Stub erhielt falsche Daten / Online Banking Problem

Madyou · 03.09.2016, 10:48

Guten Tag liebe Helfer und Helferin

seit gut 1 Woche kommt es in unregelmäßigen Abständen dazu das ich bei öffnen von Dateien den Fehler Stub erhielt falschen Daten erhalte, laut Netzsuche sollte ich mal ein Systemscan (sfc/scannow) machen brachte auch keine Erkenntnis weil Der Windows-Ressourcenschutz hat keine Integritätsverletzung gefunden

Gestern Abend wollt ich noch eine Überweisung per online Banking machen mitten bei der Eingabe der Daten kamm die Meldung:
Sehr geehrte Kundin, sehr geehrter Kunde,
Sie haben längere Zeit keine Aktionen durchgeführt. Zu Ihrer eigenen Sicherheit haben wir die Sitzung beendet. Bitte melden Sie sich erneut an.

Habe dann erstmal Abstand genommen das nochmal zu versuchen weil die Meldung hatte ich schon nach 1 Minute nach Anmeldung auf mein Konto sonst nur wenn ich mal 10 Minuten inaktiv war, aber das war ich gestern definitiv nicht der Fall.

Jetzt habe ich den Verdacht das ich irgendein Schädlich auf mein System habe.
Der Emsisoft Scann hatte aber kein Fund ergeben.

M-K-D-B · 03.09.2016, 16:39

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von TDSS-Killer,
die beiden neuen Logdateien von FRST.

Madyou · 03.09.2016, 21:36

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von Jürgen (Administrator) auf HOME-PC (03-09-2016 21:35:55)
Gestartet von C:\Users\Jürgen\Desktop
Geladene Profile: Jürgen (Verfügbare Profile: Jürgen)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7241200 2016-07-26] (Emsisoft Ltd)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\MountPoints2: {107daf9b-5660-11e6-a624-806e6f6e6963} - "F:\LaunchU3.exe" -a
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
GroupPolicyScripts: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{240cf37f-1292-4e27-a919-7d779558b896}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-09-01] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-26] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-26] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-09-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554
FF Homepage: about:home
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-31] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-26] (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWoW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-31] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-09-01] (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-1976182191-4087556911-4006232103-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1976182191-4087556911-4006232103-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Extension: (Status-4-Evar) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\status4evar@caligonstudios.com.xpi [2016-01-03]
FF Extension: (Restart) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\Restart@schuzak.jp.xpi [2016-01-03]
FF Extension: (Secure Login) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\secureLogin@blueimp.net.xpi [2016-07-12]
FF Extension: (Stylish) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2016-08-11]
FF Extension: (Greasemonkey) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20]
FF Extension: (Menu Wizard) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\s3menu@wizard.xpi [2016-09-03]
FF Extension: (Modify Headers) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2016-07-12]
FF Extension: (RefControl) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{455D905A-D37C-4643-A9E2-F6FEFAA0424A}.xpi [2016-07-12]
FF Extension: (HTTPS Everywhere) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\https-everywhere-eff@eff.org.xpi [2016-09-02]
FF Extension: (about:config Buttons) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\about-config-single@codefisher.org.xpi [2016-07-12]
FF Extension: (CanvasBlocker) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\CanvasBlocker@kkapsner.de.xpi [2016-08-08]
FF Extension: (Wörterbuch Deutsch (de-DE), Hunspell-unterstützt) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\de_DE@dicts.j3e.de [2016-08-30]
FF Extension: (Self-Destructing Cookies) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2016-08-14]
FF Extension: (Random Agent Spoofer) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-AVgCeF1zoVzMjA@jetpack.xpi [2016-09-03]
FF Extension: (I don't care about cookies) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2016-08-28]
FF Extension: (Privacy Badger) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-MnnxcxisBPnSXQ-eff@jetpack.xpi [2016-08-11]
FF Extension: (Searchonymous) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-WF1v8esuNM9pRg@jetpack.xpi [2016-02-18]
FF Extension: (New Tab Override (browser.newtab.url replacement)) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\newtaboverride@agenedia.com.xpi [2016-07-12]
FF Extension: (uBlock Origin) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\uBlock0@raymondhill.net.xpi [2016-09-02]
FF Extension: (YouTube High Definition) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2016-08-25]
FF Extension: (DownThemAll!) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2016-09-02]
FF Extension: (YouTube Video Replay) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\{e1aaa9f8-4500-47f1-9a0a-b02bd60e4076}.xpi [2016-08-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9331168 2016-07-26] (Emsisoft Ltd)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3189488 2016-07-05] (Microsoft Corporation)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-08-29] (Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-17] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [115832 2016-07-21] (Emsisoft Ltd)
R1 FWNDIS_LWF; C:\Windows\system32\DRIVERS\fwndislwf64.sys [204688 2016-06-30] ()
R1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [144392 2016-06-30] ()
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72b89f8d71abda5d\nvlddmkm.sys [14199352 2016-08-16] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2016-07-16] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-03 21:35 - 2016-09-03 21:36 - 00014601 _____ C:\Users\Jürgen\Desktop\FRST.txt
2016-09-03 21:07 - 2016-09-03 21:35 - 00000000 ____D C:\FRST
2016-09-02 23:06 - 2016-09-02 23:23 - 02397696 _____ (Farbar) C:\Users\Jürgen\Desktop\FRST64.exe
2016-09-01 22:31 - 2016-08-27 14:45 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-09-01 22:31 - 2016-08-27 11:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2016-09-01 22:31 - 2016-08-27 07:12 - 04130944 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-09-01 22:31 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-01 22:31 - 2016-08-27 06:58 - 03893376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-09-01 22:31 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-01 22:31 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-09-01 22:31 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll
2016-09-01 22:31 - 2016-08-27 06:39 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-09-01 22:31 - 2016-08-27 06:38 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-09-01 22:31 - 2016-08-27 06:38 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2016-09-01 22:31 - 2016-08-27 06:37 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2016-09-01 22:31 - 2016-08-27 06:25 - 00804864 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-09-01 22:31 - 2016-08-20 08:26 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-01 22:31 - 2016-08-20 08:13 - 00590952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-01 22:31 - 2016-08-20 08:06 - 01046976 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-01 22:31 - 2016-08-20 08:06 - 00885832 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-09-01 22:31 - 2016-08-20 08:06 - 00108384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-09-01 22:31 - 2016-08-20 08:05 - 01377008 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-09-01 22:31 - 2016-08-20 08:04 - 07814488 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-01 22:31 - 2016-08-20 08:04 - 01349120 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-01 22:31 - 2016-08-20 08:04 - 01163696 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-09-01 22:31 - 2016-08-20 08:03 - 02257248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-09-01 22:31 - 2016-08-20 08:03 - 01883784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 02190688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 01279328 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-09-01 22:31 - 2016-08-20 07:52 - 00658776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 00178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2016-09-01 22:31 - 2016-08-20 07:51 - 00681312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-09-01 22:31 - 2016-08-20 07:50 - 02913104 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-09-01 22:31 - 2016-08-20 07:50 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-09-01 22:31 - 2016-08-20 07:50 - 01099608 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00987992 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00942424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2016-09-01 22:31 - 2016-08-20 07:50 - 00807776 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00073568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2016-09-01 22:31 - 2016-08-20 07:50 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00020320 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 22218808 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 01453992 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 01071728 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-09-01 22:31 - 2016-08-20 07:46 - 01570680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-01 22:31 - 2016-08-20 07:43 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-09-01 22:31 - 2016-08-20 07:42 - 02537824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-01 22:31 - 2016-08-20 07:34 - 01430200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-09-01 22:31 - 2016-08-20 07:34 - 00782176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-09-01 22:31 - 2016-08-20 07:34 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2016-09-01 22:31 - 2016-08-20 07:33 - 05722312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-09-01 22:31 - 2016-08-20 07:33 - 00852824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-09-01 22:31 - 2016-08-20 07:32 - 02166232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-09-01 22:31 - 2016-08-20 07:32 - 00846552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 20965240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 00980832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-09-01 22:31 - 2016-08-20 07:25 - 01264912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-09-01 22:31 - 2016-08-20 07:22 - 22571008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-09-01 22:31 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-01 22:31 - 2016-08-20 07:21 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-09-01 22:31 - 2016-08-20 07:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-09-01 22:31 - 2016-08-20 07:20 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-09-01 22:31 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-09-01 22:31 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-09-01 22:31 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-09-01 22:31 - 2016-08-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-09-01 22:31 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-09-01 22:31 - 2016-08-20 07:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-09-01 22:31 - 2016-08-20 07:17 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-09-01 22:31 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-09-01 22:31 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-01 22:31 - 2016-08-20 07:16 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-09-01 22:31 - 2016-08-20 07:16 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-09-01 22:31 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
2016-09-01 22:31 - 2016-08-20 07:14 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
2016-09-01 22:31 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
2016-09-01 22:31 - 2016-08-20 07:13 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-09-01 22:31 - 2016-08-20 07:12 - 01014784 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-09-01 22:31 - 2016-08-20 07:12 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00476672 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-09-01 22:31 - 2016-08-20 07:10 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-09-01 22:31 - 2016-08-20 07:10 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-09-01 22:31 - 2016-08-20 07:10 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 09128448 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 00491520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-09-01 22:31 - 2016-08-20 07:08 - 01906176 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-09-01 22:31 - 2016-08-20 07:08 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-09-01 22:31 - 2016-08-20 07:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-01 22:31 - 2016-08-20 07:06 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-09-01 22:31 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-09-01 22:31 - 2016-08-20 07:05 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-09-01 22:31 - 2016-08-20 07:05 - 00380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 23682560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 03245056 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2016-09-01 22:31 - 2016-08-20 07:04 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 05398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 02846208 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 00944640 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-01 22:31 - 2016-08-20 07:02 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 04612096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 00936960 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 19423232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 08124416 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 07624192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 05511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01690112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01106944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll
2016-09-01 22:31 - 2016-08-20 06:58 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-09-01 22:31 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 02680832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 00558080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02711040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02315264 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02289664 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02143232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 01006080 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll
2016-09-01 22:31 - 2016-08-20 06:55 - 19418624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-01 22:31 - 2016-08-20 06:55 - 00726016 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-09-01 22:31 - 2016-08-20 06:54 - 00806912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2016-09-01 22:31 - 2016-08-20 06:53 - 03617792 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-09-01 22:31 - 2016-08-20 06:53 - 03299328 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-09-01 22:31 - 2016-08-20 06:53 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2016-09-01 22:31 - 2016-08-20 06:52 - 00640000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 06044672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-09-01 22:31 - 2016-08-20 06:50 - 01875456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-09-01 22:31 - 2016-08-20 06:49 - 02999296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-09-01 22:31 - 2016-08-20 06:46 - 03105792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-09-01 22:31 - 2016-08-19 03:33 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-08-31 01:59 - 2016-08-31 01:59 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 01:59 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-08-31 01:59 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-08-31 01:59 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-08-31 01:59 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-08-31 01:57 - 2016-08-11 16:33 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 34837952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 28236856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10728856 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10530960 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10273096 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 09086344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 08681720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 08644456 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 03901520 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 03443152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 02914752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 02553912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437254.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437254.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01023544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00961080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00945088 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00897592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00803096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00694952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00644648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00584712 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00442816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00413256 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00393664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00386104 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00345936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-08-31 01:57 - 2016-08-11 16:33 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-08-28 18:24 - 2016-08-28 18:27 - 00000000 ____D C:\Users\Jürgen\AppData\Local\niemiro
2016-08-26 18:09 - 2016-08-30 21:56 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\TV-Browser
2016-08-26 18:08 - 2016-08-26 18:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TV-Browser
2016-08-26 18:08 - 2016-08-26 18:08 - 00000000 ____D C:\Program Files (x86)\TV-Browser
2016-08-26 17:07 - 2016-08-26 17:27 - 00000000 ____D C:\ProgramData\Oracle
2016-08-26 17:07 - 2016-08-26 17:07 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\Sun
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Sun
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-26 17:06 - 2016-08-26 17:06 - 00000000 ____D C:\Program Files\Java
2016-08-24 08:58 - 2016-08-24 08:58 - 00000000 ____D C:\Users\Jürgen\AppData\Local\TempTaskUpdateDetection1DE98E15-615A-4DE7-8E55-8178461CB8B2
2016-08-21 10:13 - 2016-08-21 10:13 - 02370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 02251432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01847048 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01595904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01557296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01343928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01066096 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00955008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00313560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-08-21 10:13 - 2016-08-21 10:13 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 17187328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13867520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13433856 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13080576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 12345344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 12174336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 09260032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-08-21 10:12 - 2016-08-21 10:12 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-08-21 10:12 - 2016-08-21 10:12 - 03116032 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02745224 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02422784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAJApi.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-21 10:12 - 2016-08-21 10:12 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-21 10:12 - 2016-08-21 10:12 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01780736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01694200 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01469120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01052672 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00860672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00619368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00595488 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00587968 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00529928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00509784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00450400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00435040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00381760 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00361096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00354264 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00321280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00224096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00151224 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00077664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00050880 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-08-21 10:12 - 2016-08-21 10:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-08-21 10:12 - 2016-08-21 10:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-08-21 09:54 - 2016-08-21 09:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-21 09:54 - 2016-08-21 09:54 - 00000000 ____D C:\Program Files\7-Zip
2016-08-16 10:56 - 2016-08-16 10:56 - 00000000 __RHD C:\MSOCache
2016-08-16 10:48 - 2016-08-16 10:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-16 10:48 - 2016-08-16 10:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-13 08:45 - 2016-08-13 08:50 - 00000000 ____D C:\Windows\system32\MRT
2016-08-13 08:45 - 2016-08-13 08:45 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 05622600 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 01066328 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00939872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00665768 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2016-08-11 15:38 - 2016-08-11 15:38 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Google
2016-08-11 15:35 - 2016-08-11 15:35 - 00002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-08-11 15:35 - 2016-08-11 15:35 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-11 08:38 - 2016-08-02 10:11 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-08-11 08:38 - 2016-08-02 10:10 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-08-11 08:38 - 2016-08-02 09:58 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-08-11 08:38 - 2016-08-02 06:25 - 01456640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-08-11 04:09 - 2016-09-02 16:42 - 00007596 _____ C:\Users\Jürgen\AppData\Local\Resmon.ResmonCfg
2016-08-09 14:14 - 2016-08-24 15:24 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\dvdcss
2016-08-09 13:01 - 2016-09-01 23:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-08-09 12:41 - 2016-08-09 13:00 - 00000000 ____D C:\Program Files\office.tmp
2016-08-09 12:32 - 2016-08-09 12:32 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Microsoft Help
2016-08-06 21:06 - 2016-08-06 21:07 - 00000000 ____D C:\Program Files (x86)\Xvid
2016-08-06 21:06 - 2016-08-06 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2016-08-06 21:06 - 2015-06-21 17:09 - 00713216 _____ C:\Windows\system32\xvidcore.dll
2016-08-06 21:06 - 2015-06-21 17:09 - 00251392 _____ C:\Windows\system32\xvidvfw.dll
2016-08-06 21:06 - 2015-06-21 17:09 - 00171520 _____ C:\Windows\system32\xvid.ax
2016-08-06 21:06 - 2015-06-21 17:09 - 00147968 _____ C:\Windows\SysWOW64\xvid.ax
2016-08-06 21:06 - 2015-06-21 17:08 - 00638976 _____ C:\Windows\SysWOW64\xvidcore.dll
2016-08-06 21:06 - 2015-06-21 17:08 - 00235520 _____ C:\Windows\SysWOW64\xvidvfw.dll
2016-08-04 12:37 - 2016-08-04 12:37 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2016-08-04 12:04 - 2016-08-05 11:20 - 00000638 _____ C:\Windows\Tasks\TrackerAutoUpdate.job
2016-08-04 12:04 - 2016-08-04 12:04 - 00003202 _____ C:\Windows\System32\Tasks\TrackerAutoUpdate
2016-08-04 12:04 - 2016-08-04 12:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2016-08-04 12:04 - 2016-08-04 12:04 - 00000000 ____D C:\Program Files\Tracker Software

