 3.0.7.0 - TuneUp Media, Inc.)
Unity Web Player (HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)
Verfügbare Autodesk-Apps 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
Virtual Serial Ports Emulator (HKLM-x32\...\{8F3F769D-E9C4-42E5-9B35-82DDCE0790C1}) (Version: 0.938 - Eterlogic.com)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.)
Welcome App (Start-up experience) (x32 Version: 12.0.15000 - Nero AG) Hidden
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB (04/21/2011 01.0.0.0) (HKLM\...\BEA7B05370C19B9C86893BB484FD6B9CC52B0CD8) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
WN111v2 (x32 Version: 3.0.0.5 - NETGEAR) Hidden
Wondershare MobileTrans ( Version 5.7.0 ) (HKLM-x32\...\{18CDCEAA-A9E4-4A4C-AC0E-C15E87C30EA5}_is1) (Version: 5.7.0 - Wondershare)
Wondershare Streaming Audio Recorder(Build 2.3.5) (HKLM-x32\...\Wondershare Streaming Audio Recorder_is1) (Version: 2.3.5.0 - Wondershare Software)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ariel\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => Keine Datei
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\de-DE\acadficn.dll (Autodesk, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {339834DF-F0A2-4073-B848-E1B8462A91D3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3B239A8F-8B54-45E6-8CDB-B93E95AD5A62} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {44990DEB-DAD9-49AA-91E7-5DD773B2BED3} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {457A50DD-0431-4EFF-9886-A7AADE95857A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {4C3AF02A-5F76-4DF0-AA8E-2C76EAD8D004} - System32\Tasks\AdobeAAMUpdater-1.0-AlphaOne-Ariel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07] (Adobe Systems Incorporated)
Task: {88C0BA05-4BD5-4933-923A-62EF5A3D535A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {97C1CDB7-7364-45D8-A1B7-90092B1F4BEA} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {99799BDC-BBAE-4D3C-8595-AC20D7763708} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A95B1EA5-F660-4FD3-B444-1DB3031ECCE3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {B8CBA4AE-8DC4-45A5-A67A-2B8362D56E28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {BDD14C49-821B-423C-8260-D7641BFF6F6B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {CC0CD124-B07E-4E73-8B14-15B05E097639} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D32BBFA0-9183-4D6B-B9C6-7AA3E86CE1A3} - System32\Tasks\{94BE0F1C-C694-4A4A-BA0E-74E2D429860F} => pcalua.exe -a C:\Users\Ariel\AppData\Local\Temp\InstallFlashPlayer.exe -d C:\Users\Ariel\Desktop
Task: {D5CA69C7-9F7D-4C94-9902-142D8BC9E076} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-05-11] (Microsoft Corporation)
Task: {E7FB7022-8B29-40D9-98B7-6E48F7AD3AF1} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {FA4A48A7-3C2D-44CD-AACD-CCFFDEC5C490} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {FB774584-D4DD-49EC-9832-B8C9C7597691} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-14 04:53 - 2015-08-07 02:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-03 10:44 - 2014-12-03 10:44 - 00029184 _____ () C:\WINDOWS\System32\ssa6mlm.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-10-08 10:41 - 2010-05-10 12:14 - 00186848 _____ () C:\Windows\SysWOW64\WinService.exe
2014-06-03 17:20 - 2013-10-04 06:53 - 00734720 _____ () C:\WINDOWS\system32\SnMinDrv.dll
2014-06-03 17:20 - 2013-02-22 06:29 - 00365568 _____ () C:\WINDOWS\system32\SaMinDrv.dll
2014-06-03 17:20 - 2013-06-28 16:36 - 00091136 _____ () C:\WINDOWS\system32\SSDEVM64.DLL
2013-01-04 19:29 - 2011-07-06 00:01 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2016-04-13 10:34 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-13 10:34 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-05-19 22:38 - 2016-05-19 22:38 - 00959168 _____ () C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-12-20 12:33 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-10 22:51 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-05-10 22:52 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-05-10 22:52 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-05-10 22:52 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-05-10 22:52 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00165376 _____ () C:\Program Files\Autodesk\Autodesk Sync\qjson_Ad_0.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00050176 _____ () C:\Program Files\Autodesk\Autodesk Sync\QtSolutions_MFCMigrationFramework_Ad_2.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00062464 _____ () C:\Program Files\Autodesk\Autodesk Sync\qoauth_Ad_1.dll
2015-12-15 20:42 - 2015-12-15 20:42 - 00932864 _____ () C:\Program Files\Autodesk\Autodesk Sync\qca_Ad_2.dll
2015-10-08 10:50 - 2010-05-10 12:13 - 01268192 _____ () C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe
2010-06-04 14:32 - 2010-07-07 17:00 - 07667970 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe
2015-12-12 14:35 - 2015-06-10 11:13 - 00113024 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2012-10-16 11:39 - 2012-10-16 11:39 - 00646744 _____ () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
2016-05-20 20:22 - 2016-03-23 12:02 - 00061968 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head.dll
2016-05-20 20:22 - 2016-03-23 12:02 - 00110608 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-08-09 10:13 - 2014-06-25 10:13 - 01457664 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-08-09 10:13 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2016-05-19 22:38 - 2016-05-19 22:38 - 00679624 _____ () C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2015-12-12 14:35 - 2012-04-30 11:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2015-12-12 14:35 - 2015-10-20 18:44 - 00242176 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2015-11-06 12:46 - 2015-11-06 12:46 - 02385280 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\libxt.dll
2015-12-12 14:35 - 2015-04-21 13:22 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2015-09-07 17:01 - 2015-09-07 17:01 - 00237440 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00139264 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\Appearance Pak.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00147456 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\RegEx.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00868352 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\RBScript.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00098304 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\Shell.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00762368 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\XML.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00266240 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\CGamma.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00065536 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\CSensor.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00028672 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\MBSRegistrationPlugin16042.dll
2010-06-04 14:32 - 2010-07-07 17:00 - 00025600 _____ () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility Libs\MBSPluginVersionPlugin16042.dll
2012-09-23 20:43 - 2012-09-23 20:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2016-05-20 20:22 - 2013-09-23 19:52 - 00043912 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_MFCMigrationFramework_Ad_2.dll
2016-05-20 20:22 - 2015-11-05 14:07 - 00052224 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qoauth_Ad_1.dll
2016-05-20 20:22 - 2015-11-05 14:07 - 00195584 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson_Ad_0.dll
2016-05-20 20:22 - 2015-11-05 14:07 - 00742400 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qca_Ad_2.dll
2016-05-20 20:22 - 2016-03-23 11:35 - 00287168 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\de-DE\AdWingManRes.dll
2016-05-20 20:22 - 2015-09-08 08:31 - 40640808 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libcef.dll
2016-05-20 20:22 - 2014-09-03 02:29 - 00912384 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libglesv2.dll
2016-05-20 20:22 - 2014-09-03 02:29 - 00134144 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libegl.dll
2016-05-20 20:22 - 2014-09-03 02:29 - 00950272 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\ffmpegsumo.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\knuddels.com -> www.knuddels.com
IE trusted site: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\knuddels.de -> hxxp://www.knuddels.de
IE trusted site: HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\mainfranken-chat.de -> hxxp://www.mainfranken-chat.de
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2012-07-26 07:26 - 2012-06-30 23:49 - 00001476 ____A C:\WINDOWS\system32\Drivers\etc\hosts
******
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ariel\Desktop\nature-wallpaper-1920x1080-039.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\StartupApproved\Run: => "BrowserChoice"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
==================== Wiederherstellungspunkte =========================
28-05-2016 16:15:16 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/29/2016 10:12:40 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Error: (05/29/2016 10:10:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: daemonu.exe, Version: 9.3.21.0, Zeitstempel: 0x527c918e
Name des fehlerhaften Moduls: daemonu.exe, Version: 9.3.21.0, Zeitstempel: 0x527c918e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0010950d
ID des fehlerhaften Prozesses: 0xe8c
Startzeit der fehlerhaften Anwendung: 0xdaemonu.exe0
Pfad der fehlerhaften Anwendung: daemonu.exe1
Pfad des fehlerhaften Moduls: daemonu.exe2
Berichtskennung: daemonu.exe3
Vollständiger Name des fehlerhaften Pakets: daemonu.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: daemonu.exe5
Error: (05/29/2016 09:32:09 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsort "I:\" nicht abgeschlossen. Fehler: Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006).
