Zitat von Kolki

Muss ich mir Sorgen machen, wenn ich so etwas finde?

Nein!

Zitat von Kolki

Eine weitere Frage. Ich sollte IObit Malware Fighter löschen, was ich auch getan habe.
Taugt das Programm nichts und wenn, was soll ich der Stelle nehmen.

Malwarebytes.
a) Stehen wir mit den Entwicklern und Experten dort in engem Kontakt
b) Ist das nicht schön was IOBit macht und sollte nicht unterstützt werden.

Zitat von Kolki

Z.Zt. habe ich nur den Defender und Malwarebytes.
Reicht das aus?

Ja.

Zitat von Kolki

DAnke.

Kolki

Bitte.

Schritt 1



Bitte starte FRST erneut, markiere auch die checkbox und drücke auf Untersuchen.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.

Hallo, hier die beiden log


frst
FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2016 01
durchgeführt von fairv (Administrator) auf DESKTOP-2C0EN9M (12-07-2016 10:35:32)
Gestartet von C:\Users\fairv\Downloads
Geladene Profile: fairv (Verfügbare Profile: fairv)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(IObit) D:\Utilities\IObit\Advanced SystemCare\ASCService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CHENGDU YIWO Tech Development Co., Ltd) D:\Programme\Todo Backup\bin\Agent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Samsung Electronics Co.,Ltd) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Samsung Electronics Co.,Ltd) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Samsung Electronics Co.,Ltd) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
() D:\Programme\Todo Backup\bin\TodoBackupService.exe
(Piriform Ltd) D:\Utilities\CCleander\CCleaner64.exe
() C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
() C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
(IObit) D:\Utilities\IObit\IObit Uninstaller\UninstallMonitor.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(IObit) D:\Utilities\IObit\Advanced SystemCare\ASCTray.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8822528 2016-06-20] (Realtek Semiconductor)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6560968 2016-05-15] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [615144 2016-03-09] (Samsung Electronics Co.,Ltd)
HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [112424 2013-06-18] ()
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\Run: [CCleaner Monitoring] => D:\Utilities\CCleander\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)
HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\MountPoints2: {46fa35c6-c05c-11e5-a969-d850e64cace3} - "E:\pushinst.exe" 
ShellExecuteHooks:  - {6710C780-E20E-4C49-A87D-321850ED3D7C} -  Keine Datei [ ]
ShellIconOverlayIdentifiers: [JzShlobj] -> {7B286609-DA97-47E1-AC6B-33B8B4732C95} =>  Keine Datei
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} =>  Keine Datei

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{5f3f3526-6eed-442b-8d93-4e7afd575033}: [DhcpNameServer] 192.168.2.1
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-1777370191-4236908100-620713025-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1777370191-4236908100-620713025-1001 -> {105778A4-8613-4C15-AC96-F846E54FA0A8} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1777370191-4236908100-620713025-1001 -> {856E95E0-EB48-4AD3-9AFA-A9873DCC7F51} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1777370191-4236908100-620713025-1001 -> {A39074A5-51AC-4BB9-9C3C-C93339C1E941} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1777370191-4236908100-620713025-1001 -> {A3FDF55E-AB85-4E7C-B867-D23F7E0A3384} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> D:\Utilities\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-05-17] (Microsoft Corporation)
BHO: Kein Name -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> Keine Datei
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-05-17] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-1777370191-4236908100-620713025-1001 -> hxxp://go.web.de/tb/ie_startpage