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-03 21:34 - 2016-07-30 16:03 - 00000000 ____D C:\Program Files\Emsisoft Internet Security
2016-09-03 21:30 - 2016-07-30 15:43 - 00000000 ____D C:\Users\Jürgen\AppData\Local\ClassicShell
2016-09-03 21:29 - 2016-07-30 17:21 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-03 20:34 - 2016-07-30 15:15 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-09-03 15:59 - 2016-08-03 03:28 - 00004158 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{54B9C561-9CE1-4BD5-B0E6-219E0259160A}
2016-09-03 10:42 - 2016-07-30 15:27 - 00000000 ____D C:\Users\Jürgen
2016-09-03 10:33 - 2016-07-30 15:31 - 04093656 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-03 10:33 - 2016-07-17 00:51 - 01908014 _____ C:\Windows\system32\perfh007.dat
2016-09-03 10:33 - 2016-07-17 00:51 - 00494676 _____ C:\Windows\system32\perfc007.dat
2016-09-03 10:28 - 2016-07-30 16:52 - 00000000 ____D C:\ProgramData\Emsisoft
2016-09-03 10:26 - 2016-07-30 15:18 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-03 10:26 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2016-09-03 10:25 - 2016-07-31 09:34 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\vlc
2016-09-02 22:55 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2016-09-02 22:14 - 2016-08-01 14:39 - 00000000 ____D C:\Users\Jürgen\Documents\Euro Truck Simulator 2
2016-09-02 22:14 - 2016-07-30 20:28 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\TS3Client
2016-09-02 22:01 - 2016-07-30 20:28 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Overwolf
2016-09-02 19:32 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2016-09-01 23:20 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-09-01 22:50 - 2016-08-01 21:09 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-09-01 22:50 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-01 22:49 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2016-09-01 22:37 - 2016-07-30 15:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-09-01 22:37 - 2016-07-30 15:15 - 00231584 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-01 22:35 - 2016-07-17 00:56 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\dsc
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lv-LV
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lt-LT
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\et-EE
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\es-MX
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\en-GB
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-09-01 22:33 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2016-09-01 22:11 - 2016-07-16 13:43 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2016-09-01 22:11 - 2016-07-16 13:43 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-09-01 22:11 - 2016-07-16 13:42 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-09-01 22:11 - 2016-07-16 13:42 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-01 22:11 - 2016-07-16 13:42 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-01 22:11 - 2016-07-16 13:42 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-09-01 22:11 - 2016-07-16 13:42 - 00114192 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00079544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-08-31 01:59 - 2016-07-30 15:51 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-29 22:58 - 2016-07-30 15:27 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Packages
2016-08-29 21:30 - 2016-07-30 17:19 - 00000808 __RSH C:\ProgramData\ntuser.pol
2016-08-28 17:24 - 2016-07-30 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-28 10:00 - 2016-07-31 18:36 - 00000000 ____D C:\Users\Jürgen\Documents\Masters of the World
2016-08-26 21:08 - 2016-08-03 18:47 - 00000000 ____D C:\ProgramData\Steam
2016-08-26 07:43 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-08-26 07:43 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-08-25 07:34 - 2016-07-30 15:54 - 00001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-25 07:34 - 2016-07-30 15:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-08-22 12:15 - 2016-07-30 15:24 - 00000000 ____D C:\Users\defaultuser0
2016-08-21 10:14 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2016-08-11 16:33 - 2016-07-30 15:48 - 00040827 _____ C:\Windows\system32\nvinfo.pb
2016-08-11 14:27 - 2016-07-30 15:50 - 06386048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 02468288 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 01365048 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-08-11 14:27 - 2016-07-30 15:50 - 00548920 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-08-09 18:06 - 2016-07-30 15:50 - 07255045 _____ C:\Windows\system32\nvcoproc.bin
2016-08-06 21:06 - 2016-08-02 20:05 - 00000000 ____D C:\Users\Jürgen\Documents\American Truck Simulator
2016-08-04 13:43 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-08-04 11:05 - 2016-07-30 15:49 - 00000000 ____D C:\ProgramData\Package Cache

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-11 04:09 - 2016-09-02 16:42 - 0007596 _____ () C:\Users\Jürgen\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-02 19:03

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von Jürgen (03-09-2016 21:36:52)
Gestartet von C:\Users\Jürgen\Desktop
Windows 10 Pro Version 1607 (X64) (2016-07-30 13:25:07)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1976182191-4087556911-4006232103-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1976182191-4087556911-4006232103-503 - Limited - Disabled)
Gast (S-1-5-21-1976182191-4087556911-4006232103-501 - Limited - Disabled)
Jürgen (S-1-5-21-1976182191-4087556911-4006232103-1001 - Administrator - Enabled) => C:\Users\Jürgen

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Emsisoft Internet Security (Enabled - Up to date) {D1196F3E-3487-585D-3681-0661BD157EC3}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Internet Security (Enabled - Up to date) {6A788EDA-12BD-57D3-0C31-3D13C692347E}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Enabled) {E922EE1B-7EE8-5905-1DDE-AF5443C639B8}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
American Truck Simulator (HKLM\...\Steam App 270880) (Version:  - SCS Software)
Ansel (Version: 372.54 - NVIDIA Corporation) Hidden
Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.9 - Emsisoft Ltd.)
Euro Truck Simulator 2 (HKLM\...\Steam App 227300) (Version:  - SCS Software)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Masters of the World (HKLM\...\Steam App 268890) (Version:  - Eversim)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4849.1003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x64 de) (HKLM\...\Mozilla Firefox 48.0.2 (x64 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
NASCAR '15 Victory Edition (HKLM\...\Steam App 345890) (Version:  - Eutechnyx)
NBA 2K15 (HKLM\...\Steam App 282350) (Version:  - Visual Concepts)
NVIDIA Grafiktreiber 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.97.209.0 - Overwolf Ltd.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.1 - Tracker Software Products Ltd)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
This War of Mine (HKLM\...\Steam App 282070) (Version:  - 11 bit studios)
TruckersMP 0.2.1.0.1 Alpha (HKLM\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.2.1.0.1 Alpha - ETS2MP Team)
TV-Browser 3.4.4 (HKLM-x32\...\tvbrowser) (Version: 3.4.4 - TV-Browser Team)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.4) (Version: 1.3.4 - Xvid Team)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1976182191-4087556911-4006232103-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Jürgen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {191EB3E0-B1CA-405A-B452-2F2E36B2F615} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-31] (Adobe Systems Incorporated)
Task: {45BC2DC5-7B89-418F-A69D-3A963775829C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {6C0D14EF-B931-4769-81E4-3CE2DBACE41C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-07-05] (Microsoft Corporation)
Task: {71E0203C-2EAF-43F6-9A41-67602FD3DD9E} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-08-29] (Overwolf LTD)
Task: {73DF4D7D-2479-4FFC-A8F8-9F52762DFF27} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {96A47E1D-73B7-4E23-B090-97580AB66F4B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {C39712FC-C540-49A6-8DC4-C82961651D2A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-07-05] (Microsoft Corporation)
Task: {D33EC0EE-B877-4E65-A2FE-2FD892516312} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {E2C0AE1E-64CA-48FE-83CA-187AC6E454E9} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-04-19] (Tracker Software Products (Canada) Ltd.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-30 16:03 - 2016-06-30 16:49 - 01043568 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2016-08-22 20:49 - 2016-05-24 09:51 - 00116416 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-07-30 15:50 - 2016-08-11 14:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-07-30 15:46 - 2016-07-30 15:46 - 00959168 _____ () C:\Users\Jürgen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\Windows\SYSTEM32\CHARTV.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 13:43 - 2016-09-01 22:11 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00152000 _____ () C:\Program Files\VideoLAN\VLC\libvlc.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 02763200 _____ () C:\Program Files\VideoLAN\VLC\libvlccore.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00626624 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00046016 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00042944 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00091072 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00083392 _____ () C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 02568640 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00118720 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00267712 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00091072 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libvdr_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00059328 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00074176 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libsmooth_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00684480 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libhttplive_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00833984 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libdash_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00140224 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\libzip_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00055232 _____ () C:\Program Files\VideoLAN\VLC\plugins\access\librar_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00026560 _____ () C:\Program Files\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00150464 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 01605056 _____ () C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00349120 _____ () C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 01487808 _____ () C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00028608 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00068032 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00039872 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libes_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00051648 _____ () C:\Program Files\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00339392 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00028608 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 12298176 _____ () C:\Program Files\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00199616 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00844736 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00028096 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00035264 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00095680 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00035264 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00044480 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00034240 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00085952 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00049088 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00030144 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00032192 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00038336 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00038336 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00031168 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00029120 _____ () C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 15975872 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00031168 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00049600 _____ () C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00238016 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00108992 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00108992 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
2016-06-01 16:45 - 2016-06-01 16:45 - 00094144 _____ () C:\Program Files\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00330688 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00031168 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00347584 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 01521088 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00032704 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00049600 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00056256 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00437696 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00038848 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libg711_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 03009472 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00426432 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
2016-06-01 16:47 - 2016-06-01 16:47 - 00031680 _____ () C:\Program Files\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00026560 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00034240 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00148928 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00196544 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00091584 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 01515456 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00036800 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00025536 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00026560 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00032192 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00026048 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00029632 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
2016-06-01 16:46 - 2016-06-01 16:46 - 00051136 _____ () C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2016-07-16 13:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1976182191-4087556911-4006232103-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.42.129
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\StartupApproved\Run: => "Xvid"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{19B5D688-0EFF-4935-97D1-198C364D5788}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{44154BD3-F1BA-4DED-9F5A-792D5D154AA5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9A74D8E0-106E-44D8-AF6C-40734BF176AD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{EC01AB36-5E24-457D-80B9-ED1E4CEB7E11}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A94F0BEC-6282-4C44-B497-683AC611A03A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C7D35C96-D770-4C5D-BEC8-ED8F90FFB45E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{656BF8EC-534F-4771-AB73-8E3FAB1BEC65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Masters of the World\_start.exe
FirewallRules: [{FA09400D-23A6-4CCE-A6FD-74DA85DA79FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Masters of the World\_start.exe
FirewallRules: [{E197C4E1-AAAF-4A00-B6D6-D404BFC6F76E}] => (Allow) E:\Spiele\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{4F14E046-AC0F-4F5F-8745-B1FC365B5B92}] => (Allow) E:\Spiele\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{F7C85B8B-9DD5-451D-9FC1-56813E7122FD}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{8DE3A8AB-7F7F-463D-AD19-B555B5F5A247}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{30B619BC-DA06-4801-8AB9-4FBCD38C4916}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{B1912E92-8792-479E-97D4-0DC152217C99}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D47C7B79-AAEA-425B-88DE-289F3AB4C300}] => (Allow) E:\Spiele\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{D0A29DB8-5A82-49B2-8CFB-8C777F7E63CE}] => (Allow) E:\Spiele\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{C5627CBD-0A6F-4813-AB00-0A863170719C}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B3AAE6BF-B0F4-42BC-BB2E-963B9307FE41}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{EB7EB2A8-D78F-447E-8911-5AD3B0088749}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{E1BC8B3B-10A3-4E08-A09C-6C35B3450E5F}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{0A4AFC20-FCE3-4C5E-A66C-C39B1C6FFE46}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{25E37EE7-7DB8-4C7A-A7D2-9D30D7376648}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{309ED787-6BD3-4F59-A0F4-4BAF4E97CC81}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{567BF71A-09AF-4BCF-A2AB-540A4ECE48CF}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B3DFD2C7-387A-411E-A006-C756A8DED450}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{50EC71A7-53D9-4A16-9AF0-CC55FC8C7F6A}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{BFF76B59-C2C4-46C4-8FA7-F603C84D689D}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B0DFC732-1864-4CBC-94AD-7A3A9C0DB02F}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe

==================== Wiederherstellungspunkte =========================

24-08-2016 15:21:04 Windows Update
29-08-2016 21:45:23 Windows Modules Installer
01-09-2016 22:32:08 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/02/2016 10:54:53 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.
Error: (09/02/2016 10:01:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/02/2016 10:01:08 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (09/02/2016 10:00:55 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (09/02/2016 10:00:55 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/02/2016 10:00:55 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/02/2016 10:00:55 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.


Systemfehler:
=============
Error: (09/03/2016 09:28:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "CDPUserSvc_153343c" wurde mit folgendem Fehler beendet: 
Unbekannter Fehler

Error: (09/03/2016 09:11:47 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "CDPUserSvc_1393c30" wurde mit folgendem Fehler beendet: 
Unbekannter Fehler

Error: (09/03/2016 09:06:40 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "CDPUserSvc_12e2b19" wurde mit folgendem Fehler beendet: 
Unbekannter Fehler


CodeIntegrity:
===================================
  Date: 2016-08-02 14:08:16.234
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll.old because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-02 03:18:06.620
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-02 00:51:21.254
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-02 00:38:52.996
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 23:03:50.278
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:28:29.257
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:22:42.716
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:10:52.604
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 20:11:13.512
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 18:09:39.061
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: AMD Athlon(tm) II X4 620 Processor
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 6141.55 MB
Verfügbarer physikalischer RAM: 4422.98 MB
Summe virtueller Speicher: 7165.55 MB
Verfügbarer virtueller Speicher: 5047.53 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:118.75 GB) (Free:73.02 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 6D6F6B20)
No partition Table on disk 0.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: B29ED051)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Code:

ATTFilter

1:57:08.0776 0x0cf0  TDSS rootkit removing tool 3.1.0.11 Aug  5 2016 12:13:31
21:57:14.0589 0x0cf0  ============================================================
21:57:14.0589 0x0cf0  Current date / time: 2016/09/03 21:57:14.0589
21:57:14.0589 0x0cf0  SystemInfo:
21:57:14.0590 0x0cf0  
21:57:14.0590 0x0cf0  OS Version: 10.0.14393 ServicePack: 0.0
21:57:14.0590 0x0cf0  Product type: Workstation
21:57:14.0590 0x0cf0  ComputerName: HOME-PC
21:57:14.0590 0x0cf0  UserName: Jürgen
21:57:14.0590 0x0cf0  Windows directory: C:\Windows
21:57:14.0590 0x0cf0  System windows directory: C:\Windows
21:57:14.0590 0x0cf0  Running under WOW64
21:57:14.0590 0x0cf0  Processor architecture: Intel x64
21:57:14.0590 0x0cf0  Number of processors: 4
21:57:14.0590 0x0cf0  Page size: 0x1000
21:57:14.0590 0x0cf0  Boot type: Normal boot
21:57:14.0590 0x0cf0  CodeIntegrityOptions = 0x00000001
21:57:14.0590 0x0cf0  ============================================================
21:57:15.0059 0x0cf0  KLMD registered as C:\Windows\system32\drivers\43518439.sys
21:57:15.0060 0x0cf0  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.103, osProperties = 0x19
21:57:15.0394 0x0cf0  System UUID: {2125F1A5-B463-5B06-64F4-FB2731BCAF1C}
21:57:15.0987 0x0cf0  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:57:15.0987 0x0cf0  Drive \Device\Harddisk1\DR1 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x409B, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
21:57:15.0999 0x0cf0  Drive \Device\Harddisk2\DR3 - Size: 0x1DD180000 ( 7.45 Gb ), SectorSize: 0x200, Cylinders: 0x3CD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
21:57:16.0004 0x0cf0  ============================================================
21:57:16.0004 0x0cf0  \Device\Harddisk0\DR0:
21:57:16.0004 0x0cf0  MBR partitions:
21:57:16.0004 0x0cf0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x75654E0A, BlocksNum 0x72617473
21:57:16.0004 0x0cf0  \Device\Harddisk1\DR1:
21:57:16.0005 0x0cf0  MBR partitions:
21:57:16.0005 0x0cf0  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xFA000
21:57:16.0005 0x0cf0  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0xFA800, BlocksNum 0xED81000
21:57:16.0005 0x0cf0  \Device\Harddisk2\DR3:
21:57:16.0006 0x0cf0  MBR partitions:
21:57:16.0006 0x0cf0  \Device\Harddisk2\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xEE8400
21:57:16.0006 0x0cf0  ============================================================
21:57:16.0008 0x0cf0  C: <-> \Device\Harddisk1\DR1\Partition2
21:57:16.0008 0x0cf0  ============================================================
21:57:16.0009 0x0cf0  Initialize success
21:57:16.0009 0x0cf0  ============================================================
21:58:58.0048 0x0554  ============================================================
21:58:58.0048 0x0554  Scan started
21:58:58.0048 0x0554  Mode: Manual; SigCheck; TDLFS; 
21:58:58.0048 0x0554  ============================================================
21:58:58.0048 0x0554  KSN ping started
21:58:59.0620 0x0554  KSN ping finished: true
21:59:00.0943 0x0554  ================ Scan system memory ========================
21:59:00.0943 0x0554  System memory - ok
21:59:00.0944 0x0554  ================ Scan services =============================
21:59:01.0007 0x0554  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
21:59:01.0147 0x0554  1394ohci - ok
21:59:01.0169 0x0554  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\Windows\system32\drivers\3ware.sys
21:59:01.0238 0x0554  3ware - ok
21:59:01.0504 0x0554  [ 02F3BA98D25FD4764CBEFF365EC73113, B8641770BA1782E9A49A217BB142C3CC394CA17C3D2A27422690D336B06D3769 ] a2AntiMalware   C:\Program Files\Emsisoft Internet Security\a2service.exe
21:59:01.0813 0x0554  a2AntiMalware - ok
21:59:01.0872 0x0554  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:59:01.0942 0x0554  ACPI - ok
21:59:01.0954 0x0554  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\Windows\System32\drivers\AcpiDev.sys
21:59:01.0995 0x0554  AcpiDev - ok
21:59:02.0007 0x0554  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
21:59:02.0037 0x0554  acpiex - ok
21:59:02.0046 0x0554  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
21:59:02.0150 0x0554  acpipagr - ok
21:59:02.0160 0x0554  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys
21:59:02.0204 0x0554  AcpiPmi - ok
21:59:02.0212 0x0554  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
21:59:02.0242 0x0554  acpitime - ok
21:59:02.0270 0x0554  [ 32B31B696CB8E8F380831DFEB80A67E4, 8C8F6E16F2FB3E8F10569261B7712BBC931A2924B6C27D561E7F828041C4F3E6 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:59:02.0364 0x0554  AdobeFlashPlayerUpdateSvc - ok
21:59:02.0409 0x0554  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX         C:\Windows\system32\drivers\ADP80XX.SYS
21:59:02.0481 0x0554  ADP80XX - ok
21:59:02.0514 0x0554  [ 983266DA83FFF73DBDDD3730A4712228, 433A2731DAC687C52FB7E23093B8E11D92CCCF4C35B493D73AC30C6A4A6D2A6C ] AFD             C:\Windows\system32\drivers\afd.sys
21:59:02.0558 0x0554  AFD - ok
21:59:02.0575 0x0554  [ E44DB3F7225EC3E119560738B3619972, 32946FBC2BD74072F22E48D769A034183F6C3728FCCC3CF0DD561602511E39B2 ] ahcache         C:\Windows\system32\DRIVERS\ahcache.sys
21:59:02.0616 0x0554  ahcache - ok
21:59:02.0626 0x0554  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\Windows\System32\AJRouter.dll
21:59:02.0657 0x0554  AJRouter - ok
21:59:02.0668 0x0554  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\Windows\System32\alg.exe
21:59:02.0699 0x0554  ALG - ok
21:59:02.0711 0x0554  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\Windows\System32\drivers\amdk8.sys
21:59:02.0741 0x0554  AmdK8 - ok
21:59:02.0752 0x0554  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
21:59:02.0785 0x0554  AmdPPM - ok
21:59:02.0796 0x0554  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
21:59:02.0821 0x0554  amdsata - ok
21:59:02.0836 0x0554  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
21:59:02.0868 0x0554  amdsbs - ok
21:59:02.0878 0x0554  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\Windows\system32\drivers\amdxata.sys
21:59:02.0898 0x0554  amdxata - ok
21:59:02.0912 0x0554  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\Windows\system32\drivers\appid.sys
21:59:02.0938 0x0554  AppID - ok
21:59:02.0950 0x0554  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:59:02.0985 0x0554  AppIDSvc - ok
21:59:02.0996 0x0554  [ 008E4CCA7A4B33042276061E0A5B8244, DAD980540B564EFA06760435AF1B3213056E6DE8B2A55DF98E7D871625D4B080 ] Appinfo         C:\Windows\System32\appinfo.dll
21:59:03.0030 0x0554  Appinfo - ok

