Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-07-2016
durchgeführt von ... (Administrator) auf ERWINRAUTER-PC (25-07-2016 07:51:07)
Gestartet von C:\Users\...\Downloads
Geladene Profile: ... (Verfügbare Profile: ...)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(hgm) C:\Windows\HEU_KMS_Service.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [974360 2016-07-21] (BlueStack Systems, Inc.)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-141813220-702416289-704634490-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-141813220-702416289-704634490-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [974360 2016-07-21] (BlueStack Systems, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 62.117.1.25 89.16.129.25
Tcpip\..\Interfaces\{28F3D798-3653-4F9F-8210-213A16BC8A57}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{9643A800-4B44-410A-85FA-9B5354260997}: [DhcpNameServer] 62.117.1.25 89.16.129.25
Tcpip\..\Interfaces\{F63F46FC-1344-40F3-8046-0849FEC09C8A}: [DhcpNameServer] 192.168.42.129
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131137494542456231&GUID=4E2C7AED-2C21-41DF-AAE9-B94A6706A131
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131137494542456231&GUID=4E2C7AED-2C21-41DF-AAE9-B94A6706A131
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-141813220-702416289-704634490-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131137494542456231&GUID=4E2C7AED-2C21-41DF-AAE9-B94A6706A131
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {8F7A8D1B-3628-4B24-BA16-48D33D0901D8} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {9F44FF2C-F68E-4DD6-87A5-CAA0C3CE3DA2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {B287B3CC-A31E-450E-B7A5-EB414143C6F8} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {FC3261C2-795B-4C0D-AA29-8CD5104C18F9} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> J:\Programme\office 2013\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> J:\Programme\office 2013\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - J:\Programme\office 2013\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> J:\PROGRA~3\OFFICE~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-18] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2015-07-15] ( )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-05-21] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [Keine Datei]
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-18] (RocketLife, LLP)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\...\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-05-13] (RocketLife, LLP)
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\...\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-05-26] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-05-21] (Microsoft Corporation)
FF Extension: Youtube Converter MP3 - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\extensions\{a3a5c777-f583-4fef-9380-ab4add1bc2a5}.xpi [2016-07-25]
FF Extension: ReloadEvery - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2016-07-25]
FF Extension: GlassMyFox - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\Extensions\GlassMyFox@ArisT2_Noia4dev.xpi [2016-07-24]
FF Extension: Adblock Plus - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-07-24]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-07-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-07-21] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-07-21] (BlueStack Systems, Inc.)
S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2519904 2016-06-11] (ESET)
S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [444640 2014-07-28] ()
S4 HTCMonitorService; J:\Program\HTC\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S4 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 KMS; C:\Windows\HEU_KMS_Service.exe [23040 2014-01-24] (hgm) [Datei ist nicht signiert]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; J:\EA Orgin\Origin\OriginClientService.exe [2122248 2016-06-11] (Electronic Arts)
S4 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-06-30] ()
S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 MPCProtectService; "D:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2016-04-09] ()
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-07-21] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-07-21] (Bluestack System Inc. )
R3 DaShenAudio_simple; C:\Windows\System32\drivers\DaShenAudio.sys [33752 2014-09-26] (DaShen Development Team)
S3 DrmCAudio; C:\Windows\System32\drivers\DrmCAudio.sys [36064 2014-07-28] (Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [496400 2013-02-27] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-03-19] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [199680 2016-03-19] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2016-03-19] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [142976 2016-03-19] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [198096 2016-03-19] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [53384 2016-03-19] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84800 2016-03-19] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2016-04-26] (ESET)
S2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [296448 2005-06-14] (Aladdin Knowledge Systems Ltd.) [Datei ist nicht signiert]
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2016-04-09] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 mt7612US; C:\Windows\System32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R1 rsutils; C:\Windows\System32\DRIVERS\rsutils.sys [71760 2015-04-09] (Beijing Rising Information Technology Co., Ltd.)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [12400 2016-05-16] (Macrovision Europe Ltd) [Datei ist nicht signiert]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2015-05-29] () [Datei ist nicht signiert]
R0 sysmon; C:\Windows\System32\DRIVERS\sysmon.sys [119256 2015-04-30] (Beijing Rising Information Technology Co., Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2016-01-14] (Anchorfree Inc.)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [151184 2016-03-10] (MBB)
S3 WsAudio_Device(1); C:\Windows\System32\drivers\VirtualAudio1.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(2); C:\Windows\System32\drivers\VirtualAudio2.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(3); C:\Windows\System32\drivers\VirtualAudio3.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(4); C:\Windows\System32\drivers\VirtualAudio4.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(5); C:\Windows\System32\drivers\VirtualAudio5.sys [31080 2013-01-25] (Wondershare)
U3 asq8zr8m; C:\Windows\System32\Drivers\asq8zr8m.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)
S3 cpuz139; \??\C:\Users\ERWINR~1\AppData\Local\Temp\cpuz139\cpuz139_x64.sys [X]
S1 MPCKpt; system32\DRIVERS\MPCKpt.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-25 07:51 - 2016-07-25 07:51 - 00022477 _____ C:\Users\...\Downloads\FRST.txt
2016-07-25 07:50 - 2016-07-25 07:50 - 02394112 _____ (Farbar) C:\Users\...\Downloads\FRST64.exe
2016-07-24 10:28 - 2016-07-24 10:28 - 00001014 _____ C:\Users\Public\Desktop\BlueStacks.lnk
2016-07-24 10:28 - 2016-07-24 10:28 - 00001014 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk
2016-07-24 10:26 - 2016-07-24 10:28 - 00000000 ____D C:\Program Files (x86)\Bluestacks
2016-07-24 10:18 - 2016-07-24 10:18 - 00000000 ____D C:\Users\...\AppData\Local\Bluestacks
2016-07-24 09:51 - 2016-07-24 09:53 - 280942232 _____ (BlueStack Systems Inc.) C:\Users\...\Downloads\BlueStacks2_native_836b0b162c1f2a450cd613eaf709b789.exe
2016-07-24 08:26 - 2016-07-24 09:17 - 00000000 ____D C:\Users\...\Desktop\mbar
2016-07-24 08:25 - 2016-07-24 08:25 - 16563352 _____ (Malwarebytes Corp.) C:\Users\...\Downloads\mbar-1.09.3.1001.exe
2016-07-24 08:16 - 2016-07-24 08:17 - 19998504 _____ (Microsoft Corporation) C:\Users\...\Downloads\proofingtools_de-de-x64.exe
2016-07-24 08:04 - 2016-07-24 08:05 - 280942232 _____ (BlueStack Systems Inc.) C:\Users\...\Downloads\BlueStacks2_native_46114fcb9cfa4bc83fea567cf71632cc.exe
2016-07-24 07:59 - 2016-07-24 07:59 - 00000000 ____D C:\Users\...\Desktop\Alte Firefox-Daten
2016-07-24 07:56 - 2016-07-24 07:56 - 00000000 ____D C:\ProgramData\Rising
2016-07-23 21:09 - 2016-07-24 12:36 - 00005104 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for ErwinRauter-PC-... ErwinRauter-PC
2016-07-23 13:58 - 2016-07-23 13:58 - 00000000 ____D C:\Windows\EOONotify
2016-07-23 09:19 - 2016-07-23 09:19 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-07-23 09:19 - 2016-07-23 09:19 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-07-23 09:19 - 2016-07-23 09:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-07-23 09:18 - 2016-06-10 20:51 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-07-23 09:18 - 2016-06-10 20:51 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-07-23 09:18 - 2016-06-10 20:46 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-07-23 09:18 - 2016-06-10 17:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-07-23 09:18 - 2016-06-10 16:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-07-23 09:18 - 2016-06-10 16:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-07-23 09:18 - 2016-06-10 16:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-07-23 09:18 - 2016-06-10 16:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-07-23 09:18 - 2016-06-10 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-07-23 09:18 - 2016-06-10 16:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-07-22 12:47 - 2016-07-24 09:02 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-22 12:47 - 2016-07-22 12:47 - 00001098 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-07-22 12:47 - 2016-07-22 12:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-07-22 12:46 - 2016-07-24 09:02 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-07-22 12:46 - 2016-07-22 12:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-07-22 12:46 - 2016-07-22 12:46 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-07-22 12:46 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-07-22 12:46 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-07-22 08:23 - 2016-07-22 08:32 - 00000000 ____D C:\Program Files\Plumbytes Software
2016-07-22 07:34 - 2016-07-22 07:35 - 00000000 ____D C:\Program Files (x86)\Golutainreapile
2016-07-22 07:34 - 2016-07-22 07:34 - 00000000 ____D C:\Users\...\AppData\Roaming\Brotsoft
2016-07-22 07:32 - 2016-07-22 12:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2016-07-22 06:54 - 2016-07-22 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-07-22 06:53 - 2016-07-22 06:53 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\Windows\PCHEALTH
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-07-22 06:50 - 2016-07-22 06:50 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-07-22 06:50 - 2016-07-22 06:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-07-22 06:50 - 2016-07-22 06:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-07-21 12:17 - 2016-07-21 12:17 - 00000000 ____D C:\Program Files\TAP-Windows
2016-07-21 11:51 - 2016-07-22 06:39 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-07-21 11:49 - 2014-01-24 19:48 - 00023040 ___SH (hgm) C:\Windows\HEU_KMS_Service.exe
2016-07-21 07:19 - 2016-07-21 07:29 - 00000000 ____D C:\Program Files\Microsoft Office
2016-07-20 21:13 - 2016-07-24 08:17 - 00000000 ____D C:\Program Files (x86)\MSECache
2016-07-20 08:40 - 2016-07-20 08:40 - 00000000 ____D C:\Windows\System32\Tasks\cFos
2016-07-20 07:20 - 2016-07-20 07:20 - 00000000 ____D C:\Program Files (x86)\Java
2016-07-19 12:52 - 2016-07-19 12:52 - 00000899 _____ C:\Users\Public\Desktop\NetBeans IDE 8.1.lnk
2016-07-19 12:52 - 2016-07-19 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans
2016-07-19 12:24 - 2016-07-20 07:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-07-19 12:24 - 2016-07-20 07:20 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-07-18 23:27 - 2016-07-18 23:27 - 00001538 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-07-18 23:27 - 2016-07-18 23:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-07-18 23:26 - 2016-07-18 23:26 - 00000000 ____D C:\Program Files\iPod
2016-07-18 23:26 - 2016-07-18 23:26 - 00000000 ____D C:\Program Files (x86)\iTunes
2016-07-18 23:25 - 2016-07-18 23:25 - 00000000 ____D C:\Program Files\Bonjour
2016-07-18 23:25 - 2016-07-18 23:25 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-07-18 23:12 - 2014-02-21 07:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-07-18 23:12 - 2014-02-21 07:56 - 00791024 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2016-07-18 23:12 - 2014-02-21 07:56 - 00370672 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2016-07-18 23:12 - 2014-02-21 07:56 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2016-07-18 23:02 - 2016-07-18 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-07-18 21:38 - 2016-07-18 21:38 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-07-18 21:38 - 2016-07-18 21:38 - 00000000 ____D C:\Windows\system32\Macromed
2016-07-18 06:36 - 2016-07-22 06:37 - 00000000 ____D C:\Windows\AutoKMS
2016-07-18 06:32 - 2016-07-23 14:04 - 00000000 ____D C:\Program Files\KMSpico
2016-07-18 06:06 - 2016-07-18 06:06 - 00000000 ____D C:\Users\...\AppData\Roaming\Macromedia
2016-07-18 06:06 - 2016-07-18 06:06 - 00000000 ____D C:\Users\...\AppData\Local\Macromedia
2016-07-17 13:06 - 2015-12-16 19:34 - 00111520 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-07-17 13:05 - 2015-12-16 16:53 - 00523384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-07-17 13:05 - 2015-12-16 16:53 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-07-17 13:05 - 2015-12-16 16:39 - 00103032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-07-17 13:03 - 2015-12-16 19:34 - 42977072 _____ C:\Windows\system32\nvcompiler.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 37609080 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 31061624 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 24895792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 21122456 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 20663816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 17561432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 17156968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 16981976 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 14005408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 12334200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-07-17 13:03 - 2015-12-16 19:34 - 03637352 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 03168376 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 02755704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 01915696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436143.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436143.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00938104 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00872056 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00734512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00681592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00423264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00416376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00370808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-07-17 13:03 - 2015-12-16 19:34 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00151184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-07-17 00:23 - 2016-07-17 14:26 - 00000000 ____D C:\Users\...\Desktop\Cheats
2016-07-17 00:23 - 2015-04-13 08:42 - 06623232 _____ C:\Users\...\Desktop\DeSmuME_0.9.11_x64.exe
2016-07-15 21:32 - 2016-07-15 21:32 - 00004768 _____ C:\1.txt
2016-07-14 08:22 - 2016-07-20 22:18 - 00000000 ___RD C:\Users\...\OneDrive
2016-07-14 08:22 - 2016-07-14 08:22 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-07-13 22:29 - 2016-07-13 22:29 - 00002406 _____ C:\Users\...\Documents\mbar-log-2016-07-13 (22-10-56a).txt
2016-07-13 22:23 - 2016-07-13 22:23 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-07-13 22:09 - 2016-07-25 07:39 - 00000000 __SHD C:\Users\...\IntelGraphicsProfiles
2016-07-13 22:09 - 2016-07-13 22:09 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-07-13 22:03 - 2016-07-13 22:03 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\6A511722.sys
2016-07-13 22:02 - 2016-07-13 22:02 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\0AFE1686.sys
2016-07-13 17:17 - 2016-06-26 02:35 - 00041704 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-07-13 17:17 - 2016-06-26 02:27 - 01208320 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-07-13 17:17 - 2016-06-22 15:06 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-07-13 11:38 - 2016-07-25 07:51 - 00000000 ____D C:\FRST
2016-07-13 08:45 - 2016-07-13 08:59 - 00000000 ____D C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2016-07-13 08:02 - 2016-07-13 08:02 - 00719521 _____ C:\Windows\unins000.exe
2016-07-13 06:16 - 2016-06-11 06:48 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-07-13 06:16 - 2016-06-10 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-07-13 06:16 - 2016-06-10 23:08 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-07-13 06:16 - 2016-06-10 23:03 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-07-13 06:16 - 2016-06-10 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-07-13 06:16 - 2016-06-10 22:38 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-07-13 06:16 - 2016-06-10 22:13 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-07-13 06:16 - 2016-06-10 20:53 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-07-13 06:16 - 2016-06-10 20:53 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-07-13 06:16 - 2016-06-10 20:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-07-13 06:16 - 2016-06-10 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-07-13 06:16 - 2016-06-10 20:42 - 20348928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-07-13 06:16 - 2016-06-10 20:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-07-13 06:16 - 2016-06-10 20:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-07-13 06:16 - 2016-06-10 20:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-07-13 06:16 - 2016-06-10 20:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-07-13 06:16 - 2016-06-10 20:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-07-13 06:16 - 2016-06-10 20:10 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-07-13 06:16 - 2016-06-10 19:41 - 01315840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-07-13 06:15 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-07-13 06:15 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2016-07-13 06:15 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-07-13 06:15 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-07-13 06:15 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2016-07-13 06:15 - 2016-06-14 17:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-07-13 06:15 - 2016-06-11 08:57 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-07-13 06:15 - 2016-06-10 23:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-07-13 06:15 - 2016-06-10 23:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-07-13 06:15 - 2016-06-10 23:20 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-07-13 06:15 - 2016-06-10 23:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-07-13 06:15 - 2016-06-10 23:18 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-07-13 06:15 - 2016-06-10 23:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-07-13 06:15 - 2016-06-10 23:17 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-07-13 06:15 - 2016-06-10 23:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-07-13 06:15 - 2016-06-10 23:05 - 25814016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-07-13 06:15 - 2016-06-10 23:04 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-07-13 06:15 - 2016-06-10 23:03 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-07-13 06:15 - 2016-06-10 23:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-07-13 06:15 - 2016-06-10 23:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-07-13 06:15 - 2016-06-10 22:53 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-07-13 06:15 - 2016-06-10 22:50 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-07-13 06:15 - 2016-06-10 22:49 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-07-13 06:15 - 2016-06-10 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-07-13 06:15 - 2016-06-10 22:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-07-13 06:15 - 2016-06-10 22:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-07-13 06:15 - 2016-06-10 22:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-07-13 06:15 - 2016-06-10 22:15 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-07-13 06:15 - 2016-06-10 22:12 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-07-13 06:15 - 2016-06-10 22:11 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-07-13 06:15 - 2016-06-10 22:10 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-07-13 06:15 - 2016-06-10 21:45 - 15409664 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-07-13 06:15 - 2016-06-10 21:44 - 02869248 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-07-13 06:15 - 2016-06-10 21:30 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-07-13 06:15 - 2016-06-10 21:21 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-07-13 06:15 - 2016-06-10 21:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-07-13 06:15 - 2016-06-10 20:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-07-13 06:15 - 2016-06-10 20:53 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-07-13 06:15 - 2016-06-10 20:47 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-07-13 06:15 - 2016-06-10 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-07-13 06:15 - 2016-06-10 20:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-07-13 06:15 - 2016-06-10 20:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-07-13 06:15 - 2016-06-10 20:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-07-13 06:15 - 2016-06-10 20:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-07-13 06:15 - 2016-06-10 20:32 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-07-13 06:15 - 2016-06-10 20:24 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-07-13 06:15 - 2016-06-10 20:14 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-07-13 06:15 - 2016-06-10 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-07-13 06:15 - 2016-06-10 20:09 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-07-13 06:15 - 2016-06-10 20:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-07-13 06:15 - 2016-06-10 19:58 - 13806080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-07-13 06:15 - 2016-06-10 19:45 - 02392576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-07-13 06:15 - 2016-06-10 19:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-07-12 17:09 - 2016-07-12 17:25 - 00000000 ____D C:\Program Files\BitTorrent
2016-07-12 17:09 - 2016-07-12 17:08 - 00000352 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-07-12 13:11 - 2016-07-14 09:23 - 00000008 __RSH C:\Users\...\ntuser.pol
2016-07-12 13:04 - 2016-07-14 09:23 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-07-12 13:04 - 2016-07-13 08:02 - 00007056 _____ C:\Windows\unins000.dat
2016-07-12 11:42 - 2016-07-20 22:18 - 00002199 _____ C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-12 11:42 - 2016-07-12 11:42 - 00002116 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-12 11:42 - 2016-07-12 11:42 - 00002116 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-05 18:53 - 2016-07-18 19:42 - 00001017 _____ C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iPadian.lnk
2016-07-05 11:20 - 2016-07-23 09:19 - 00001912 _____ C:\Windows\epplauncher.mif
2016-07-05 09:43 - 2016-05-17 01:22 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-07-05 09:43 - 2016-05-17 01:19 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-07-05 09:43 - 2016-05-17 01:19 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-07-05 09:43 - 2016-05-17 01:18 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-07-05 09:43 - 2016-05-17 01:18 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-07-05 09:43 - 2016-05-17 01:17 - 01732888 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-07-05 09:43 - 2016-05-17 01:16 - 01314136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-07-05 09:43 - 2016-05-16 23:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-07-05 09:43 - 2016-05-16 23:23 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-07-05 09:43 - 2016-05-16 23:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-07-05 09:43 - 2016-05-16 23:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-07-05 09:43 - 2016-05-16 23:14 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-07-05 09:43 - 2016-05-16 23:10 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-07-05 09:43 - 2016-05-16 23:10 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-07-05 09:43 - 2016-05-16 23:10 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-07-05 09:43 - 2016-05-16 23:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-07-05 09:43 - 2016-05-16 23:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-07-05 09:43 - 2016-05-14 00:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-07-05 09:43 - 2016-05-14 00:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-07-05 09:43 - 2016-05-14 00:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-07-05 09:43 - 2016-05-14 00:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-07-05 09:43 - 2016-05-13 23:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-07-05 09:43 - 2016-05-13 23:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-07-05 09:43 - 2016-05-13 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-07-05 09:43 - 2016-05-13 23:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-07-05 09:43 - 2016-05-13 23:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-07-05 09:43 - 2016-05-13 23:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-07-05 09:43 - 2016-05-13 23:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-07-05 09:43 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-07-05 09:43 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-07-05 09:43 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-07-05 09:43 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-07-05 09:43 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-07-05 09:43 - 2016-05-12 19:14 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-07-05 09:43 - 2016-05-12 19:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-07-05 09:43 - 2016-05-12 17:18 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-07-05 09:43 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-07-05 09:43 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-07-05 09:43 - 2016-05-04 19:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-07-05 09:43 - 2016-05-04 19:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-07-05 09:43 - 2016-05-04 19:16 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-07-05 09:43 - 2016-05-04 19:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-07-05 09:43 - 2016-05-04 17:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-07-05 09:43 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-06-30 23:57 - 2016-07-19 13:14 - 00000000 ____D C:\Users\...\AppData\Roaming\NetBeans
2016-06-30 23:57 - 2016-06-30 23:57 - 00000000 ____D C:\Users\...\AppData\Local\NetBeans
2016-06-30 21:56 - 2016-07-22 21:49 - 00000000 ____D C:\Users\...\.nbi
2016-06-30 17:52 - 2016-06-30 17:53 - 00000000 ____D C:\Users\...\Documents\Battlefield 4
2016-06-28 10:01 - 2016-07-19 13:34 - 00000000 ____D C:\Users\...\Desktop\HTML