Error: (05/28/2016 04:15:17 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (05/28/2016 04:14:29 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8
Error: (05/28/2016 02:39:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm explorer.exe, Version 10.0.10586.306 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2338
Startzeit: 01d1b8ddd0d4c548
Beendigungszeit: 15
Anwendungspfad: C:\Windows\explorer.exe
Berichts-ID: 3d37ac10-24d1-11e6-bff8-bcaec523a534
Vollständiger Name des fehlerhaften Pakets:
Auf das fehlerhafte Paket bezogene Anwendungs-ID:
Error: (05/28/2016 02:38:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm explorer.exe, Version 10.0.10586.306 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1148
Startzeit: 01d1b8dd0a5e993f
Beendigungszeit: 5619
Anwendungspfad: C:\Windows\explorer.exe
Berichts-ID: 0aff9cf2-24d1-11e6-bff8-bcaec523a534
Vollständiger Name des fehlerhaften Pakets:
Auf das fehlerhafte Paket bezogene Anwendungs-ID:
Error: (05/28/2016 02:26:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xafc
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (05/28/2016 02:26:11 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2812) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1601(dir.cxx:753): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (05/27/2016 05:07:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: daemonu.exe, Version: 9.3.21.0, Zeitstempel: 0x527c918e
Name des fehlerhaften Moduls: daemonu.exe, Version: 9.3.21.0, Zeitstempel: 0x527c918e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0010950d
ID des fehlerhaften Prozesses: 0xe54
Startzeit der fehlerhaften Anwendung: 0xdaemonu.exe0
Pfad der fehlerhaften Anwendung: daemonu.exe1
Pfad des fehlerhaften Moduls: daemonu.exe2
Berichtskennung: daemonu.exe3
Vollständiger Name des fehlerhaften Pakets: daemonu.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: daemonu.exe5
Systemfehler:
=============
Error: (05/29/2016 10:13:38 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}
Error: (05/29/2016 10:10:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/29/2016 10:10:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WinDefend" wurde aufgrund folgenden Fehlers nicht gestartet:
%%577
Error: (05/29/2016 10:09:39 PM) (Source: DCOM) (EventID: 10010) (User: ALPHAONE)
Description: {0002DF02-0000-0000-C000-000000000046}
Error: (05/29/2016 10:09:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_4259788" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/29/2016 10:09:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _4259788" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/29/2016 10:09:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_4259788" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/29/2016 10:09:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_4259788" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (05/29/2016 10:09:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (05/29/2016 09:32:21 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}
CodeIntegrity:
===================================
Date: 2016-05-29 22:10:35.247
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:33.523
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:33.511
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:15.611
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-26 18:35:15.598
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Ariel\AppData\Local\Temp\Rar$EX01.115\x86\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-05-20 22:29:29.570
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-17 06:45:50.130
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-16 09:29:42.483
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 03:33:06.648
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-17 08:42:40.984
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7 CPU 950 @ 3.07GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 6135.06 MB
Verfügbarer physikalischer RAM: 3000.77 MB
Summe virtueller Speicher: 7159.06 MB
Verfügbarer virtueller Speicher: 3781.93 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.69 GB) (Free:6.44 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Data) (Fixed) (Total:1863.01 GB) (Free:737.07 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 7A20A528)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: C4B3B7B8)
Partition 1: (Not Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=237.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== Ende von Addition.txt ============================
|
|
29.05.2016, 21:30
| #9 |
| | Windows 10: Chinesische Schadsoftware War ja nur eine kleine Randbemerkung was das "nichts" angeht :-P Hab mal wieder vergessen, dass man zum klugscheißen auch klug sein muss! Aber das bin ich leider nicht, was diesen Bereich des - mittlerweile - Alltags angeht :-/ |
|
29.05.2016, 21:31
| #10 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 10: Chinesische Schadsoftware Jetzt bitte Suchscan durchführen: Schritt 1 ESET Online Scanner
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
29.05.2016, 23:55
| #11 |
| | Windows 10: Chinesische SchadsoftwareCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=326835fa86f60a49b955818acaa182a9
# end=init
# utc_time=2016-05-29 08:35:15
# local_time=2016-05-29 10:35:15 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 29627
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=326835fa86f60a49b955818acaa182a9
# end=updated
# utc_time=2016-05-29 08:38:03
# local_time=2016-05-29 10:38:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=326835fa86f60a49b955818acaa182a9
# engine=29627
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-05-29 10:33:53
# local_time=2016-05-30 12:33:53 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 199675 18375376 0 0
# compatibility_mode_1='Sophos Anti-Virus'
# compatibility_mode=8450 16777213 100 98 8886 71553031 0 0
# scanned=703362
# found=108
# cleaned=108
# scan_time=6950
sh=954DF604CE5F5CE48463A43E0F1A8543012096A4 ft=1 fh=d17ca1f1f3b864b0 vn="Variante von Win32/Tencent.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\Ariel\AppData\Local\Temp\qqpcmgr_v11.5.17490.219_45479_Silence.exe"
sh=5B5EA2F5CEC496F99D245A68C884C09F5849E037 ft=1 fh=038fab3ea954bf64 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\Ariel\AppData\Local\Temp\DMR\dmr_72.exe"
sh=684B490756A042053EDA6C92727128D338B52891 ft=1 fh=268225568dc375c6 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\Ariel\Downloads\4K Video Downloader - CHIP-Installer.exe"
sh=52F3D5B6DC9558B0AEC374AF07B507470F380020 ft=1 fh=32c842a1f991b829 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\Ariel\Downloads\BlueStacks App Player - CHIP-Installer.exe"
sh=21696EB5C86C34DD5EB165F4A1EB3DE5D4C0B678 ft=1 fh=80a47fd74c3522f5 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\Ariel\Downloads\iStick - CHIP-Installer.exe"
sh=92251C0451D89717138AF1A7EE485B610852C99B ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\$RECYCLE.BIN\DECRYPT_INSTRUCTION.HTML"
sh=B8EB8F544C1BF1F48ABB54031C7D508A6CE9DF3F ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\$RECYCLE.BIN\DECRYPT_INSTRUCTION.TXT"
sh=3B1DFF710F983362CB0A70E16CDF5B1EB344A9F5 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR.Gen Trojaner (gelöscht)" ac=C fn="D:\$RECYCLE.BIN\DECRYPT_INSTRUCTION.URL"
sh=92251C0451D89717138AF1A7EE485B610852C99B ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\$RECYCLE.BIN\S-1-5-21-2244333554-3036078685-3373813463-1001\DECRYPT_INSTRUCTION.HTML"
sh=B8EB8F544C1BF1F48ABB54031C7D508A6CE9DF3F ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\$RECYCLE.BIN\S-1-5-21-2244333554-3036078685-3373813463-1001\DECRYPT_INSTRUCTION.TXT"
sh=3B1DFF710F983362CB0A70E16CDF5B1EB344A9F5 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR.Gen Trojaner (gelöscht)" ac=C fn="D:\$RECYCLE.BIN\S-1-5-21-2244333554-3036078685-3373813463-1001\DECRYPT_INSTRUCTION.URL"
sh=9753D3A02E300D2280F32DF75AAD877C2EFA4848 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\Jura\Examen\DECRYPT_INSTRUCTION.HTML"
sh=C3931BCA51D6A55FBA87567FBD6BD780A60B0540 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\Jura\Examen\DECRYPT_INSTRUCTION.TXT"