Madyou · 03.09.2016, 21:37

Code:

ATTFilter

21:57:08.0776 0x0cf0  TDSS rootkit removing tool 3.1.0.11 Aug  5 2016 12:13:31
21:57:14.0589 0x0cf0  ============================================================
21:57:14.0589 0x0cf0  Current date / time: 2016/09/03 21:57:14.0589
21:57:14.0589 0x0cf0  SystemInfo:
21:57:14.0590 0x0cf0  
21:57:14.0590 0x0cf0  OS Version: 10.0.14393 ServicePack: 0.0
21:57:14.0590 0x0cf0  Product type: Workstation
21:57:14.0590 0x0cf0  ComputerName: HOME-PC
21:57:14.0590 0x0cf0  UserName: Jürgen
21:57:14.0590 0x0cf0  Windows directory: C:\Windows
21:57:14.0590 0x0cf0  System windows directory: C:\Windows
21:57:14.0590 0x0cf0  Running under WOW64
21:57:14.0590 0x0cf0  Processor architecture: Intel x64
21:57:14.0590 0x0cf0  Number of processors: 4
21:57:14.0590 0x0cf0  Page size: 0x1000
21:57:14.0590 0x0cf0  Boot type: Normal boot
21:57:14.0590 0x0cf0  CodeIntegrityOptions = 0x00000001
21:57:14.0590 0x0cf0  ============================================================
21:57:15.0059 0x0cf0  KLMD registered as C:\Windows\system32\drivers\43518439.sys
21:57:15.0060 0x0cf0  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.103, osProperties = 0x19
21:57:15.0394 0x0cf0  System UUID: {2125F1A5-B463-5B06-64F4-FB2731BCAF1C}
21:57:15.0987 0x0cf0  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:57:15.0987 0x0cf0  Drive \Device\Harddisk1\DR1 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x409B, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
21:57:15.0999 0x0cf0  Drive \Device\Harddisk2\DR3 - Size: 0x1DD180000 ( 7.45 Gb ), SectorSize: 0x200, Cylinders: 0x3CD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
21:57:16.0004 0x0cf0  ============================================================
21:57:16.0004 0x0cf0  \Device\Harddisk0\DR0:
21:57:16.0004 0x0cf0  MBR partitions:
21:57:16.0004 0x0cf0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x75654E0A, BlocksNum 0x72617473
21:57:16.0004 0x0cf0  \Device\Harddisk1\DR1:
21:57:16.0005 0x0cf0  MBR partitions:
21:57:16.0005 0x0cf0  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xFA000
21:57:16.0005 0x0cf0  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0xFA800, BlocksNum 0xED81000
21:57:16.0005 0x0cf0  \Device\Harddisk2\DR3:
21:57:16.0006 0x0cf0  MBR partitions:
21:57:16.0006 0x0cf0  \Device\Harddisk2\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xEE8400
21:57:16.0006 0x0cf0  ============================================================
21:57:16.0008 0x0cf0  C: <-> \Device\Harddisk1\DR1\Partition2
21:57:16.0008 0x0cf0  ============================================================
21:57:16.0009 0x0cf0  Initialize success
21:57:16.0009 0x0cf0  ============================================================
21:58:58.0048 0x0554  ============================================================
21:58:58.0048 0x0554  Scan started
21:58:58.0048 0x0554  Mode: Manual; SigCheck; TDLFS; 
21:58:58.0048 0x0554  ============================================================
21:58:58.0048 0x0554  KSN ping started
21:58:59.0620 0x0554  KSN ping finished: true
21:59:00.0943 0x0554  ================ Scan system memory ========================
21:59:00.0943 0x0554  System memory - ok
21:59:00.0944 0x0554  ================ Scan services =============================
21:59:01.0007 0x0554  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
21:59:01.0147 0x0554  1394ohci - ok
21:59:01.0169 0x0554  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\Windows\system32\drivers\3ware.sys
21:59:01.0238 0x0554  3ware - ok
21:59:01.0504 0x0554  [ 02F3BA98D25FD4764CBEFF365EC73113, B8641770BA1782E9A49A217BB142C3CC394CA17C3D2A27422690D336B06D3769 ] a2AntiMalware   C:\Program Files\Emsisoft Internet Security\a2service.exe
21:59:01.0813 0x0554  a2AntiMalware - ok
21:59:01.0872 0x0554  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:59:01.0942 0x0554  ACPI - ok
21:59:01.0954 0x0554  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\Windows\System32\drivers\AcpiDev.sys
21:59:01.0995 0x0554  AcpiDev - ok
21:59:02.0007 0x0554  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
21:59:02.0037 0x0554  acpiex - ok
21:59:02.0046 0x0554  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
21:59:02.0150 0x0554  acpipagr - ok
21:59:02.0160 0x0554  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys
21:59:02.0204 0x0554  AcpiPmi - ok
21:59:02.0212 0x0554  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
21:59:02.0242 0x0554  acpitime - ok
21:59:02.0270 0x0554  [ 32B31B696CB8E8F380831DFEB80A67E4, 8C8F6E16F2FB3E8F10569261B7712BBC931A2924B6C27D561E7F828041C4F3E6 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:59:02.0364 0x0554  AdobeFlashPlayerUpdateSvc - ok
21:59:02.0409 0x0554  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX         C:\Windows\system32\drivers\ADP80XX.SYS
21:59:02.0481 0x0554  ADP80XX - ok
21:59:02.0514 0x0554  [ 983266DA83FFF73DBDDD3730A4712228, 433A2731DAC687C52FB7E23093B8E11D92CCCF4C35B493D73AC30C6A4A6D2A6C ] AFD             C:\Windows\system32\drivers\afd.sys
21:59:02.0558 0x0554  AFD - ok
21:59:02.0575 0x0554  [ E44DB3F7225EC3E119560738B3619972, 32946FBC2BD74072F22E48D769A034183F6C3728FCCC3CF0DD561602511E39B2 ] ahcache         C:\Windows\system32\DRIVERS\ahcache.sys
21:59:02.0616 0x0554  ahcache - ok
21:59:02.0626 0x0554  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\Windows\System32\AJRouter.dll
21:59:02.0657 0x0554  AJRouter - ok
21:59:02.0668 0x0554  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\Windows\System32\alg.exe
21:59:02.0699 0x0554  ALG - ok
21:59:02.0711 0x0554  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\Windows\System32\drivers\amdk8.sys
21:59:02.0741 0x0554  AmdK8 - ok
21:59:02.0752 0x0554  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
21:59:02.0785 0x0554  AmdPPM - ok
21:59:02.0796 0x0554  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
21:59:02.0821 0x0554  amdsata - ok
21:59:02.0836 0x0554  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
21:59:02.0868 0x0554  amdsbs - ok
21:59:02.0878 0x0554  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\Windows\system32\drivers\amdxata.sys
21:59:02.0898 0x0554  amdxata - ok
21:59:02.0912 0x0554  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\Windows\system32\drivers\appid.sys
21:59:02.0938 0x0554  AppID - ok
21:59:02.0950 0x0554  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:59:02.0985 0x0554  AppIDSvc - ok
21:59:02.0996 0x0554  [ 008E4CCA7A4B33042276061E0A5B8244, DAD980540B564EFA06760435AF1B3213056E6DE8B2A55DF98E7D871625D4B080 ] Appinfo         C:\Windows\System32\appinfo.dll
21:59:03.0030 0x0554  Appinfo - ok
21:59:03.0038 0x0554  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr   C:\Windows\system32\drivers\applockerfltr.sys
21:59:03.0071 0x0554  applockerfltr - ok
21:59:03.0084 0x0554  [ 76A12AC673B0F8A607ACDD0583C247D4, CBC6C0EB82C7A8E3998344280BBB5A697AFA7206CA2BADFDA7ED6E7DD20E3DAC ] AppMgmt         C:\Windows\System32\appmgmts.dll
21:59:03.0121 0x0554  AppMgmt - ok
21:59:03.0144 0x0554  [ 41BF82B41BD24BAC9D9890DAC3212007, 0644BEE740244188B3D39F875D313B560D288B7FC33064E352C2A5F09073E361 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
21:59:03.0199 0x0554  AppReadiness - ok
21:59:03.0231 0x0554  [ 1C37C4C7172DFF2B1824F063C4527E71, 9F3C3906CB71A8AD5C63F12A9CC2495BE062366E136D389FCBCF5F40AFA7DEAB ] AppVClient      C:\Windows\system32\AppVClient.exe
21:59:03.0278 0x0554  AppVClient - ok
21:59:03.0292 0x0554  [ FC51FBAF73621601693DA24262353DE3, 147A5F185724E76C7E4EC6FA829A0311773B6A77B8F0A7953C1E6073AD5F4F94 ] AppvStrm        C:\Windows\system32\drivers\AppvStrm.sys
21:59:03.0317 0x0554  AppvStrm - ok
21:59:03.0332 0x0554  [ 8DC924848E20F890BEFC6B31136D46BE, B7603425B4970F505B5A3EB0F6652A9CDD188059BDC945D6DF2BADC2DF8F4B5D ] AppvVemgr       C:\Windows\system32\drivers\AppvVemgr.sys
21:59:03.0361 0x0554  AppvVemgr - ok
21:59:03.0374 0x0554  [ 9ADC5A8BEE10E174F95349E9232D8E76, F322991323DCDC51199BB3AB0DA20F6C3CC7EE6E804400B473C610FDB895F0AE ] AppvVfs         C:\Windows\system32\drivers\AppvVfs.sys
21:59:03.0398 0x0554  AppvVfs - ok
21:59:03.0468 0x0554  [ 1212D65C0B8757ACF1201785B3BD4CDC, 7FDB781ED2DEB296371E7ACFC2A34DDB5A7742A2883C486E465C1D4617D9EC80 ] AppXSvc         C:\Windows\system32\appxdeploymentserver.dll
21:59:03.0587 0x0554  AppXSvc - ok
21:59:03.0608 0x0554  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
21:59:03.0631 0x0554  arcsas - ok
21:59:03.0641 0x0554  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
21:59:03.0669 0x0554  AsyncMac - ok
21:59:03.0678 0x0554  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi           C:\Windows\system32\drivers\atapi.sys
21:59:03.0698 0x0554  atapi - ok
21:59:03.0716 0x0554  [ 5D637DF654D6386487876ADF5AF301B3, 7B53356237369D892F5BBEA9C967B20DCA40FA2B6B3C5AF7A4304FFD00DF1BFC ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
21:59:03.0758 0x0554  AudioEndpointBuilder - ok
21:59:03.0793 0x0554  [ FDD11F6C771FC6FD5EAE7D2D7502D39A, 4E75EA7BB36D2FACF71DEDFC604E1A618978273448D16FCAFE98D244642E9EAD ] Audiosrv        C:\Windows\System32\Audiosrv.dll
21:59:03.0861 0x0554  Audiosrv - ok
21:59:03.0876 0x0554  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:59:03.0911 0x0554  AxInstSV - ok
21:59:03.0934 0x0554  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
21:59:03.0972 0x0554  b06bdrv - ok
21:59:03.0983 0x0554  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
21:59:04.0012 0x0554  BasicDisplay - ok
21:59:04.0022 0x0554  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender     C:\Windows\System32\drivers\BasicRender.sys
21:59:04.0048 0x0554  BasicRender - ok
21:59:04.0061 0x0554  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn           C:\Windows\System32\drivers\bcmfn.sys
21:59:04.0090 0x0554  bcmfn - ok
21:59:04.0099 0x0554  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
21:59:04.0125 0x0554  bcmfn2 - ok
21:59:04.0143 0x0554  [ D4EFDA0D56429018281F8F3188E6F86C, 020B861338BAF8E2A861CA1D2D22640CCD39BA84F18260F9862F7E3AC5014985 ] BDESVC          C:\Windows\System32\bdesvc.dll
21:59:04.0186 0x0554  BDESVC - ok
21:59:04.0195 0x0554  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\Windows\system32\drivers\Beep.sys
21:59:04.0223 0x0554  Beep - ok
21:59:04.0253 0x0554  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE             C:\Windows\System32\bfe.dll
21:59:04.0312 0x0554  BFE - ok
21:59:04.0353 0x0554  [ BC27BF1FCD63540A194E549FB80C9C8D, E0D698201AC00BA8A8D8E2B19FAAB6DD0488E837EDB011943ACAD5E72EF281DA ] BITS            C:\Windows\System32\qmgr.dll
21:59:04.0429 0x0554  BITS - ok
21:59:04.0443 0x0554  [ EEBFAEB4702E1049ECD44B10485E6C0C, 8F4D31E36717101B6172D7346E86EBC77B9CDAA5CC14AA1379661C16A7FF05E2 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:59:04.0475 0x0554  bowser - ok
21:59:04.0504 0x0554  [ 78C35DD7CF780428650B1EE9B0F8D41E, C5A3111383CD9813A4ED33E244E20E2E0607CDEFC5BF00A760F63DAD019EE90E ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
21:59:04.0564 0x0554  BrokerInfrastructure - ok
21:59:04.0582 0x0554  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser         C:\Windows\System32\browser.dll
21:59:04.0613 0x0554  Browser - ok
21:59:04.0623 0x0554  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
21:59:04.0651 0x0554  BthAvrcpTg - ok
21:59:04.0661 0x0554  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum       C:\Windows\System32\drivers\bthhfenum.sys
21:59:04.0692 0x0554  BthHFEnum - ok
21:59:04.0701 0x0554  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
21:59:04.0727 0x0554  bthhfhid - ok
21:59:04.0744 0x0554  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
21:59:04.0783 0x0554  BthHFSrv - ok
21:59:04.0794 0x0554  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
21:59:04.0821 0x0554  BTHMODEM - ok
21:59:04.0839 0x0554  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv         C:\Windows\system32\bthserv.dll
21:59:04.0870 0x0554  bthserv - ok
21:59:04.0879 0x0554  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
21:59:04.0905 0x0554  buttonconverter - ok
21:59:04.0917 0x0554  [ 4C61113687EB66035A70A55EE9B7DB4A, 3339821A3853B90F3B468470493A813053D82014E2677E726C16E19AABE2A440 ] CapImg          C:\Windows\System32\drivers\capimg.sys
21:59:04.0948 0x0554  CapImg - ok
21:59:04.0959 0x0554  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:59:04.0989 0x0554  cdfs - ok
21:59:05.0008 0x0554  [ 7AD576CF28F1E7AEFC3D6E8279DF84F6, 1F7E26F9354B543881E940F5183086AC00684CDC0AB7A797E1F0AB21C4AD8716 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
21:59:05.0055 0x0554  CDPSvc - ok
21:59:05.0075 0x0554  [ 0415CA08674F64D63329CB51D4004685, 12F3AB9A263F2E131F4969E6CED2AE6DD7AF06C10AF02923256FF4C9E34698BF ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll
21:59:05.0120 0x0554  CDPUserSvc - ok
21:59:05.0141 0x0554  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom           C:\Windows\System32\drivers\cdrom.sys
21:59:05.0174 0x0554  cdrom - ok
21:59:05.0189 0x0554  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] CertPropSvc     C:\Windows\System32\certprop.dll
21:59:05.0230 0x0554  CertPropSvc - ok
21:59:05.0249 0x0554  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi       C:\Windows\system32\drivers\cht4sx64.sys
21:59:05.0281 0x0554  cht4iscsi - ok
21:59:05.0347 0x0554  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd         C:\Windows\System32\drivers\cht4vx64.sys
21:59:05.0433 0x0554  cht4vbd - ok
21:59:05.0449 0x0554  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\Windows\System32\drivers\circlass.sys
21:59:05.0475 0x0554  circlass - ok
21:59:05.0495 0x0554  [ 09D0B94D3A06EFD1EB70189EC4B26DF7, 47E73C536C63F4C21E4ADBB122A152D3A291CF4EDD4CB4D07D09D14E1A9961F1 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
21:59:05.0525 0x0554  CLFS - ok
21:59:05.0622 0x0554  [ 5A2EF42528D1D2D3C8732FC1A7CDD16D, B961D2F4B7DA5FF68AFCD10FDAC545442FEC8CF05D7D6BB4A00E2F5A2F2950F0 ] ClickToRunSvc   C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
21:59:05.0731 0x0554  ClickToRunSvc - ok
21:59:05.0769 0x0554  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC         C:\Windows\System32\ClipSVC.dll
21:59:05.0816 0x0554  ClipSVC - ok
21:59:05.0829 0x0554  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg           C:\Windows\System32\drivers\registry.sys
21:59:05.0858 0x0554  clreg - ok
21:59:05.0882 0x0554  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
21:59:05.0909 0x0554  CmBatt - ok
21:59:05.0935 0x0554  [ 3E502EB1701CF54CF237B6250FBE38EA, E63F6F45D3990ACBCA96003F67C83697BA5B74B89F972C5E9CC45F90D05519FF ] CNG             C:\Windows\system32\Drivers\cng.sys
21:59:05.0977 0x0554  CNG - ok
21:59:05.0990 0x0554  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist     C:\Windows\system32\DRIVERS\cnghwassist.sys
21:59:06.0010 0x0554  cnghwassist - ok
21:59:06.0028 0x0554  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
21:59:06.0054 0x0554  CompositeBus - ok
21:59:06.0062 0x0554  COMSysApp - ok
21:59:06.0073 0x0554  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\Windows\system32\drivers\condrv.sys
21:59:06.0097 0x0554  condrv - ok
21:59:06.0128 0x0554  [ 9CE94A05A5BA6A92013CAD1B924B1EC2, 19ECE2C607BAE5DCE7ED4AB46722E63EF834B219716F3A90AF661C02B58088C4 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
21:59:06.0180 0x0554  CoreMessagingRegistrar - ok
21:59:06.0201 0x0554  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:59:06.0231 0x0554  CryptSvc - ok
21:59:06.0255 0x0554  [ 03214883D52FAD46573233852344C72C, 63DCCDD895EB804D205ABB8EA381B34FB0879D09E4D0EB0B28F9B2BB1024BAB7 ] CSC             C:\Windows\system32\drivers\csc.sys
21:59:06.0305 0x0554  CSC - ok
21:59:06.0335 0x0554  [ BE35D1BAC3F18C9EB1C1CFBA31ED95E3, 4255475D173868A0E5583E844A1884E819E229838C4DEACAC47F1A4DEF388C9D ] CscService      C:\Windows\System32\cscsvc.dll
21:59:06.0391 0x0554  CscService - ok
21:59:06.0404 0x0554  [ 68B1E0DA1BB1680494227E88CE821E2F, DE9AFCE4CC28F3484180D6A63FBBDA5B89F208E056BD17870C074094159ED6AF ] dam             C:\Windows\system32\drivers\dam.sys
21:59:06.0425 0x0554  dam - ok
21:59:06.0463 0x0554  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:59:06.0532 0x0554  DcomLaunch - ok
21:59:06.0550 0x0554  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
21:59:06.0590 0x0554  DcpSvc - ok
21:59:06.0615 0x0554  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc       C:\Windows\System32\defragsvc.dll
21:59:06.0671 0x0554  defragsvc - ok
21:59:06.0696 0x0554  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\Windows\system32\das.dll
21:59:06.0744 0x0554  DeviceAssociationService - ok
21:59:06.0757 0x0554  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall   C:\Windows\system32\umpnpmgr.dll
21:59:06.0798 0x0554  DeviceInstall - ok
21:59:06.0807 0x0554  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
21:59:06.0837 0x0554  DevQueryBroker - ok
21:59:06.0850 0x0554  [ 7EAFDEF51136E8F2452CEBD8D084F108, 88609DCB578D14BEBF7CF3C4D300FE2440BA0CF95189969247AB516059E9C284 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
21:59:06.0883 0x0554  Dfsc - ok