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-25 07:43 - 2014-09-18 13:18 - 00000000 ____D C:\Users\...\AppData\Local\Adobe
2016-07-25 07:38 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2016-07-25 07:38 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2016-07-25 07:38 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-25 07:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-07-25 07:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-24 20:38 - 2009-07-14 06:45 - 00037152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-24 20:38 - 2009-07-14 06:45 - 00037152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-24 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-07-24 20:38 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2016-07-24 20:33 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-07-24 20:27 - 2015-06-15 13:54 - 00000000 ____D C:\ProgramData\Origin
2016-07-24 10:55 - 2015-12-14 19:20 - 00000000 ____D C:\Users\...\AppData\Local\CrashDumps
2016-07-24 10:54 - 2015-06-19 13:22 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-07-24 10:28 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-07-24 10:10 - 2015-08-01 14:06 - 00000000 ____D C:\Users\...\AppData\Roaming\GanymedeNet
2016-07-24 09:17 - 2015-11-15 03:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-07-24 08:58 - 2014-10-18 21:53 - 00000000 ____D C:\Windows\Hewlett-Packard
2016-07-24 07:55 - 2016-05-17 01:05 - 00000000 ____D C:\AdwCleaner
2016-07-23 22:40 - 2016-04-08 08:42 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-07-23 21:56 - 2015-03-23 21:39 - 00000000 ___RD C:\Users\...\Desktop\Spiele
2016-07-23 21:37 - 2016-02-26 11:01 - 00011776 ___SH C:\Users\...\Thumbs.db
2016-07-23 09:18 - 2015-09-26 01:23 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-07-23 09:18 - 2015-09-26 01:23 - 00000000 ___SD C:\Windows\system32\GWX
2016-07-22 23:33 - 2014-05-22 00:15 - 00000000 ____D C:\Users\...\Documents\My Games
2016-07-22 22:04 - 2015-05-26 09:36 - 00000000 ____D C:\Users\...\Desktop\Trojaner-Software
2016-07-22 14:01 - 2016-06-10 09:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-07-22 13:49 - 2016-01-12 13:33 - 00000000 ____D C:\Users\...\AppData\Roaming\Skype
2016-07-22 07:51 - 2016-06-18 15:19 - 05064680 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-22 07:39 - 2016-06-18 12:18 - 00115488 _____ C:\Users\...\AppData\Local\GDIPFONTCACHEV1.DAT
2016-07-22 06:50 - 2011-04-12 09:55 - 00000000 ____D C:\Windows\ShellNew
2016-07-21 11:50 - 2016-06-10 16:07 - 00000000 ____D C:\Windows\LOG
2016-07-20 07:20 - 2015-08-26 22:31 - 00000000 ____D C:\Users\...\.oracle_jre_usage
2016-07-19 20:52 - 2016-04-21 12:20 - 00000000 ____D C:\Users\...\AppData\Local\Anno Online
2016-07-19 14:43 - 2016-06-18 18:12 - 00000000 ____D C:\Users\...\Desktop\FTP-Ordner
2016-07-19 13:37 - 2016-06-24 10:46 - 00000000 ____D C:\Users\...\Desktop\HTML Home
2016-07-19 12:24 - 2015-05-29 10:12 - 00000000 ____D C:\ProgramData\Oracle
2016-07-18 23:27 - 2015-12-17 11:10 - 00000000 ____D C:\Users\...\AppData\Roaming\Apple Computer
2016-07-18 23:27 - 2015-12-17 11:10 - 00000000 ____D C:\Users\...\AppData\Local\Apple Computer
2016-07-18 23:26 - 2015-12-26 19:01 - 00000000 ____D C:\ProgramData\Apple Computer
2016-07-18 23:26 - 2015-08-26 09:58 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-07-18 23:20 - 2015-08-26 09:58 - 00000000 ____D C:\ProgramData\Apple
2016-07-18 23:14 - 2015-06-16 14:18 - 00000000 ____D C:\ProgramData\NVIDIA
2016-07-18 21:38 - 2013-09-27 12:36 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-07-18 21:38 - 2013-09-27 12:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-07-18 19:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-07-18 19:42 - 2016-06-17 21:00 - 00000968 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2016-07-18 19:42 - 2016-06-17 11:58 - 00001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-07-18 19:42 - 2016-02-05 22:31 - 00000643 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-07-18 19:42 - 2015-12-26 18:59 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-07-18 19:42 - 2015-08-27 08:51 - 00000917 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition CC 2014.lnk
2016-07-18 19:42 - 2015-08-24 13:32 - 00001672 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.6 64-bit.lnk
2016-07-18 19:42 - 2015-06-15 12:40 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-07-18 19:42 - 2015-06-15 12:40 - 00000962 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-07-18 19:42 - 2015-05-26 14:27 - 00002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
2016-07-18 19:42 - 2013-09-22 14:26 - 00001053 _____ C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-07-18 19:42 - 2013-09-22 14:22 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-07-18 19:42 - 2013-09-22 14:22 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-07-18 19:42 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-07-18 19:42 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-07-18 19:42 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-07-18 19:41 - 2016-06-10 15:03 - 00000000 ____D C:\Windows\KMSServerService
2016-07-18 19:41 - 2015-06-02 13:08 - 00001729 _____ C:\Users\...\Desktop\RevoUninPro - Verknüpfung.lnk
2016-07-18 14:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Globalization
2016-07-17 14:01 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Performance
2016-07-17 13:06 - 2015-12-17 11:07 - 00000000 ____D C:\Temp
2016-07-17 13:06 - 2015-11-07 03:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-07-17 13:06 - 2013-09-22 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-07-17 13:05 - 2013-09-22 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-07-17 13:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-07-16 12:57 - 2015-05-29 01:01 - 00000000 ____D C:\Users\...\Desktop\GEZ Dokumente
2016-07-16 12:05 - 2015-06-03 12:31 - 00000000 ____D C:\Users\...\AppData\Roaming\Nitro PDF
2016-07-15 21:35 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages
2016-07-15 21:33 - 2015-09-22 09:48 - 00000000 ____D C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-07-15 21:33 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-07-14 18:55 - 2016-06-17 21:00 - 00000000 ____D C:\Users\...\AppData\Roaming\obs-studio
2016-07-14 11:27 - 2015-06-04 13:43 - 00000000 ____D C:\Users\...\AppData\LocalLow\Temp
2016-07-14 09:23 - 2013-09-22 14:26 - 00000000 ____D C:\Users\...
2016-07-13 22:09 - 2013-09-22 14:36 - 00000000 ____D C:\Intel
2016-07-13 22:04 - 2014-12-18 23:00 - 00000000 ____D C:\Windows\system32\appraiser
2016-07-13 22:04 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2016-07-13 17:19 - 2013-09-22 14:40 - 00000000 ____D C:\Program Files\Intel
2016-07-13 17:19 - 2013-09-22 14:36 - 00000000 ____D C:\Program Files (x86)\Intel
2016-07-13 06:20 - 2013-09-24 10:17 - 00000000 ____D C:\Windows\system32\MRT
2016-07-13 06:18 - 2013-09-24 10:17 - 144749672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-07-12 17:42 - 2016-04-08 08:42 - 00003966 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-07-12 11:22 - 2013-09-22 16:38 - 00000000 ____D C:\Users\...\AppData\Local\Microsoft Help
2016-07-12 11:02 - 2016-06-09 09:31 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-07-08 21:00 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-07-07 03:21 - 2013-09-22 16:16 - 00000000 ____D C:\Users\...\AppData\Roaming\TS3Client
2016-07-05 14:13 - 2015-08-13 18:30 - 00000132 _____ C:\Users\...\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2016-07-03 23:26 - 2016-06-18 18:38 - 00000000 ____D C:\Users\...\Desktop\Die Gilde Der Aufstand bei Schloss Konflikt_Castle Clash-Dateien
2016-07-03 23:00 - 2015-09-24 08:34 - 00000000 ____D C:\Users\...\Documents\FIFA 16
2016-07-03 20:44 - 2016-03-06 21:13 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-06-30 17:46 - 2014-04-10 00:54 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-30 17:46 - 2013-10-15 16:10 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-06-30 17:46 - 2013-10-15 16:10 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-06-30 17:46 - 2013-10-15 16:10 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-06-17 08:54 - 2016-06-17 08:54 - 0000213 _____ () C:\Users\...\AppData\Roaming\3BSYBS1_DDVW_ErrLog.txt
2016-06-17 08:54 - 2016-06-17 08:54 - 0000218 _____ () C:\Users\...\AppData\Roaming\6.gif
2015-08-13 18:30 - 2016-07-05 14:13 - 0000132 _____ () C:\Users\...\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2016-06-17 08:53 - 2016-06-17 08:53 - 0002949 _____ () C:\Users\...\AppData\Roaming\bar.conf.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0000772 _____ () C:\Users\...\AppData\Roaming\Black - White.act
2016-06-17 08:53 - 2016-06-17 08:53 - 0000524 _____ () C:\Users\...\AppData\Roaming\BMC blue 4.ADO
2016-06-17 08:53 - 2016-06-17 08:53 - 0000130 _____ () C:\Users\...\AppData\Roaming\boolean_single.js
2016-06-17 08:53 - 2016-06-17 08:53 - 0003272 _____ () C:\Users\...\AppData\Roaming\callBackCallBack.c
2016-06-17 08:53 - 2016-06-17 08:53 - 0001073 _____ () C:\Users\...\AppData\Roaming\chmod.js
2016-06-17 08:53 - 2016-06-17 08:53 - 0001241 _____ () C:\Users\...\AppData\Roaming\chunker.output.omit-xml-declaration.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0004073 _____ () C:\Users\...\AppData\Roaming\currency.data
2016-06-17 08:53 - 2016-06-17 08:53 - 0001575 _____ () C:\Users\...\AppData\Roaming\Data.mpl
2016-06-17 08:53 - 2016-06-17 08:53 - 0000430 _____ () C:\Users\...\AppData\Roaming\doc_to_epub.xsl
2016-06-17 08:53 - 2016-06-17 08:53 - 0002550 _____ () C:\Users\...\AppData\Roaming\download_5.ico
2016-06-17 08:53 - 2016-06-17 08:53 - 0000010 _____ () C:\Users\...\AppData\Roaming\Dummy.aff
2016-06-17 08:53 - 2016-06-17 08:53 - 0000952 _____ () C:\Users\...\AppData\Roaming\eclipse.autolabel.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0002877 _____ () C:\Users\...\AppData\Roaming\ETenms-B5-H
2016-06-17 08:53 - 2016-06-17 08:53 - 0001241 _____ () C:\Users\...\AppData\Roaming\EventList.java
2016-06-17 08:53 - 2016-06-17 08:53 - 0001627 _____ () C:\Users\...\AppData\Roaming\fan.png
2016-06-17 08:53 - 2016-06-17 08:53 - 0003917 _____ () C:\Users\...\AppData\Roaming\floppy_drive.png
2016-06-17 08:53 - 2016-06-17 08:53 - 0000794 _____ () C:\Users\...\AppData\Roaming\getPhotoshopExecutableLocation.jsx
2016-06-17 08:53 - 2016-06-17 08:53 - 0000027 _____ () C:\Users\...\AppData\Roaming\GMT+7
2016-06-17 08:52 - 2016-06-17 08:52 - 0000518 _____ () C:\Users\...\AppData\Roaming\goURL_lr_photoshop_fr.csv
2016-06-17 08:52 - 2016-06-17 08:52 - 0003797 _____ () C:\Users\...\AppData\Roaming\Graph1.mpl
2016-06-17 08:52 - 2016-06-17 08:52 - 0000524 _____ () C:\Users\...\AppData\Roaming\gray 423 bl very soft.ADO
1999-07-04 09:00 - 1999-07-04 09:00 - 0049751 _____ () C:\Users\...\AppData\Roaming\Kindred.6tT
1998-06-13 09:00 - 1998-06-13 09:00 - 0002160 _____ () C:\Users\...\AppData\Roaming\Stridency.u
2015-12-06 13:38 - 2015-12-19 13:32 - 0000236 _____ () C:\Users\...\AppData\Local\LaunchHomeCenter.log
2014-08-11 19:19 - 2014-08-11 19:19 - 0001499 _____ () C:\Users\...\AppData\Local\recently-used.xbel
2015-06-03 14:01 - 2015-06-03 14:01 - 0000003 _____ () C:\Users\...\AppData\Local\updater.log
2015-06-03 14:01 - 2016-05-24 20:36 - 0000059 _____ () C:\Users\...\AppData\Local\UserProducts.xml
2014-10-11 19:01 - 2014-10-11 19:01 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-07-12 09:10 - 2015-07-12 09:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\...\AppData\Local\Temp\BluestacksUninstaller.exe
C:\Users\...\AppData\Local\Temp\HD-LibraryHandler.dll
C:\Users\...\AppData\Local\Temp\HD-Logger-Native.dll
C:\Users\...\AppData\Local\Temp\libeay32.dll
C:\Users\...\AppData\Local\Temp\msvcr120.dll
C:\Users\...\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-06 13:25