sh=CE1D9AD17C47D6B6AA5306EEB395A4B2E5CBEF33 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR.Gen Trojaner (gelöscht)" ac=C fn="D:\Jura\Examen\DECRYPT_INSTRUCTION.URL"
sh=9753D3A02E300D2280F32DF75AAD877C2EFA4848 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\Jura\Studienbescheinigungen\WS 13-14\DECRYPT_INSTRUCTION.HTML"
sh=C3931BCA51D6A55FBA87567FBD6BD780A60B0540 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR Trojaner (gelöscht)" ac=C fn="D:\Jura\Studienbescheinigungen\WS 13-14\DECRYPT_INSTRUCTION.TXT"
sh=CE1D9AD17C47D6B6AA5306EEB395A4B2E5CBEF33 ft=0 fh=0000000000000000 vn="Win32/Filecoder.CryptoWall.CR.Gen Trojaner (gelöscht)" ac=C fn="D:\Jura\Studienbescheinigungen\WS 13-14\DECRYPT_INSTRUCTION.URL"
sh=8EE9FB5AE2B8B6679E36388F102438C3C72C628E ft=1 fh=fc1817d8cca0d243 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\AppData\Local\Conduit\CT2269050\DVDVideoSoftTBAutoUpdateHelper.exe"
sh=39870732F3EBDAA156F29A9FE614A4BCFD6DC1C1 ft=1 fh=e26c4927965a9861 vn="Win32/SoftonicDownloader evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0FH52O7F\SoftonicDownloader_fuer_photoscape[1].exe"
sh=B4267CC9FBAA1133921BBF40835E07DAA481E025 ft=1 fh=39d86043333a1074 vn="Variante von Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0FH52O7F\tbedrs[1].dll"
sh=C29EEF43CEF4F32385A69F1FE2CBC645D3D1E8F3 ft=1 fh=fbb77b3636da9e34 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\BrowserHelper.exe"
sh=E42479D82AE362C8322333ABA73EEA516692A709 ft=1 fh=65b1cd187e5dbb84 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll"
sh=BDBCE9403469188E6D24402338B175E521420261 ft=1 fh=29180acab3c38b7e vn="Variante von MSIL/Toolbar.Linkury.AC evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll"
sh=68798DFB14E773790263C7232C38FAE9856B6121 ft=1 fh=012d1f529aff2fb2 vn="Variante von Win32/Toolbar.Linkury.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll"
sh=3A197F541A02A2F0B3FA6454371AF8ABAE31C834 ft=1 fh=70cdfed48b656705 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.dll"
sh=460EA3A064C03A56D28A38D07881E146E0F2C0AC ft=1 fh=41056611139c96cb vn="Variante von MSIL/Toolbar.Linkury.AU evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll"
sh=D45FEB00C6A02677B1A9123014E34DD1FB3958B6 ft=1 fh=09f888280732de22 vn="Variante von MSIL/Toolbar.Linkury.AQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll"
sh=6FB778C4862C9605CEACF64756F0D7DA5228C14E ft=1 fh=bc0bd4734bd7a929 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll"
sh=5AF257CAE209642BD91BC6422349FD21BD172682 ft=1 fh=c57e33cff3f2dcb6 vn="Variante von MSIL/Toolbar.Linkury.AQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll"
sh=00E898C10E6EB35D5BEA63469DAA105945CF22F0 ft=1 fh=f8c00f6c2eed08d5 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll"
sh=74D934716F54E5296DFD4D18D04EDA3C221BAC40 ft=1 fh=fb0bf4fea2cc32f6 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll"
sh=C4D84F3CBA84CD61B521A9B3C271963EA74CB71D ft=1 fh=f2db1da44c293c36 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll"
sh=681EC472C632A2860352BB86485CDD56450BD551 ft=1 fh=63087f80014b5617 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll"
sh=5E8142DA553E4809E585ADF460A8DABABD1C7444 ft=1 fh=4045b0ba9752569d vn="Variante von MSIL/Toolbar.Linkury.AQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll"
sh=ECE9B9476B003DEA59BBBD31F1D93102F08E115E ft=1 fh=f5957333c8862dd3 vn="Variante von MSIL/Toolbar.Linkury.T evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll"
sh=34028FD2AE5F8FB80304E710DFDEE60660615BD9 ft=1 fh=6909361db61311fa vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll"
sh=E9EBF74A2621097D684E100C5333C3813B869BF6 ft=1 fh=a2aba4506edb9c11 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll"
sh=9A8243C83FF7512BF4116FAE69B0A64146350DFB ft=1 fh=d23252f8fe4303bd vn="Variante von MSIL/Toolbar.Linkury.AQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll"
sh=E7E79903B508114EF2233A59838BA4E931BD1941 ft=1 fh=09382cb14abc79f1 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PersonalizationSettingsManager.dll"
sh=27802F199EFAA42831857C5470FF6DE3B933B23F ft=1 fh=e35f84aa5e2c20c1 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll"
sh=EE3FEE2DB6A3A276A2FBDD249F4DC36EE92A9B70 ft=1 fh=a3342bb9cc207e7b vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll"
sh=9532F1677A5B4ADF2A084F4DA8F24AEECF5D52F0 ft=1 fh=a839c2d64fe45fff vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll"
sh=B13F0CF3BB45D8D0A9D9F2AA69E8D4DFAB8D322E ft=1 fh=aa6010534583b8d2 vn="Variante von MSIL/Toolbar.Linkury.AN evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll"
sh=5228BDFB90F7E06BC2B48C62F5AADD1908AFFC89 ft=1 fh=cddcbd3bd28d16fe vn="Variante von MSIL/Toolbar.Linkury.AR evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.ProductsRemovalLibary.dll"
sh=76E2726117C084BA63F817A66F14F43088A46F1F ft=1 fh=28c98f797aa11437 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.ProductUninstaller.dll"
sh=7216F0367F31628F0A8D8D81C30ADE4187AF3334 ft=1 fh=bacd231c542aee02 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll"
sh=1133B1C5093B69B4E4C81DD503A53101B34F7737 ft=1 fh=a88081a9074986ef vn="Variante von MSIL/Toolbar.Linkury.AS evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll"
sh=6835D9EFD45198ECC61B77DFE63527FB62FB8569 ft=1 fh=f82a861916389cd3 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll"
sh=1367BD3C9C0242B6BD5D6C6D7F96A625293071A7 ft=1 fh=a5495a66d889c17d vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll"
sh=B3A222EDE6E30A15EDDA06F9866DC37C479E0C6D ft=1 fh=73a347fc96b7f1df vn="Variante von MSIL/Toolbar.Linkury.AQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll"
sh=11E70C0F8E56C9C686A2EB0E30528B8E4A4CBE6E ft=1 fh=249362c4dd6deba9 vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.UrlHistorySupplier.dll"
sh=A72C855A569B788BFD3792866100984A8FACB9B7 ft=1 fh=73c60ffe199e6a4e vn="Variante von MSIL/Toolbar.Linkury.AM evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll"
sh=17B6D5496B4D119FA39B4392D8AAAC43E48D60F2 ft=1 fh=ce87e41a398c2328 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll"
sh=CB20628BE23E273168B022289FE6EDD27DB282BE ft=1 fh=b526e69e00f14669 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll"
sh=91F869DB602538EE5C977FCBE77B5497C50A98A7 ft=1 fh=0b59dca187a419db vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe"
sh=6CD8587B3322260BF3BA70AD354DC18ABC4E5FBE ft=1 fh=89cecb4ea5f98bec vn="Variante von Win32/Toolbar.Linkury.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\SnapDo.exe"
sh=566D1A3B921721FDD3C492B6D42163F140EEEF58 ft=1 fh=47ebed119afc1806 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll"
sh=74201CA3B7144C0DBF81E812D6CF74E0F00D8343 ft=1 fh=f721f934a5376c10 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll"
sh=2712D449AC5EC9A75C446D5F4FB879B62C654EF4 ft=1 fh=4e37ccef848d06fc vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll"
sh=93528E2E0A0146C0511F6273BC56ED29EB7DA1A2 ft=1 fh=54bd206cb45c2ff4 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll"
sh=0A1EE9A5ACDDA3E56F51144F2E9DCA476B0C7DA5 ft=1 fh=59b56365f7d26da3 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll"
sh=E7A06A582218F5DD0E8DD0A6B30E8D993F45E335 ft=1 fh=c3a343ae1ba20fba vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_10.dll"
sh=3AC4106396ABF4412FA9FA434FCC816007511849 ft=1 fh=e7ff80b85aee9fe1 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_11.dll"
sh=ABAA231F5172D62DB83B8396640EDC3A96B99AAF ft=1 fh=a660ff4ebb92c017 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_12.dll"
sh=A3089A02827A38390D918C378ADA0318FA343F3A ft=1 fh=14594b9b2421fb24 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_13.dll"
sh=D25520431384F5ED3393D42D40EA847E4F49AF7A ft=1 fh=75a833ecf81f82d3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_14.dll"
sh=2440B5594C82A9389F3010521E3C3D2A2F394E38 ft=1 fh=372c54954e0fab89 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_15.dll"
sh=48C826EF00938F035C91C9F6B3E167CB21D96633 ft=1 fh=59fac0a23423ab50 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_16.dll"
sh=45F4ABE93E1FB333545719948B418FB1207A5085 ft=1 fh=3a58b09db4698b9d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_17.dll"