21:59:06.0895 0x0554  [ 0F4A5D01156B948B54550375498B08A2, 1CAE3D744429A06E9C9EC46AC6B216AB68154EF8FACDD0721C47902B83820F56 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
21:59:06.0916 0x0554  dg_ssudbus - ok
21:59:06.0935 0x0554  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:59:06.0977 0x0554  Dhcp - ok
21:59:06.0989 0x0554  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
21:59:07.0021 0x0554  diagnosticshub.standardcollector.service - ok
21:59:07.0083 0x0554  [ 6079A6F6406C4FFB552F66384F25F919, 8B38645F1F4A8F72DF18373EDCD3828DDF8D4E2A406E42E654F21C0C1A5EB661 ] DiagTrack       C:\Windows\system32\diagtrack.dll
21:59:07.0196 0x0554  DiagTrack - ok
21:59:07.0214 0x0554  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\Windows\system32\drivers\disk.sys
21:59:07.0238 0x0554  disk - ok
21:59:07.0258 0x0554  [ 53757B27986CDC970725FAE35F45CA11, 3B332C2FBD502BAD959DDD65C86FEAFA78DFDDF6405F130F2F26A8AF9424E21B ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
21:59:07.0314 0x0554  DmEnrollmentSvc - ok
21:59:07.0324 0x0554  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc           C:\Windows\System32\drivers\dmvsc.sys
21:59:07.0353 0x0554  dmvsc - ok
21:59:07.0363 0x0554  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
21:59:07.0400 0x0554  dmwappushservice - ok
21:59:07.0415 0x0554  [ 7F8A3ABF7750326E18CE953CCE262670, 5DBD159E8A455A42764FC73CF7DCAC849B5896848C5589B00BD36697804C0A3B ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:59:07.0453 0x0554  Dnscache - ok
21:59:07.0473 0x0554  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc         C:\Windows\System32\dot3svc.dll
21:59:07.0511 0x0554  dot3svc - ok
21:59:07.0523 0x0554  [ 27069CFFF29B7F04F4B1BB10154BE52B, 6869626F9A1D3F64224883C5E661638CEE893A3E29651C7B9302A03E52180415 ] dot4            C:\Windows\system32\DRIVERS\Dot4.sys
21:59:07.0543 0x0554  dot4 - ok
21:59:07.0552 0x0554  [ 0BD906A79F9CE3013F7D9D0AC45F9F9D, 2F7D5082E7E226D5EBEA164A8ACEE0A447C96EB1829224A6EFA3E7B4EFEE1D14 ] Dot4Print       C:\Windows\System32\drivers\Dot4Prt.sys
21:59:07.0567 0x0554  Dot4Print - ok
21:59:07.0576 0x0554  [ B7D595F2F464F7B628AD53F06547792C, F5D06A91EF54FBF56305FCC882B854350B266B2A005D80CC77AEBC2929440729 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
21:59:07.0595 0x0554  dot4usb - ok
21:59:07.0607 0x0554  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS             C:\Windows\system32\dps.dll
21:59:07.0640 0x0554  DPS - ok
21:59:07.0649 0x0554  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud         C:\Windows\system32\DRIVERS\drmkaud.sys
21:59:07.0671 0x0554  drmkaud - ok
21:59:07.0684 0x0554  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
21:59:07.0721 0x0554  DsmSvc - ok
21:59:07.0733 0x0554  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc           C:\Windows\System32\DsSvc.dll
21:59:07.0768 0x0554  DsSvc - ok
21:59:07.0835 0x0554  [ A39F5D1A0BB032DDDBAD3A0C050B1049, BDA669BCF60EFB17A539CE8474613B0AC69E9976F6C3080ED325B9EA4D8C0AF5 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
21:59:07.0928 0x0554  DXGKrnl - ok
21:59:07.0947 0x0554  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost         C:\Windows\System32\eapsvc.dll
21:59:07.0986 0x0554  EapHost - ok
21:59:08.0085 0x0554  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
21:59:08.0218 0x0554  ebdrv - ok
21:59:08.0240 0x0554  [ FD0FC10A8CFD7AFEC58BBBE649BAA470, 9BDBD540FCF33FC01AB896D50A872E2FB5A007225FA003C528E6DCBDBEE19C25 ] EFS             C:\Windows\System32\lsass.exe
21:59:08.0265 0x0554  EFS - ok
21:59:08.0276 0x0554  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass     C:\Windows\system32\drivers\EhStorClass.sys
21:59:08.0298 0x0554  EhStorClass - ok
21:59:08.0310 0x0554  [ 4D49B99DCACA1FC782A94DB596246504, 878B27A128093640830AB4C78973E1D896CF3AA918FA24FAB1029F0C9D1CB98B ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
21:59:08.0338 0x0554  EhStorTcgDrv - ok
21:59:08.0352 0x0554  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
21:59:08.0389 0x0554  embeddedmode - ok
21:59:08.0406 0x0554  [ B4264DEF962801CDB83C008DE30758D1, 57886688102BE727450BA45932044A5A389B5822A0C1C08C2AFFBA380F70C3F3 ] EntAppSvc       C:\Windows\system32\EnterpriseAppMgmtSvc.dll
21:59:08.0451 0x0554  EntAppSvc - ok
21:59:08.0463 0x0554  [ F25A2EBFEB9814C048DAC62D0CB8C83B, 5DBF0A98F72DF44B4BD5101C884CE0A6FE9BC00F8CD83765CED885CBC5296D44 ] epp             C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys
21:59:08.0482 0x0554  epp - ok
21:59:08.0491 0x0554  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
21:59:08.0518 0x0554  ErrDev - ok
21:59:08.0548 0x0554  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem     C:\Windows\system32\es.dll
21:59:08.0607 0x0554  EventSystem - ok
21:59:08.0628 0x0554  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat           C:\Windows\system32\drivers\exfat.sys
21:59:08.0673 0x0554  exfat - ok
21:59:08.0704 0x0554  [ C077AA74EDDAF69985EB27597BCB342A, 8CE48D37E39A6DFA3C8E959CA92A49029100446DC40044EE009D55FB9CDE378A ] fastfat         C:\Windows\system32\drivers\fastfat.sys
21:59:08.0737 0x0554  fastfat - ok
21:59:08.0766 0x0554  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax             C:\Windows\system32\fxssvc.exe
21:59:08.0823 0x0554  Fax - ok
21:59:08.0834 0x0554  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc             C:\Windows\System32\drivers\fdc.sys
21:59:08.0860 0x0554  fdc - ok
21:59:08.0870 0x0554  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost         C:\Windows\system32\fdPHost.dll
21:59:08.0901 0x0554  fdPHost - ok
21:59:08.0910 0x0554  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\Windows\system32\fdrespub.dll
21:59:08.0945 0x0554  FDResPub - ok
21:59:08.0957 0x0554  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc           C:\Windows\system32\fhsvc.dll
21:59:09.0004 0x0554  fhsvc - ok
21:59:09.0018 0x0554  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt       C:\Windows\system32\drivers\filecrypt.sys
21:59:09.0053 0x0554  FileCrypt - ok
21:59:09.0066 0x0554  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:59:09.0088 0x0554  FileInfo - ok
21:59:09.0102 0x0554  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
21:59:09.0133 0x0554  Filetrace - ok
21:59:09.0143 0x0554  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
21:59:09.0169 0x0554  flpydisk - ok
21:59:09.0188 0x0554  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:59:09.0221 0x0554  FltMgr - ok
21:59:09.0282 0x0554  [ 289EFA0470B308F01BAF955DE81E0682, F88081AD427BD90B3085A07439D1BDBB4966A898D49B0ABEFF7829D68BE532A5 ] FontCache       C:\Windows\system32\FntCache.dll
21:59:09.0388 0x0554  FontCache - ok
21:59:09.0404 0x0554  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:59:09.0435 0x0554  FontCache3.0.0.0 - ok
21:59:09.0466 0x0554  [ AF0811F38B56B57B3FF53F14E04AA1B0, 45DC6775762E4E9216DAF3914A3C99C536BFF96E1CF8577FC4B5758248D1D043 ] FrameServer     C:\Windows\system32\FrameServer.dll
21:59:09.0536 0x0554  FrameServer - ok
21:59:09.0550 0x0554  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
21:59:09.0574 0x0554  FsDepends - ok
21:59:09.0584 0x0554  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:59:09.0608 0x0554  Fs_Rec - ok
21:59:09.0635 0x0554  [ B719EAA1EC93586955B013BD7DD61356, 0D0D94CF33322EEC0AD08835D0314E578F9687F361CD436A2073A4D2C0D56C86 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:59:09.0678 0x0554  fvevol - ok
21:59:09.0702 0x0554  [ 1480F5E5EB49487F8B040F4340561928, 95AC9EFE4580E5C236DFEDCB0C452C4CA7A85F253D60DADCAE2FF3A89D82DC09 ] FWNDIS_LWF      C:\Windows\system32\DRIVERS\fwndislwf64.sys
21:59:09.0727 0x0554  FWNDIS_LWF - ok
21:59:09.0737 0x0554  [ 4D63610045043CD9A0BA81EA13739BB0, A2CA35003815129A93A171D15ADDBB73853A8F5107740D49806A23D85239338F ] fwwfp           C:\Program Files\Emsisoft Internet Security\fwwfp764.sys
21:59:09.0757 0x0554  fwwfp - ok
21:59:09.0767 0x0554  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
21:59:09.0792 0x0554  gencounter - ok
21:59:09.0803 0x0554  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
21:59:09.0827 0x0554  genericusbfn - ok
21:59:09.0841 0x0554  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101     C:\Windows\system32\Drivers\msgpioclx.sys
21:59:09.0866 0x0554  GPIOClx0101 - ok
21:59:09.0907 0x0554  [ C9316C91895057669386E620C89580E5, 5C7BF2C890E77AE3D401BB1F9F76B42D8A0ECD98118F17929FCD4097C768D90A ] gpsvc           C:\Windows\System32\gpsvc.dll
21:59:09.0991 0x0554  gpsvc - ok
21:59:10.0004 0x0554  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
21:59:10.0028 0x0554  GpuEnergyDrv - ok
21:59:10.0048 0x0554  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
21:59:10.0094 0x0554  HdAudAddService - ok
21:59:10.0106 0x0554  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
21:59:10.0135 0x0554  HDAudBus - ok
21:59:10.0145 0x0554  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt         C:\Windows\System32\drivers\HidBatt.sys
21:59:10.0166 0x0554  HidBatt - ok
21:59:10.0178 0x0554  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\Windows\System32\drivers\hidbth.sys
21:59:10.0206 0x0554  HidBth - ok
21:59:10.0216 0x0554  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
21:59:10.0242 0x0554  hidi2c - ok
21:59:10.0252 0x0554  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
21:59:10.0273 0x0554  hidinterrupt - ok
21:59:10.0283 0x0554  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr           C:\Windows\System32\drivers\hidir.sys
21:59:10.0309 0x0554  HidIr - ok
21:59:10.0318 0x0554  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv         C:\Windows\system32\hidserv.dll
21:59:10.0348 0x0554  hidserv - ok
21:59:10.0357 0x0554  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
21:59:10.0383 0x0554  HidUsb - ok
21:59:10.0399 0x0554  [ 44D54C8356588525D7AD0FDCFDDA0811, 46963ADBF14FA8A9B0E6564106ADEA49BBD4EBD9E43DF389CCD31F9B9BD080D9 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:59:10.0437 0x0554  HomeGroupListener - ok
21:59:10.0458 0x0554  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:59:10.0505 0x0554  HomeGroupProvider - ok
21:59:10.0516 0x0554  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:59:10.0537 0x0554  HpSAMD - ok
21:59:10.0574 0x0554  [ 65E358D604267CBAACB74A2598BBE22B, A645E48641D638A58789B7948FC3DD5072179C0919B546A6DB08094FA9321A30 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:59:10.0629 0x0554  HTTP - ok
21:59:10.0642 0x0554  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\Windows\System32\hvhostsvc.dll
21:59:10.0675 0x0554  HvHost - ok
21:59:10.0686 0x0554  [ 9B6C35343348CC1B5E9D81F0702A3271, DB25C9FA14A197568B1023A40A83348CE14C9C118854B83372C6D2AE3C323156 ] hvservice       C:\Windows\system32\drivers\hvservice.sys
21:59:10.0707 0x0554  hvservice - ok
21:59:10.0717 0x0554  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:59:10.0739 0x0554  hwpolicy - ok
21:59:10.0749 0x0554  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
21:59:10.0776 0x0554  hyperkbd - ok
21:59:10.0788 0x0554  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
21:59:10.0818 0x0554  i8042prt - ok
21:59:10.0827 0x0554  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\Windows\System32\drivers\iagpio.sys
21:59:10.0854 0x0554  iagpio - ok
21:59:10.0865 0x0554  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c           C:\Windows\System32\drivers\iai2c.sys
21:59:10.0893 0x0554  iai2c - ok
21:59:10.0904 0x0554  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys
21:59:10.0932 0x0554  iaLPSS2i_GPIO2 - ok
21:59:10.0946 0x0554  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\Windows\System32\drivers\iaLPSS2i_I2C.sys
21:59:10.0968 0x0554  iaLPSS2i_I2C - ok
21:59:10.0977 0x0554  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
21:59:10.0994 0x0554  iaLPSSi_GPIO - ok
21:59:11.0006 0x0554  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\Windows\System32\drivers\iaLPSSi_I2C.sys
21:59:11.0036 0x0554  iaLPSSi_I2C - ok
21:59:11.0062 0x0554  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
21:59:11.0108 0x0554  iaStorAV - ok
21:59:11.0131 0x0554  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
21:59:11.0167 0x0554  iaStorV - ok
21:59:11.0191 0x0554  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus           C:\Windows\System32\drivers\ibbus.sys
21:59:11.0233 0x0554  ibbus - ok
21:59:11.0249 0x0554  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\Windows\System32\tetheringservice.dll
21:59:11.0287 0x0554  icssvc - ok
21:59:11.0322 0x0554  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\Windows\System32\ikeext.dll
21:59:11.0394 0x0554  IKEEXT - ok
21:59:11.0405 0x0554  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd     C:\Windows\System32\drivers\IndirectKmd.sys
21:59:11.0430 0x0554  IndirectKmd - ok
21:59:11.0442 0x0554  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\Windows\system32\drivers\intelide.sys
21:59:11.0462 0x0554  intelide - ok
21:59:11.0472 0x0554  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\Windows\system32\drivers\intelpep.sys
21:59:11.0493 0x0554  intelpep - ok
21:59:11.0505 0x0554  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
21:59:11.0534 0x0554  intelppm - ok
21:59:11.0544 0x0554  [ 4A922CAB4AB5F29F1BECC9D95B4B7F05, 7C1006799E26A0B4DF49373A4D0509748C602588CFB3C1CBB409E335F5DF9593 ] iorate          C:\Windows\system32\drivers\iorate.sys
21:59:11.0568 0x0554  iorate - ok
21:59:11.0578 0x0554  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:59:11.0606 0x0554  IpFilterDriver - ok
21:59:11.0641 0x0554  [ 89548E57FD0A7BC703541C69C0286B13, 261698B302DF5B80C57FC4257E0A0AABC8DEFFED16D8CD142AD8E7CB51AF2007 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:59:11.0710 0x0554  iphlpsvc - ok
21:59:11.0724 0x0554  [ 450DBDD716C7911F83E05F78EE18BFA2, 43C0DA172F632131898F315A53DEDD1AE99FB0620AB32B3A5B99FEC498C9AAE5 ] IPMIDRV         C:\Windows\System32\drivers\IPMIDrv.sys
21:59:11.0749 0x0554  IPMIDRV - ok
21:59:11.0763 0x0554  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
21:59:11.0799 0x0554  IPNAT - ok
21:59:11.0811 0x0554  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\Windows\system32\drivers\irda.sys
21:59:11.0841 0x0554  irda - ok
21:59:11.0851 0x0554  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:59:11.0880 0x0554  IRENUM - ok
21:59:11.0889 0x0554  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon           C:\Windows\System32\irmon.dll
21:59:11.0917 0x0554  irmon - ok
21:59:11.0926 0x0554  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:59:11.0946 0x0554  isapnp - ok
21:59:11.0962 0x0554  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
21:59:11.0993 0x0554  iScsiPrt - ok
21:59:12.0005 0x0554  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
21:59:12.0025 0x0554  kbdclass - ok
21:59:12.0035 0x0554  [ 2D05785B0C58D90A34EA15032EADBBA9, 3E1238FF7F6ECA522761830FE7EA7587B704FCB3ECE8C6BF94CC17A640B678ED ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
21:59:12.0061 0x0554  kbdhid - ok
21:59:12.0072 0x0554  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic           C:\Windows\System32\drivers\kdnic.sys
21:59:12.0100 0x0554  kdnic - ok
21:59:12.0111 0x0554  [ FD0FC10A8CFD7AFEC58BBBE649BAA470, 9BDBD540FCF33FC01AB896D50A872E2FB5A007225FA003C528E6DCBDBEE19C25 ] KeyIso          C:\Windows\system32\lsass.exe
21:59:12.0136 0x0554  KeyIso - ok
21:59:12.0147 0x0554  [ 9FA1B5D84F596F0664F0465F302044DC, 47B41D3D6119B5B20C83AF84D315C4AB40B5534D687736A8B67BD985A3B232C1 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:59:12.0170 0x0554  KSecDD - ok
21:59:12.0183 0x0554  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
21:59:12.0208 0x0554  KSecPkg - ok
21:59:12.0217 0x0554  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
21:59:12.0250 0x0554  ksthunk - ok
21:59:12.0269 0x0554  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm           C:\Windows\system32\msdtckrm.dll
21:59:12.0313 0x0554  KtmRm - ok
21:59:12.0330 0x0554  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:59:12.0374 0x0554  LanmanServer - ok
21:59:12.0392 0x0554  [ 752FE77F22592016A5EBBF399EC12E14, 231CF3E069FF64A4E8C81D0799A73924D864585B25382EFF8D1707F87747AC9E ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:59:12.0435 0x0554  LanmanWorkstation - ok
21:59:12.0449 0x0554  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc           C:\Windows\System32\lfsvc.dll
21:59:12.0478 0x0554  lfsvc - ok
21:59:12.0487 0x0554  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
21:59:12.0516 0x0554  LicenseManager - ok
21:59:12.0526 0x0554  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\Windows\system32\drivers\lltdio.sys
21:59:12.0556 0x0554  lltdio - ok
21:59:12.0572 0x0554  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
21:59:12.0613 0x0554  lltdsvc - ok
21:59:12.0622 0x0554  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts         C:\Windows\System32\lmhsvc.dll
21:59:12.0654 0x0554  lmhosts - ok
21:59:12.0670 0x0554  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
21:59:12.0695 0x0554  LSI_SAS - ok
21:59:12.0706 0x0554  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i       C:\Windows\system32\drivers\lsi_sas2i.sys