==================== Ende von FRST.txt ============================
         

hallo :-) bespiel wäre Bluestacks dür Android Games oder der gleichen!

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-07-2016
durchgeführt von ... (2016-07-25 07:51:36)
Gestartet von C:\Users\...\Downloads
Windows 7 Professional Service Pack 1 (X64) (2013-09-22 12:26:45)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-141813220-702416289-704634490-500 - Administrator - Disabled)
... (S-1-5-21-141813220-702416289-704634490-1000 - Administrator - Enabled) => C:\Users\...
Gast (S-1-5-21-141813220-702416289-704634490-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-141813220-702416289-704634490-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.381.1 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.05 beta x64 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.6 64-bit (HKLM\...\{D19E99C2-6D9D-4075-B446-B4387EAF70A5}) (Version: 5.6.0 - Adobe Systems Incorporated)
aioscnnr (x32 Version: 5.8.10.0 - Your Company Name) Hidden
aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden
AllDup 3.4.24 (HKLM-x32\...\AllDup_is1) (Version: 3.4.24 - Michael Thummerer Software Design)
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.03.0000 - Ubisoft)
ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )
Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.04.1 - Ubisoft)
Anno 1701 Version 1.04.1 (HKLM-x32\...\{67DBBEAD-91A0-40C8-B34C-BE1026CABBE2}_is1) (Version: 1.04.1 - Ubisoft)
Anno Online - Standalone Client (HKU\S-1-5-21-141813220-702416289-704634490-1000\...\Anno Online) (Version:  - )
Apple Application Support (32-Bit) (HKLM-x32\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{A6B0442B-E159-444B-B49D-6B9AC531EAE3}) (Version: 4.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Assassin's Creed IV Black Flag (HKLM\...\Steam App 242050) (Version:  - Ubisoft Montreal)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.3.41.6024 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.17 - Piriform)
center (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
ConTEXT v0.98.6 (HKLM-x32\...\{73E0D3A0-9C30-4F59-ABBF-6233686FB396}_is1) (Version:  - ConTEXT Project Ltd)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.76 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Die Siedler IV (HKLM-x32\...\S4Uninst) (Version:  - )
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Smart Security (HKLM\...\{74682D6B-2A0D-4095-902C-BA0BCB496D5D}) (Version: 9.0.318.20 - ESET, spol. s r.o.)
essentials (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.44.20513.9 - Electronic Arts)
GameDesire-Pool & Snooker (HKLM-x32\...\GameDesire-Pool & Snooker) (Version:  - )
GlassFish Server Open Source Edition 4.1.1 (HKLM\...\nbi-glassfish-mod-4.1.1.0.1) (Version:  - )
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.69.5 - HTC)
INFERNO (HKLM-x32\...\{72C4453F-FC68-4502-ADA5-4A7A19DDF043}) (Version: 1.2.0.0 - Cooler Master)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Network Connections 18.3.72.0 (HKLM\...\PROSetDX) (Version: 18.3.72.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{E109B4A3-9883-4E6E-9A19-4D7E1A88AFE8}) (Version: 12.4.2.4 - Apple Inc.)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Kodak AIO Printer (Version: 7.8.1.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.8.5.2 - Eastman Kodak Company)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (Deutsch) (HKLM-x32\...\{529EFF09-750D-48B9-A47A-34A3B6248C3F}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-141813220-702416289-704634490-1000\...\OneDriveSetup.exe) (Version: 17.3.6281.1202 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Server Speech Platform Runtime (x64) (HKLM\...\{3B433087-E62E-4BF5-97F9-4AF6E1C2409C}) (Version: 11.0.7400.345 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0 - Mozilla)
Mozilla Thunderbird 38.5.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.5.1 (x86 de)) (Version: 38.5.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NetBeans IDE 8.1 (HKLM-x32\...\nbi-nb-base-8.1.0.0.201511021428) (Version: 8.1 - NetBeans.org)
Nitro Reader 3 (HKLM\...\{4756C731-B54E-451A-9AF1-86E8AB1BEBBB}) (Version: 3.5.6.5 - Nitro)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.13.4 - OBS Project)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
OpenTTD 1.5.3 (HKLM-x32\...\OpenTTD) (Version: 1.5.3 - OpenTTD)
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.2.10 - Prolific Technology INC)
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.3 - Power Software Ltd)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
Train Fever (HKLM\...\Steam App 304730) (Version:  - Urban Games)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unter Schwarzer Flagge (HKLM-x32\...\Unter Schwarzer Flagge) (Version:  - )
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 19.1 - Ubisoft)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
VirtualDJ 8 (HKLM-x32\...\{FD197AE1-0242-4F5E-B8CE-FD5D9D314B84}) (Version: 8.0.2352.0 - Atomix Productions)
Wise Disk Cleaner 9.25 (HKLM-x32\...\Wise Disk Cleaner_is1) (Version: 9.25 - WiseCleaner.com, Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-141813220-702416289-704634490-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\...\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-141813220-702416289-704634490-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\...\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-141813220-702416289-704634490-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-141813220-702416289-704634490-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02E53C7D-C4B4-4D81-A302-A209CAF5061D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe
Task: {19D8674B-88C5-4986-B5D5-7178267A2A75} - System32\Tasks\Microsoft Office 15 Sync Maintenance for ...Rauter-PC-... ...Rauter-PC => J:\Programme\office 2013\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
Task: {1BADFC52-378A-4454-8CFF-B694A70DA951} - System32\Tasks\cFos\Registration Tasks\Open Browser => Firefox.exe -osint -url "hxxp://localhost:1487/cfosspeed/console.htm"
Task: {35629E26-4ADC-49DC-88F4-45B7E62F1F96} - System32\Tasks\AdobeAAMUpdater-1.0-...Rauter-PC-... => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-07-22] (Adobe Systems Incorporated)
Task: {39F719E8-61B3-44EA-9BEE-5EE41ECBD873} - System32\Tasks\{01D7BA85-75C8-4C41-B845-7D461D23E027} => J:\Hothouse Creations\Unter Schwarzer Flagge\Unter Schwarzer Flagge.exe [1999-09-08] (Hothouse)
Task: {5F9B479E-FBAA-4BD3-9A22-22C7856577DF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe
Task: {6655C979-1B16-4CBF-B169-C0B8BC59D61D} - System32\Tasks\Microsoft\Windows\Setup\EOONotify => C:\Windows\EOONotify\EOONotify.exe [2016-07-08] (Microsoft Corporation)
Task: {C601334B-D184-439C-8E6C-6FC6FD310002} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-04-15] (Piriform Ltd)
Task: {CB8A35BE-D5AE-4A6E-A161-8B6F55E8D44C} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-07-21] ()
Task: {DA1A379E-A33C-4B12-9BB8-482F3E5F2657} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {E452409A-1423-427C-B0FF-6BF8BA5A8743} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_22_0_0_209_pepper.exe
Task: {EF027C46-B2B0-4C07-8E33-57E5CCD4FD38} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {F21280E5-E796-45DA-AC60-7C704772F8B3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_22_0_0_209_pepper.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\...\AppData\Local\Microsoft\Windows\GameExplorer\{4B90019A-E32D-424B-A4B2-144C48E7C04A}\SupportTasks\0\Weitere Spiele von Microsoft.lnk -> hxxp://www.thq.co.uk/cultures/
Shortcut: C:\Users\...\AppData\Local\Microsoft\Windows\GameExplorer\{15121FCA-2435-431E-AB10-8AA054A60915}\SupportTasks\1\Support.lnk -> hxxp://techsupport.ea.com/
Shortcut: C:\Users\...\AppData\Local\Microsoft\Windows\GameExplorer\{15121FCA-2435-431E-AB10-8AA054A60915}\SupportTasks\0\Weitere Spiele von Microsoft.lnk -> hxxp://www.anno1503.com/
Shortcut: C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki/
Shortcut: C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com/
Shortcut: C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Ехрlоrеr (Nо Аdd-оns).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.bat (Keine Datei)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-05 15:23 - 2016-07-05 15:23 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-07-05 15:23 - 2016-07-05 15:23 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-15 16:10 - 2016-06-30 17:46 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-08-26 09:40 - 2015-07-22 01:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2016-01-06 18:41 - 2016-01-06 18:41 - 00062168 _____ () C:\Program Files\CCleaner\branding.dll
2016-04-15 20:07 - 2016-04-15 20:07 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-07-18 21:38 - 2016-07-18 21:38 - 19483328 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-141813220-702416289-704634490-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-141813220-702416289-704634490-1000\...\aeriagames.com -> hxxp://aeriagames.com
IE trusted site: HKU\S-1-5-21-141813220-702416289-704634490-1000\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-07-14 13:18 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-141813220-702416289-704634490-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\...\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.117.1.25 - 89.16.129.25
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: BstHdAndroidSvc => 3
MSCONFIG\Services: BstHdLogRotatorSvc => 3
MSCONFIG\Services: BstHdUpdaterSvc => 2
MSCONFIG\Services: bthserv => 3
MSCONFIG\startupfolder: C:^Users^...^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EOS Utility.lnk => C:\Windows\pss\EOS Utility.lnk.Startup
MSCONFIG\startupfolder: C:^Users^...^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Photosmart 6520 series.lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Photosmart 6520 series.lnk.Startup
MSCONFIG\startupfolder: C:^Users^...^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.Startup
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Aimersoft Helper Compact.exe => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\...\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Conime => %windir%\system32\conime.exe
MSCONFIG\startupreg: EKIJ5000StatusMonitor => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe
MSCONFIG\startupreg: EKStatusMonitor => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
MSCONFIG\startupreg: Lightshot => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: PWRISOVM.EXE => J:\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: vspdfprsrv.exe => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe --background
MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{ECC9E358-E4BA-48D6-B535-398572B37E86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{9A59D3E8-243E-48AC-990E-E4936231BED4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{1DCDE9D5-BFB3-4779-AD4D-9EDA6C84562F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{45CF72AE-4AA0-4398-B6D5-91DA5442F53E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{0BE62414-DB1D-4B1C-9600-22FD6B4E0BF9}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{CACEC2ED-67B2-4BAF-B949-D28FC75E9C3C}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [{577E2581-C666-4BFA-BDF4-085B26E09FE1}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{FB8A2CEB-96A0-4F59-94AD-B36BD5AE3E5C}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{1B9AA21B-4A32-4CFE-9FF3-C7322350AA19}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{9CED0CF2-5609-4941-96A9-F89B4BA272E9}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{D0EDA8A1-CAA5-425E-9CAB-2561429FB54C}] => (Allow) D:\Kriegsspiele\Silent Hunter 5\sh5.exe
FirewallRules: [{6BF1F97A-2F0F-4761-9DE1-FD12C32D7EDA}] => (Allow) D:\Kriegsspiele\Silent Hunter 5\sh5.exe
FirewallRules: [{156687E3-5FA8-4878-9F6A-9A5A60E71710}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{CED4B79A-1E20-4207-9653-C42DE2C7A4F5}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{67FAEAE1-1FB5-4069-847E-13544AD1CC86}] => (Allow) D:\Steam\SteamApps\common\SniperGhostWarrior2\Bin32\SniperGhostWarrior2.exe
FirewallRules: [{FC9BAE57-AC48-4BDB-A982-F219ECAB4E6D}] => (Allow) D:\Steam\SteamApps\common\SniperGhostWarrior2\Bin32\SniperGhostWarrior2.exe
FirewallRules: [{838CD79A-6486-4B76-9A57-1C104057D557}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed 3\AC3MP.exe
FirewallRules: [{921B3D42-B234-45E3-BBCE-C1D9B6CBD87C}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed 3\AC3MP.exe