sh=DFCF6F89F5C370EE9889852FE5FE5E546E0FC2D2 ft=1 fh=69048a9973878dab vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll"
sh=0FBDEBA6ED7EAA316E7548B86EC1B7A388F6DF4B ft=1 fh=90fcad4727761e09 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll"
sh=22CF66906AF22BC3B595241D93D6341951501892 ft=1 fh=4681bb64f4f633c6 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll"
sh=46469A6F732D80E19D944E8B5D51E544BCA4EE02 ft=1 fh=43f4d953f8beaca7 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll"
sh=7C849BC59BD77A3E10461506EDBF018EB20BDB50 ft=1 fh=dea9af808b915dd1 vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll"
sh=C22B50E69E41DF3D2A26298C702E05FF86985E24 ft=1 fh=8f01f6fe36dd0726 vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll"
sh=B2849F8399155154CDE8ACDD5B407F18F66566CA ft=1 fh=6dcdb9c7e7719abf vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll"
sh=B9EB3C6088524DB0DD31586B17365CF29FD210A8 ft=1 fh=d6cc4376d05f5322 vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll"
sh=947AC4A3523EB6C9A02C8936B3513ADDE34A8B74 ft=1 fh=c3ddfaff3b9351c8 vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.UninstallProductsPlugin.dll"
sh=2F8ADF8E559593C6D68EE7B7FA09EB3BD5058E1B ft=1 fh=a756edf5345e76ca vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll"
sh=D44DEE51F69E38B251472EB21EB823C9623F2050 ft=1 fh=73cbd239a96d1fd6 vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll"
sh=82A0AE0D910BE5FFC61EDFEC7B854E6E63BE66A3 ft=1 fh=5e22da476601d5d7 vn="Variante von MSIL/Toolbar.Linkury.AB.gen evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.YoutubeDownloadPlugin.dll"
sh=839CAD9A8123E63A1EA8BF3847DE85DC44B5CD89 ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\AppData\Local\Temp\208ebd83-3d88-4f44-85b3-5a6b9da3aeb5\LinkuryInstaller.msi"
sh=FA916E4B04FB29575BCF700C635DFEC06286216D ft=1 fh=ae3635bd78d2535d vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\AppData\Local\Temp\ct2269050\ffLogic.exe"
sh=6B9D4C56722D8F38DE2CE107375F3088172B899A ft=1 fh=17b950a3825a87a6 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\AppData\Local\Temp\ct2269050\ieLogic.exe"
sh=5A0B2E3D7EA5AAACCC7AA2A579373021204BEDA1 ft=1 fh=572549f60b65a80d vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\AppData\Local\Temp\ct2269050\statisticsStub.exe"
sh=7B792176A707CF723F9489F8594C8AF4C71B7E66 ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\AppData\Local\Temp\smartbar\Installer.msi"
sh=1E00782FEC3CA539AE30F866502633FF550356C6 ft=1 fh=46da0b21d76c5220 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\LocalLow\DVDVideoSoftTB\ldrtbDVD0.dll"
sh=1E00782FEC3CA539AE30F866502633FF550356C6 ft=1 fh=46da0b21d76c5220 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\LocalLow\DVDVideoSoftTB\ldrtbDVDV.dll"
sh=3E30150D840AC9A0C0A7969D2FFD45118BE827D6 ft=1 fh=afbdb7c39edb934a vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\LocalLow\DVDVideoSoftTB\tbDVD0.dll"
sh=B4267CC9FBAA1133921BBF40835E07DAA481E025 ft=1 fh=39d86043333a1074 vn="Variante von Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\LocalLow\DVDVideoSoftTB\tbDVD1.dll"
sh=4C5834A9F0D646B35A7719A4E352093C0240BA5F ft=1 fh=f68058267a38e609 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\LocalLow\DVDVideoSoftTB\tbDVDV.dll"
sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\LocalLow\DVDVideoSoftTB\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll"
sh=E7A06A582218F5DD0E8DD0A6B30E8D993F45E335 ft=1 fh=c3a343ae1ba20fba vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_10.dll"
sh=3AC4106396ABF4412FA9FA434FCC816007511849 ft=1 fh=e7ff80b85aee9fe1 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_11.dll"
sh=ABAA231F5172D62DB83B8396640EDC3A96B99AAF ft=1 fh=a660ff4ebb92c017 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_12.dll"
sh=A3089A02827A38390D918C378ADA0318FA343F3A ft=1 fh=14594b9b2421fb24 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_13.dll"
sh=D25520431384F5ED3393D42D40EA847E4F49AF7A ft=1 fh=75a833ecf81f82d3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_14.dll"
sh=2440B5594C82A9389F3010521E3C3D2A2F394E38 ft=1 fh=372c54954e0fab89 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_15.dll"
sh=48C826EF00938F035C91C9F6B3E167CB21D96633 ft=1 fh=59fac0a23423ab50 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_16.dll"
sh=45F4ABE93E1FB333545719948B418FB1207A5085 ft=1 fh=3a58b09db4698b9d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\b53ofqu5.default\extensions\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_17.dll"
sh=EF476640E69604879C540915C4BCBA9CF9F6A332 ft=1 fh=f1da0bf17500491a vn="Win32/Toolbar.Conduit.S evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\Downloads\FreeYouTubetoMP3Converter.exe"
sh=8547D1E5EACE099ECFE5EDBF6958FA077650894B ft=1 fh=61435738673b6524 vn="Win32/Toolbar.Conduit.S evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Selina\Downloads\FreeYouTubeToMP3Converter31015.exe"
sh=0732EEA2A70AD71E4B7404EE5D0010801FCA40C9 ft=1 fh=86243790b5d54e81 vn="Win32/SoftonicDownloader.D evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Selina\Downloads\SoftonicDownloader_fuer_gimp.exe"
sh=B5209CDF0C77CB358CC5579C59A02BC4EA8260DF ft=0 fh=0000000000000000 vn="LNK/Agent.CH Trojaner (Gesäubert durch Löschen)" ac=C fn="D:\Sicherungen\DaSi Käthe\Dokumente und Einstellungen\Besitzer\Desktop\Kathrin\Kathrin Labtop\USB-Stick\Sonstiges\Music\Snow Patrol\Eyes Open\Tipp - anmelden und kostenlos mehr Musik downloaden.url"
sh=7F767736133978B4595686663EC492BFC767A694 ft=0 fh=0000000000000000 vn="WMA/TrojanDownloader.GetCodec.C Trojaner (Gesäubert durch Löschen)" ac=C fn="D:\Sicherungen\DaSi Käthe\Dokumente und Einstellungen\Besitzer\Desktop\Music\i will survive element remix.mp3"
sh=B5209CDF0C77CB358CC5579C59A02BC4EA8260DF ft=0 fh=0000000000000000 vn="LNK/Agent.CH Trojaner (Gesäubert durch Löschen)" ac=C fn="D:\Sicherungen\DaSi Käthe\Dokumente und Einstellungen\Besitzer\Desktop\Music\Musik-Alben\Snow Patrol\Eyes Open\Tipp - anmelden und kostenlos mehr Musik downloaden.url"
sh=6D12B46D52384920F8ADA101D3837D99597F036C ft=1 fh=2793e31fc8ea11d3 vn="Variante von Win32/Toolbar.Softomate.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="D:\Sicherungen\DaSi Käthe\Programme\ICQToolbar\toolbaru.dll"
sh=167B238188F89A76AA7BA35C3803C860AEF812C1 ft=1 fh=381ab773aff00b77 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="D:\Softwarepool\Isobuster\isobuster28_all_lang.exe"
|
|
30.05.2016, 16:10
| #12 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 10: Chinesische Schadsoftware Wann hast Dir denn den Verschlüsselungstrojaner eingefangen? Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
30.05.2016, 17:34
| #13 |
| | Windows 10: Chinesische Schadsoftware Das einzige was ich noch merke ist das vorhandene Desktopsymbol, das sich nicht löschen lässt  Der Verschlüsselungstrojaner ist schon eine ganze Weile her. Ich wusste nicht, dass noch immer etwas davon übrig war.  Jedenfalls habe ich, ca. eine Stunde bevor ich mir den eingefangen hab, eine Datensicherung gemacht! Also Datenverlust = 0! |
|
31.05.2016, 17:53
| #14 | |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 10: Chinesische Schadsoftware Hi, Schritt 1  Die angehängte Datei in dieses Verzeichnis laden: Zitat:
Nach dem Reboot: Schritt 2 Bitte starte FRST erneut, und drücke auf Untersuchen. Bitte poste mir den Inhalt des Logs.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
31.05.2016, 18:36
| #15 |