Madyou · 03.09.2016, 21:45

Code:

ATTFilter

21:59:12.0744 0x0554  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i       C:\Windows\system32\drivers\lsi_sas3i.sys
21:59:12.0767 0x0554  LSI_SAS3i - ok
21:59:12.0778 0x0554  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS         C:\Windows\system32\drivers\lsi_sss.sys
21:59:12.0802 0x0554  LSI_SSS - ok
21:59:12.0831 0x0554  [ 5570D03E2048AC7961BEF6FFEE3A2CA5, FD0232312D87015FA0B8062FA175A44410F8C1C9778145CCDD57BA1C23929C87 ] LSM             C:\Windows\System32\lsm.dll
21:59:12.0891 0x0554  LSM - ok
21:59:12.0904 0x0554  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv           C:\Windows\system32\drivers\luafv.sys
21:59:12.0937 0x0554  luafv - ok
21:59:12.0948 0x0554  [ 6D4111E1852A9F0BFC07BB69F3141841, 9BFF4517F26F1E9DF4DA6633B542EAA20A698B9397D2ED73134E7AEF306FBB15 ] MapsBroker      C:\Windows\System32\moshost.dll
21:59:12.0978 0x0554  MapsBroker - ok
21:59:12.0988 0x0554  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas         C:\Windows\system32\drivers\megasas.sys
21:59:13.0009 0x0554  megasas - ok
21:59:13.0032 0x0554  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\Windows\system32\drivers\megasr.sys
21:59:13.0074 0x0554  megasr - ok
21:59:13.0086 0x0554  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\Windows\System32\MessagingService.dll
21:59:13.0121 0x0554  MessagingService - ok
21:59:13.0157 0x0554  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys
21:59:13.0203 0x0554  mlx4_bus - ok
21:59:13.0216 0x0554  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS           C:\Windows\system32\drivers\mmcss.sys
21:59:13.0241 0x0554  MMCSS - ok
21:59:13.0252 0x0554  [ D842ADDB5911945D51F61A0B1C8F36E3, 5EB93A1FD2D2D9FAB6121356E1AB18F2ADE9550D3033274AF7CA8F7FD51E59ED ] Modem           C:\Windows\system32\drivers\modem.sys
21:59:13.0280 0x0554  Modem - ok
21:59:13.0290 0x0554  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor         C:\Windows\System32\drivers\monitor.sys
21:59:13.0317 0x0554  monitor - ok
21:59:13.0328 0x0554  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
21:59:13.0349 0x0554  mouclass - ok
21:59:13.0359 0x0554  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\Windows\System32\drivers\mouhid.sys
21:59:13.0387 0x0554  mouhid - ok
21:59:13.0399 0x0554  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:59:13.0422 0x0554  mountmgr - ok
21:59:13.0434 0x0554  [ 52FB4A9FADED881C00ECEF4F64CBF2BE, DD1D9D919634CBAC755BE1D1AA73314CB7D547084188B40BC13496B42022ADCE ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:59:13.0455 0x0554  MozillaMaintenance - ok
21:59:13.0466 0x0554  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:59:13.0493 0x0554  mpsdrv - ok
21:59:13.0525 0x0554  [ 779CFDB17EA07A6D26FEBBAC95B65772, 74D9542E8DCCD07396A45A45D2F500AA6F9DCC1DB785A6153EB3067E42F576A4 ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:59:13.0591 0x0554  MpsSvc - ok
21:59:13.0606 0x0554  [ 50C2389CD04C5B8632E3DC2D733EF15D, 0F83A8A5F405BC6F401B5A75D45F6D07C61C0CA692D2A77C63E742622F5BF921 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:59:13.0641 0x0554  MRxDAV - ok
21:59:13.0663 0x0554  [ 4D5F17C23D25B5BDF7EB35A54F483C9B, 1A0AFB4151F8D5CB164A53A7851C618F3E4C1A4FF411BC8B0B6402124C311E03 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:59:13.0697 0x0554  mrxsmb - ok
21:59:13.0715 0x0554  [ 8F58AEAE00B39AC9AD93755E777B19D8, 335E4D9E9E81609BEAFA08376EE29C35DA6A1839FAFC37399B9066F03BFFFBC1 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:59:13.0749 0x0554  mrxsmb10 - ok
21:59:13.0765 0x0554  [ FC501F50E6214AF38D4B22220537187A, DACF1A76F98DDCB7F385BBDE2B522A23C32C9838B9CA5CECC9550BD9443DAEED ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:59:13.0792 0x0554  mrxsmb20 - ok
21:59:13.0804 0x0554  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
21:59:13.0835 0x0554  MsBridge - ok
21:59:13.0847 0x0554  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC           C:\Windows\System32\msdtc.exe
21:59:13.0882 0x0554  MSDTC - ok
21:59:13.0899 0x0554  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:59:13.0926 0x0554  Msfs - ok
21:59:13.0936 0x0554  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32     C:\Windows\System32\drivers\msgpiowin32.sys
21:59:13.0957 0x0554  msgpiowin32 - ok
21:59:13.0965 0x0554  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
21:59:13.0990 0x0554  mshidkmdf - ok
21:59:13.0999 0x0554  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf       C:\Windows\System32\drivers\mshidumdf.sys
21:59:14.0023 0x0554  mshidumdf - ok
21:59:14.0032 0x0554  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:59:14.0051 0x0554  msisadrv - ok
21:59:14.0065 0x0554  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
21:59:14.0100 0x0554  MSiSCSI - ok
21:59:14.0111 0x0554  msiserver - ok
21:59:14.0122 0x0554  [ 13D614E6B51ECF36746C48CE829FA7F6, CAD63C0A4F7110093F84C58252C5803F14E3FC46584B79DA17EC86D49FEAEA64 ] MSKSSRV         C:\Windows\system32\DRIVERS\MSKSSRV.sys
21:59:14.0154 0x0554  MSKSSRV - ok
21:59:14.0165 0x0554  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
21:59:14.0194 0x0554  MsLldp - ok
21:59:14.0202 0x0554  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\Windows\system32\DRIVERS\MSPCLOCK.sys
21:59:14.0236 0x0554  MSPCLOCK - ok
21:59:14.0244 0x0554  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM           C:\Windows\system32\DRIVERS\MSPQM.sys
21:59:14.0278 0x0554  MSPQM - ok
21:59:14.0296 0x0554  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
21:59:14.0330 0x0554  MsRPC - ok
21:59:14.0351 0x0554  [ 7ACFE7435317E791FF9EED2F49B402F2, EAF2CE12403A9D975112A22EDBC313EE63B926C070B35E62D515403DD34BD88D ] MsSecFlt        C:\Windows\system32\drivers\mssecflt.sys
21:59:14.0379 0x0554  MsSecFlt - ok
21:59:14.0388 0x0554  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
21:59:14.0409 0x0554  mssmbios - ok
21:59:14.0418 0x0554  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE           C:\Windows\system32\DRIVERS\MSTEE.sys
21:59:14.0452 0x0554  MSTEE - ok
21:59:14.0461 0x0554  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
21:59:14.0486 0x0554  MTConfig - ok
21:59:14.0499 0x0554  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup             C:\Windows\system32\Drivers\mup.sys
21:59:14.0523 0x0554  Mup - ok
21:59:14.0533 0x0554  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
21:59:14.0555 0x0554  mvumis - ok
21:59:14.0584 0x0554  [ DB31EBB04C871F422C36A0962DA7D38B, B1BC2344744F537FB2C7D07B415F860195B7795E185253F05C0817A3764FEC10 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
21:59:14.0633 0x0554  NativeWifiP - ok
21:59:14.0648 0x0554  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\Windows\System32\ncasvc.dll
21:59:14.0682 0x0554  NcaSvc - ok
21:59:14.0705 0x0554  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\Windows\System32\ncbservice.dll
21:59:14.0748 0x0554  NcbService - ok
21:59:14.0760 0x0554  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
21:59:14.0799 0x0554  NcdAutoSetup - ok
21:59:14.0811 0x0554  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys
21:59:14.0833 0x0554  ndfltr - ok
21:59:14.0873 0x0554  [ 36DD2C614720EC2970CB5E870BA69D8D, 692BDA4201119E0561E17E7E1A72320DBECDE3F8E4E65FBEA1B2C1128E16508B ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:59:14.0931 0x0554  NDIS - ok
21:59:14.0945 0x0554  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap         C:\Windows\system32\drivers\ndiscap.sys
21:59:14.0971 0x0554  NdisCap - ok
21:59:14.0984 0x0554  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
21:59:15.0020 0x0554  NdisImPlatform - ok
21:59:15.0029 0x0554  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:59:15.0062 0x0554  NdisTapi - ok
21:59:15.0072 0x0554  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio         C:\Windows\system32\drivers\ndisuio.sys
21:59:15.0100 0x0554  Ndisuio - ok
21:59:15.0108 0x0554  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
21:59:15.0136 0x0554  NdisVirtualBus - ok
21:59:15.0152 0x0554  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan         C:\Windows\System32\drivers\ndiswan.sys
21:59:15.0193 0x0554  NdisWan - ok
21:59:15.0207 0x0554  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy   C:\Windows\system32\DRIVERS\ndiswan.sys
21:59:15.0246 0x0554  ndiswanlegacy - ok
21:59:15.0256 0x0554  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy         C:\Windows\system32\DRIVERS\NDProxy.sys
21:59:15.0290 0x0554  ndproxy - ok
21:59:15.0301 0x0554  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu             C:\Windows\system32\drivers\Ndu.sys
21:59:15.0337 0x0554  Ndu - ok
21:59:15.0348 0x0554  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys
21:59:15.0378 0x0554  NetAdapterCx - ok
21:59:15.0388 0x0554  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS         C:\Windows\system32\drivers\netbios.sys
21:59:15.0409 0x0554  NetBIOS - ok
21:59:15.0431 0x0554  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
21:59:15.0468 0x0554  NetBT - ok
21:59:15.0479 0x0554  [ FD0FC10A8CFD7AFEC58BBBE649BAA470, 9BDBD540FCF33FC01AB896D50A872E2FB5A007225FA003C528E6DCBDBEE19C25 ] Netlogon        C:\Windows\system32\lsass.exe
21:59:15.0504 0x0554  Netlogon - ok
21:59:15.0519 0x0554  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\Windows\System32\netman.dll
21:59:15.0563 0x0554  Netman - ok
21:59:15.0587 0x0554  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\Windows\System32\netprofmsvc.dll
21:59:15.0637 0x0554  netprofm - ok
21:59:15.0654 0x0554  [ 724EA060EF56BAB4DED8F731FA56279B, E07FFE11D7B5C94D6B56940C6423ACB85910F6E8789E788EC91EEEE1C02B247F ] NetSetupSvc     C:\Windows\System32\NetSetupSvc.dll
21:59:15.0694 0x0554  NetSetupSvc - ok
21:59:15.0707 0x0554  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:59:15.0738 0x0554  NetTcpPortSharing - ok
21:59:15.0759 0x0554  [ B996DE26A2E16053C9485F5905B05320, 30EB2CEB466A4F05A44F7CBFCDFD8CC3C27B5FCF1269C1B9410C48AB362D2A75 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
21:59:15.0803 0x0554  NgcCtnrSvc - ok
21:59:15.0838 0x0554  [ 2EC2F2E4C88BA9B72D1F6B92234BCD53, 4DC98EBE5A3B34ED654017F076F457970D3FBF749DC54A6533DAABDE85A7C4FE ] NgcSvc          C:\Windows\system32\ngcsvc.dll
21:59:15.0911 0x0554  NgcSvc - ok
21:59:15.0933 0x0554  [ 0B5083278F195C26FE9E0140AEAEDCBE, B4D505963D5EBA14EC80E6D0BB8B862D96D1D1C3A57F4744AEBA3FF4BFB1997A ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:59:15.0983 0x0554  NlaSvc - ok
21:59:15.0994 0x0554  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:59:16.0021 0x0554  Npfs - ok
21:59:16.0032 0x0554  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig       C:\Windows\System32\drivers\npsvctrig.sys
21:59:16.0057 0x0554  npsvctrig - ok
21:59:16.0066 0x0554  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi             C:\Windows\system32\nsisvc.dll
21:59:16.0094 0x0554  nsi - ok
21:59:16.0103 0x0554  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:59:16.0129 0x0554  nsiproxy - ok
21:59:16.0203 0x0554  [ BE43EC0D5AD467CFC5C9770F2F8EBCC2, 6D22EB974709D3115FD4347FB835454FA41FE6DBF99A79779CF14FB49A5BDD8F ] NTFS            C:\Windows\system32\drivers\NTFS.sys
21:59:16.0306 0x0554  NTFS - ok
21:59:16.0322 0x0554  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\Windows\system32\drivers\Null.sys
21:59:16.0352 0x0554  Null - ok
21:59:16.0767 0x0554  [ A51617881CEF500F8139494CBFBD543E, 2B5912D7D0490CC654DE0B8745D6F1574389E929C71DB0F5B8F504BAC691E790 ] nvlddmkm        C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72b89f8d71abda5d\nvlddmkm.sys
21:59:17.0174 0x0554  nvlddmkm - ok
21:59:17.0241 0x0554  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:59:17.0267 0x0554  nvraid - ok
21:59:17.0280 0x0554  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:59:17.0305 0x0554  nvstor - ok
21:59:17.0354 0x0554  [ 1D97F4D3B6D1F64E6419317EF0DA5768, B06D07D5757BF0760EAC2F2DF6FA3E841FF20C25E21D28E76DFB16187A385A46 ] nvsvc           C:\Windows\system32\nvvsvc.exe
21:59:17.0417 0x0554  nvsvc - ok
21:59:17.0441 0x0554  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\Windows\System32\APHostService.dll
21:59:17.0484 0x0554  OneSyncSvc - ok
21:59:17.0499 0x0554  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:59:17.0549 0x0554  ose - ok
21:59:17.0593 0x0554  [ FAEEC7320957C7BE944E9D3616A679E8, AE4B704801385DA0E04AC6DE367CFA058A5895F6788DC0B2AC0EE668EC3ED712 ] OverwolfUpdater C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
21:59:17.0672 0x0554  OverwolfUpdater - ok
21:59:17.0703 0x0554  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:59:17.0748 0x0554  p2pimsvc - ok
21:59:17.0768 0x0554  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\Windows\system32\p2psvc.dll
21:59:17.0814 0x0554  p2psvc - ok
21:59:17.0827 0x0554  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport         C:\Windows\System32\drivers\parport.sys
21:59:17.0854 0x0554  Parport - ok
21:59:17.0867 0x0554  [ 64E0AA114871B2A37908E44A18F35A73, 2FB434EE48894C9B538349918B9B96FE9C6A76ADAC325EB9DA6E84D0B104D457 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
21:59:17.0891 0x0554  partmgr - ok
21:59:17.0913 0x0554  [ CE515B2C6E2EA50053A8862398646B38, C85D370E5250AFCF44796CE274B5A100C6829DC28BF1D4C6991EF61DE46FD10A ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:59:17.0959 0x0554  PcaSvc - ok
21:59:17.0981 0x0554  [ 55E45E0A89429AE9C62D728B9C4891C0, 729922C3488866C8D67F00E82C082F2E8E6F05180F4767AD30FC7E1FFE4946C5 ] pci             C:\Windows\system32\drivers\pci.sys
21:59:18.0013 0x0554  pci - ok
21:59:18.0022 0x0554  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\Windows\system32\drivers\pciide.sys
21:59:18.0042 0x0554  pciide - ok