FirewallRules: [{E3B771B6-BD19-4B16-8BED-5C41B458EA2D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{17E66A82-842E-4D31-998B-4CEEA3651A80}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{55E91760-5B8D-42B3-B559-57E763456011}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{CABBC8C7-9746-4CB3-A4B2-F1F22061414C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1AB40CB4-25B2-475B-B771-16E82981DCA7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{71AB3FB3-E0F0-4B9A-99DE-8215829A7370}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{CB706AC5-0495-4D66-B7F7-E115AD83C4A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{79E1EDF5-EFC9-4B2A-843E-5AC26BA38669}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{F2007593-59D0-478B-8A51-85A636D8EB3C}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{16C28508-8CA5-48FE-93D9-2979CA2B2792}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CCA99AEB-30F1-44C0-93A0-13C3F070160F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E42BF9A7-ABB1-4568-9CD7-B5395EE32ABE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{01B29364-BCAC-4AE4-81BC-A83881E5C643}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{87C27B74-79D6-401F-83CD-8C0A914F4ACA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3D192AC8-A964-4BD4-9794-E08581AA0ABA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8FEDA8F5-BB4F-4C2E-8EDE-49A5E66FC7A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{44B0825C-80A2-47FD-94C2-620545D6A93C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{143F260B-2A98-4D23-AA45-37A74A95E389}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C1E2E8FD-6EDD-4F22-99FC-57C9D9B43AC2}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{64AE9527-8132-4C86-A9D4-74B634CD1A0A}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{91EAE633-FF07-45BA-AE98-F3DD9E4410F4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{72D436BD-96AE-4CDC-84C0-BA5445F1CBFD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{111F3D8B-356F-4CFE-88B5-D6298B5C0FE8}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{FE5A4DB3-02F9-4E99-B6BA-94621E461060}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{AD856B98-95A9-40B9-9716-B28C7317E662}] => (Allow) D:\Steam\SteamApps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{B9B74031-BBBA-4408-8F16-061A612A5487}] => (Allow) D:\Steam\SteamApps\common\Rise of Flight 2.0\bin_game\release\ROF.exe
FirewallRules: [{C74224F0-03EC-46E1-B5C0-97BD0B1AE80D}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{A4000CF1-1498-488B-A098-0878DFD75191}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{46945092-A038-4878-BFCA-D14A8CE941C2}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed Liberation\ac3lhd_32.exe
FirewallRules: [{DC045F77-117F-4320-B916-98F0F10886C2}] => (Allow) D:\Steam\SteamApps\common\Assassin's Creed Liberation\ac3lhd_32.exe
FirewallRules: [{0B22ECD0-FAB2-4643-B54A-6869697B2601}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8012C44A-E37E-47ED-B495-109425452CDE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{52977FA7-9E43-4E93-86D6-1299EC916109}] => (Allow) D:\Steam\SteamApps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe
FirewallRules: [{7DFC6040-0463-4057-A792-13160BDD76C4}] => (Allow) D:\Steam\SteamApps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe
FirewallRules: [{AF240077-359D-44A6-9C50-0BB6F2B0A73D}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{D92A69DB-103C-4778-AAF3-EF75DFA7FFEB}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{FBD44CD8-AC39-42E3-BF6E-8C412C3257EF}D:\trainz 1\ts12\bin\taddaemon.exe] => (Allow) D:\trainz 1\ts12\bin\taddaemon.exe
FirewallRules: [UDP Query User{48637696-C656-47F4-B05C-3EB24ADE1E1A}D:\trainz 1\ts12\bin\taddaemon.exe] => (Allow) D:\trainz 1\ts12\bin\taddaemon.exe
FirewallRules: [{0525EF8A-6DC8-4058-868D-B50070A4D293}] => (Allow) D:\Assassin's Creed Unity\ACU.exe
FirewallRules: [{BD81B769-1842-43D3-A9EA-C274DC46115F}] => (Allow) D:\Assassin's Creed Unity\ACU.exe
FirewallRules: [TCP Query User{9AD54634-B7F6-465D-BD59-39673B8A3839}J:\spiele 2015\gta 5\gta5.exe] => (Allow) J:\spiele 2015\gta 5\gta5.exe
FirewallRules: [UDP Query User{5B37B2EB-5822-493F-92D8-3B87F993874D}J:\spiele 2015\gta 5\gta5.exe] => (Allow) J:\spiele 2015\gta 5\gta5.exe
FirewallRules: [{AA9A2BD1-B1B6-4E62-8B89-A5E0E8F89352}] => (Allow) LPort=5353
FirewallRules: [{A8DF0032-9B48-4C06-BA93-936557460FCC}] => (Allow) LPort=9322
FirewallRules: [{3760F50C-2C37-45A3-89A7-C581606C2F49}] => (Allow) LPort=5353
FirewallRules: [{1BF5F5E2-71D7-4E32-B25A-FC25695E10A8}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{EA3D44D7-CA2C-4440-825A-698724D5637C}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{286A37E8-B57A-4A67-B1FF-4718091046A0}] => (Allow) LPort=135
FirewallRules: [{B1D5EDE2-567E-4229-896E-8753A4F6943D}] => (Allow) J:\Programme\firefox\firefox.exe
FirewallRules: [{B48E8653-178C-4CF1-B5C7-4435FAC7A6F5}] => (Allow) J:\Programme\firefox\firefox.exe
FirewallRules: [{41C49DFE-6113-4798-96A6-7EF87FEFB8BC}] => (Allow) J:\Programme\firefox\firefox.exe
FirewallRules: [{76E166FF-D0FD-4683-8549-66800B9CF323}] => (Allow) J:\Programme\firefox\firefox.exe
FirewallRules: [{0FBCBF9B-8EDB-4D2B-A3F9-9179774C95BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B3D5D36E-960F-454B-B904-549B7231C1B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{888DCC2C-EDA8-482E-B4E4-71EC9F31DC48}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{BC7C2E3C-7ED0-4904-8A15-AF3CEA67731E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DF98474C-E1A6-437E-81D2-49F9802A0D6C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{595D67AD-C873-4709-969C-DD0E78A0B41E}] => (Allow) J:\Spiele 2015\Assassin's Creed Syndicate\ACS.exe
FirewallRules: [TCP Query User{42580DCB-84A1-4915-AAF9-B5D983CC9232}J:\program files (x86)\origin games\fifa 16\fifa16.exe] => (Allow) J:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [UDP Query User{22A256ED-8ACE-41FA-83D4-A06606F15D0C}J:\program files (x86)\origin games\fifa 16\fifa16.exe] => (Allow) J:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [{9C36661C-7233-4B98-A555-7088908162D7}] => (Allow) LPort=9322
FirewallRules: [{3B94B8E9-3CF9-4A7A-A279-F05476F892B9}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{4ABBE358-15C1-4411-8291-9D78ABC34E65}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{15C874A9-DE53-473D-955A-52A457EA8A06}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{B35CDDA2-FF70-4690-ABD4-22A7ABCEAEA4}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{3FA5FDAC-D783-400B-9E5A-897393681FA9}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{964E5E70-4B2C-4015-A9D3-47A9E6F00E2C}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{1FBEA04E-F039-450A-80C8-ABA93984CB82}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{106ADA8C-D118-4C85-9A8D-E79A2DF0EBDD}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{3DC3CB0B-7F64-45BF-9E9B-D4CA597419E6}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{16E362F8-6D5A-4D07-958F-647860DC01E5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{BE911FB3-F535-496F-87FE-7CDA1C98D3D4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{D4EAA787-EF1F-4330-B2F9-366865604F23}J:\spiele 2015\anno 1701\anno1701.exe] => (Allow) J:\spiele 2015\anno 1701\anno1701.exe
FirewallRules: [UDP Query User{B21E597F-621D-4795-B5A9-C902FD66CBD1}J:\spiele 2015\anno 1701\anno1701.exe] => (Allow) J:\spiele 2015\anno 1701\anno1701.exe
FirewallRules: [{84D2D64F-913C-48D4-AA54-13A1B0CFCB78}] => (Allow) J:\Spiele 2015\Air Conflicts\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{51EA1D64-89F8-4524-9BF4-24F960D4FA2B}] => (Allow) J:\Spiele 2015\Air Conflicts\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9014BDE9-BAC9-4B84-B6F6-205AA055A2A0}] => (Allow) J:\Spiele 2015\Steam\Steam.exe
FirewallRules: [{89429C76-CEAD-49E9-AC91-1C8376F4A484}] => (Allow) J:\Spiele 2015\Steam\Steam.exe
FirewallRules: [{0F447EDB-5E7E-477A-AD05-836111F7E56E}] => (Allow) J:\Spiele 2015\Steam\bin\steamwebhelper.exe
FirewallRules: [{7638A601-8F0B-49F7-841E-D216C5BCF938}] => (Allow) J:\Spiele 2015\Steam\bin\steamwebhelper.exe
FirewallRules: [{E4E72EAD-5CE8-41E7-A06F-E2EA61B9E06C}] => (Allow) J:\Spiele 2015\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4F3F29A6-F6D4-43FF-B67F-9B2A261AE2EE}] => (Allow) J:\Spiele 2015\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{EEFDDA2A-9FD2-4DC0-8AE8-B0FFDCF7360C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A2EEBE86-89F9-4F59-985D-2E0F5A1CAA83}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CF7E696C-1C2A-4589-9603-1E33727C5FF1}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{7B43ABBB-ED23-446B-B81A-EAEABB10CC29}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{C0F5418B-6AF4-41D3-A258-869607CD8438}] => (Allow) J:\Spiele 2015\Rainbow Six Siege\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{6BD984A4-1AD8-409E-916B-00E1772B8182}] => (Allow) J:\Spiele 2015\Rainbow Six Siege\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{3814F5B3-A34E-4409-A681-09A5FDB2E3F9}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{41DC1588-5E7E-464D-AC22-67D68B7DA8F9}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{1EC75759-8FD0-43D6-BABE-39A6A0F0ECEE}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{244081BF-3BD2-492C-9065-75D4B2498E19}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{970CE95D-35E2-43AB-8F7B-0ACF7EF83095}] => (Allow) J:\Anno 1404+Venedig\Anno4.exe
FirewallRules: [{4328F0B4-E3BD-4025-9AEA-75ABE87BBED5}] => (Allow) J:\Anno 1404+Venedig\Anno4.exe
FirewallRules: [{43F07C02-2D66-40FB-8E94-80172F2F0020}] => (Allow) J:\Anno 1404+Venedig\tools\Anno4Web.exe
FirewallRules: [{657A0C40-E7C4-4350-B3F0-653638EAB09B}] => (Allow) J:\Anno 1404+Venedig\tools\Anno4Web.exe
FirewallRules: [{631389D5-3661-4581-987D-F4ADC6B227CA}] => (Allow) J:\Anno 1404+Venedig\Addon.exe
FirewallRules: [{7959538A-8FBE-481B-9712-367A70093DF1}] => (Allow) J:\Anno 1404+Venedig\Addon.exe
FirewallRules: [{D4D16169-9FF0-40FE-8C5A-234132AEA9F8}] => (Allow) J:\Anno 1404+Venedig\tools\AddonWeb.exe
FirewallRules: [{1D1B021D-F3F8-4AA8-8F3B-6497B36F7543}] => (Allow) J:\Anno 1404+Venedig\tools\AddonWeb.exe
FirewallRules: [{55169E85-7E3A-48A5-B932-76B1C18CBF2A}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{BE1C86AD-397B-4D2B-AB27-36261984726A}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{78EB8E6E-CF35-4677-A9C6-C93588F99CEC}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{577A63A8-FA1C-446F-8ED1-02CBEAAC3EC8}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{C047EACD-AFD8-4959-8EDB-E336EA5D71E3}] => (Allow) J:\Program\HTC\HTCSyncManager.exe
FirewallRules: [{F0A18F58-EA19-43F1-9FB0-ACA25FCEFB61}] => (Allow) J:\Spiele 2015\Steam\steamapps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{8B82D9B9-55D6-4040-8037-890616A0CB48}] => (Allow) J:\Spiele 2015\Steam\steamapps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{8A24A050-0338-465D-893F-3A7F9A0F52BB}] => (Allow) J:\Spiele 2015\Steam\steamapps\common\Train Fever\TrainFever.exe
FirewallRules: [{9DBA6C84-0D2B-4D87-BA69-571D2D6388C5}] => (Allow) J:\Spiele 2015\Steam\steamapps\common\Train Fever\TrainFever.exe
FirewallRules: [{A787C58C-9A2C-4DDF-9721-C1788187C318}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{5A91DB0F-D684-4801-9A76-B37AD06A6567}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1340848A-2616-440D-9724-3C96803B2D89}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8A7FC540-4081-4C50-815D-109F56AB9109}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EDB601EA-149B-4676-A384-76AC89167A64}] => (Allow) J:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{5E9C62A7-5910-47A6-AA9E-771F3C655D99}] => (Allow) J:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{A44F853E-4B7A-4609-9EA6-EB2175965712}] => (Allow) J:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{6632A97E-74A2-48CA-A284-5CCFDB6A6A54}] => (Allow) J:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{5F32494D-7C97-4809-BBF0-C5DC560F88E5}] => (Allow) LPort=1688
FirewallRules: [{E10B98A0-BFA5-4F72-9D56-D6B839A7E304}] => (Allow) LPort=1688
FirewallRules: [{56A3D972-4D43-4CB1-9A4D-59CA5FB2A8BB}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{96D4D610-DFAD-4CB1-9378-30BF32B23FED}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{A98CC35A-E6D0-4F8F-BB21-4A1F9F7B96BF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C9144459-7042-4482-A355-A2D5C051A119}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4B60EF43-CC10-40BA-84D6-B160EFDB76FA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FA1532E0-FB46-4CB6-B383-C5C8DBC6A39A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A3175A0A-6988-4364-BF2E-7E66F70AC9BA}] => (Allow) J:\Programme\iTunes\iTunes.exe
FirewallRules: [{E510195D-434C-4FE8-BB47-5F9A1D066D00}] => (Allow) LPort=1688
FirewallRules: [{DD020B73-FAB0-4E8B-BDDF-FA869C17BD02}] => (Allow) LPort=1688
FirewallRules: [{18B78272-D336-41B6-BD78-D7A09A748734}] => (Allow) LPort=1688
FirewallRules: [{E5284D58-990C-4C46-AF21-41FB1711EA21}] => (Allow) J:\Programme\office 2013\Office15\lync.exe
FirewallRules: [{1A06390C-0E31-48D6-A51E-2FA052C5B39B}] => (Allow) J:\Programme\office 2013\Office15\lync.exe
FirewallRules: [{72657CC7-FCCA-48AE-AD58-E35E3554FE85}] => (Allow) J:\Programme\office 2013\Office15\UcMapi.exe
FirewallRules: [{83B16E7B-2CF4-46A7-A740-07CFF7ABA11E}] => (Allow) J:\Programme\office 2013\Office15\UcMapi.exe
FirewallRules: [{86FA6BAA-00B9-4E88-ADC2-B1C01D68CD3B}] => (Allow) J:\Programme\office 2013\Office15\outlook.exe