FireFox:
========
FF ProfilePath: C:\Users\fairv\AppData\Roaming\Mozilla\Firefox\Profiles\x20qhs71.default-1464427812539
FF NewTab: hxxp://www.baidu.com/
FF DefaultSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-17] ()
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-17] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-12-24] (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\fairv\AppData\Roaming\Mozilla\Firefox\Profiles\x20qhs71.default-1464427812539\extensions\adblockpopups@jessehakanen.net.xpi [2016-05-28]
FF Extension: EPUBReader - C:\Users\fairv\AppData\Roaming\Mozilla\Firefox\Profiles\x20qhs71.default-1464427812539\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2016-05-28]
FF Extension: Google Translator for Firefox - C:\Users\fairv\AppData\Roaming\Mozilla\Firefox\Profiles\x20qhs71.default-1464427812539\extensions\translator@zoli.bod.xpi [2016-06-03]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\fairv\AppData\Roaming\Mozilla\Firefox\Profiles\x20qhs71.default-1464427812539\extensions\artur.dubovoy@gmail.com [2016-07-04]
FF Extension: Theme Font & Size Changer - C:\Users\fairv\AppData\Roaming\Mozilla\Firefox\Profiles\x20qhs71.default-1464427812539\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2016-07-10]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdvancedSystemCareService9; D:\Utilities\IObit\Advanced SystemCare\ASCService.exe [446240 2016-01-05] (IObit)
R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [Datei ist nicht signiert]
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3009776 2016-05-27] (Microsoft Corporation)
S3 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [384512 2016-06-27] (Digital Wave Ltd.) [Datei ist nicht signiert]
S3 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138720 2014-08-12] (Portrait Displays, Inc.)
R2 EaseUS Agent; D:\Programme\Todo Backup\bin\Agent.exe [39616 2016-06-03] (CHENGDU YIWO Tech Development Co., Ltd)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-06-14] (IObit)
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [623848 2016-03-09] (Samsung Electronics Co.,Ltd)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S2 ziphost; c:\program files\ziptool\ziphost.dll [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [23240 2016-03-21] (Advanced Micro Devices, Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [101376 2016-05-16] (Advanced Micro Devices)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2014-11-21] (AVM Berlin)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2015-12-10] ()
S3 fwlanusb5_nv2; C:\Windows\system32\DRIVERS\fwlanusb5_nv2.sys [1322824 2014-11-21] (AVM GmbH)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-07-07] (REALiX(tm))
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185896 2016-05-11] (Intel Corporation)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2015-10-12] (Riverbed Technology, Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [936192 2016-06-20] (Realtek                                            )
R3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3870464 2015-10-01] (Realtek Semiconductor Corporation                           )
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42600 2016-04-10] (Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-12 10:35 - 2016-07-12 10:35 - 00012757 _____ C:\Users\fairv\Downloads\FRST.txt
2016-07-12 10:34 - 2016-07-12 10:35 - 00000000 ____D C:\FRST
2016-07-12 10:34 - 2016-07-12 10:34 - 02390528 _____ (Farbar) C:\Users\fairv\Downloads\FRST64.exe
2016-07-12 10:11 - 2016-07-12 10:11 - 00002994 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (fairv)
2016-07-11 14:17 - 2016-07-11 14:17 - 00001449 _____ C:\Users\fairv\Desktop\Samsung Link volker.baumann@twixy.com.lnk
2016-07-11 12:38 - 2016-07-11 12:38 - 00000000 ____D C:\Users\fairv\Samsung Link
2016-07-11 12:38 - 2016-07-11 12:38 - 00000000 ____D C:\Users\fairv\.swt
2016-07-11 12:38 - 2016-07-11 12:38 - 00000000 ____D C:\Upload
2016-07-11 12:38 - 2016-07-11 12:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-07-11 12:38 - 2016-07-11 12:38 - 00000000 ____D C:\Program Files\Samsung
2016-07-10 19:16 - 2016-07-10 19:19 - 00000000 ____D C:\ProgramData\HitmanPro
2016-07-10 19:14 - 2016-07-10 19:14 - 00002476 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_fairv
2016-07-10 19:14 - 2016-07-10 19:14 - 00000290 _____ C:\Windows\Tasks\Uninstaller_SkipUac_fairv.job
2016-07-09 21:30 - 2016-07-09 21:30 - 00004096 ___SH C:\{DCF29754-7368-4E55-9D42-BBE2F19CD501}.CBM
2016-07-09 21:25 - 2016-07-09 21:25 - 00456192 ___SH C:\EUMONBMP.SYS
2016-07-08 17:35 - 2016-07-08 17:35 - 00000000 ____D C:\Users\fairv\AppData\Local\Helios
2016-07-08 17:34 - 2016-07-09 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TextPad 8
2016-07-08 09:40 - 2016-07-08 09:40 - 00000000 ____D C:\ProgramData\BDLogging
2016-07-08 09:40 - 2016-03-31 17:54 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2016-07-08 09:40 - 2016-03-31 17:54 - 00155912 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2016-07-07 18:19 - 2016-07-07 18:21 - 00000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2016-07-07 18:18 - 2016-07-07 18:18 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-07-07 18:18 - 2016-07-07 18:18 - 00003350 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2016-07-07 18:13 - 2016-07-07 18:38 - 00000000 ____D C:\ProgramData\ProductData
2016-07-07 18:13 - 2016-07-07 18:20 - 00000000 ____D C:\Users\fairv\AppData\Roaming\ProductData
2016-07-05 17:08 - 2016-07-05 17:08 - 00001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-07-05 17:08 - 2016-07-05 17:08 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-07-04 19:46 - 2016-07-05 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-07-04 18:06 - 2016-07-04 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxthon Cloud Browser
2016-07-04 18:05 - 2016-06-30 12:29 - 48004712 _____ (Maxthon International ltd.) C:\Users\fairv\AppData\Roaming\mx4.9.3.1000.exe
2016-07-04 18:04 - 2016-07-04 18:04 - 00092872 _____ (WinMount International Inc) C:\Windows\system32\Drivers\KuaiZipDrive.sys
2016-07-04 18:01 - 2016-07-09 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB大师
2016-07-04 18:01 - 2016-07-05 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Compress
2016-07-04 18:01 - 2016-05-26 10:51 - 04761392 _____ () C:\Users\fairv\AppData\Roaming\usbboxlite_4001_o_8209_hn.exe
2016-07-04 18:01 - 2016-02-18 10:10 - 05267952 _____ () C:\Users\fairv\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-07-04 18:00 - 2016-07-04 22:44 - 00000000 ____D C:\Program Files (x86)\GreatMaker
2016-07-04 18:00 - 2016-07-01 11:19 - 08284704 _____ (深圳市伟创科技软件有限公司) C:\Users\fairv\AppData\Roaming\MaoHaWiFiSetup_263.exe
2016-07-04 17:57 - 2016-07-04 17:55 - 00001006 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-07-02 12:07 - 2016-07-02 12:07 - 00004374 _____ C:\Windows\diagwrn.xml
2016-07-02 12:07 - 2016-07-02 12:07 - 00002514 _____ C:\Windows\diagerr.xml
2016-06-29 23:05 - 2016-06-29 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-06-29 23:03 - 2016-06-29 23:03 - 00000000 ____D C:\Users\fairv\AppData\Local\Lavasoft
2016-06-29 23:03 - 2016-06-29 23:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2016-06-29 17:51 - 2016-07-04 18:26 - 00000896 _____ C:\Users\Public\Desktop\7thShare HD Video Converter.lnk
2016-06-29 17:51 - 2016-06-29 17:51 - 00000000 ____D C:\Users\fairv\AppData\Local\7thShare Studio
2016-06-29 17:51 - 2016-06-29 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7thShare Studio
2016-06-29 17:19 - 2016-06-29 17:19 - 00000000 ____D C:\ProgramData\Apowersoft
2016-06-29 17:19 - 2015-10-12 12:05 - 00036600 _____ (Riverbed Technology, Inc.) C:\Windows\system32\Drivers\npf.sys
2016-06-29 17:17 - 2016-07-02 12:45 - 00000000 ____D C:\Users\fairv\AppData\Local\Apowersoft
2016-06-29 16:13 - 2016-07-11 18:45 - 00000250 _____ C:\Windows\Tasks\ASC9_SkipUac_fairv.job
2016-06-29 16:13 - 2016-06-29 16:13 - 00002422 _____ C:\Windows\System32\Tasks\ASC9_SkipUac_fairv
2016-06-29 16:13 - 2016-06-29 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-06-29 15:56 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-06-29 15:56 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-29 15:56 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-06-29 12:43 - 2016-06-29 14:58 - 00000000 ____D C:\ProgramData\Freemake
2016-06-28 03:12 - 2016-06-28 03:12 - 00314434 ____N C:\Users\fairv\AppData\Roaming\EYapp.apk
2016-06-25 22:08 - 2016-06-25 22:08 - 00004096 ___SH C:\{DC.F29.754-7.368-4.E55-9D42-BBE2F19CD501}.CBM
2016-06-23 17:40 - 2016-07-02 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-06-23 17:40 - 2016-07-02 12:44 - 00000000 ____D C:\Users\fairv\AppData\Roaming\DVDVideoSoft