21:59:18.0054 0x0554  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
21:59:18.0080 0x0554  pcmcia - ok
21:59:18.0089 0x0554  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw             C:\Windows\system32\drivers\pcw.sys
21:59:18.0110 0x0554  pcw - ok
21:59:18.0122 0x0554  [ 9EA203A07EFA6D74F07F32EF0DAB5CA6, D851F1CC748B4CD0E263931668FFF2FE20D5778267F4FF2237D565CFC171B5AF ] pdc             C:\Windows\system32\drivers\pdc.sys
21:59:18.0149 0x0554  pdc - ok
21:59:18.0177 0x0554  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:59:18.0240 0x0554  PEAUTH - ok
21:59:18.0300 0x0554  [ 2B55ACB1727A8E5E7514D2D75AC4EBEB, 5E7449F3EE0B15E400E405DE561ED2D3932259107A9D9320AE42CA1A5C5AB992 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
21:59:18.0414 0x0554  PeerDistSvc - ok
21:59:18.0429 0x0554  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i       C:\Windows\system32\drivers\percsas2i.sys
21:59:18.0450 0x0554  percsas2i - ok
21:59:18.0461 0x0554  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i       C:\Windows\system32\drivers\percsas3i.sys
21:59:18.0483 0x0554  percsas3i - ok
21:59:18.0506 0x0554  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
21:59:18.0542 0x0554  PerfHost - ok
21:59:18.0586 0x0554  [ CFA4868B2932396D47BCC8E7350907C1, C757910212982F54CF9B2CFFCB632D58E3A07E468A2DA42CDF97BFB6A05823DE ] PhoneSvc        C:\Windows\System32\PhoneService.dll
21:59:18.0658 0x0554  PhoneSvc - ok
21:59:18.0674 0x0554  [ 06A31E2C90347128A1A25290568E152C, 7F0BC96C116A5C6B9796233CA975B1F6A73D554A533191F38295D60221E503C4 ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
21:59:18.0710 0x0554  PimIndexMaintenanceSvc - ok
21:59:18.0762 0x0554  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla             C:\Windows\system32\pla.dll
21:59:18.0852 0x0554  pla - ok
21:59:18.0869 0x0554  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:59:18.0910 0x0554  PlugPlay - ok
21:59:18.0919 0x0554  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
21:59:18.0949 0x0554  PNRPAutoReg - ok
21:59:18.0967 0x0554  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
21:59:19.0013 0x0554  PNRPsvc - ok
21:59:19.0032 0x0554  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
21:59:19.0079 0x0554  PolicyAgent - ok
21:59:19.0095 0x0554  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power           C:\Windows\system32\umpo.dll
21:59:19.0132 0x0554  Power - ok
21:59:19.0143 0x0554  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
21:59:19.0180 0x0554  PptpMiniport - ok
21:59:19.0280 0x0554  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
21:59:19.0436 0x0554  PrintNotify - ok
21:59:19.0458 0x0554  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor       C:\Windows\System32\drivers\processr.sys
21:59:19.0490 0x0554  Processor - ok
21:59:19.0508 0x0554  [ B2DC3BA675F95343D55EC989FE303561, C53FCA036358B0B11BBE5348074FA24831CF67C9FEE31A3DC9CF88B6178CFBC8 ] ProfSvc         C:\Windows\system32\profsvc.dll
21:59:19.0557 0x0554  ProfSvc - ok
21:59:19.0570 0x0554  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\Windows\system32\drivers\pacer.sys
21:59:19.0600 0x0554  Psched - ok
21:59:19.0616 0x0554  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE           C:\Windows\system32\qwave.dll
21:59:19.0660 0x0554  QWAVE - ok
21:59:19.0673 0x0554  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:59:19.0705 0x0554  QWAVEdrv - ok
21:59:19.0714 0x0554  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:59:19.0740 0x0554  RasAcd - ok
21:59:19.0751 0x0554  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn     C:\Windows\System32\drivers\AgileVpn.sys
21:59:19.0787 0x0554  RasAgileVpn - ok
21:59:19.0798 0x0554  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto         C:\Windows\System32\rasauto.dll
21:59:19.0836 0x0554  RasAuto - ok
21:59:19.0848 0x0554  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp         C:\Windows\System32\drivers\rasl2tp.sys
21:59:19.0886 0x0554  Rasl2tp - ok
21:59:19.0912 0x0554  [ DF0702D6A190452E1BFA52F36E58640A, 37B7B8220CDE965F1232D883CEEEDDDB309ABA0ACBE38486E69B9052D39187C4 ] RasMan          C:\Windows\System32\rasmans.dll
21:59:19.0977 0x0554  RasMan - ok
21:59:19.0990 0x0554  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:59:20.0019 0x0554  RasPppoe - ok
21:59:20.0029 0x0554  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp         C:\Windows\System32\drivers\rassstp.sys
21:59:20.0063 0x0554  RasSstp - ok
21:59:20.0083 0x0554  [ 392CD98739F4A8F188A3CB34F6AB193E, C36D1CD8EEB57DB37A0A079DFC87120F948A8E3EE09973CCF5D613566B17EA10 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
21:59:20.0120 0x0554  rdbss - ok
21:59:20.0138 0x0554  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
21:59:20.0164 0x0554  rdpbus - ok
21:59:20.0176 0x0554  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
21:59:20.0210 0x0554  RDPDR - ok
21:59:20.0227 0x0554  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:59:20.0250 0x0554  RdpVideoMiniport - ok
21:59:20.0266 0x0554  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:59:20.0298 0x0554  rdyboost - ok
21:59:20.0333 0x0554  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys
21:59:20.0395 0x0554  ReFSv1 - ok
21:59:20.0425 0x0554  [ FD2B3A645798A2EFB7FB61AC42AAA611, 8A121D361A73CA19AA87B1AD33B8020A99444BF4C8904944AD5913C5083859B8 ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:59:20.0473 0x0554  RemoteAccess - ok
21:59:20.0487 0x0554  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:59:20.0528 0x0554  RemoteRegistry - ok
21:59:20.0558 0x0554  [ 94DCF20DF6170B557AFD386E37C128BC, 70FB7C7A7D2BFA95EACEEE38B39E1DCA93DA63AE1898C4F54956B9413C60EB88 ] RetailDemo      C:\Windows\system32\RDXService.dll
21:59:20.0615 0x0554  RetailDemo - ok
21:59:20.0626 0x0554  [ 9C3AC71A9934B884FAC567A8807E9C4D, 0B6B2970098E3C21E1E54A25785544903E8CD415B527FCEF86ABC7B33BEC83E7 ] Revoflt         C:\Windows\system32\DRIVERS\revoflt.sys
21:59:20.0643 0x0554  Revoflt - ok
21:59:20.0655 0x0554  [ 068220E1B417556F4226E6A3CA0A1C24, 381DD82EF6EAEE83B5B3FA123D04A4D1EEB3407737683C22BBA787C39DCAFFE3 ] RmSvc           C:\Windows\System32\RMapi.dll
21:59:20.0699 0x0554  RmSvc - ok
21:59:20.0709 0x0554  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:59:20.0741 0x0554  RpcEptMapper - ok
21:59:20.0749 0x0554  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\Windows\system32\locator.exe
21:59:20.0776 0x0554  RpcLocator - ok
21:59:20.0809 0x0554  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs           C:\Windows\system32\rpcss.dll
21:59:20.0882 0x0554  RpcSs - ok
21:59:20.0896 0x0554  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\Windows\system32\drivers\rspndr.sys
21:59:20.0925 0x0554  rspndr - ok
21:59:20.0948 0x0554  [ F9265C902BB9146C6BFF97BDF35C04DE, DC70B404A701CE5F60421F664F745CA84722ED86FAFC87F2A8A71BFD25CD6151 ] rt640x64        C:\Windows\System32\drivers\rt640x64.sys
21:59:21.0004 0x0554  rt640x64 - ok
21:59:21.0033 0x0554  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap           C:\Windows\System32\drivers\vms3cap.sys
21:59:21.0063 0x0554  s3cap - ok
21:59:21.0073 0x0554  [ FD0FC10A8CFD7AFEC58BBBE649BAA470, 9BDBD540FCF33FC01AB896D50A872E2FB5A007225FA003C528E6DCBDBEE19C25 ] SamSs           C:\Windows\system32\lsass.exe
21:59:21.0098 0x0554  SamSs - ok
21:59:21.0111 0x0554  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:59:21.0135 0x0554  sbp2port - ok
21:59:21.0150 0x0554  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:59:21.0198 0x0554  SCardSvr - ok
21:59:21.0215 0x0554  [ 9EE060D6560FFBFBDB2ED5D6ED192294, 14387B69CD26D12BE31A23251B6AA8EDFC4D6CDE4FA558F0950DE91D2DD03946 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
21:59:21.0258 0x0554  ScDeviceEnum - ok
21:59:21.0268 0x0554  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:59:21.0297 0x0554  scfilter - ok
21:59:21.0331 0x0554  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\Windows\system32\schedsvc.dll
21:59:21.0411 0x0554  Schedule - ok
21:59:21.0424 0x0554  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\Windows\system32\drivers\scmbus.sys
21:59:21.0447 0x0554  scmbus - ok
21:59:21.0463 0x0554  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101     C:\Windows\System32\drivers\scmdisk0101.sys
21:59:21.0494 0x0554  scmdisk0101 - ok
21:59:21.0508 0x0554  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] SCPolicySvc     C:\Windows\System32\certprop.dll
21:59:21.0544 0x0554  SCPolicySvc - ok
21:59:21.0560 0x0554  [ FCBB8A17B4437B2CA8CC8DA8CB1D306E, 5FA762B1B6C8A45ED6F304A45B500038537ABD3DF6328F3C8E2BD43CBDEAB835 ] sdbus           C:\Windows\System32\drivers\sdbus.sys
21:59:21.0588 0x0554  sdbus - ok
21:59:21.0602 0x0554  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\Windows\System32\SDRSVC.dll
21:59:21.0639 0x0554  SDRSVC - ok
21:59:21.0650 0x0554  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
21:59:21.0673 0x0554  sdstor - ok
21:59:21.0682 0x0554  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\Windows\system32\seclogon.dll
21:59:21.0711 0x0554  seclogon - ok
21:59:21.0721 0x0554  [ B605A44ACA1FCFF736235A4D7AEDA548, 48D8B5BC027CFE91AF7402C463327572181D4C1B1E2942F4D05792EED070B2DC ] SENS            C:\Windows\System32\sens.dll
21:59:21.0756 0x0554  SENS - ok
21:59:21.0761 0x0554  Sense - ok
21:59:21.0809 0x0554  [ 1CC993A041899B48D5DF4D3F4A4425FC, 8D138B3A92C0E181C865A37AD55EE2D55CC352ED9B60BF60BE0AC610F13F8FA1 ] SensorDataService C:\Windows\System32\SensorDataService.exe
21:59:21.0905 0x0554  SensorDataService - ok
21:59:21.0930 0x0554  [ 7BFD114F0F308CE29AEB8F16056D0658, 0CD3B3C69DCB3EAD8F8EF5C633911DD4F2C1167DC6FE28107EE38713A35A1F5C ] SensorService   C:\Windows\system32\SensorService.dll
21:59:21.0978 0x0554  SensorService - ok
21:59:21.0994 0x0554  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:59:22.0031 0x0554  SensrSvc - ok
21:59:22.0041 0x0554  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx           C:\Windows\system32\drivers\SerCx.sys
21:59:22.0063 0x0554  SerCx - ok
21:59:22.0075 0x0554  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
21:59:22.0100 0x0554  SerCx2 - ok
21:59:22.0108 0x0554  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum         C:\Windows\System32\drivers\serenum.sys
21:59:22.0136 0x0554  Serenum - ok
21:59:22.0148 0x0554  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\Windows\System32\drivers\serial.sys
21:59:22.0176 0x0554  Serial - ok
21:59:22.0185 0x0554  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\Windows\System32\drivers\sermouse.sys
21:59:22.0209 0x0554  sermouse - ok
21:59:22.0244 0x0554  [ D525D273BE5691BDACE72B07AB0D1E02, 9231BD2137E71B3D555CEBBA8811297F239FDA08BF573CA4741D03D76718B5B1 ] SessionEnv      C:\Windows\system32\sessenv.dll
21:59:22.0290 0x0554  SessionEnv - ok
21:59:22.0301 0x0554  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy         C:\Windows\System32\drivers\sfloppy.sys
21:59:22.0327 0x0554  sfloppy - ok
21:59:22.0350 0x0554  [ 3D0069B8F0C2FB1B0F13DBDB57593DAD, 4CEC91BC45A51C4E445D2DD8A13AC97719D5AAC1DBA8EA9166D2A354E7857378 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:59:22.0408 0x0554  SharedAccess - ok
21:59:22.0436 0x0554  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:59:22.0499 0x0554  ShellHWDetection - ok
21:59:22.0514 0x0554  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll
21:59:22.0552 0x0554  shpamsvc - ok
21:59:22.0562 0x0554  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
21:59:22.0582 0x0554  SiSRaid2 - ok
21:59:22.0593 0x0554  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
21:59:22.0616 0x0554  SiSRaid4 - ok
21:59:22.0628 0x0554  [ 3EB12F95C259907F976B9FFCD26FA047, 1ADC40D8911F7C3C7376882DC0B5526F1C16089E13883734498D36C9CE4D8E76 ] smphost         C:\Windows\System32\smphost.dll
21:59:22.0659 0x0554  smphost - ok
21:59:22.0686 0x0554  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter       C:\Windows\system32\SmsRouterSvc.dll
21:59:22.0743 0x0554  SmsRouter - ok
21:59:22.0761 0x0554  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:59:22.0793 0x0554  SNMPTRAP - ok
21:59:22.0818 0x0554  [ 3DB9C2950439B61A038BF83E697C7A14, 6BF5EA5D4A251CB982F336840A60EF4241A3FC7442E7CD4D7C82199F5BF8D4D2 ] spaceport       C:\Windows\system32\drivers\spaceport.sys
21:59:22.0859 0x0554  spaceport - ok
21:59:22.0872 0x0554  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx           C:\Windows\system32\drivers\SpbCx.sys
21:59:22.0894 0x0554  SpbCx - ok
21:59:22.0926 0x0554  [ DA5A9752A702E86AFC10F06115A8AF4C, 1EBF973AAEE0D851934CFD99BF6FC3B33D6EF5EDE95F81450D2EA18117172FC9 ] Spooler         C:\Windows\System32\spoolsv.exe
21:59:22.0990 0x0554  Spooler - ok
21:59:23.0159 0x0554  [ DB386D52ABDCF0577B6921D02EEDC8B3, 523247781F230B7273248C2AB8262E63BBE55EFD2DE0DF9A40F5FA0DA7DD2AE6 ] sppsvc          C:\Windows\system32\sppsvc.exe
21:59:23.0383 0x0554  sppsvc - ok
21:59:23.0432 0x0554  [ EDCDCD95B916DB156A903AC6256F0CCF, 4158EFE298235EDE2C34CE9F3978A4F3690379F14B21F917647EEAA0A8C1DE4A ] srv             C:\Windows\system32\DRIVERS\srv.sys
21:59:23.0477 0x0554  srv - ok
21:59:23.0505 0x0554  [ DF7147DE10921DBAAE9F9EEF94590E10, 2222BA441227056DA17194648B3AF49655650F7BBA9E4A9ACEF519E392099C6D ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:59:23.0562 0x0554  srv2 - ok
21:59:23.0579 0x0554  [ 416D224AF7481A4179F018FB1F9A5B6B, 38159D7957A8091DFC5C32DCAC4DB07FDE14BBE4E75B4E61B4FBB332E3F9259D ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:59:23.0616 0x0554  srvnet - ok
21:59:23.0631 0x0554  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
21:59:23.0673 0x0554  SSDPSRV - ok
21:59:23.0687 0x0554  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
21:59:23.0725 0x0554  SstpSvc - ok