==================== Wiederherstellungspunkte =========================

24-07-2016 08:02:43 Revo Uninstaller Pro's restore point - BlueStacks App Player
24-07-2016 08:57:20 Malwarebytes Anti-Rootkit Restore Point
24-07-2016 09:30:35 Revo Uninstaller Pro's restore point - BlueStacks App Player
24-07-2016 10:02:51 Revo Uninstaller Pro's restore point - BlueStacks App Player
24-07-2016 20:28:00 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (07/25/2016 07:39:34 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2016-07-29T04:38:33Z. Fehlercode: 0x80070490.

Error: (07/24/2016 05:55:17 PM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2016-07-24T17:49:17Z. Error Code: 0x80070490.

Error: (07/24/2016 12:42:16 PM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2016-07-24T12:36:16Z. Error Code: 0x80070490.

Error: (07/24/2016 12:36:51 PM) (Source: BstHdPlusAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start state machine
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/24/2016 12:31:19 PM) (Source: BstHdPlusAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start state machine
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/24/2016 12:17:49 PM) (Source: BstHdPlusAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start state machine
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/24/2016 11:01:28 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2016-07-29T04:38:28Z. Fehlercode: 0x80070490.

Error: (07/24/2016 10:54:06 AM) (Source: BstHdPlusAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start state machine
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/24/2016 10:53:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HD-Agent.exe, Version: 2.3.41.6024, Zeitstempel: 0x579130f5
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.23455, Zeitstempel: 0x573a5509
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c54f
ID des fehlerhaften Prozesses: 0xa88
Startzeit der fehlerhaften Anwendung: 0xHD-Agent.exe0
Pfad der fehlerhaften Anwendung: HD-Agent.exe1
Pfad des fehlerhaften Moduls: HD-Agent.exe2
Berichtskennung: HD-Agent.exe3

Error: (07/24/2016 10:53:29 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HD-Agent.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.DirectoryNotFoundException
   bei System.IO.__Error.WinIOError(Int32, System.String)
   bei System.IO.Directory.InternalCreateDirectory(System.String, System.String, System.Object, Boolean)
   bei System.IO.Directory.InternalCreateDirectoryHelper(System.String, Boolean)
   bei System.IO.Directory.CreateDirectory(System.String)
   bei BlueStacks.hyperDroid.Common.Logger.InitLog(System.String, System.String)
   bei BlueStacks.hyperDroid.Agent.HDAgent.Main(System.String[])


Systemfehler:
=============
Error: (07/25/2016 07:35:20 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (07/25/2016 07:35:20 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (07/25/2016 07:33:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
MPCKpt

Error: (07/25/2016 07:33:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MPC Core Protect Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2 = Das System kann die angegebene Datei nicht finden.


Error: (07/25/2016 07:33:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Hardlock" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%577 = Die digitale Signatur dieser Datei kann nicht überprüft werden. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um böswillige Software aus einer unbekannten Quelle handelt, installiert.


Error: (07/24/2016 12:36:51 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Plus Android Service " wurde mit folgendem Fehler beendet: 
%%1064 = Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.


Error: (07/24/2016 12:31:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Plus Android Service " wurde mit folgendem Fehler beendet: 
%%1064 = Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.


Error: (07/24/2016 12:17:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Plus Android Service " wurde mit folgendem Fehler beendet: 
%%1064 = Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.