2016-06-20 16:02 - 2016-06-20 16:02 - 15202040 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 06402440 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 05085952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-06-20 16:02 - 2016-06-20 16:02 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 03199232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 03094704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 02725392 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 02477520 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 01847888 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 01435152 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 01336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 01023240 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00873472 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-06-20 16:02 - 2016-06-20 16:02 - 00582016 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00570096 _____ (Intel Corporation) C:\Windows\system32\tbb_waves.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00467168 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00450128 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00258864 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00221976 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00209544 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00088328 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00084624 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-06-20 16:02 - 2016-06-20 16:02 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-06-20 16:01 - 2016-06-20 16:02 - 05776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-06-20 16:01 - 2016-06-20 16:01 - 24399536 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRenderAVX64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 24310136 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRender64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 17359672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioCapture64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 12988344 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 05989809 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-06-20 16:01 - 2016-06-20 16:01 - 05593616 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 05339552 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-06-20 16:01 - 2016-06-20 16:01 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-06-20 16:01 - 2016-06-20 16:01 - 02825112 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 02050176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01469952 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys
2016-06-20 16:01 - 2016-06-20 16:01 - 01422928 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01186824 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01166160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00999864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00936192 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys
2016-06-20 16:01 - 2016-06-20 16:01 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00708320 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00678192 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00618184 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00310424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00253864 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00118600 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-06-20 16:01 - 2016-06-20 16:01 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-06-19 13:57 - 2016-06-14 20:33 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-19 13:57 - 2016-06-14 20:33 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-16 12:50 - 2016-07-08 16:38 - 00000000 ____D C:\Users\fairv\OneDrive\Documents\My Kindle Content
2016-06-16 12:50 - 2016-06-16 12:50 - 00000000 ____D C:\Users\fairv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2016-06-16 12:50 - 2016-06-16 12:50 - 00000000 ____D C:\Users\fairv\AppData\Local\Amazon
2016-06-16 12:50 - 2016-06-16 12:50 - 00000000 ____D C:\Program Files (x86)\Amazon
2016-06-14 22:14 - 2016-05-28 08:13 - 01401024 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-06-14 22:14 - 2016-05-28 08:13 - 00290496 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-06-14 22:14 - 2016-05-28 08:13 - 00092352 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-06-14 22:14 - 2016-05-28 08:13 - 00046784 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-06-14 22:14 - 2016-05-28 07:25 - 04268880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2016-06-14 22:14 - 2016-05-28 07:23 - 00388384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-14 22:14 - 2016-05-28 07:23 - 00312160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-14 22:14 - 2016-05-28 07:22 - 07474528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-06-14 22:14 - 2016-05-28 07:22 - 04387680 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-06-14 22:14 - 2016-05-28 07:22 - 00428896 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-06-14 22:14 - 2016-05-28 07:22 - 00211296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-06-14 22:14 - 2016-05-28 07:20 - 00430312 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-14 22:14 - 2016-05-28 07:18 - 00357216 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-14 22:14 - 2016-05-28 07:09 - 00501600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-06-14 22:14 - 2016-05-28 07:08 - 00693600 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-06-14 22:14 - 2016-05-28 07:07 - 03675512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-14 22:14 - 2016-05-28 07:07 - 02921880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-14 22:14 - 2016-05-28 07:07 - 01322248 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-06-14 22:14 - 2016-05-28 07:07 - 00957608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-06-14 22:14 - 2016-05-28 07:07 - 00808288 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-06-14 22:14 - 2016-05-28 07:07 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-06-14 22:14 - 2016-05-28 07:07 - 00331616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-06-14 22:14 - 2016-05-28 07:06 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-06-14 22:14 - 2016-05-28 07:06 - 04074160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-06-14 22:14 - 2016-05-28 07:06 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-06-14 22:14 - 2016-05-28 07:06 - 00303216 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-06-14 22:14 - 2016-05-28 07:06 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-06-14 22:14 - 2016-05-28 07:05 - 04515264 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-06-14 22:14 - 2016-05-28 07:04 - 00604928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-14 22:14 - 2016-05-28 07:04 - 00431296 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-14 22:14 - 2016-05-28 07:04 - 00161632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-14 22:14 - 2016-05-28 07:04 - 00111064 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-06-14 22:14 - 2016-05-28 07:04 - 00097096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-06-14 22:14 - 2016-05-28 06:58 - 01996640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-06-14 22:14 - 2016-05-28 06:58 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 02548944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 02195632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 01594416 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 01372312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 00649792 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 00636304 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-06-14 22:14 - 2016-05-28 06:57 - 00577376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-06-14 22:14 - 2016-05-28 06:57 - 00546456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-06-14 22:14 - 2016-05-28 06:57 - 00521664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-06-14 22:14 - 2016-05-28 06:57 - 00316256 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-14 22:14 - 2016-05-28 06:35 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2016-06-14 22:14 - 2016-05-28 06:35 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-06-14 22:14 - 2016-05-28 06:35 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsdport.sys
2016-06-14 22:14 - 2016-05-28 06:31 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdlrecover.exe
2016-06-14 22:14 - 2016-05-28 06:31 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-06-14 22:14 - 2016-05-28 06:29 - 22379008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-06-14 22:14 - 2016-05-28 06:29 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-14 22:14 - 2016-05-28 06:28 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-14 22:14 - 2016-05-28 06:27 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2016-06-14 22:14 - 2016-05-28 06:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-06-14 22:14 - 2016-05-28 06:26 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2016-06-14 22:14 - 2016-05-28 06:26 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-06-14 22:14 - 2016-05-28 06:26 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-06-14 22:14 - 2016-05-28 06:25 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-14 22:14 - 2016-05-28 06:24 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-14 22:14 - 2016-05-28 06:24 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-06-14 22:14 - 2016-05-28 06:22 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-06-14 22:14 - 2016-05-28 06:22 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 22:14 - 2016-05-28 06:22 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-06-14 22:14 - 2016-05-28 06:22 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2016-06-14 22:14 - 2016-05-28 06:22 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-06-14 22:14 - 2016-05-28 06:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-06-14 22:14 - 2016-05-28 06:21 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\BrokerLib.dll