| | Windows 10: Chinesische Schadsoftware Das Desktopsymbol ist weg  Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:29-05-2016 02 durchgeführt von Ariel (Administrator) auf ALPHAONE (31-05-2016 19:32:24) Gestartet von C:\Users\Ariel\Downloads Geladene Profile: Ariel (Verfügbare Profile: Ariel & UpdatusUser) Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Sanford, L.P.) C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\WinService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe (Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe (Sophos Limited) C:\Program Files (x86)\Common Files\Sophos\Web Intelligence\swi_fc.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe (Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Spotify Ltd) C:\Users\Ariel\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe () C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe () C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\A360Service.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] () HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] () HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498720 2016-04-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [WinampAgent] => "C:\Program Files (x86)\Winamp\winampa.exe" HKLM-x32\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [DLSService] => "C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe" HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation) HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files (x86)\Sophos\AutoUpdate\almon.exe [1531872 2016-04-15] (Sophos Limited) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [716224 2016-03-23] (Autodesk, Inc.) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020192 2014-06-25] (Wondershare) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Spotify Web Helper] => C:\Users\Ariel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-04-01] (Spotify Ltd) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\Ariel\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.) HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\...\RunOnce: [Uninstall C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ariel\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-18\...\Run: [EPSON Stylus Photo R1800] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATI9LA.EXE [211968 2007-01-12] (SEIKO EPSON CORPORATION) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.) AppInit_DLLs: C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll [231936 2016-04-15] (Sophos Limited) AppInit_DLLs-x32: C:\PROGRA~2\Sophos\SOPHOS~1\\SOPHOS~1.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\\sophos_detoured.dll [289040 2016-04-15] (Sophos Limited) AppInit_DLLs-x32: ,C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll [289040 2016-04-15] (Sophos Limited) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v2 Smart Wizard.lnk [2016-05-29] ShortcutTarget: NETGEAR WG111v2 Smart Wizard.lnk -> C:\Program Files (x86)\NETGEAR\WG111v2\WG111v2.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Spyder3Utility.lnk [2016-05-29] ShortcutTarget: Spyder3Utility.lnk -> C:\Program Files (x86)\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{38eaf853-75bf-4bf7-91de-847373b8bd69}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{5ae0ab0c-aeb1-47d0-a28c-2061da49df3b}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{8648d16e-4ddc-4775-b61b-569b01c87ecf}: [DhcpNameServer] 192.168.2.1 192.168.2.1 ManualProxies: Internet Explorer: ================== HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKU\S-1-5-21-2244333554-3036078685-3373813463-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-05] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-05] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated) FireFox: ======== FF ProfilePath: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\cf1typ6d.default FF Homepage: about:home FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [Keine Datei] FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @dymo.com/DymoLabelFramework -> C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll [2014-03-20] ( Sanford L.P.) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-05] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-12-19] (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-11-11] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-11-11] (NVIDIA Corporation) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems) FF Plugin HKU\S-1-5-21-2244333554-3036078685-3373813463-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ariel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-2244333554-3036078685-3373813463-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Extension: Flash and Video Download - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\cf1typ6d.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-05-26] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2016-05-12] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2016-04-23] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1231376 2016-03-23] (Autodesk Inc.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 DymoPnpService; C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [33072 2014-03-20] (Sanford, L.P.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation) R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Datei ist nicht signiert] R2 SAVAdminService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [311544 2016-04-15] (Sophos Limited) R2 SAVService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [285136 2016-04-15] (Sophos Limited) R2 SCM_Service; C:\Windows\SysWOW64\WinService.exe [186848 2010-05-10] () R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [604000 2016-04-15] (Sophos Limited) R2 Sophos Web Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [341800 2014-10-14] (Sophos Limited) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 swi_filter; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe [471520 2016-04-15] (Sophos Limited) R2 swi_service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3339736 2016-04-15] (Sophos Limited) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2014-05-27] (Google Inc) S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [20992 2014-05-27] (LG Electronics Inc.) S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2014-05-27] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2014-05-27] (LG Electronics Inc.) R1 EterlogicVirtualSerialDriver; C:\WINDOWS\system32\drivers\VSPE.sys [40928 2016-05-10] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-31] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] () S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert] R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) S3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3870464 2015-10-01] (Realtek Semiconductor Corporation ) R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [161024 2014-10-14] (Sophos Limited) S3 sdcfilter; C:\Windows\system32\DRIVERS\sdcfilter.sys [38144 2016-04-15] (Sophos Limited) S4 SophosBootDriver; C:\Windows\system32\DRIVERS\SophosBootDriver.sys [27904 2016-04-15] (Sophos Limited) S3 Spyder3; C:\Windows\System32\drivers\Spyder3.sys [15360 2010-03-30] () R1 swi_callout; C:\Windows\system32\DRIVERS\swi_callout.sys [32512 2015-04-16] (Sophos Limited) S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2015-10-30] (Microsoft Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-02] (Wondershare) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-31 19:23 - 2016-05-31 19:29 - 00010397 _____ C:\Users\Ariel\Downloads\Fixlog.txt 2016-05-31 19:23 - 2016-05-31 19:23 - 00000000 ____D C:\Users\Ariel\Downloads\FRST-OlderVersion 2016-05-31 19:12 - 2015-04-16 19:45 - 00032512 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\swi_callout.sys 2016-05-31 10:31 - 2016-01-18 17:51 - 00093299 _____ C:\Users\Ariel\Desktop\ariel.pdf 2016-05-30 23:06 - 2016-05-30 23:06 - 04072296 _____ C:\Users\Ariel\Desktop\13295445_523765754487706_1726981549_n.mp4 2016-05-30 14:50 - 2016-05-30 14:50 - 00464397 _____ C:\Users\Ariel\Desktop\Zeugnis GF.pdf 2016-05-29 23:21 - 2016-05-29 23:22 - 00000000 ____D C:\Users\Ariel\Desktop\Unwetter 2016-05-29 22:35 - 2016-05-29 22:35 - 00000000 ____D C:\Program Files (x86)\ESET 2016-05-29 22:34 - 2016-05-29 22:35 - 02870984 _____ (ESET) C:\Users\Ariel\Downloads\esetsmartinstaller_deu.exe 2016-05-29 22:12 - 2016-05-29 22:12 - 00001183 _____ C:\Users\Ariel\Desktop\mbam.txt 2016-05-29 21:36 - 2016-05-31 19:30 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-05-29 21:36 - 2016-05-29 22:20 - 00001169 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-05-29 21:36 - 2016-05-29 22:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-05-29 21:36 - 2016-05-29 21:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-05-29 21:36 - 2016-05-29 21:36 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-05-29 21:36 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-05-29 