Error: (07/24/2016 10:55:39 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (07/24/2016 10:55:39 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422


CodeIntegrity:
===================================
  Date: 2016-07-25 07:33:15.899
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-25 07:33:15.869
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 10:53:35.832
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 10:53:35.807
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 10:09:46.282
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 10:09:46.257
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 09:01:49.979
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 09:01:49.954
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 08:58:43.739
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-07-24 08:58:43.714
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\hardlock.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 17%
Installierter physikalischer RAM: 16276.85 MB
Verfügbarer physikalischer RAM: 13356.47 MB
Summe virtueller Speicher: 28173.24 MB
Verfügbarer virtueller Speicher: 25156.69 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:119.02 GB) (Free:7.56 GB) NTFS
Drive f: (Musik) (Fixed) (Total:936.58 GB) (Free:68.83 GB) NTFS
Drive j: () (Fixed) (Total:926.44 GB) (Free:382.7 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 66830A53)

Partition: GPT.

========================================================
Disk: 5 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 52425DEB)
Partition 1: (Active) - (Size=936.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=926.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

2016-07-21 11:51 - 2016-07-22 06:39 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-07-21 11:49 - 2014-01-24 19:48 - 00023040 ___SH (hgm) C:\Windows\HEU_KMS_Service.exe

Du willst uns hier wohl verarschen!

Im letzten Beireinigungsthread wurdest du das gecrackte Office ja nun deutlich genug hingewiesen und nun ist der Mist samt Crack schon wieder drauf!

es geht mir lediglich um blustacks und ich kann mir nicht erklären warum es nicht mehr geht !
also bitte hilf mir
alles andere ist eigentlich egal !oder nicht ?

zum anderen ist es nur eine 30 tage testversion bis ich mein key wieder finde !

Totaler Dünnschiss! AutoKMS ist ein bekannter MS-Office Crack!
Diesen und HEU_KMS_Service.exe haben wir letztens mit FRST gelöscht und nun ist das Zeug schon wieder da also hör auf mich zu verarschen!

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-07-2016
durchgeführt von ... (Administrator) auf ...-PC (25-07-2016 12:41:07)
Gestartet von C:\Users\...\Downloads
Geladene Profile: ... (Verfügbare Profile: ...)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(hgm) C:\Windows\HEU_KMS_Service.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [974360 2016-07-21] (BlueStack Systems, Inc.)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-141813220-702416289-704634490-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-141813220-702416289-704634490-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [974360 2016-07-21] (BlueStack Systems, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 62.117.1.25 89.16.129.25
Tcpip\..\Interfaces\{28F3D798-3653-4F9F-8210-213A16BC8A57}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{9643A800-4B44-410A-85FA-9B5354260997}: [DhcpNameServer] 62.117.1.25 89.16.129.25
Tcpip\..\Interfaces\{F63F46FC-1344-40F3-8046-0849FEC09C8A}: [DhcpNameServer] 192.168.42.129
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131137494542456231&GUID=4E2C7AED-2C21-41DF-AAE9-B94A6706A131
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131137494542456231&GUID=4E2C7AED-2C21-41DF-AAE9-B94A6706A131
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-141813220-702416289-704634490-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131137494542456231&GUID=4E2C7AED-2C21-41DF-AAE9-B94A6706A131
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {8F7A8D1B-3628-4B24-BA16-48D33D0901D8} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {9F44FF2C-F68E-4DD6-87A5-CAA0C3CE3DA2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {B287B3CC-A31E-450E-B7A5-EB414143C6F8} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-141813220-702416289-704634490-1000 -> {FC3261C2-795B-4C0D-AA29-8CD5104C18F9} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-18] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2015-07-15] ( )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-05-21] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-07-26] (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [Keine Datei]
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-18] (RocketLife, LLP)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\...\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-05-13] (RocketLife, LLP)
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\...\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-141813220-702416289-704634490-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-05-26] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-05-21] (Microsoft Corporation)
FF Extension: Youtube Converter MP3 - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\extensions\{a3a5c777-f583-4fef-9380-ab4add1bc2a5}.xpi [2016-07-25]
FF Extension: ReloadEvery - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2016-07-25]
FF Extension: GlassMyFox - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\Extensions\GlassMyFox@ArisT2_Noia4dev.xpi [2016-07-24]
FF Extension: Adblock Plus - C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\to3c4yx3.default-1469339972047\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-07-24]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-07-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-07-21] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-07-21] (BlueStack Systems, Inc.)
S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2519904 2016-06-11] (ESET)
S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [444640 2014-07-28] ()
S4 HTCMonitorService; J:\Program\HTC\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S4 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 KMS; C:\Windows\HEU_KMS_Service.exe [23040 2014-01-24] (hgm) [Datei ist nicht signiert]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; J:\EA Orgin\Origin\OriginClientService.exe [2122248 2016-06-11] (Electronic Arts)
S4 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-06-30] ()
S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 MPCProtectService; "D:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2016-04-09] ()
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-07-21] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-07-21] (Bluestack System Inc. )
R3 DaShenAudio_simple; C:\Windows\System32\drivers\DaShenAudio.sys [33752 2014-09-26] (DaShen Development Team)
S3 DrmCAudio; C:\Windows\System32\drivers\DrmCAudio.sys [36064 2014-07-28] (Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [496400 2013-02-27] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-03-19] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [199680 2016-03-19] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2016-03-19] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [142976 2016-03-19] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [198096 2016-03-19] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [53384 2016-03-19] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84800 2016-03-19] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2016-04-26] (ESET)
S2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [296448 2005-06-14] (Aladdin Knowledge Systems Ltd.) [Datei ist nicht signiert]
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2016-04-09] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 mt7612US; C:\Windows\System32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R1 rsutils; C:\Windows\System32\DRIVERS\rsutils.sys [71760 2015-04-09] (Beijing Rising Information Technology Co., Ltd.)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [12400 2016-05-16] (Macrovision Europe Ltd) [Datei ist nicht signiert]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [868848 2015-05-29] () [Datei ist nicht signiert]
R0 sysmon; C:\Windows\System32\DRIVERS\sysmon.sys [119256 2015-04-30] (Beijing Rising Information Technology Co., Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2016-01-14] (Anchorfree Inc.)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [151184 2016-03-10] (MBB)
S3 WsAudio_Device(1); C:\Windows\System32\drivers\VirtualAudio1.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(2); C:\Windows\System32\drivers\VirtualAudio2.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(3); C:\Windows\System32\drivers\VirtualAudio3.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(4); C:\Windows\System32\drivers\VirtualAudio4.sys [31080 2013-01-25] (Wondershare)
S3 WsAudio_Device(5); C:\Windows\System32\drivers\VirtualAudio5.sys [31080 2013-01-25] (Wondershare)
U3 asq8zr8m; C:\Windows\System32\Drivers\asq8zr8m.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)
S3 cpuz139; \??\C:\Users\ERWINR~1\AppData\Local\Temp\cpuz139\cpuz139_x64.sys [X]
S1 MPCKpt; system32\DRIVERS\MPCKpt.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-25 07:51 - 2016-07-25 07:51 - 00022477 _____ C:\Users\...\Downloads\FRST.txt
2016-07-25 07:50 - 2016-07-25 07:50 - 02394112 _____ (Farbar) C:\Users\...\Downloads\FRST64.exe
2016-07-24 10:28 - 2016-07-24 10:28 - 00001014 _____ C:\Users\Public\Desktop\BlueStacks.lnk
2016-07-24 10:28 - 2016-07-24 10:28 - 00001014 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk
2016-07-24 10:26 - 2016-07-24 10:28 - 00000000 ____D C:\Program Files (x86)\Bluestacks
2016-07-24 10:18 - 2016-07-24 10:18 - 00000000 ____D C:\Users\...\AppData\Local\Bluestacks
2016-07-24 09:51 - 2016-07-24 09:53 - 280942232 _____ (BlueStack Systems Inc.) C:\Users\...\Downloads\BlueStacks2_native_836b0b162c1f2a450cd613eaf709b789.exe
2016-07-24 08:26 - 2016-07-24 09:17 - 00000000 ____D C:\Users\...\Desktop\mbar
2016-07-24 08:25 - 2016-07-24 08:25 - 16563352 _____ (Malwarebytes Corp.) C:\Users\...\Downloads\mbar-1.09.3.1001.exe
2016-07-24 08:16 - 2016-07-24 08:17 - 19998504 _____ (Microsoft Corporation) C:\Users\...\Downloads\proofingtools_de-de-x64.exe
2016-07-24 08:04 - 2016-07-24 08:05 - 280942232 _____ (BlueStack Systems Inc.) C:\Users\...\Downloads\BlueStacks2_native_46114fcb9cfa4bc83fea567cf71632cc.exe
2016-07-24 07:59 - 2016-07-24 07:59 - 00000000 ____D C:\Users\...\Desktop\Alte Firefox-Daten
2016-07-24 07:56 - 2016-07-24 07:56 - 00000000 ____D C:\ProgramData\Rising
2016-07-23 13:58 - 2016-07-23 13:58 - 00000000 ____D C:\Windows\EOONotify
2016-07-23 09:19 - 2016-07-23 09:19 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-07-23 09:19 - 2016-07-23 09:19 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-07-23 09:19 - 2016-07-23 09:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-07-23 09:18 - 2016-06-10 20:51 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-07-23 09:18 - 2016-06-10 20:51 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-07-23 09:18 - 2016-06-10 20:46 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-07-23 09:18 - 2016-06-10 20:46 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-07-23 09:18 - 2016-06-10 17:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-07-23 09:18 - 2016-06-10 17:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-07-23 09:18 - 2016-06-10 16:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-07-23 09:18 - 2016-06-10 16:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-07-23 09:18 - 2016-06-10 16:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-07-23 09:18 - 2016-06-10 16:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-07-23 09:18 - 2016-06-10 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-07-23 09:18 - 2016-06-10 16:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-07-23 09:18 - 2016-06-06 18:50 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-07-23 09:18 - 2016-06-06 17:23 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-07-22 12:47 - 2016-07-24 09:02 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-22 12:47 - 2016-07-22 12:47 - 00001098 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-07-22 12:47 - 2016-07-22 12:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-07-22 12:46 - 2016-07-24 09:02 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-07-22 12:46 - 2016-07-22 12:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-07-22 12:46 - 2016-07-22 12:46 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-07-22 12:46 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-07-22 12:46 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-07-22 08:23 - 2016-07-22 08:32 - 00000000 ____D C:\Program Files\Plumbytes Software
2016-07-22 07:34 - 2016-07-22 07:35 - 00000000 ____D C:\Program Files (x86)\Golutainreapile
2016-07-22 07:34 - 2016-07-22 07:34 - 00000000 ____D C:\Users\...\AppData\Roaming\Brotsoft
2016-07-22 07:32 - 2016-07-22 12:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2016-07-22 06:53 - 2016-07-22 06:53 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\Windows\PCHEALTH
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-07-22 06:52 - 2016-07-22 06:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-07-22 06:50 - 2016-07-22 06:50 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-07-22 06:50 - 2016-07-22 06:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-07-21 12:17 - 2016-07-21 12:17 - 00000000 ____D C:\Program Files\TAP-Windows
2016-07-21 11:51 - 2016-07-22 06:39 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-07-21 11:49 - 2014-01-24 19:48 - 00023040 ___SH (hgm) C:\Windows\HEU_KMS_Service.exe
2016-07-20 21:13 - 2016-07-24 08:17 - 00000000 ____D C:\Program Files (x86)\MSECache
2016-07-20 08:40 - 2016-07-20 08:40 - 00000000 ____D C:\Windows\System32\Tasks\cFos
2016-07-20 07:20 - 2016-07-20 07:20 - 00000000 ____D C:\Program Files (x86)\Java
2016-07-19 12:52 - 2016-07-19 12:52 - 00000899 _____ C:\Users\Public\Desktop\NetBeans IDE 8.1.lnk
2016-07-19 12:52 - 2016-07-19 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans
2016-07-19 12:24 - 2016-07-20 07:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-07-19 12:24 - 2016-07-20 07:20 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-07-18 23:27 - 2016-07-18 23:27 - 00001538 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-07-18 23:27 - 2016-07-18 23:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-07-18 23:26 - 2016-07-18 23:26 - 00000000 ____D C:\Program Files\iPod
2016-07-18 23:26 - 2016-07-18 23:26 - 00000000 ____D C:\Program Files (x86)\iTunes
2016-07-18 23:25 - 2016-07-18 23:25 - 00000000 ____D C:\Program Files\Bonjour
2016-07-18 23:25 - 2016-07-18 23:25 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-07-18 23:12 - 2014-02-21 07:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-07-18 23:12 - 2014-02-21 07:56 - 00791024 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2016-07-18 23:12 - 2014-02-21 07:56 - 00370672 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2016-07-18 23:12 - 2014-02-21 07:56 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2016-07-18 23:02 - 2016-07-18 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-07-18 21:38 - 2016-07-18 21:38 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-07-18 21:38 - 2016-07-18 21:38 - 00000000 ____D C:\Windows\system32\Macromed
2016-07-18 06:06 - 2016-07-18 06:06 - 00000000 ____D C:\Users\...\AppData\Roaming\Macromedia
2016-07-18 06:06 - 2016-07-18 06:06 - 00000000 ____D C:\Users\...\AppData\Local\Macromedia
2016-07-17 13:06 - 2015-12-16 19:34 - 00111520 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-07-17 13:05 - 2015-12-16 16:53 - 00523384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-07-17 13:05 - 2015-12-16 16:53 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-07-17 13:05 - 2015-12-16 16:39 - 00103032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-07-17 13:03 - 2015-12-16 19:34 - 42977072 _____ C:\Windows\system32\nvcompiler.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 37609080 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 31061624 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 24895792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 21122456 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 20663816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 17561432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 17156968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 16981976 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 14005408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 12334200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-07-17 13:03 - 2015-12-16 19:34 - 03637352 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 03168376 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 02755704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 01915696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436143.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436143.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00938104 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00872056 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00734512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00681592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00423264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00416376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00370808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-07-17 13:03 - 2015-12-16 19:34 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00151184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-07-17 13:03 - 2015-12-16 19:34 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-07-17 00:23 - 2016-07-17 14:26 - 00000000 ____D C:\Users\...\Desktop\Cheats
2016-07-17 00:23 - 2015-04-13 08:42 - 06623232 _____ C:\Users\...\Desktop\DeSmuME_0.9.11_x64.exe
2016-07-15 21:32 - 2016-07-15 21:32 - 00004768 _____ C:\1.txt
2016-07-14 08:22 - 2016-07-20 22:18 - 00000000 ___RD C:\Users\...\OneDrive
2016-07-14 08:22 - 2016-07-14 08:22 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-07-13 22:29 - 2016-07-13 22:29 - 00002406 _____ C:\Users\...\Documents\mbar-log-2016-07-13 (22-10-56a).txt
2016-07-13 22:23 - 2016-07-13 22:23 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-07-13 22:09 - 2016-07-25 07:39 - 00000000 __SHD C:\Users\...\IntelGraphicsProfiles
2016-07-13 22:09 - 2016-07-13 22:09 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-07-13 22:03 - 2016-07-13 22:03 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\6A511722.sys
2016-07-13 22:02 - 2016-07-13 22:02 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\0AFE1686.sys
2016-07-13 17:17 - 2016-06-26 02:35 - 00041704 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-07-13 17:17 - 2016-06-26 02:27 - 01208320 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-07-13 17:17 - 2016-06-22 15:06 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-07-13 17:17 - 2016-06-17 20:24 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-07-13 11:38 - 2016-07-25 07:51 - 00000000 ____D C:\FRST
2016-07-13 08:45 - 2016-07-13 08:59 - 00000000 ____D C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2016-07-13 08:02 - 2016-07-13 08:02 - 00719521 _____ C:\Windows\unins000.exe
2016-07-13 06:16 - 2016-06-11 06:48 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-07-13 06:16 - 2016-06-10 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-07-13 06:16 - 2016-06-10 23:08 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-07-13 06:16 - 2016-06-10 23:03 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-07-13 06:16 - 2016-06-10 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-07-13 06:16 - 2016-06-10 22:38 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-07-13 06:16 - 2016-06-10 22:13 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-07-13 06:16 - 2016-06-10 20:53 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-07-13 06:16 - 2016-06-10 20:53 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-07-13 06:16 - 2016-06-10 20:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-07-13 06:16 - 2016-06-10 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-07-13 06:16 - 2016-06-10 20:42 - 20348928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-07-13 06:16 - 2016-06-10 20:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-07-13 06:16 - 2016-06-10 20:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-07-13 06:16 - 2016-06-10 20:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-07-13 06:16 - 2016-06-10 20:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-07-13 06:16 - 2016-06-10 20:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-07-13 06:16 - 2016-06-10 20:10 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-07-13 06:16 - 2016-06-10 19:41 - 01315840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-07-13 06:15 - 2016-06-26 02:27 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-07-13 06:15 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-07-13 06:15 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2016-07-13 06:15 - 2016-06-25 21:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-07-13 06:15 - 2016-06-25 21:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-07-13 06:15 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2016-07-13 06:15 - 2016-06-14 17:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-07-13 06:15 - 2016-06-11 08:57 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-07-13 06:15 - 2016-06-10 23:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-07-13 06:15 - 2016-06-10 23:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-07-13 06:15 - 2016-06-10 23:20 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-07-13 06:15 - 2016-06-10 23:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-07-13 06:15 - 2016-06-10 23:18 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-07-13 06:15 - 2016-06-10 23:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-07-13 06:15 - 2016-06-10 23:17 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-07-13 06:15 - 2016-06-10 23:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-07-13 06:15 - 2016-06-10 23:05 - 25814016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-07-13 06:15 - 2016-06-10 23:04 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-07-13 06:15 - 2016-06-10 23:03 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-07-13 06:15 - 2016-06-10 23:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-07-13 06:15 - 2016-06-10 23:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-07-13 06:15 - 2016-06-10 22:53 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-07-13 06:15 - 2016-06-10 22:50 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-07-13 06:15 - 2016-06-10 22:49 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-07-13 06:15 - 2016-06-10 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-07-13 06:15 - 2016-06-10 22:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-07-13 06:15 - 2016-06-10 22:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-07-13 06:15 - 2016-06-10 22:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-07-13 06:15 - 2016-06-10 22:15 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-07-13 06:15 - 2016-06-10 22:12 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-07-13 06:15 - 2016-06-10 22:11 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-07-13 06:15 - 2016-06-10 22:10 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-07-13 06:15 - 2016-06-10 21:45 - 15409664 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-07-13 06:15 - 2016-06-10 21:44 - 02869248 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-07-13 06:15 - 2016-06-10 21:30 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-07-13 06:15 - 2016-06-10 21:21 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-07-13 06:15 - 2016-06-10 21:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-07-13 06:15 - 2016-06-10 20:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-07-13 06:15 - 2016-06-10 20:53 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-07-13 06:15 - 2016-06-10 20:47 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-07-13 06:15 - 2016-06-10 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-07-13 06:15 - 2016-06-10 20:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-07-13 06:15 - 2016-06-10 20:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-07-13 06:15 - 2016-06-10 20:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-07-13 06:15 - 2016-06-10 20:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-07-13 06:15 - 2016-06-10 20:32 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-07-13 06:15 - 2016-06-10 20:24 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-07-13 06:15 - 2016-06-10 20:14 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-07-13 06:15 - 2016-06-10 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-07-13 06:15 - 2016-06-10 20:09 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-07-13 06:15 - 2016-06-10 20:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-07-13 06:15 - 2016-06-10 19:58 - 13806080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-07-13 06:15 - 2016-06-10 19:45 - 02392576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-07-13 06:15 - 2016-06-10 19:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-07-12 17:09 - 2016-07-12 17:25 - 00000000 ____D C:\Program Files\BitTorrent
2016-07-12 17:09 - 2016-07-12 17:08 - 00000352 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-07-12 13:11 - 2016-07-14 09:23 - 00000008 __RSH C:\Users\...\ntuser.pol
2016-07-12 13:04 - 2016-07-14 09:23 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-07-12 13:04 - 2016-07-13 08:02 - 00007056 _____ C:\Windows\unins000.dat
2016-07-12 11:42 - 2016-07-20 22:18 - 00002199 _____ C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-12 11:42 - 2016-07-12 11:42 - 00002116 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-12 11:42 - 2016-07-12 11:42 - 00002116 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-05 18:53 - 2016-07-18 19:42 - 00001017 _____ C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iPadian.lnk
2016-07-05 11:20 - 2016-07-23 09:19 - 00001912 _____ C:\Windows\epplauncher.mif
2016-07-05 09:43 - 2016-05-17 01:22 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-07-05 09:43 - 2016-05-17 01:19 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-07-05 09:43 - 2016-05-17 01:19 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-07-05 09:43 - 2016-05-17 01:18 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-07-05 09:43 - 2016-05-17 01:18 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-07-05 09:43 - 2016-05-17 01:17 - 01732888 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-07-05 09:43 - 2016-05-17 01:16 - 01314136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-07-05 09:43 - 2016-05-17 01:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-07-05 09:43 - 2016-05-16 23:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-07-05 09:43 - 2016-05-16 23:23 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-07-05 09:43 - 2016-05-16 23:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-07-05 09:43 - 2016-05-16 23:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-07-05 09:43 - 2016-05-16 23:14 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-07-05 09:43 - 2016-05-16 23:10 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-07-05 09:43 - 2016-05-16 23:10 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-07-05 09:43 - 2016-05-16 23:10 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-07-05 09:43 - 2016-05-16 23:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-07-05 09:43 - 2016-05-16 23:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-07-05 09:43 - 2016-05-16 23:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-07-05 09:43 - 2016-05-14 00:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-07-05 09:43 - 2016-05-14 00:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-07-05 09:43 - 2016-05-14 00:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-07-05 09:43 - 2016-05-14 00:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-07-05 09:43 - 2016-05-13 23:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-07-05 09:43 - 2016-05-13 23:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-07-05 09:43 - 2016-05-13 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-07-05 09:43 - 2016-05-13 23:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-07-05 09:43 - 2016-05-13 23:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-07-05 09:43 - 2016-05-13 23:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-07-05 09:43 - 2016-05-13 23:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-07-05 09:43 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-07-05 09:43 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-07-05 09:43 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-07-05 09:43 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-07-05 09:43 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-07-05 09:43 - 2016-05-12 19:14 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-07-05 09:43 - 2016-05-12 19:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-07-05 09:43 - 2016-05-12 17:18 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-07-05 09:43 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-07-05 09:43 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-07-05 09:43 - 2016-05-04 19:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-07-05 09:43 - 2016-05-04 19:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-07-05 09:43 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-07-05 09:43 - 2016-05-04 19:16 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-07-05 09:43 - 2016-05-04 19:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-07-05 09:43 - 2016-05-04 17:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-07-05 09:43 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-06-30 23:57 - 2016-07-19 13:14 - 00000000 ____D C:\Users\...\AppData\Roaming\NetBeans
2016-06-30 23:57 - 2016-06-30 23:57 - 00000000 ____D C:\Users\...\AppData\Local\NetBeans
2016-06-30 21:56 - 2016-07-22 21:49 - 00000000 ____D C:\Users\...\.nbi
2016-06-30 17:52 - 2016-06-30 17:53 - 00000000 ____D C:\Users\...\Documents\Battlefield 4
2016-06-28 10:01 - 2016-07-19 13:34 - 00000000 ____D C:\Users\...\Desktop\HTML