2016-06-14 22:14 - 2016-05-28 06:21 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-06-14 22:14 - 2016-05-28 06:20 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-06-14 22:14 - 2016-05-28 06:20 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-14 22:14 - 2016-05-28 06:19 - 24605696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-14 22:14 - 2016-05-28 06:19 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 11545088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 07977472 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 00678912 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 00610816 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-14 22:14 - 2016-05-28 06:18 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-06-14 22:14 - 2016-05-28 06:18 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-06-14 22:14 - 2016-05-28 06:17 - 09918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-06-14 22:14 - 2016-05-28 06:17 - 00963072 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-06-14 22:14 - 2016-05-28 06:17 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2016-06-14 22:14 - 2016-05-28 06:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2016-06-14 22:14 - 2016-05-28 06:16 - 19344384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-14 22:14 - 2016-05-28 06:16 - 00690176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-14 22:14 - 2016-05-28 06:16 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-14 22:14 - 2016-05-28 06:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2016-06-14 22:14 - 2016-05-28 06:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-06-14 22:14 - 2016-05-28 06:16 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-14 22:14 - 2016-05-28 06:15 - 01056256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-06-14 22:14 - 2016-05-28 06:15 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-06-14 22:14 - 2016-05-28 06:15 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-14 22:14 - 2016-05-28 06:15 - 00579072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-14 22:14 - 2016-05-28 06:15 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-06-14 22:14 - 2016-05-28 06:15 - 00349696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-06-14 22:14 - 2016-05-28 06:15 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-14 22:14 - 2016-05-28 06:14 - 18674176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-06-14 22:14 - 2016-05-28 06:14 - 01716736 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-06-14 22:14 - 2016-05-28 06:14 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-06-14 22:14 - 2016-05-28 06:14 - 00965632 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-06-14 22:14 - 2016-05-28 06:14 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-14 22:14 - 2016-05-28 06:14 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-14 22:14 - 2016-05-28 06:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2016-06-14 22:14 - 2016-05-28 06:13 - 00990208 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-06-14 22:14 - 2016-05-28 06:13 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-06-14 22:14 - 2016-05-28 06:13 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-06-14 22:14 - 2016-05-28 06:13 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-06-14 22:14 - 2016-05-28 06:13 - 00467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2016-06-14 22:14 - 2016-05-28 06:12 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-06-14 22:14 - 2016-05-28 06:12 - 00614400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-14 22:14 - 2016-05-28 06:12 - 00521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-14 22:14 - 2016-05-28 06:11 - 01445888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRHInproc.dll
2016-06-14 22:14 - 2016-05-28 06:11 - 00890368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-06-14 22:14 - 2016-05-28 06:11 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-06-14 22:14 - 2016-05-28 06:11 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-06-14 22:14 - 2016-05-28 06:11 - 00687616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-14 22:14 - 2016-05-28 06:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-14 22:14 - 2016-05-28 06:09 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-06-14 22:14 - 2016-05-28 06:08 - 13385728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-14 22:14 - 2016-05-28 06:08 - 06295552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-06-14 22:14 - 2016-05-28 06:06 - 12128256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-14 22:14 - 2016-05-28 06:06 - 07200256 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-06-14 22:14 - 2016-05-28 06:06 - 01339904 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-14 22:14 - 2016-05-28 06:05 - 03994624 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-06-14 22:14 - 2016-05-28 06:05 - 03664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-14 22:14 - 2016-05-28 06:05 - 02582016 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-06-14 22:14 - 2016-05-28 06:05 - 01797120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-06-14 22:14 - 2016-05-28 06:04 - 06973952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-14 22:14 - 2016-05-28 06:03 - 05323776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-14 22:14 - 2016-05-28 06:03 - 05205504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-06-14 22:14 - 2016-05-28 06:03 - 02609664 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-06-14 22:14 - 2016-05-28 06:03 - 01185280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationFramework.dll
2016-06-14 22:14 - 2016-05-28 06:03 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-06-14 22:14 - 2016-05-28 06:02 - 03590144 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-06-14 22:14 - 2016-05-28 06:02 - 02061824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-06-14 22:14 - 2016-05-28 06:02 - 01534464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-06-14 22:14 - 2016-05-28 06:01 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-06-14 22:14 - 2016-05-28 06:01 - 01582080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-06-14 22:14 - 2016-05-28 06:01 - 01500160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 03585536 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 02635776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 02230272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 01707520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2016-06-14 22:14 - 2016-05-28 06:00 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-06-14 22:14 - 2016-05-28 05:58 - 07832576 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-06-14 22:14 - 2016-05-28 05:58 - 04896256 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-14 22:14 - 2016-05-28 05:58 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-14 22:14 - 2016-05-28 05:58 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-06-14 22:14 - 2016-05-28 05:58 - 01996288 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-06-14 22:14 - 2016-05-28 05:57 - 02281472 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-06-14 22:14 - 2016-05-28 05:55 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-06-14 22:13 - 2016-05-28 08:13 - 01184960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-06-14 22:13 - 2016-05-28 08:13 - 00514752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-06-14 22:13 - 2016-05-28 07:22 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-06-14 22:13 - 2016-05-28 07:16 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-06-14 22:13 - 2016-05-28 07:09 - 00170848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.exe
2016-06-14 22:13 - 2016-05-28 07:09 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-06-14 22:13 - 2016-05-28 07:08 - 00258912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufx01000.sys
2016-06-14 22:13 - 2016-05-28 07:08 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-06-14 22:13 - 2016-05-28 07:04 - 00360480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-14 22:13 - 2016-05-28 07:03 - 00131248 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-14 22:13 - 2016-05-28 06:31 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-06-14 22:13 - 2016-05-28 06:29 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2016-06-14 22:13 - 2016-05-28 06:29 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\httpprxp.dll
2016-06-14 22:13 - 2016-05-28 06:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-06-14 22:13 - 2016-05-28 06:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-14 22:13 - 2016-05-28 06:26 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-06-14 22:13 - 2016-05-28 06:26 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-06-14 22:13 - 2016-05-28 06:25 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-14 22:13 - 2016-05-28 06:24 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-06-14 22:13 - 2016-05-28 06:24 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Ndu.sys