21:59:23.0844 0x0554  [ DF762D30EF0EE10E569C507BE75EAA6B, C23BA05E778CF1A547E7D3FE2226E0E68917570C56D5E703E599CAF2FD10BD17 ] StateRepository C:\Windows\system32\windows.staterepository.dll
21:59:24.0053 0x0554  StateRepository - ok
21:59:24.0114 0x0554  [ E06AA279D85877268E34E9A9BC41F560, 6EFE7E3850CD19B919053293B6D8CB61CC638D3B1626BB62594C681625132689 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
21:59:24.0207 0x0554  Steam Client Service - ok
21:59:24.0221 0x0554  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
21:59:24.0241 0x0554  stexstor - ok
21:59:24.0268 0x0554  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\Windows\System32\wiaservc.dll
21:59:24.0326 0x0554  stisvc - ok
21:59:24.0340 0x0554  [ 0FE3B9A9E40DE1029B0AC2368A3F765D, AB06795E456DB9CE4E5A91DD1C2638B4D474CE1C5DB4819D5EE17A337D74A231 ] storahci        C:\Windows\system32\drivers\storahci.sys
21:59:24.0363 0x0554  storahci - ok
21:59:24.0373 0x0554  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
21:59:24.0396 0x0554  storflt - ok
21:59:24.0406 0x0554  [ B739FF1C1FAF9D0ADFBFB0FD59A5AB37, F128D872283AD1F91B56667DB885E7404D76B1CC72D6D71382C5DFA19AE433ED ] stornvme        C:\Windows\system32\drivers\stornvme.sys
21:59:24.0429 0x0554  stornvme - ok
21:59:24.0440 0x0554  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
21:59:24.0468 0x0554  storqosflt - ok
21:59:24.0488 0x0554  [ 6C982BC7E4DB161530A0D831718D7113, B0FAEACC91023031E53A161ECEFCF62764C96B8705E9089B4A7B4F7A2F3B6BAA ] StorSvc         C:\Windows\system32\storsvc.dll
21:59:24.0536 0x0554  StorSvc - ok
21:59:24.0546 0x0554  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs         C:\Windows\system32\drivers\storufs.sys
21:59:24.0566 0x0554  storufs - ok
21:59:24.0576 0x0554  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
21:59:24.0596 0x0554  storvsc - ok
21:59:24.0605 0x0554  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc           C:\Windows\system32\svsvc.dll
21:59:24.0639 0x0554  svsvc - ok
21:59:24.0647 0x0554  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\Windows\System32\drivers\swenum.sys
21:59:24.0669 0x0554  swenum - ok
21:59:24.0691 0x0554  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv           C:\Windows\System32\swprv.dll
21:59:24.0743 0x0554  swprv - ok
21:59:24.0754 0x0554  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
21:59:24.0780 0x0554  Synth3dVsc - ok
21:59:24.0814 0x0554  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain         C:\Windows\system32\sysmain.dll
21:59:24.0892 0x0554  SysMain - ok
21:59:24.0914 0x0554  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
21:59:24.0961 0x0554  SystemEventsBroker - ok
21:59:24.0976 0x0554  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:59:25.0011 0x0554  TabletInputService - ok
21:59:25.0028 0x0554  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv         C:\Windows\System32\tapisrv.dll
21:59:25.0072 0x0554  TapiSrv - ok
21:59:25.0153 0x0554  [ E93C3AB8B29AB4905541B5AB87963906, A9352792815C543E7129D16CCCDB7A6F9FB63C0C95A4BB22FA5709E886FFD6D4 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
21:59:25.0255 0x0554  Tcpip - ok
21:59:25.0338 0x0554  [ E93C3AB8B29AB4905541B5AB87963906, A9352792815C543E7129D16CCCDB7A6F9FB63C0C95A4BB22FA5709E886FFD6D4 ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
21:59:25.0439 0x0554  Tcpip6 - ok
21:59:25.0459 0x0554  [ 8DBB1BE20C36E6D19BCC89EEA00B953C, 8B97A7E53E1D77363AFF6A5AAEAD89EBAE28DCB8D82753C804FD7CD5646500AF ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:59:25.0486 0x0554  tcpipreg - ok
21:59:25.0501 0x0554  [ 9D2DD64A0B51C56285512DC9454340F6, ABB90CE6A55269F71AFB08E04969CF9A4EFD93F7A7189AF920EEE3E005214DDD ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
21:59:25.0527 0x0554  tdx - ok
21:59:25.0536 0x0554  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
21:59:25.0557 0x0554  terminpt - ok
21:59:25.0592 0x0554  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService     C:\Windows\System32\termsrv.dll
21:59:25.0665 0x0554  TermService - ok
21:59:25.0679 0x0554  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\Windows\system32\themeservice.dll
21:59:25.0718 0x0554  Themes - ok
21:59:25.0735 0x0554  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
21:59:25.0785 0x0554  TieringEngineService - ok
21:59:25.0809 0x0554  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
21:59:25.0864 0x0554  tiledatamodelsvc - ok
21:59:25.0879 0x0554  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc   C:\Windows\System32\TimeBrokerServer.dll
21:59:25.0918 0x0554  TimeBrokerSvc - ok
21:59:25.0933 0x0554  [ 798C8CB861EB09C5AFB77468E5449BBB, F6631E779159B99B097A59792D11713809CA493618B6A210A4BC905F16782094 ] TPM             C:\Windows\System32\drivers\tpm.sys
21:59:25.0959 0x0554  TPM - ok
21:59:25.0971 0x0554  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\Windows\System32\trkwks.dll
21:59:26.0004 0x0554  TrkWks - ok
21:59:26.0013 0x0554  [ AF343840E793BE63A9C646760BE8F2CD, 483FE55873A01DB7ACEC99B6823DAACC9EA7C67D36C6F12698113B31A7D5B8BE ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:59:26.0043 0x0554  TrustedInstaller - ok
21:59:26.0057 0x0554  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\Windows\system32\drivers\TsUsbFlt.sys
21:59:26.0083 0x0554  tsusbflt - ok
21:59:26.0093 0x0554  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD         C:\Windows\System32\drivers\TsUsbGD.sys
21:59:26.0119 0x0554  TsUsbGD - ok
21:59:26.0131 0x0554  [ 5A91FDBA4D3FCB56DAEB8C091B3EB8E1, 8AB91F4423125267FA8509A1C3A9AD1CBD642FA6A96D8789F9AB8CB75ABAD58C ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
21:59:26.0163 0x0554  tsusbhub - ok
21:59:26.0176 0x0554  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
21:59:26.0208 0x0554  tunnel - ok
21:59:26.0219 0x0554  [ 0F38FCE8C61CC14DE3718FAB5FFC0D3A, 527071956BDC0F2863DCDFEDD314DB5265A6AE525F810186F508E0D58A97D767 ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll
21:59:26.0252 0x0554  tzautoupdate - ok
21:59:26.0262 0x0554  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
21:59:26.0285 0x0554  UASPStor - ok
21:59:26.0296 0x0554  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101       C:\Windows\system32\Drivers\UcmCx.sys
21:59:26.0324 0x0554  UcmCx0101 - ok
21:59:26.0336 0x0554  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys
21:59:26.0367 0x0554  UcmTcpciCx0101 - ok
21:59:26.0377 0x0554  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi         C:\Windows\System32\drivers\UcmUcsi.sys
21:59:26.0404 0x0554  UcmUcsi - ok
21:59:26.0418 0x0554  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
21:59:26.0448 0x0554  Ucx01000 - ok
21:59:26.0461 0x0554  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx           C:\Windows\system32\drivers\udecx.sys
21:59:26.0487 0x0554  UdeCx - ok
21:59:26.0503 0x0554  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:59:26.0549 0x0554  udfs - ok
21:59:26.0559 0x0554  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
21:59:26.0580 0x0554  UEFI - ok
21:59:26.0590 0x0554  [ 166B17AE1DD24D8BA8CA474C7C31148F, D34E786277093278F58EFAC957279DC4ED43A190538C875B80F5B1E0A0C30381 ] UevAgentDriver  C:\Windows\system32\drivers\UevAgentDriver.sys
21:59:26.0610 0x0554  UevAgentDriver - ok
21:59:26.0651 0x0554  [ FCA4D901FB9934DAB82ED31C4EE89A11, 8EDF8DD71C13DE77AC83D1086670E9E90C69DE379F1CF768C8B9C789254C04AA ] UevAgentService C:\Windows\system32\AgentService.exe
21:59:26.0730 0x0554  UevAgentService - ok
21:59:26.0749 0x0554  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
21:59:26.0778 0x0554  Ufx01000 - ok
21:59:26.0789 0x0554  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea     C:\Windows\System32\drivers\UfxChipidea.sys
21:59:26.0810 0x0554  UfxChipidea - ok
21:59:26.0822 0x0554  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys     C:\Windows\System32\drivers\ufxsynopsys.sys
21:59:26.0846 0x0554  ufxsynopsys - ok
21:59:26.0863 0x0554  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
21:59:26.0897 0x0554  UI0Detect - ok
21:59:26.0908 0x0554  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus           C:\Windows\System32\drivers\umbus.sys
21:59:26.0938 0x0554  umbus - ok
21:59:26.0946 0x0554  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\Windows\System32\drivers\umpass.sys
21:59:26.0973 0x0554  UmPass - ok
21:59:26.0990 0x0554  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\Windows\System32\umrdp.dll
21:59:27.0030 0x0554  UmRdpService - ok
21:59:27.0071 0x0554  [ B8272BB8D4982C496FDC704809C38E02, F93855D932FB1DBBCC86E82C0FE0DC9ECF93BBD629D2CA9D0BE7E075E114B7FF ] UnistoreSvc     C:\Windows\System32\unistore.dll
21:59:27.0153 0x0554  UnistoreSvc - ok
21:59:27.0182 0x0554  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\Windows\System32\upnphost.dll
21:59:27.0238 0x0554  upnphost - ok
21:59:27.0247 0x0554  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea     C:\Windows\System32\drivers\urschipidea.sys
21:59:27.0268 0x0554  UrsChipidea - ok
21:59:27.0279 0x0554  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
21:59:27.0300 0x0554  UrsCx01000 - ok
21:59:27.0309 0x0554  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys     C:\Windows\System32\drivers\urssynopsys.sys
21:59:27.0328 0x0554  UrsSynopsys - ok
21:59:27.0341 0x0554  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp         C:\Windows\System32\drivers\usbccgp.sys
21:59:27.0367 0x0554  usbccgp - ok
21:59:27.0379 0x0554  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\Windows\System32\drivers\usbcir.sys
21:59:27.0408 0x0554  usbcir - ok
21:59:27.0419 0x0554  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci         C:\Windows\System32\drivers\usbehci.sys
21:59:27.0441 0x0554  usbehci - ok
21:59:27.0463 0x0554  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\Windows\System32\drivers\usbhub.sys
21:59:27.0502 0x0554  usbhub - ok
21:59:27.0526 0x0554  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3         C:\Windows\System32\drivers\UsbHub3.sys
21:59:27.0567 0x0554  USBHUB3 - ok
21:59:27.0577 0x0554  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci         C:\Windows\System32\drivers\usbohci.sys
21:59:27.0602 0x0554  usbohci - ok
21:59:27.0611 0x0554  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
21:59:27.0637 0x0554  usbprint - ok
21:59:27.0645 0x0554  [ 4BAAADF7DA222BB74E9A0A01CCF42A80, 1578A275F62DDD5DD22A8ADCBF575EBA77041CABA0C7E4FFC181F8AB9236953B ] usbrndis6       C:\Windows\System32\drivers\usb80236.sys
21:59:27.0672 0x0554  usbrndis6 - ok
21:59:27.0681 0x0554  [ 2EC7B2C8123236B1233A77281D378DF7, D97DB59C9CAE2B8B33C707E8CEA7A65BF88712842CC715D270F7432A99D21BB6 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
21:59:27.0711 0x0554  usbscan - ok
21:59:27.0721 0x0554  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\Windows\System32\drivers\usbser.sys
21:59:27.0750 0x0554  usbser - ok
21:59:27.0762 0x0554  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR         C:\Windows\System32\drivers\USBSTOR.SYS
21:59:27.0786 0x0554  USBSTOR - ok
21:59:27.0795 0x0554  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci         C:\Windows\System32\drivers\usbuhci.sys
21:59:27.0822 0x0554  usbuhci - ok
21:59:27.0841 0x0554  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI         C:\Windows\System32\drivers\USBXHCI.SYS
21:59:27.0874 0x0554  USBXHCI - ok
21:59:27.0883 0x0554  [ 836828E40B9EEFBC77B3032DB677555C, 8AC045B43086E800B03412895D4DBCF506D1B729791CF24EB2ECA3F0F1C9BDEB ] usb_rndisx      C:\Windows\System32\drivers\usb8023x.sys
21:59:27.0908 0x0554  usb_rndisx - ok
21:59:27.0957 0x0554  [ 4CC81AB9D380A6264FF4C0C1512CF965, 76C33053D1C9155B0F3F8392FF982AD4EABEE2BBBEE89EA41DBFE8E436973EB0 ] UserDataSvc     C:\Windows\System32\userdataservice.dll
21:59:28.0059 0x0554  UserDataSvc - ok
21:59:28.0104 0x0554  [ 8F6DAAFDDDA27D83ACC8C7FF1536CAF6, 5E1B67A5B388CBB3B193C238546BAD4DC5F5DF54859E16607A60681E6D38FA73 ] UserManager     C:\Windows\System32\usermgr.dll
21:59:28.0184 0x0554  UserManager - ok
21:59:28.0211 0x0554  [ 0F3C4209200F3DAD2015DA3044FA8DC3, 84DC9CB21ECD79C3BFDBBDF66173F4E2D7E6CB118E0EEA4516A6661636D4CE8F ] UsoSvc          C:\Windows\system32\usocore.dll
21:59:28.0263 0x0554  UsoSvc - ok
21:59:28.0275 0x0554  [ FD0FC10A8CFD7AFEC58BBBE649BAA470, 9BDBD540FCF33FC01AB896D50A872E2FB5A007225FA003C528E6DCBDBEE19C25 ] VaultSvc        C:\Windows\system32\lsass.exe
21:59:28.0298 0x0554  VaultSvc - ok
21:59:28.0308 0x0554  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:59:28.0329 0x0554  vdrvroot - ok
21:59:28.0355 0x0554  [ 0783EDE1FA94649ED7F3CEF6A734041A, 1A13A613EF6B67459031C7994FFC6F32F73E02E0F123A171618E4F011C635684 ] vds             C:\Windows\System32\vds.exe
21:59:28.0419 0x0554  vds - ok
21:59:28.0434 0x0554  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt     C:\Windows\system32\drivers\VerifierExt.sys
21:59:28.0461 0x0554  VerifierExt - ok
21:59:28.0489 0x0554  [ C12B4859FC255AA6B3021CF8BB14A11F, E95922351825D23ABCADD173E9256FC9AFFF28555DD1971CFF5666A2055958C5 ] vhdmp           C:\Windows\System32\drivers\vhdmp.sys
21:59:28.0531 0x0554  vhdmp - ok
21:59:28.0542 0x0554  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf             C:\Windows\System32\drivers\vhf.sys
21:59:28.0569 0x0554  vhf - ok
21:59:28.0580 0x0554  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus           C:\Windows\system32\drivers\vmbus.sys
21:59:28.0605 0x0554  vmbus - ok
21:59:28.0614 0x0554  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
21:59:28.0641 0x0554  VMBusHID - ok
21:59:28.0649 0x0554  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid           C:\Windows\System32\drivers\vmgid.sys
21:59:28.0676 0x0554  vmgid - ok
21:59:28.0692 0x0554  [ A6CA116884BE5352829D2E538AD56A87, 9C58A15E15433EA92E3DDB38BB446700BD620D43B0F46EDD578349676B4B4D76 ] vmicguestinterface C:\Windows\System32\icsvc.dll