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-25 07:43 - 2014-09-18 13:18 - 00000000 ____D C:\Users\...\AppData\Local\Adobe
2016-07-25 07:38 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2016-07-25 07:38 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2016-07-25 07:38 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-25 07:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-07-25 07:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-24 20:38 - 2009-07-14 06:45 - 00037152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-24 20:38 - 2009-07-14 06:45 - 00037152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-24 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-07-24 20:38 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2016-07-24 20:33 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-07-24 20:27 - 2015-06-15 13:54 - 00000000 ____D C:\ProgramData\Origin
2016-07-24 10:55 - 2015-12-14 19:20 - 00000000 ____D C:\Users\...\AppData\Local\CrashDumps
2016-07-24 10:54 - 2015-06-19 13:22 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-07-24 10:28 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-07-24 10:10 - 2015-08-01 14:06 - 00000000 ____D C:\Users\...\AppData\Roaming\GanymedeNet
2016-07-24 09:17 - 2015-11-15 03:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-07-24 08:58 - 2014-10-18 21:53 - 00000000 ____D C:\Windows\Hewlett-Packard
2016-07-24 07:55 - 2016-05-17 01:05 - 00000000 ____D C:\AdwCleaner
2016-07-23 22:40 - 2016-04-08 08:42 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-07-23 21:56 - 2015-03-23 21:39 - 00000000 ___RD C:\Users\...\Desktop\Spiele
2016-07-23 21:37 - 2016-02-26 11:01 - 00011776 ___SH C:\Users\...\Thumbs.db
2016-07-23 09:18 - 2015-09-26 01:23 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-07-23 09:18 - 2015-09-26 01:23 - 00000000 ___SD C:\Windows\system32\GWX
2016-07-22 23:33 - 2014-05-22 00:15 - 00000000 ____D C:\Users\...\Documents\My Games
2016-07-22 22:04 - 2015-05-26 09:36 - 00000000 ____D C:\Users\...\Desktop\Trojaner-Software
2016-07-22 14:01 - 2016-06-10 09:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-07-22 13:49 - 2016-01-12 13:33 - 00000000 ____D C:\Users\...\AppData\Roaming\Skype
2016-07-22 07:51 - 2016-06-18 15:19 - 05064680 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-22 07:39 - 2016-06-18 12:18 - 00115488 _____ C:\Users\...\AppData\Local\GDIPFONTCACHEV1.DAT
2016-07-22 06:50 - 2011-04-12 09:55 - 00000000 ____D C:\Windows\ShellNew
2016-07-21 11:50 - 2016-06-10 16:07 - 00000000 ____D C:\Windows\LOG
2016-07-20 07:20 - 2015-08-26 22:31 - 00000000 ____D C:\Users\...\.oracle_jre_usage
2016-07-19 20:52 - 2016-04-21 12:20 - 00000000 ____D C:\Users\...\AppData\Local\Anno Online
2016-07-19 14:43 - 2016-06-18 18:12 - 00000000 ____D C:\Users\...\Desktop\FTP-Ordner
2016-07-19 13:37 - 2016-06-24 10:46 - 00000000 ____D C:\Users\...\Desktop\HTML Home
2016-07-19 12:24 - 2015-05-29 10:12 - 00000000 ____D C:\ProgramData\Oracle
2016-07-18 23:27 - 2015-12-17 11:10 - 00000000 ____D C:\Users\...\AppData\Roaming\Apple Computer
2016-07-18 23:27 - 2015-12-17 11:10 - 00000000 ____D C:\Users\...\AppData\Local\Apple Computer
2016-07-18 23:26 - 2015-12-26 19:01 - 00000000 ____D C:\ProgramData\Apple Computer
2016-07-18 23:26 - 2015-08-26 09:58 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-07-18 23:20 - 2015-08-26 09:58 - 00000000 ____D C:\ProgramData\Apple
2016-07-18 23:14 - 2015-06-16 14:18 - 00000000 ____D C:\ProgramData\NVIDIA
2016-07-18 21:38 - 2013-09-27 12:36 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-07-18 21:38 - 2013-09-27 12:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-07-18 19:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-07-18 19:42 - 2016-06-17 21:00 - 00000968 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2016-07-18 19:42 - 2016-06-17 11:58 - 00001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-07-18 19:42 - 2016-02-05 22:31 - 00000643 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-07-18 19:42 - 2015-12-26 18:59 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-07-18 19:42 - 2015-08-27 08:51 - 00000917 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition CC 2014.lnk
2016-07-18 19:42 - 2015-08-24 13:32 - 00001672 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.6 64-bit.lnk
2016-07-18 19:42 - 2015-06-15 12:40 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-07-18 19:42 - 2015-06-15 12:40 - 00000962 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-07-18 19:42 - 2015-05-26 14:27 - 00002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
2016-07-18 19:42 - 2013-09-22 14:26 - 00001053 _____ C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-07-18 19:42 - 2013-09-22 14:22 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-07-18 19:42 - 2013-09-22 14:22 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-07-18 19:42 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-07-18 19:42 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-07-18 19:42 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-07-18 19:42 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-07-18 19:41 - 2015-06-02 13:08 - 00001729 _____ C:\Users\...\Desktop\RevoUninPro - Verknüpfung.lnk
2016-07-18 14:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Globalization
2016-07-17 14:01 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Performance
2016-07-17 13:06 - 2015-12-17 11:07 - 00000000 ____D C:\Temp
2016-07-17 13:06 - 2015-11-07 03:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-07-17 13:06 - 2013-09-22 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-07-17 13:05 - 2013-09-22 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-07-17 13:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-07-16 12:57 - 2015-05-29 01:01 - 00000000 ____D C:\Users\...\Desktop\GEZ Dokumente
2016-07-16 12:05 - 2015-06-03 12:31 - 00000000 ____D C:\Users\...\AppData\Roaming\Nitro PDF
2016-07-15 21:35 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages
2016-07-15 21:33 - 2015-09-22 09:48 - 00000000 ____D C:\Users\...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-07-15 21:33 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-07-14 18:55 - 2016-06-17 21:00 - 00000000 ____D C:\Users\...\AppData\Roaming\obs-studio
2016-07-14 11:27 - 2015-06-04 13:43 - 00000000 ____D C:\Users\...\AppData\LocalLow\Temp
2016-07-14 09:23 - 2013-09-22 14:26 - 00000000 ____D C:\Users\...
2016-07-13 22:09 - 2013-09-22 14:36 - 00000000 ____D C:\Intel
2016-07-13 22:04 - 2014-12-18 23:00 - 00000000 ____D C:\Windows\system32\appraiser
2016-07-13 22:04 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2016-07-13 17:19 - 2013-09-22 14:40 - 00000000 ____D C:\Program Files\Intel
2016-07-13 17:19 - 2013-09-22 14:36 - 00000000 ____D C:\Program Files (x86)\Intel
2016-07-13 06:20 - 2013-09-24 10:17 - 00000000 ____D C:\Windows\system32\MRT
2016-07-13 06:18 - 2013-09-24 10:17 - 144749672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-07-12 17:42 - 2016-04-08 08:42 - 00003966 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-07-12 11:22 - 2013-09-22 16:38 - 00000000 ____D C:\Users\...\AppData\Local\Microsoft Help
2016-07-12 11:02 - 2016-06-09 09:31 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-07-08 21:00 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-07-07 03:21 - 2013-09-22 16:16 - 00000000 ____D C:\Users\...\AppData\Roaming\TS3Client
2016-07-05 14:13 - 2015-08-13 18:30 - 00000132 _____ C:\Users\...\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2016-07-03 23:26 - 2016-06-18 18:38 - 00000000 ____D C:\Users\...\Desktop\Die Gilde Der Aufstand bei Schloss Konflikt_Castle Clash-Dateien
2016-07-03 23:00 - 2015-09-24 08:34 - 00000000 ____D C:\Users\...\Documents\FIFA 16
2016-07-03 20:44 - 2016-03-06 21:13 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-06-30 17:46 - 2014-04-10 00:54 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-30 17:46 - 2013-10-15 16:10 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-06-30 17:46 - 2013-10-15 16:10 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-06-30 17:46 - 2013-10-15 16:10 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-06-17 08:54 - 2016-06-17 08:54 - 0000213 _____ () C:\Users\...\AppData\Roaming\3BSYBS1_DDVW_ErrLog.txt
2016-06-17 08:54 - 2016-06-17 08:54 - 0000218 _____ () C:\Users\...\AppData\Roaming\6.gif
2015-08-13 18:30 - 2016-07-05 14:13 - 0000132 _____ () C:\Users\...\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2016-06-17 08:53 - 2016-06-17 08:53 - 0002949 _____ () C:\Users\...\AppData\Roaming\bar.conf.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0000772 _____ () C:\Users\...\AppData\Roaming\Black - White.act
2016-06-17 08:53 - 2016-06-17 08:53 - 0000524 _____ () C:\Users\...\AppData\Roaming\BMC blue 4.ADO
2016-06-17 08:53 - 2016-06-17 08:53 - 0000130 _____ () C:\Users\...\AppData\Roaming\boolean_single.js
2016-06-17 08:53 - 2016-06-17 08:53 - 0003272 _____ () C:\Users\...\AppData\Roaming\callBackCallBack.c
2016-06-17 08:53 - 2016-06-17 08:53 - 0001073 _____ () C:\Users\...\AppData\Roaming\chmod.js
2016-06-17 08:53 - 2016-06-17 08:53 - 0001241 _____ () C:\Users\...\AppData\Roaming\chunker.output.omit-xml-declaration.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0004073 _____ () C:\Users\...\AppData\Roaming\currency.data
2016-06-17 08:53 - 2016-06-17 08:53 - 0001575 _____ () C:\Users\...\AppData\Roaming\Data.mpl
2016-06-17 08:53 - 2016-06-17 08:53 - 0000430 _____ () C:\Users\...\AppData\Roaming\doc_to_epub.xsl
2016-06-17 08:53 - 2016-06-17 08:53 - 0002550 _____ () C:\Users\...\AppData\Roaming\download_5.ico
2016-06-17 08:53 - 2016-06-17 08:53 - 0000010 _____ () C:\Users\...\AppData\Roaming\Dummy.aff
2016-06-17 08:53 - 2016-06-17 08:53 - 0000952 _____ () C:\Users\...\AppData\Roaming\eclipse.autolabel.xml
2016-06-17 08:53 - 2016-06-17 08:53 - 0002877 _____ () C:\Users\...\AppData\Roaming\ETenms-B5-H
2016-06-17 08:53 - 2016-06-17 08:53 - 0001241 _____ () C:\Users\...\AppData\Roaming\EventList.java
2016-06-17 08:53 - 2016-06-17 08:53 - 0001627 _____ () C:\Users\...\AppData\Roaming\fan.png
2016-06-17 08:53 - 2016-06-17 08:53 - 0003917 _____ () C:\Users\...\AppData\Roaming\floppy_drive.png
2016-06-17 08:53 - 2016-06-17 08:53 - 0000794 _____ () C:\Users\...\AppData\Roaming\getPhotoshopExecutableLocation.jsx
2016-06-17 08:53 - 2016-06-17 08:53 - 0000027 _____ () C:\Users\...\AppData\Roaming\GMT+7
2016-06-17 08:52 - 2016-06-17 08:52 - 0000518 _____ () C:\Users\...\AppData\Roaming\goURL_lr_photoshop_fr.csv
2016-06-17 08:52 - 2016-06-17 08:52 - 0003797 _____ () C:\Users\...\AppData\Roaming\Graph1.mpl
2016-06-17 08:52 - 2016-06-17 08:52 - 0000524 _____ () C:\Users\...\AppData\Roaming\gray 423 bl very soft.ADO
1999-07-04 09:00 - 1999-07-04 09:00 - 0049751 _____ () C:\Users\...\AppData\Roaming\Kindred.6tT
1998-06-13 09:00 - 1998-06-13 09:00 - 0002160 _____ () C:\Users\...\AppData\Roaming\Stridency.u
2015-12-06 13:38 - 2015-12-19 13:32 - 0000236 _____ () C:\Users\...\AppData\Local\LaunchHomeCenter.log
2014-08-11 19:19 - 2014-08-11 19:19 - 0001499 _____ () C:\Users\...\AppData\Local\recently-used.xbel
2015-06-03 14:01 - 2015-06-03 14:01 - 0000003 _____ () C:\Users\...\AppData\Local\updater.log
2015-06-03 14:01 - 2016-05-24 20:36 - 0000059 _____ () C:\Users\...\AppData\Local\UserProducts.xml
2014-10-11 19:01 - 2014-10-11 19:01 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-07-12 09:10 - 2015-07-12 09:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\...\AppData\Local\Temp\BluestacksUninstaller.exe
C:\Users\...\AppData\Local\Temp\HD-LibraryHandler.dll
C:\Users\...\AppData\Local\Temp\HD-Logger-Native.dll
C:\Users\...\AppData\Local\Temp\libeay32.dll
C:\Users\...\AppData\Local\Temp\msvcr120.dll
C:\Users\...\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-06 13:25