2016-06-14 22:13 - 2016-05-28 06:24 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-06-14 22:13 - 2016-05-28 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-06-14 22:13 - 2016-05-28 06:24 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-06-14 22:13 - 2016-05-28 06:24 - 00053760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-14 22:13 - 2016-05-28 06:23 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-06-14 22:13 - 2016-05-28 06:23 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2016-06-14 22:13 - 2016-05-28 06:22 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-06-14 22:13 - 2016-05-28 06:22 - 00161280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-06-14 22:13 - 2016-05-28 06:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-06-14 22:13 - 2016-05-28 06:21 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-06-14 22:13 - 2016-05-28 06:21 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-06-14 22:13 - 2016-05-28 06:21 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-14 22:13 - 2016-05-28 06:20 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-06-14 22:13 - 2016-05-28 06:20 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-06-14 22:13 - 2016-05-28 06:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\GnssAdapter.dll
2016-06-14 22:13 - 2016-05-28 06:20 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Privacy.dll
2016-06-14 22:13 - 2016-05-28 06:20 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-06-14 22:13 - 2016-05-28 06:19 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-06-14 22:13 - 2016-05-28 06:19 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-06-14 22:13 - 2016-05-28 06:19 - 00355840 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2016-06-14 22:13 - 2016-05-28 06:19 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2016-06-14 22:13 - 2016-05-28 06:17 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2016-06-14 22:13 - 2016-05-28 06:17 - 00415232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-06-14 22:13 - 2016-05-28 06:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-06-14 22:13 - 2016-05-28 06:17 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-06-14 22:13 - 2016-05-28 06:16 - 00291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-14 22:13 - 2016-05-28 06:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-06-14 22:13 - 2016-05-28 06:15 - 00293888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2016-06-14 22:13 - 2016-05-28 06:14 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-06-14 22:13 - 2016-05-28 06:14 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2016-06-14 22:13 - 2016-05-28 06:13 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-06-14 22:13 - 2016-05-28 06:11 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-06-14 22:13 - 2016-05-28 06:11 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2016-06-14 22:13 - 2016-05-28 06:04 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2016-06-14 22:13 - 2016-05-28 06:04 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncController.dll
2016-06-14 22:13 - 2016-05-28 06:03 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll
2016-06-14 22:13 - 2016-05-28 06:02 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-06-14 22:13 - 2016-05-28 06:01 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-06-14 22:13 - 2016-05-28 06:00 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-06-14 22:13 - 2016-05-28 06:00 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-06-14 22:13 - 2016-05-28 05:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-06-14 22:13 - 2016-05-28 05:53 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-12 10:31 - 2015-11-24 17:39 - 00000000 ____D C:\Users\fairv\AppData\Roaming\FileZilla
2016-07-12 10:15 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2016-07-12 10:10 - 2015-12-27 14:03 - 00004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B332148B-8BDB-4537-AB85-07DF113C6002}
2016-07-11 22:51 - 2015-12-07 19:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-11 22:25 - 2015-11-23 23:39 - 00000000 ____D C:\Users\fairv\AppData\Roaming\IObit
2016-07-11 16:29 - 2015-11-23 23:31 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-11 16:13 - 2015-11-23 14:24 - 00000000 ____D C:\Users\fairv
2016-07-11 16:02 - 2015-11-23 14:28 - 01799166 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-11 16:02 - 2015-10-30 20:35 - 00775524 _____ C:\Windows\system32\perfh007.dat
2016-07-11 16:02 - 2015-10-30 20:35 - 00155338 _____ C:\Windows\system32\perfc007.dat
2016-07-11 16:02 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2016-07-11 12:38 - 2016-01-06 15:58 - 00000000 ____D C:\Users\fairv\AppData\Roaming\Samsung
2016-07-11 12:38 - 2015-11-26 20:17 - 00000000 ____D C:\ProgramData\Samsung
2016-07-11 12:10 - 2015-12-30 13:04 - 00000000 ____D C:\Users\MSSQL$GBELECTRONICS12
2016-07-11 12:06 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-11 12:02 - 2015-11-23 14:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-11 12:02 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\NDF
2016-07-10 22:43 - 2015-11-24 20:20 - 00000000 ____D C:\Users\fairv\OneDrive\Documents\Outlook-Dateien
2016-07-10 11:34 - 2015-10-30 08:28 - 01572864 ___SH C:\Windows\system32\config\BBI
2016-07-09 21:25 - 2015-11-26 18:04 - 00000000 ____D C:\Windows\system32\config\regsave
2016-07-09 18:38 - 2015-11-23 15:51 - 00000000 ____D C:\Users\fairv\AppData\Local\Microsoft Help
2016-07-09 12:18 - 2015-11-23 14:25 - 00000000 ____D C:\Users\fairv\AppData\Local\Packages
2016-07-08 15:53 - 2016-01-10 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2016-07-07 18:18 - 2016-05-11 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-07-07 18:18 - 2015-11-23 23:39 - 00000000 ____D C:\ProgramData\IObit
2016-07-07 02:39 - 2015-11-23 16:33 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-05 18:42 - 2016-05-05 12:21 - 00000831 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atlantis Word Processor.lnk
2016-07-04 22:33 - 2015-10-30 20:47 - 00000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2016-07-04 18:26 - 2016-04-28 23:01 - 00000794 _____ C:\Users\Public\Desktop\MAGIX Video deluxe 2016 Premium.lnk
2016-07-04 18:26 - 2016-04-18 10:07 - 00001292 _____ C:\Users\fairv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings.lnk
2016-07-04 18:26 - 2016-01-03 12:13 - 00000883 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 9.2 .lnk
2016-07-04 18:26 - 2015-11-25 17:02 - 00002006 _____ C:\Users\Public\Desktop\Display Pilot.lnk
2016-07-04 18:26 - 2015-11-23 14:27 - 00002383 _____ C:\Users\fairv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-07-04 18:17 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\PrintDialog
2016-07-03 23:05 - 2015-11-23 15:30 - 00000000 ____D C:\AMD
2016-07-02 18:38 - 2016-01-03 12:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup Free 9.2
2016-07-02 16:58 - 2015-11-23 14:20 - 00618792 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-02 12:07 - 2015-11-23 14:19 - 00000000 ____D C:\Windows\Panther
2016-07-01 15:32 - 2015-11-24 00:00 - 00000000 ____D C:\Users\fairv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-07-01 15:32 - 2015-11-24 00:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-07-01 15:03 - 2016-06-08 16:25 - 00000000 ____D C:\Users\fairv\OneDrive\Documents\MAGIX_MusicEditor
2016-06-29 23:05 - 2015-11-23 23:36 - 00002864 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-06-29 22:23 - 2015-11-24 17:39 - 00000000 ____D C:\Users\fairv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2016-06-29 16:13 - 2016-05-31 22:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-06-29 16:12 - 2015-11-23 23:39 - 00000000 ____D C:\Program Files (x86)\IObit
2016-06-29 16:02 - 2016-02-02 19:43 - 00000000 ____D C:\Users\fairv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2016-06-29 15:56 - 2015-11-23 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-06-29 15:49 - 2016-06-03 22:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AllDup
2016-06-29 15:49 - 2015-11-23 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-06-29 15:49 - 2015-11-23 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SterJo Key Finder
2016-06-25 11:25 - 2016-04-04 09:59 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-06-25 11:25 - 2015-11-23 15:31 - 00000000 ____D C:\Program Files\AMD
2016-06-23 19:05 - 2015-11-23 23:46 - 00000000 ____D C:\Users\fairv\AppData\Roaming\vlc
2016-06-22 14:24 - 2015-12-22 18:57 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-06-22 14:24 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-06-20 16:02 - 2016-02-02 11:05 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-06-20 16:02 - 2016-02-02 11:05 - 00000000 ____D C:\Windows\system32\DAX2
2016-06-19 14:09 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\rescache
2016-06-19 13:57 - 2016-01-29 16:39 - 00000000 ____D C:\Windows\CbsTemp
2016-06-15 23:04 - 2015-11-23 14:25 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-15 23:03 - 2015-10-30 09:24 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-06-15 23:03 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-06-15 23:03 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\bcastdvr
2016-06-15 13:21 - 2015-12-10 23:06 - 00000000 ____D C:\Windows\system32\MRT
2016-06-15 13:17 - 2015-12-10 23:06 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-14 18:59 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\LiveKernelReports