21:36 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-05-29 21:36 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-05-29 21:35 - 2016-05-29 21:35 - 22851472 _____ (Malwarebytes ) C:\Users\Ariel\Downloads\mbam-setup-2.2.1.1043.exe 2016-05-27 16:44 - 2016-05-27 16:44 - 00000000 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1) (1).exe.pp1zolw.partial 2016-05-27 16:43 - 2016-05-27 16:45 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1).exe 2016-05-27 16:43 - 2016-05-27 16:44 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1).exe.2oeomtf.partial 2016-05-27 16:43 - 2016-05-27 16:43 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118 (1).exe.6s35d7b.partial 2016-05-27 16:40 - 2016-05-27 16:43 - 03678272 _____ C:\Users\Ariel\Downloads\adwcleaner_5.118.exe 2016-05-26 20:42 - 2016-05-27 17:05 - 00000000 ____D C:\AdwCleaner 2016-05-26 19:20 - 2016-05-29 22:20 - 00049051 _____ C:\Users\Ariel\Downloads\Addition.txt 2016-05-26 19:19 - 2016-05-31 19:32 - 00024598 _____ C:\Users\Ariel\Downloads\FRST.txt 2016-05-26 19:19 - 2016-05-31 19:31 - 00000000 ____D C:\FRST 2016-05-26 19:19 - 2016-05-31 19:23 - 02383872 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe 2016-05-26 18:34 - 2016-05-26 18:34 - 00113964 _____ C:\Users\Ariel\Downloads\unlocker1.9.0-portable.zip 2016-05-26 18:22 - 2016-05-29 22:20 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-26 18:22 - 2016-05-29 22:20 - 00001214 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-26 18:22 - 2016-05-26 18:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-05-26 18:20 - 2016-05-26 18:20 - 00242320 _____ C:\Users\Ariel\Downloads\Firefox Setup Stub 46.0.1.exe 2016-05-26 17:43 - 2016-05-31 19:30 - 00000008 __RSH C:\Users\Ariel\ntuser.pol 2016-05-26 17:36 - 2016-05-26 17:36 - 00000000 ____D C:\WINDOWS\system32\SSL 2016-05-24 17:03 - 2016-05-24 17:03 - 00056322 _____ C:\Users\Ariel\Downloads\Table_bottom_mount_for_a_Kingston_memory_card_reader.zip 2016-05-24 17:03 - 2015-04-08 20:28 - 00034484 _____ C:\Users\Ariel\Desktop\card_reader_holder.stl 2016-05-24 16:51 - 2016-05-24 16:51 - 00000000 ____D C:\ProgramData\FLEXnet 2016-05-24 16:46 - 2016-05-23 08:29 - 00081151 _____ C:\Users\Ariel\Desktop\filament_holder_p01.stl 2016-05-24 16:45 - 2016-05-24 16:46 - 00055280 _____ C:\Users\Ariel\Downloads\Filament_holder_for_Dreamer_and_Creator_Pro.zip 2016-05-23 22:20 - 2016-05-23 22:21 - 00003478 _____ C:\Users\Ariel\Downloads\Swiss_Army_Knife_toothpick.zip 2016-05-22 17:49 - 2016-05-22 17:49 - 00473674 _____ C:\Users\Ariel\Downloads\20160404_backoefele_spargelkarte_web.pdf 2016-05-21 21:35 - 2016-05-21 21:35 - 00000197 ____H C:\Users\Ariel\Documents\Zeichnung1.dwl2 2016-05-21 21:35 - 2016-05-21 21:35 - 00000047 ____H C:\Users\Ariel\Documents\Zeichnung1.dwl 2016-05-21 17:13 - 2016-05-21 17:13 - 00002684 _____ C:\Users\Ariel\Documents\Zeichnung8.stl 2016-05-21 11:08 - 2016-05-21 11:16 - 00039084 _____ C:\Users\Ariel\Documents\Zeichnung7.stl 2016-05-21 10:37 - 2016-05-21 10:37 - 00004284 _____ C:\Users\Ariel\Desktop\Zeichnung4.stl 2016-05-20 20:22 - 2016-05-29 22:20 - 00001447 _____ C:\Users\Public\Desktop\Autodesk Desktop-App.lnk 2016-05-20 20:18 - 2016-05-29 22:20 - 00002044 _____ C:\Users\Public\Desktop\A360 Desktop.lnk 2016-05-20 20:09 - 2016-05-29 22:20 - 00002142 _____ C:\Users\Public\Desktop\Autodesk ReCap 360.lnk 2016-05-20 20:09 - 2016-05-20 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 360 2016-05-20 19:58 - 2016-05-29 22:20 - 00002101 _____ C:\Users\Public\Desktop\AutoCAD 2017 - Deutsch (German).lnk 2016-05-20 19:58 - 2016-05-24 16:51 - 00000000 ____D C:\Users\Ariel\AppData\Local\Autodesk 2016-05-20 19:58 - 2016-05-20 20:22 - 00000000 ____D C:\Program Files (x86)\Autodesk 2016-05-20 19:58 - 2016-05-20 19:58 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2016-05-20 19:58 - 2016-05-20 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 - Deutsch (German) 2016-05-20 19:57 - 2016-05-20 19:57 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared 2016-05-20 19:56 - 2016-05-20 19:56 - 00000000 ____D C:\Users\Ariel\Documents\Inventor Server SDK ACAD 2017 2016-05-20 19:54 - 2016-05-20 20:18 - 00000000 ____D C:\Program Files\Autodesk 2016-05-20 19:54 - 2016-05-20 19:57 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2016-05-20 19:32 - 2016-05-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2016-05-20 19:21 - 2016-05-24 16:51 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Autodesk 2016-05-20 19:21 - 2016-05-24 16:51 - 00000000 ____D C:\ProgramData\Autodesk 2016-05-20 19:16 - 2016-05-20 19:16 - 18698272 _____ C:\Users\Ariel\Downloads\AutoCAD_2017_German_Win_32_64bit_wi_de-DE_Setup.exe 2016-05-20 19:16 - 2016-05-20 19:16 - 00000000 ____D C:\Autodesk 2016-05-20 19:15 - 2016-05-20 19:15 - 00338256 _____ (Autodesk Inc.) C:\Users\Ariel\Downloads\AutoCAD_2017_German_Win_32_64bit_wi_de-DE_Setup_webinstall.exe 2016-05-20 19:12 - 2016-05-20 19:12 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Trimble Connect for SketchUp 2016-05-20 19:10 - 2016-05-20 19:10 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\SketchUp 2016-05-20 19:09 - 2016-05-20 19:09 - 00000000 ____D C:\ProgramData\Reprise 2016-05-20 19:08 - 2016-05-20 19:08 - 00000000 ____D C:\ProgramData\SketchUp 2016-05-17 17:41 - 2016-05-17 17:41 - 00300032 _____ C:\Users\Ariel\Downloads\6ZivilrechtlicheRechtsfolgenArt101Abs2AEUV.ppt 2016-05-14 09:39 - 2016-05-14 09:39 - 01047858 _____ C:\Users\Ariel\Downloads\Universal_CD-car_slot_PHONE_holder_mount._iPhone5_iPhone6_etc._Quick_change__.zip 2016-05-13 20:20 - 2016-05-13 20:20 - 12851868 _____ C:\Users\Ariel\Downloads\Air_Raid_Siren_-_hand_crank_version.zip 2016-05-12 22:12 - 2016-05-12 22:12 - 01595457 _____ C:\Users\Ariel\Downloads\All_Alphabet_Letters_A-Z.zip 2016-05-12 17:55 - 2016-05-12 17:59 - 01879017 _____ C:\Users\Ariel\Downloads\Echo__3_tone_whistle.zip 2016-05-12 17:10 - 2016-05-12 17:18 - 00235682 _____ C:\Users\Ariel\Desktop\Unbenannt.pdf 2016-05-10 22:52 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-05-10 22:52 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-05-10 22:52 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-05-10 22:52 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-05-10 22:52 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-05-10 22:52 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-05-10 22:52 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-05-10 22:52 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-05-10 22:52 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-05-10 22:52 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-05-10 22:52 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-05-10 22:52 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-05-10 22:52 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-05-10 22:52 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-05-10 22:52 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-05-10 22:52 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-05-10 22:52 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-05-10 22:52 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-05-10 22:52 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2016-05-10 22:52 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2016-05-10 22:52 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-05-10 22:52 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-05-10 22:52 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-05-10 22:52 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-05-10 22:52 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-05-10 22:52 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-05-10 22:52 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-05-10 22:52 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-05-10 22:52 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-05-10 22:52 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-05-10 22:52 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-05-10 22:52 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-05-10 22:52 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-05-10 22:52 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-05-10 