==================== Ende von FRST.txt ============================
         

ich will hier niemanden verarschen und mich auch mit dem neuen scann entschuldiegen bitte um deine hilfe ob du mit mir bluestacks wieder zum laufen bekommst !

Bist du merkbefreit oder was?

Den Hinweis zu gecrackter Software hast du doch letztens schon bekommen! Und dass es hier keinen Support gibt wenn du gecrackte Software am Start hast!

Jetzt hast du den Crackmist schon wieder drauf!

also ich sehe in dem scann nix vom crack ausserdem ist es auch wie beim letzten mal runter bzw mit meinem key aus den unterlagen aktiviert oder siehst du was anderes ?


bitte rege dich nicht auf

Also mir reichts es jetzt. Die Passagen zum Crack wurden zitiert. Du willst es nicht wahrhaben. Auf deine Verarscherei hab ich keine Lust.

Für dich geht es mit Windows-Neuinstallation weiter. Am besten gleich mit W10.

[IMG]file:///C:/Users/Erwin%20Rauter/Desktop/Unbenannaat.png[/IMG]

so das orginal so eben gekauft und somit möcht ich mcih entschuldiegen um den ganzen stress hier zu beenden ich habe es verstanden kann dich voll und ganz verstehen

hoffe aber jetzt deine hilfe in anspruch nehemn zu können

Irgendwann isses auch mal vorbei. Wie gesagt, mach eine Neuinstallation, direkt mit W10. ISO kannst du direkt von MS laden. Daten sichern, von der ISO booten (DVD brennen oder Stick erstellen) und Anweisungen folgen.

nein lieber cosinus darauf habe ich kein vertrauen da andere seiten mir sagen können das es noch nicht sicher genug ist also somit es auch nicht auf mein pc kommt ! zumal ich auch nicht noch mehr durchsichtig sein möchte in der heutiegen zeit !

dennoch danke für den vorschlag

Soll ich dir nochmal den Crack-Lesestoff unter die Nase halten? Gerne:

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

Und du hast wiederholt einen Crack-Verstoß begangen.

da andere seiten mir sagen können das es noch nicht sicher genug ist

Blödsinn.

ok dann deinstaliere mit mir bitte "kms"

office 2013 ist so eben vom pc über RevoUninPro deinstalliert ich mache auch gerne einen neuen scann wo nur km s drinn stehen wird "gehe ich mal von aus"



ich brauche in der hinsicht wirklich deine/ eure hilfe!

von mir aus auch über tv-viever wenn du möchtest

Der scheiß wurde schon von dir deinstalliert und danach manuell von mir mit FRST gelöscht! Nun ist der Mist wieder drauf! Schnallste das endlich mal???