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-08-28 22:43 - 2010-08-28 22:43 - 0096256 ____N (Google, inc) C:\Users\fairv\AppData\Roaming\AdbWinApi.dll
2010-08-28 22:43 - 2010-08-28 22:43 - 0060928 ____N (Google, inc) C:\Users\fairv\AppData\Roaming\AdbWinUsbApi.dll
2016-06-28 03:12 - 2016-06-28 03:12 - 0314434 ____N () C:\Users\fairv\AppData\Roaming\EYapp.apk
2015-11-26 16:18 - 2015-11-26 16:24 - 0000115 _____ () C:\Users\fairv\AppData\Roaming\LogFile.txt
2016-07-04 18:00 - 2016-07-01 11:19 - 8284704 _____ (深圳市伟创科技软件有限公司) C:\Users\fairv\AppData\Roaming\MaoHaWiFiSetup_263.exe
2016-07-04 18:05 - 2016-06-30 12:29 - 48004712 _____ (Maxthon International ltd.) C:\Users\fairv\AppData\Roaming\mx4.9.3.1000.exe
2016-07-04 18:01 - 2016-05-26 10:51 - 4761392 _____ () C:\Users\fairv\AppData\Roaming\usbboxlite_4001_o_8209_hn.exe
2016-07-04 18:01 - 2016-02-18 10:10 - 5267952 _____ () C:\Users\fairv\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-05-09 15:34 - 2016-05-09 15:34 - 0000824 _____ () C:\Users\fairv\AppData\Local\recently-used.xbel
2016-02-02 11:05 - 2016-02-02 11:05 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-01-04 17:30 - 2016-01-04 17:30 - 0000076 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-02-28 19:58 - 2016-02-28 19:58 - 0010218 _____ () C:\ProgramData\regid.2015-05.exe.textpad_83F5EF12-C2F9-4C11-A5C5-57A7B2D7AD25.swidtag