22:52 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-05-10 22:52 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-05-10 22:52 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-05-10 22:52 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-05-10 22:52 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-05-10 22:52 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-05-10 22:52 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-05-10 22:52 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2016-05-10 22:52 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-05-10 22:52 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-05-10 22:52 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-05-10 22:52 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-05-10 22:52 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-05-10 22:52 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-05-10 22:52 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-05-10 22:52 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-05-10 22:52 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-05-10 22:52 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-05-10 22:52 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-05-10 22:52 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-05-10 22:52 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-05-10 22:52 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-05-10 22:52 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-05-10 22:52 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-05-10 22:52 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2016-05-10 22:51 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys 2016-05-10 22:51 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-05-10 22:51 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-05-10 22:51 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2016-05-10 22:51 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2016-05-10 22:51 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2016-05-10 22:51 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2016-05-10 22:51 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2016-05-10 22:51 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-05-10 22:51 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-05-10 22:51 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-05-10 22:51 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2016-05-10 22:51 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2016-05-10 22:51 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2016-05-10 22:51 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2016-05-10 22:51 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-05-10 22:51 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2016-05-10 22:51 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-05-10 22:51 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-05-10 22:51 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2016-05-10 22:51 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-05-10 22:51 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-05-10 22:51 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-05-10 22:51 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-05-10 22:51 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2016-05-10 22:51 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys 2016-05-10 22:51 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-05-10 22:51 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-05-10 22:51 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2016-05-10 22:51 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-05-10 22:51 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-05-10 22:51 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll 2016-05-10 22:51 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll 2016-05-10 22:51 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe 2016-05-10 22:51 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-05-10 22:51 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2016-05-10 22:51 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-05-10 22:51 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll 2016-05-10 22:51 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll 2016-05-10 22:51 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2016-05-10 22:51 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-05-10 22:51 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-05-10 22:51 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll 2016-05-10 22:51 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-05-10 22:51 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys 2016-05-10 22:51 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe 2016-05-10 22:51 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-05-10 22:51 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2016-05-10 22:51 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys 2016-05-10 22:51 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2016-05-10 22:51 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll 2016-05-10 22:51 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe 2016-05-10 22:51 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-05-10 22:51 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-05-10 22:51 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2016-05-10 22:51 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2016-05-10 22:51 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2016-05-10 22:51 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll 2016-05-10 22:51 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-05-10 22:51 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-05-10 22:51 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-05-10 22:51 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-05-10 22:51 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2016-05-10 22:51 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll 2016-05-10 22:51 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll 2016-05-10 22:51 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2016-05-10 22:51 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-05-10 22:51 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll 2016-05-10 22:51 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-05-10 22:51 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-05-10 22:51 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-05-10 22:51 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2016-05-10 22:51 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-05-10 22:51 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-05-10 22:51 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2016-05-10 22:51 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2016-05-10 22:51 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2016-05-10 22:51 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2016-05-10 22:51 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2016-05-10 22:51 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2016-05-10 22:51 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-05-10 22:51 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2016-05-10 22:51 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-05-10 22:51 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml 2016-05-10 22:51 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml 2016-05-10 21:57 - 2016-05-29 22:19 - 00002330 _____ C:\Users\Ariel\Desktop\VSPE.lnk 2016-05-10 21:57 - 2016-05-10 21:57 - 00040928 _____ C:\WINDOWS\system32\Drivers\VSPE.sys 2016-05-10 21:57 - 2016-05-10 21:57 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtual Serial Ports Emulator 2016-05-10 21:57 - 2016-05-10 21:57 - 00000000 ____D C:\Program Files (x86)\Eterlogic.com 2016-05-10 21:17 - 2016-05-10 21:25 - 00000000 ____D C:\Users\Ariel\AppData\Local\Arduino15 2016-05-10 21:17 - 2016-05-10 21:17 - 00000000 ____D C:\Users\Ariel\Documents\Arduino 2016-05-10 21:17 - 2016-05-10 21:17 - 00000000 ____D C:\Users\Ariel\.oracle_jre_usage 2016-05-10 20:46 - 2016-05-29 22:20 - 