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-07-04 19:45

==================== Ende von FRST.txt ============================
         

--- --- ---

Addition LogFRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 10-07-2016 01
durchgeführt von fairv (2016-07-12 10:35:51)
Gestartet von C:\Users\fairv\Downloads
Windows 10 Pro Version 1511 (X64) (2015-11-23 12:24:16)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1777370191-4236908100-620713025-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1777370191-4236908100-620713025-503 - Limited - Disabled)
fairv (S-1-5-21-1777370191-4236908100-620713025-1001 - Administrator - Enabled) => C:\Users\fairv
Gast (S-1-5-21-1777370191-4236908100-620713025-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7thShare HD Video Converter Version 3.2 (HKLM-x32\...\7thShare HD Video Converter_is1) (Version: 3.2 - 7thShare Studio)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Advanced SystemCare 9 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 9.3.0 - IObit)
AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: 1.16.0.44025 - Amazon)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Atlantis Word Processor (HKLM-x32\...\Atlantis Word Processor) (Version:  - )
calibre 64bit (HKLM\...\{9152084E-DEE6-4908-93D0-DC2227FEACB5}) (Version: 2.62.0 - Kovid Goyal)
Catalyst Control Center Next Localization BR (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0515.2148.37409 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
Display Pilot (HKLM-x32\...\{6DD25D67-4339-47A1-950E-EEFC321CBB24}) (Version: 2.22.013 - Portrait Displays, Inc.)
Driver Booster 3.4 (HKLM-x32\...\Driver Booster_is1) (Version: 3.4 - IObit)
EaseUS Todo Backup Free 9.2  (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 9.2 - CHENGDU YIWO Tech Development Co., Ltd)
FileZilla Client 3.19.0 (HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\FileZilla Client) (Version: 3.19.0 - Tim Kosse)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.3.0.142 - IObit)
Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{B7802BC1-5F76-48D2-A622-98195BD50B87}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2016 Premium (HKLM\...\MX.{B9D9D873-ADDA-4D0C-B691-0F323C6DD62A}) (Version: 15.0.0.62 - MAGIX Software GmbH)
MAGIX Video deluxe 2016 Premium (Version: 15.0.0.62 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2016 Premium Update (Version: 15.0.0.102 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2016 Premium Update (Version: 15.0.0.90 - MAGIX Software GmbH) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Merger (HKLM-x32\...\Merger_is1) (Version:  - SoftSnow)
Microsoft Access database engine 2010 (English) (HKLM\...\{90140000-00D1-0409-1000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional 2013 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 15.0.4833.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mobipocket Reader 6.2 (HKLM-x32\...\{342126E1-173C-4585-BFBE-3EBDD20E3E9E}) (Version: 6.2.608 - Mobipocket.com)
Mozilla Firefox 47.0.1 (x64 de) (HKLM\...\Mozilla Firefox 47.0.1 (x64 de)) (Version: 47.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4833.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4833.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4833.1001 - Microsoft Corporation) Hidden
PDF-XChange Editor (HKLM\...\{3D1987D7-5A88-4DDA-9D29-6977AE2BDBD0}) (Version: 5.5.316.1 - Tracker Software Products (Canada) Ltd.)
Pivot Pro Plugin (x32 Version: 9.61.004 - Portrait Displays, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7829 - Realtek Semiconductor Corp.)
Samsung Link 2.0.0.1603091618 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1603091618 - Samsung Electronics Co.,Ltd)
SDK (x32 Version: 2.40.012 - Portrait Displays, Inc.) Hidden
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.3 - IObit)
TextPad 8 (HKLM\...\{861AB1C1-1967-4C4A-BF86-C255E2D2B8FD}) (Version: 8.0.2 - Helios)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.52a - Ghisler Software GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.0 (HKLM\...\VulkanRT1.0.11.0) (Version: 1.0.11.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1) (Version: 1.0.3.1 - LunarG, Inc.)
Web Companion (HKLM-x32\...\{85650803-c545-4554-9286-f2f8e7fcdf82}) (Version: 2.3.1439.2793 - Lavasoft)
WinRAR 5.40 Beta 2 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.2 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1777370191-4236908100-620713025-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\fairv\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {401666CF-B523-4361-8BA8-FD584844926A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-06-15] (Microsoft Corporation)
Task: {434920BF-41DB-4142-BA4D-9A939D60AB25} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {514FF015-337C-4E06-8321-A949C603FE3A} - \{790F0547-057A-0D0F-0A11-7D040408110A} -> Keine Datei <==== ACHTUNG
Task: {5EF3F36E-89DE-48C0-B5AD-EF2E406ABCE4} - System32\Tasks\Driver Booster SkipUAC (fairv) => D:\Utilities\Driver Booster\DriverBooster.exe [2016-05-23] (IObit)
Task: {80CF3718-05FD-4D3A-AE4A-CE897F0628E9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-04-12] (Microsoft Corporation)
Task: {B3B6E3C6-18BF-4D0D-A582-296CDBB94F4C} - System32\Tasks\CCleanerSkipUAC => D:\Utilities\CCleander\CCleaner.exe [2016-06-10] (Piriform Ltd)
Task: {B4427318-CC84-4B43-B787-DF6D126C164B} - System32\Tasks\Uninstaller_SkipUac_fairv => D:\Utilities\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-05-12] (IObit)
Task: {D71DB9C8-245E-4081-9B30-F26FA9A899B9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-04-12] (Microsoft Corporation)
Task: {E408DD69-BFA2-4EEB-90B4-0ADEDFA66F6A} - System32\Tasks\Driver Booster Scheduler => D:\Utilities\Driver Booster\Scheduler.exe [2016-05-18] (IObit)
Task: {E7419346-1D90-4E8C-85AD-09C8EDD14244} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-17] (Adobe Systems Incorporated)
Task: {F9D625C1-2735-4B47-9C0F-4F8D79B6C3DD} - System32\Tasks\ASC9_SkipUac_fairv => D:\Utilities\IObit\Advanced SystemCare\ASC.exe [2016-05-16] (IObit)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ASC9_SkipUac_fairv.job => D:\Utilities\IObit\Advanced SystemCare\ASC.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_fairv.job => D:\Utilities\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-09-18 01:42 - 2015-09-18 01:42 - 00031256 _____ () C:\Windows\System32\us006lm.dll
2015-11-26 00:39 - 2015-11-26 00:39 - 00031256 _____ () C:\Windows\System32\us007lm.dll
2016-06-22 14:23 - 2016-04-19 19:26 - 00114888 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-11-23 15:37 - 2013-07-04 04:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-07-11 12:38 - 2016-03-09 17:18 - 00025088 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2016-07-11 12:38 - 2016-03-09 17:18 - 02513920 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2016-07-11 12:38 - 2016-03-09 17:18 - 02436096 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2013-12-21 11:25 - 2013-12-21 11:25 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll
2013-12-21 11:26 - 2013-12-21 11:26 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll
2013-12-21 11:27 - 2013-12-21 11:27 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll
2013-10-22 09:52 - 2013-10-22 09:52 - 00030720 _____ () C:\Windows\SYSTEM32\MediaDB64.dll
2013-10-22 09:52 - 2013-10-22 09:52 - 00908800 _____ () C:\Windows\SYSTEM32\ContentDirectoryPresenter64.dll
2013-12-21 11:27 - 2013-12-21 11:27 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00049152 _____ () C:\Windows\SYSTEM32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00016896 _____ () C:\Windows\SYSTEM32\boost_system-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00058880 _____ () C:\Windows\SYSTEM32\boost_thread-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 00299520 _____ () C:\Windows\SYSTEM32\boost_serialization-vc90-mt-1_47.dll
2016-07-11 12:38 - 2016-07-11 12:38 - 00669696 _____ () C:\Windows\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll
2016-07-11 12:38 - 2016-03-09 17:18 - 00049664 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll
2016-07-11 12:38 - 2016-03-09 17:18 - 00499712 _____ () C:\Program Files\Samsung\Samsung Link\utils\MetaExtractorDLL.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-04-13 19:25 - 2016-03-29 12:20 - 02656952 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-04-13 19:25 - 2016-03-29 12:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-06-27 17:22 - 2016-06-27 17:22 - 00052912 _____ () D:\Programme\FileZilla FTP Client\fzshellext_64.dll
2015-12-17 23:20 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-10 22:23 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-06-14 22:14 - 2016-05-28 05:59 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-06-14 22:14 - 2016-05-28 05:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-06-14 22:14 - 2016-05-28 05:54 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-06-14 22:14 - 2016-05-28 05:56 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-01-03 12:12 - 2016-06-03 06:15 - 00278720 _____ () D:\Programme\Todo Backup\bin\TodoBackupService.exe
2016-06-10 17:22 - 2016-06-10 17:22 - 00061440 _____ () D:\Utilities\CCleander\lang\lang-1031.dll
2015-11-25 17:02 - 2013-06-18 13:26 - 00677160 _____ () C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpctrl.exe
2015-11-25 17:02 - 2013-06-18 13:26 - 00714024 _____ () C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\floater.exe
2016-04-19 16:41 - 2016-04-19 16:41 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-01-03 12:12 - 2015-12-10 07:04 - 00080936 _____ () D:\Programme\Todo Backup\bin\CodeLog.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00017448 _____ () D:\Programme\Todo Backup\bin\CompressFile.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00088616 _____ () D:\Programme\Todo Backup\bin\TBGetRemoteNetInfo.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 01296424 _____ () D:\Programme\Todo Backup\bin\libxml2.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00060968 _____ () D:\Programme\Todo Backup\bin\zlib1.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00024768 _____ () D:\Programme\Todo Backup\bin\CmcTbProxy.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00188608 _____ () D:\Programme\Todo Backup\bin\CMCPipeCenter.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00173760 _____ () D:\Programme\Todo Backup\bin\CMCAdapt.dll
2016-01-03 12:12 - 2016-06-03 06:13 - 00056512 _____ () D:\Programme\Todo Backup\bin\TBInfo.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00018112 _____ () D:\Programme\Todo Backup\bin\CMCNetTokenProxy.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00128192 _____ () D:\Programme\Todo Backup\bin\ActivationOnline.dll
2016-01-03 12:12 - 2016-06-03 06:13 - 00085184 _____ () D:\Programme\Todo Backup\bin\logsys.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00030760 _____ () D:\Programme\Todo Backup\bin\DiskSearchImg.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00068136 _____ () D:\Programme\Todo Backup\bin\MountImg.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00158248 _____ () D:\Programme\Todo Backup\bin\ImgFile.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00281128 _____ () D:\Programme\Todo Backup\bin\DsImgFile.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00072232 _____ () D:\Programme\Todo Backup\bin\CheckImg.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00139816 _____ () D:\Programme\Todo Backup\bin\vhdvmdk.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00040128 _____ () D:\Programme\Todo Backup\bin\BootDriver.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00769064 _____ () D:\Programme\Todo Backup\bin\ExImage.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00193064 _____ () D:\Programme\Todo Backup\bin\EmailBackupSize.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00443944 _____ () D:\Programme\Todo Backup\bin\AndroidImage.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00148008 _____ () D:\Programme\Todo Backup\bin\EnumDisk.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00076840 _____ () D:\Programme\Todo Backup\bin\FatLib.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00207912 _____ () D:\Programme\Todo Backup\bin\NTFSLib.dll
2016-01-03 12:12 - 2016-06-03 06:13 - 00114880 _____ () D:\Programme\Todo Backup\bin\FileStorage.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00169512 _____ () D:\Programme\Todo Backup\bin\CloudInterface.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00501800 _____ () D:\Programme\Todo Backup\bin\StorageMgr.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00024616 _____ () D:\Programme\Todo Backup\bin\GetDriverInfo.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00020520 _____ () D:\Programme\Todo Backup\bin\CorrectMbr.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00032296 _____ () D:\Programme\Todo Backup\bin\EnumTapeDevice.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00034856 _____ () D:\Programme\Todo Backup\bin\TbTapeBrowse.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00026816 _____ () D:\Programme\Todo Backup\bin\AccountManager.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00064040 _____ () D:\Programme\Todo Backup\bin\RegLib.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00059944 _____ () D:\Programme\Todo Backup\bin\NasOperator.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00220864 _____ () D:\Programme\Todo Backup\bin\EmailBrowser.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00077864 _____ () D:\Programme\Todo Backup\bin\CloudOperator.dll
2016-01-03 12:12 - 2016-06-03 06:12 - 00021184 _____ () D:\Programme\Todo Backup\bin\ActiveOnline.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00136232 _____ () D:\Programme\Todo Backup\bin\VMConfig.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00020008 _____ () D:\Programme\Todo Backup\bin\AndroidDeviceManager.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00043048 _____ () D:\Programme\Todo Backup\bin\TbDataSwap.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00353832 _____ () D:\Programme\Todo Backup\bin\DeviceManager.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00027176 _____ () D:\Programme\Todo Backup\bin\DeviceAdapter.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00138792 _____ () D:\Programme\Todo Backup\bin\Device.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00146984 _____ () D:\Programme\Todo Backup\bin\Partition.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00050216 _____ () D:\Programme\Todo Backup\bin\FileSystemAnalyser.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00061992 _____ () D:\Programme\Todo Backup\bin\FATFileSystemAnalyser.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00089640 _____ () D:\Programme\Todo Backup\bin\Common.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00056360 _____ () D:\Programme\Todo Backup\bin\NTFSFileSystemAnalyser.dll
2016-01-03 12:12 - 2016-04-13 10:49 - 00432320 _____ () D:\Programme\Todo Backup\bin\uexper.dll
2016-07-11 12:02 - 2016-07-11 12:02 - 00034448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2015-11-23 15:37 - 2013-07-04 04:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2015-11-23 23:39 - 2015-12-23 18:17 - 00625440 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll
2013-10-22 09:48 - 2013-10-22 09:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll
2013-10-25 19:49 - 2013-10-25 19:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll
2016-01-03 12:12 - 2015-12-10 07:04 - 00224808 _____ () D:\Programme\Todo Backup\bin\SmartBackup.dll
2016-06-29 16:13 - 2015-12-23 18:32 - 00190240 _____ () D:\Utilities\IObit\IObit Uninstaller\madBasic_.bpl
2016-06-29 16:13 - 2015-12-23 18:32 - 00057632 _____ () D:\Utilities\IObit\IObit Uninstaller\madDisAsm_.bpl
2016-04-19 16:41 - 2016-04-19 16:41 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 16:41 - 2016-04-19 16:41 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-06-29 16:13 - 2015-12-28 13:50 - 00899872 _____ () D:\Utilities\IObit\Advanced SystemCare\webres.dll
2016-06-29 16:13 - 2015-12-28 13:49 - 00629536 _____ () D:\Utilities\IObit\Advanced SystemCare\ProductStatistics.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\100sexlinks.com -> 100sexlinks.com

Da befinden sich 4788 mehr Seiten.


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 09:24 - 2016-07-04 17:55 - 00001006 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1777370191-4236908100-620713025-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\fairv\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "NarutoOnline.lnk"
HKLM\...\StartupApproved\Run32: => "DT BEN"
HKLM\...\StartupApproved\Run32: => "AVMWlanClient"
HKU\S-1-5-21-1777370191-4236908100-620713025-1001\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [TCP Query User{9927554E-27DC-43AE-A885-BC4D309ECEBA}D:\spaceflight\orbitron\orbitron.exe] => (Allow) D:\spaceflight\orbitron\orbitron.exe
FirewallRules: [UDP Query User{272D48E8-16C5-4EFF-B351-9C16827FD4AE}D:\spaceflight\orbitron\orbitron.exe] => (Allow) D:\spaceflight\orbitron\orbitron.exe
FirewallRules: [{8F6A6F7C-38E6-4A05-96F9-F2B9D267E089}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{E97554F4-454C-4B43-AF58-AFBB14093977}] => (Allow) D:\Programme\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{0CD3AA86-A823-4FFE-87E0-84A6C1A46BF8}] => (Allow) D:\Programme\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{2736E2E9-A054-4BF8-A67C-701B082C8755}] => (Allow) LPort=1433
FirewallRules: [{EC880C29-0877-4C08-ADF0-522F5A17D3D6}] => (Allow) LPort=1434
FirewallRules: [{458D8EA9-04FD-4931-BD12-91679F587D62}] => (Allow) D:\Programme\Magix Video deLuxe 2016\Videodeluxe.exe
FirewallRules: [{32AB7E22-FAA0-4CE1-92EC-96F4D5422D84}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{E7AD740F-8D7B-4184-BB24-6D13E712B501}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{537B5A23-FE05-48FD-9D6E-F8F654B6F493}] => (Allow) D:\Utilities\Driver Booster\DriverBooster.exe
FirewallRules: [{DE7F3E48-FAF3-410A-8292-9F6A44DBE6E1}] => (Allow) D:\Utilities\Driver Booster\DriverBooster.exe
FirewallRules: [{6863A3E7-5FF0-460B-85F7-F213F4B0F909}] => (Allow) D:\Utilities\Driver Booster\DBDownloader.exe
FirewallRules: [{A544F10E-0E56-4BE8-A6B2-8D5F144E447C}] => (Allow) D:\Utilities\Driver Booster\DBDownloader.exe
FirewallRules: [{46291DB8-BA68-4BB7-A6D0-EBF287A1E5A2}] => (Allow) D:\Utilities\Driver Booster\AutoUpdate.exe
FirewallRules: [{BE84F9B9-2884-43AC-8975-110020D4FC6A}] => (Allow) D:\Utilities\Driver Booster\AutoUpdate.exe
FirewallRules: [{5BFFD35B-A6C5-418D-BCA5-C9FBB875588D}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
FirewallRules: [{B9F28979-4021-450D-9027-0024D0EE6F1D}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
FirewallRules: [{44C56F20-6A82-4DFE-8F43-F9FA2D89180E}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
FirewallRules: [{EFEE36B4-1F43-475D-B0F6-B8030B8C04EB}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
FirewallRules: [{321CE870-7688-4190-B998-C4B431EA2D8C}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{08D0F7BB-CBEB-410D-B477-138484209342}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{87B92846-D475-48FF-86BF-959B42EA7305}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{181DC1E4-FCA2-49EE-9269-16E33497B994}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
FirewallRules: [{645605DE-1E22-47C8-A48A-9996467C9894}] => (Allow) LPort=8743
FirewallRules: [{4A0D940B-9F3D-49AC-97A2-F96ACFF9BB4B}] => (Allow) LPort=8643
FirewallRules: [{53064919-6F72-4E15-A802-E3D6213E4BBF}] => (Allow) LPort=7676
FirewallRules: [{4EEE6239-CC9F-4299-AD49-6CCEF877F36F}] => (Allow) LPort=7679
FirewallRules: [{0188AF14-764B-4456-A7AE-E52398E5A2E6}] => (Allow) LPort=24234
FirewallRules: [{75A82AAE-83DE-49F0-8E89-1FE7301C2FD2}] => (Allow) LPort=7900
FirewallRules: [{A05FC737-9F27-4FD0-8BD8-AA94D47D9CA5}] => (Allow) LPort=1900

==================== Wiederherstellungspunkte =========================

02-07-2016 10:37:00 Installed calibre 64bit
04-07-2016 22:54:43 JRT Pre-Junkware Removal
05-07-2016 22:17:47 JRT Pre-Junkware Removal
07-07-2016 17:58:20 JRT Pre-Junkware Removal
08-07-2016 15:52:22 Installed calibre 64bit
08-07-2016 17:34:28 Installed TextPad 8.
09-07-2016 11:25:13 Removed TextPad 7.
10-07-2016 19:19:39 Prüfpunkt von HitmanPro

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB-Massenspeichergerät
Description: USB-Massenspeichergerät
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Kompatibles USB-Speichergerät
Service: USBSTOR
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (07/12/2016 10:07:02 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error

Error: (07/11/2016 06:45:49 PM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error

Error: (07/11/2016 12:38:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x188
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3
Vollständiger Name des fehlerhaften Pakets: AllShareFrameworkDMS.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AllShareFrameworkDMS.exe5

Error: (07/11/2016 12:02:34 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.

Details:
	Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (07/11/2016 12:02:34 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung

Details:
	Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (07/11/2016 12:02:34 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
	Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (07/11/2016 12:02:34 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
	Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (07/11/2016 12:02:34 PM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung

Details:
	(HRESULT : 0x8e5e0210) (0x8e5e0210)

Error: (07/11/2016 12:02:34 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.

Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)

Error: (07/11/2016 12:02:22 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - base\appmodel\search\search\ytrip\common\util\jetutil.cpp (203)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.

Details:
	 0x8e5e0210 (0x8e5e0210)


Systemfehler:
=============
Error: (07/11/2016 11:24:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_1da06e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 11:24:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _1da06e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 11:24:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_1da06e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 11:24:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_1da06e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 11:24:59 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/11/2016 10:24:22 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/11/2016 06:45:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_38765" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 06:45:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _38765" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 06:45:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_38765" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/11/2016 06:45:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_38765" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2016-07-04 17:56:54.654
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 17:56:54.641
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 17:55:51.092
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 17:55:47.520
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 17:55:47.505
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 17:55:42.739
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-04 17:55:42.728
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-19 22:32:41.797
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-15 23:04:47.477
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-15 15:21:33.334
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 14%
Installierter physikalischer RAM: 16290.28 MB
Verfügbarer physikalischer RAM: 13866.5 MB
Summe virtueller Speicher: 33698.28 MB
Verfügbarer virtueller Speicher: 30655.08 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.24 GB) (Free:67.45 GB) NTFS
Drive d: (Daten) (Fixed) (Total:1863.01 GB) (Free:900.61 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 111.8 GB) (Disk ID: E4CB032A)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0A24532E)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

--- --- ---
Danke.

Kolki


P.S. Das ist neu: Bitte nicht den Samsung link herausnehmen, das ist die Verbindung zwischen meinem TV und meinem Computer.
Damit kann ich Videos von meinem Computer auf dem TV abspielen.

Danke.

Zitat von Kolki

P.S. Das ist neu: Bitte nicht den Samsung link herausnehmen, das ist die Verbindung zwischen meinem TV und meinem Computer.
Damit kann ich Videos von meinem Computer auf dem TV abspielen.

Danke.

Kein Problem. Ich würde Dich noch bitten den folgenden Scan zu machen:

Schritt 1



Bitte lade Dir herdprotect von Reason Software (portable edition) auf Deinen Desktop.

• Mit Rechts-Klick als Administrator starten.
• Wähle als Installationspfad den vorgegebenen. (%ProgramFiles%)
• Bestätige die Bedingungen und starte herdprotect durch Klick auf Finish.
• Klicke auf Scan und warte geduldig bis der Scan beendet wurde.
• Keine Funde entfernen lassen und Logdatei über Save Results abspeichern.
• Poste bitte den Inhalt der Log-Datei.

Die scans und logs sind zu lang und werden von Ihrem board nicht akzeptiert.

Welchen soll ich posten:


scan oder log?

Kolki

Schick mir die Logs bitte als Email:
deeprybka@trojaner-board.de

Ich habe dir die Logs zugesandt. Absender [email]xxx@yyyy.com

Danke. Antworte Dir sobald ich wieder am PC bin.