00001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk 2016-05-10 20:45 - 2016-05-10 20:46 - 00000000 ____D C:\Program Files (x86)\Arduino 2016-05-10 20:26 - 2016-05-10 20:26 - 02124768 _____ C:\Users\Ariel\Downloads\CDM21216_Setup.exe 2016-05-10 20:25 - 2016-05-10 20:26 - 01352960 _____ C:\Users\Ariel\Downloads\CDM v2.12.16 WHQL Certified.zip 2016-05-10 20:18 - 2016-05-10 20:18 - 00000000 ____D C:\Users\Ariel\AppData\Local\Simplify3D 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\ms-drivers 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\icsxml 2016-05-10 20:03 - 2016-05-10 20:03 - 00000000 __SHD C:\ProgramData\DIBsection 2016-05-10 20:02 - 2016-05-29 22:20 - 00001913 _____ C:\Users\Public\Desktop\Simplify3D.lnk 2016-05-10 20:02 - 2016-05-10 20:03 - 00000000 ____D C:\Program Files\Simplify3D-3.0.2 2016-05-10 20:02 - 2016-05-10 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Simplify3D Software 2016-05-02 23:00 - 2016-05-02 23:00 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\java 2016-05-02 22:54 - 2016-05-29 22:19 - 00002169 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Knuddels.lnk 2016-05-02 22:54 - 2016-05-29 22:19 - 00002139 _____ C:\Users\Ariel\Desktop\Knuddels.lnk 2016-05-02 22:53 - 2016-05-23 22:40 - 00000000 ____D C:\Users\Ariel\Knuddels-Stapp 2016-05-02 22:53 - 2016-05-02 22:53 - 01994832 _____ C:\Users\Ariel\Downloads\KnuddelsSetup.KC3PZ8J.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-05-31 19:30 - 2015-12-14 05:02 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-05-31 19:30 - 2015-12-14 04:54 - 00000000 ____D C:\Users\Ariel 2016-05-31 19:30 - 2015-12-14 04:53 - 00000000 ____D C:\ProgramData\NVIDIA 2016-05-31 19:30 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-05-31 19:30 - 2015-08-10 21:50 - 00000008 __RSH C:\ProgramData\ntuser.pol 2016-05-31 19:29 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-05-31 19:29 - 2012-12-05 14:32 - 00000000 ____D C:\Users\Ariel\Documents\Outlook-Dateien 2016-05-31 19:24 - 2015-11-29 13:45 - 00000000 ____D C:\Users\Ariel\AppData\LocalLow\Temp 2016-05-31 19:23 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-05-31 18:51 - 2013-10-22 20:22 - 00004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C8A17187-61BE-4023-AD7E-A979B4EEBD52} 2016-05-31 10:57 - 2015-10-30 20:35 - 00780072 _____ C:\WINDOWS\system32\perfh007.dat 2016-05-31 10:57 - 2015-10-30 20:35 - 00156884 _____ C:\WINDOWS\system32\perfc007.dat 2016-05-31 10:57 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-05-31 10:57 - 2015-08-10 21:52 - 01811252 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-05-31 10:30 - 2012-12-07 14:14 - 00000000 ____D C:\Users\Ariel\AppData\Local\Adobe 2016-05-30 18:35 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-05-29 22:20 - 2015-12-14 04:58 - 00001552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-05-29 22:20 - 2015-10-20 23:52 - 00002089 _____ C:\Users\Public\Desktop\Draeger UCF Series.lnk 2016-05-29 22:20 - 2015-08-23 17:53 - 00001816 _____ C:\Users\Public\Desktop\iTunes.lnk 2016-05-29 22:20 - 2015-01-27 13:44 - 00001312 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-05-29 22:20 - 2013-12-26 00:09 - 00002091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.3 64-Bit.lnk 2016-05-29 22:20 - 2013-06-30 17:58 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk 2016-05-29 22:20 - 2013-06-30 17:58 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk 2016-05-29 22:20 - 2013-06-30 17:58 - 00002126 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk 2016-05-29 22:20 - 2012-12-08 00:31 - 00001097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk 2016-05-29 22:20 - 2012-12-08 00:30 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-05-29 22:20 - 2012-12-07 19:22 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download Assistant.lnk 2016-05-29 22:20 - 2012-12-05 14:40 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-05-29 22:19 - 2015-10-20 16:09 - 00001597 _____ C:\Users\Ariel\Desktop\Backuptrans iPhone WhatsApp to Android Transfer (x64).lnk 2016-05-29 22:19 - 2015-10-20 00:22 - 00001335 _____ C:\Users\Ariel\Desktop\iPhone Backup Extractor.lnk 2016-05-29 22:19 - 2015-08-10 21:52 - 00002425 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-05-29 22:19 - 2015-01-11 12:51 - 00001837 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-29 22:19 - 2014-10-04 15:32 - 00002016 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\PokerStars.eu.lnk 2016-05-29 22:19 - 2014-08-08 21:07 - 00001132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite.Lnk 2016-05-29 22:19 - 2013-12-26 00:17 - 00003095 _____ C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlashGrabber.lnk 2016-05-29 22:06 - 2014-08-02 11:36 - 00000000 ____D C:\Users\Ariel\AppData\Local\Apps\2.0 2016-05-26 18:24 - 2012-12-04 23:45 - 00000000 ____D C:\Users\Ariel\AppData\Local\VirtualStore 2016-05-26 18:22 - 2013-12-26 00:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-05-26 17:43 - 2015-12-14 04:52 - 05056176 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-05-26 00:37 - 2014-12-26 15:52 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\FileAdvisor 2016-05-25 14:51 - 2014-12-25 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Type Advisor 2016-05-24 16:51 - 2013-02-23 15:53 - 00000000 ____D C:\ProgramData\boost_interprocess 2016-05-21 11:08 - 2015-11-08 11:12 - 00000000 ___RD C:\Users\Ariel\3D Objects 2016-05-20 19:56 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2016-05-20 19:50 - 2015-01-11 12:51 - 00000000 ____D C:\Users\Ariel\AppData\Local\Spotify 2016-05-20 19:49 - 2015-01-11 12:49 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Spotify 2016-05-20 19:29 - 2012-12-18 23:07 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-05-20 19:29 - 2012-12-18 22:36 - 00000000 ____D C:\Program Files (x86)\Steam 2016-05-20 19:28 - 2015-03-03 11:30 - 00000000 ____D C:\Users\Ariel\AppData\Roaming\DVDVideoSoft 2016-05-20 19:23 - 2013-12-07 21:51 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-19 22:38 - 2015-08-10 21:52 - 00000000 ___RD C:\Users\Ariel\OneDrive 2016-05-18 12:27 - 2016-04-17 08:57 - 00000000 ____D C:\Users\Ariel\Desktop\Magisterarbeit 2016-05-14 14:30 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-05-12 15:48 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-05-12 08:09 - 2015-06-24 22:12 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-05-12 07:57 - 2015-08-10 21:50 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-05-12 03:31 - 2015-10-30 20:47 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning 2016-05-12 03:31 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-05-12 03:30 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-11 16:38 - 2013-08-31 15:26 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-05-11 16:30 - 2012-12-12 22:41 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-05-04 17:58 - 2012-12-04 23:45 - 00000000 ____D C:\Users\Ariel\AppData\Local\Packages ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-16 14:30 - 2015-02-16 14:31 - 0044120 __RSH () C:\Program Files (x86)\DLS8Uninstall.log 2013-04-13 10:13 - 2013-04-13 10:13 - 0000000 _____ () C:\Users\Ariel\AppData\Roaming\.NANotifyHere 2014-03-18 19:35 - 2014-03-18 19:35 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen 2013-06-20 17:38 - 2015-12-18 13:51 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen 2013-01-20 20:15 - 2013-01-20 20:15 - 0000132 _____ () C:\Users\Ariel\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen 2012-12-24 15:13 - 2013-01-12 12:00 - 0000125 ___SH () C:\ProgramData\.zreglib 2015-12-14 04:52 - 2015-12-14 04:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2012-12-20 19:29 - 2015-03-19 15:06 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-23 11:06 ==================== Ende von FRST.txt ============================ |
|
| Themen zu Windows 10: Chinesische Schadsoftware |
| .dll, adobe, akamai, auslastung, bonjour, cpu, defender, desktop, dnsapi.dll, explorer, firefox, google, homepage, mozilla, netgear, prozesse, realtek, registry, rundll, scan, services.exe, software, svchost.exe, taskleiste, usb, windows, windowsapps |
dann auf 
und dann auf 
.
Linear-Darstellung