21:59:28.0733 0x0554  vmicguestinterface - ok
21:59:28.0747 0x0554  [ A6CA116884BE5352829D2E538AD56A87, 9C58A15E15433EA92E3DDB38BB446700BD620D43B0F46EDD578349676B4B4D76 ] vmicheartbeat   C:\Windows\System32\icsvc.dll
21:59:28.0788 0x0554  vmicheartbeat - ok
21:59:28.0801 0x0554  [ A6CA116884BE5352829D2E538AD56A87, 9C58A15E15433EA92E3DDB38BB446700BD620D43B0F46EDD578349676B4B4D76 ] vmickvpexchange C:\Windows\System32\icsvc.dll
21:59:28.0841 0x0554  vmickvpexchange - ok
21:59:28.0859 0x0554  [ DC3172A6EB5DDB5EF94CB734CB7D4E63, 812971E0C2C18C876FFC9A46F1563801894C2EE9DD01CE1A641A0C68C0C1C6E2 ] vmicrdv         C:\Windows\System32\icsvcext.dll
21:59:28.0902 0x0554  vmicrdv - ok
21:59:28.0921 0x0554  [ A6CA116884BE5352829D2E538AD56A87, 9C58A15E15433EA92E3DDB38BB446700BD620D43B0F46EDD578349676B4B4D76 ] vmicshutdown    C:\Windows\System32\icsvc.dll
21:59:28.0961 0x0554  vmicshutdown - ok
21:59:28.0975 0x0554  [ A6CA116884BE5352829D2E538AD56A87, 9C58A15E15433EA92E3DDB38BB446700BD620D43B0F46EDD578349676B4B4D76 ] vmictimesync    C:\Windows\System32\icsvc.dll
21:59:29.0016 0x0554  vmictimesync - ok
21:59:29.0030 0x0554  [ A6CA116884BE5352829D2E538AD56A87, 9C58A15E15433EA92E3DDB38BB446700BD620D43B0F46EDD578349676B4B4D76 ] vmicvmsession   C:\Windows\System32\icsvc.dll
21:59:29.0071 0x0554  vmicvmsession - ok
21:59:29.0089 0x0554  [ DC3172A6EB5DDB5EF94CB734CB7D4E63, 812971E0C2C18C876FFC9A46F1563801894C2EE9DD01CE1A641A0C68C0C1C6E2 ] vmicvss         C:\Windows\System32\icsvcext.dll
21:59:29.0131 0x0554  vmicvss - ok
21:59:29.0142 0x0554  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:59:29.0164 0x0554  volmgr - ok
21:59:29.0183 0x0554  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
21:59:29.0219 0x0554  volmgrx - ok
21:59:29.0238 0x0554  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
21:59:29.0274 0x0554  volsnap - ok
21:59:29.0283 0x0554  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\Windows\system32\drivers\volume.sys
21:59:29.0303 0x0554  volume - ok
21:59:29.0314 0x0554  [ 04BEC879AD7B3FDDD0339B19FECB0160, 8C92755DDB41AD7DDA1643D7F32FAA0FCA7E2C65C69611EB5EC1B3276EA8DBC7 ] vpci            C:\Windows\System32\drivers\vpci.sys
21:59:29.0338 0x0554  vpci - ok
21:59:29.0350 0x0554  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
21:59:29.0377 0x0554  vsmraid - ok
21:59:29.0424 0x0554  [ 01FFD5AF533F2CFDF26DDDC9313731C1, BFF0F2E57CD2358AC8F519F6F5692A46D97EC4E9B763D47101CEF31712FD4738 ] VSS             C:\Windows\system32\vssvc.exe
21:59:29.0522 0x0554  VSS - ok
21:59:29.0543 0x0554  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
21:59:29.0578 0x0554  VSTXRAID - ok
21:59:29.0588 0x0554  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
21:59:29.0614 0x0554  vwifibus - ok
21:59:29.0624 0x0554  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
21:59:29.0654 0x0554  vwififlt - ok
21:59:29.0675 0x0554  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time         C:\Windows\system32\w32time.dll
21:59:29.0730 0x0554  W32Time - ok
21:59:29.0740 0x0554  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
21:59:29.0766 0x0554  WacomPen - ok
21:59:29.0788 0x0554  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService   C:\Windows\system32\WalletService.dll
21:59:29.0836 0x0554  WalletService - ok
21:59:29.0847 0x0554  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
21:59:29.0880 0x0554  wanarp - ok
21:59:29.0888 0x0554  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
21:59:29.0921 0x0554  wanarpv6 - ok
21:59:29.0971 0x0554  [ 30B8286F8FE1AE90A583100D45E02247, 3C86A4A5E21F9A1267EA231B20914E0A162BA4C25FE8917AD3AB6D504DA5BE0C ] wbengine        C:\Windows\system32\wbengine.exe
21:59:30.0067 0x0554  wbengine - ok
21:59:30.0103 0x0554  [ 6BE945D6DE02713BAD8627205CDF9F48, F6548EAF5D67DA4682D8B31E5B565606DEAAB9276B44F25F1A4203AB61B9400B ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:59:30.0169 0x0554  WbioSrvc - ok
21:59:30.0183 0x0554  [ CD24DEEA22152524CCFE859591D12A57, C60ACF77647E5D6EDC10BBBCF974DF264145123C8EDB6506AFA9C949EBA53D7F ] wcifs           C:\Windows\system32\drivers\wcifs.sys
21:59:30.0209 0x0554  wcifs - ok
21:59:30.0236 0x0554  [ 32960EA9CF836D7DD77767DCB68CE230, 679446A4FAB0331C181D2716CAEA225267C6164BB9867E360C5B3D6AB1083195 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
21:59:30.0303 0x0554  Wcmsvc - ok
21:59:30.0326 0x0554  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc         C:\Windows\System32\wcncsvc.dll
21:59:30.0375 0x0554  wcncsvc - ok
21:59:30.0386 0x0554  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs           C:\Windows\system32\drivers\wcnfs.sys
21:59:30.0411 0x0554  wcnfs - ok
21:59:30.0422 0x0554  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
21:59:30.0445 0x0554  WdBoot - ok
21:59:30.0477 0x0554  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:59:30.0521 0x0554  Wdf01000 - ok
21:59:30.0540 0x0554  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
21:59:30.0571 0x0554  WdFilter - ok
21:59:30.0583 0x0554  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:59:30.0623 0x0554  WdiServiceHost - ok
21:59:30.0631 0x0554  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost   C:\Windows\system32\wdi.dll
21:59:30.0670 0x0554  WdiSystemHost - ok
21:59:30.0697 0x0554  [ 373DF27CD5D5E50FFA2A90FEE0C0D994, 09E6C6C690AEE1C1A9A84BBA87A934040B2A20F677E5F5B2D24F8433B61BD81E ] wdiwifi         C:\Windows\system32\DRIVERS\wdiwifi.sys
21:59:30.0754 0x0554  wdiwifi - ok
21:59:30.0767 0x0554  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
21:59:30.0792 0x0554  WdNisDrv - ok
21:59:30.0797 0x0554  WdNisSvc - ok
21:59:30.0816 0x0554  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient       C:\Windows\System32\webclnt.dll
21:59:30.0861 0x0554  WebClient - ok
21:59:30.0876 0x0554  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:59:30.0920 0x0554  Wecsvc - ok
21:59:30.0930 0x0554  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
21:59:30.0966 0x0554  WEPHOSTSVC - ok
21:59:30.0977 0x0554  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport   C:\Windows\System32\wercplsupport.dll
21:59:31.0016 0x0554  wercplsupport - ok
21:59:31.0029 0x0554  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\Windows\System32\WerSvc.dll
21:59:31.0063 0x0554  WerSvc - ok
21:59:31.0075 0x0554  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS         C:\Windows\system32\drivers\wfplwfs.sys
21:59:31.0102 0x0554  WFPLWFS - ok
21:59:31.0113 0x0554  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\Windows\System32\wiarpc.dll
21:59:31.0145 0x0554  WiaRpc - ok
21:59:31.0154 0x0554  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:59:31.0175 0x0554  WIMMount - ok
21:59:31.0180 0x0554  WinDefend - ok
21:59:31.0202 0x0554  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
21:59:31.0226 0x0554  WindowsTrustedRT - ok
21:59:31.0235 0x0554  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
21:59:31.0255 0x0554  WindowsTrustedRTProxy - ok
21:59:31.0286 0x0554  [ C9E7D91A044B77CBCB4121C06610A86C, 9FF039D67A5CE4732920EA4F1F5CFD9DE0AAADC34829A007EA697030D42D3623 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
21:59:31.0352 0x0554  WinHttpAutoProxySvc - ok
21:59:31.0364 0x0554  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\Windows\System32\drivers\winmad.sys
21:59:31.0385 0x0554  WinMad - ok
21:59:31.0402 0x0554  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
21:59:31.0440 0x0554  Winmgmt - ok
21:59:31.0523 0x0554  [ F86E9029774478D276E0AAB7D169896D, EDCB96F745E1F16BDFF70B140B38412096FA29A407157183223AE6111CBB4B38 ] WinRM           C:\Windows\system32\WsmSvc.dll
21:59:31.0672 0x0554  WinRM - ok
21:59:31.0699 0x0554  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
21:59:31.0732 0x0554  WINUSB - ok
21:59:31.0743 0x0554  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys
21:59:31.0766 0x0554  WinVerbs - ok
21:59:31.0793 0x0554  [ 4D694EDF85F1BFC463B15846D4E00A9B, 4ED44C0E22D2843121E4C8A58F97B526BB7D85C0D7A0BB4B1158A970258C791E ] wisvc           C:\Windows\system32\flightsettings.dll
21:59:31.0847 0x0554  wisvc - ok
21:59:31.0922 0x0554  [ 0ECFEB0CABA7FEE6E14FAD5D6BF4777E, 7C8F69E1B04B5F7853D18216C91233B7DD53760281B295DA7D23024C0D4B378A ] WlanSvc         C:\Windows\System32\wlansvc.dll
21:59:32.0051 0x0554  WlanSvc - ok
21:59:32.0125 0x0554  [ 7A98AF088E0B1A5EB98863B14F493716, 8B2F8D02AC0637C72859AF29C05C01D7D1C81C6A15CBE2D579F27F3254E66076 ] wlidsvc         C:\Windows\system32\wlidsvc.dll
21:59:32.0240 0x0554  wlidsvc - ok
21:59:32.0256 0x0554  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi         C:\Windows\System32\drivers\wmiacpi.sys
21:59:32.0282 0x0554  WmiAcpi - ok
21:59:32.0300 0x0554  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:59:32.0334 0x0554  wmiApSrv - ok
21:59:32.0340 0x0554  WMPNetworkSvc - ok
21:59:32.0357 0x0554  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof             C:\Windows\system32\drivers\Wof.sys
21:59:32.0387 0x0554  Wof - ok
21:59:32.0449 0x0554  [ 909CB4BBF7B08E78C363000E09E79A6F, 217205D1B5EE03274AFF9405AED6D2A5665CBA4C3876E84B53DA44920CDF9CB1 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
21:59:32.0550 0x0554  workfolderssvc - ok
21:59:32.0568 0x0554  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:59:32.0602 0x0554  WPDBusEnum - ok
21:59:32.0611 0x0554  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr       C:\Windows\system32\drivers\WpdUpFltr.sys
21:59:32.0632 0x0554  WpdUpFltr - ok
21:59:32.0647 0x0554  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\Windows\system32\WpnService.dll
21:59:32.0685 0x0554  WpnService - ok
21:59:32.0697 0x0554  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\Windows\System32\WpnUserService.dll
21:59:32.0728 0x0554  WpnUserService - ok
21:59:32.0741 0x0554  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
21:59:32.0767 0x0554  ws2ifsl - ok
21:59:32.0781 0x0554  [ 519806FBCF00A0B17B8E03297DB0F551, 1911EA7168B06DBF3D36833120E4731437BF1ACC294C289B132C50280A40F548 ] wscsvc          C:\Windows\System32\wscsvc.dll
21:59:32.0821 0x0554  wscsvc - ok
21:59:32.0830 0x0554  WSearch - ok
21:59:32.0905 0x0554  [ A93273F9EA274B87E76C9FE9A98E169D, E5961AC5DB93B365D04AD6C54CFD54F58CB9851398312CC63D937282265F81A7 ] wuauserv        C:\Windows\system32\wuaueng.dll
21:59:33.0040 0x0554  wuauserv - ok
21:59:33.0058 0x0554  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:59:33.0087 0x0554  WudfPf - ok
21:59:33.0102 0x0554  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\Windows\system32\drivers\WudfRd.sys
21:59:33.0137 0x0554  WUDFRd - ok
21:59:33.0152 0x0554  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
21:59:33.0187 0x0554  wudfsvc - ok
21:59:33.0202 0x0554  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs       C:\Windows\system32\DRIVERS\WUDFRd.sys
21:59:33.0236 0x0554  WUDFWpdFs - ok
21:59:33.0247 0x0554  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
21:59:33.0283 0x0554  WUDFWpdMtp - ok
21:59:33.0326 0x0554  [ FD25CA03DE4372B6D3B7584248240D40, 91743D71A25FA0EB10C1C3DA71C534DDF2C4224BB96F081159465EED11B1C468 ] WwanSvc         C:\Windows\System32\wwansvc.dll
21:59:33.0411 0x0554  WwanSvc - ok
21:59:33.0450 0x0554  [ 89841EAF6C36E0B708BEAC939837AB27, 5B2A521E9C1051DA9D472CE9969E97C4F61A3D315B1C0ABDE01E43D033033268 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
21:59:33.0524 0x0554  XblAuthManager - ok
21:59:33.0568 0x0554  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave     C:\Windows\System32\XblGameSave.dll
21:59:33.0649 0x0554  XblGameSave - ok
21:59:33.0668 0x0554  [ 59335CEA021FB89E07AD5DB5D17F09D0, 33FEFD5798BFA306FBEDCC8F2D0D984B6546A61B5026E921A8AC0466ADF2B698 ] xboxgip         C:\Windows\System32\drivers\xboxgip.sys
21:59:33.0703 0x0554  xboxgip - ok
21:59:33.0743 0x0554  [ 335E6F2BE58523B295945C840C185B00, 94ED7E2CB212A3D55B8A2CB90CD1D02A6AF92DC0DDD487CB5B7CAC9883343460 ] XboxNetApiSvc   C:\Windows\system32\XboxNetApiSvc.dll
21:59:33.0826 0x0554  XboxNetApiSvc - ok
21:59:33.0839 0x0554  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\Windows\System32\drivers\xinputhid.sys
21:59:33.0867 0x0554  xinputhid - ok
21:59:33.0882 0x0554  [ 80D89A9C089F1FADCDFD3C593B67E9EF, 88E0C708C0BFCC140AD7763F6BE586EFEF1CADDDAD7850A4065AF6507CD7A672 ] xusb22          C:\Windows\System32\drivers\xusb22.sys
21:59:33.0910 0x0554  xusb22 - ok
21:59:33.0911 0x0554  ================ Scan global ===============================
21:59:33.0922 0x0554  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\Windows\system32\basesrv.dll
21:59:33.0936 0x0554  [ 1FEF9536BA2779E2F3CB524E34BAC715, 6387C7E2FD538EFD9AC19B622AEC81F6F924576FDAB6F003AF5B6CBD33F6A379 ] C:\Windows\system32\winsrv.dll
21:59:33.0953 0x0554  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\Windows\system32\sxssrv.dll
21:59:33.0976 0x0554  [ 133390D061D94917125DC666DA67ECD0, 69D6FFF3E0A0C4D77A62B4D71E1E3A8D10D93C46782A1B05F0EC4B8919C384B9 ] C:\Windows\system32\services.exe
21:59:33.0992 0x0554  [ Global ] - ok
21:59:33.0992 0x0554  ================ Scan MBR ==================================
21:59:33.0997 0x0554  [ D666803CE898975687F16687055C00AC ] \Device\Harddisk0\DR0
21:59:34.0098 0x0554  \Device\Harddisk0\DR0 - ok
21:59:34.0113 0x0554  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
21:59:34.0539 0x0554  \Device\Harddisk1\DR1 - ok
21:59:34.0546 0x0554  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR3
21:59:34.0706 0x0554  \Device\Harddisk2\DR3 - ok
21:59:34.0707 0x0554  ================ Scan VBR ==================================
21:59:34.0721 0x0554  [ 4952706FC2D898AE2B8BD6ECC83E353E ] \Device\Harddisk1\DR1\Partition1
21:59:34.0723 0x0554  \Device\Harddisk1\DR1\Partition1 - ok
21:59:34.0729 0x0554  [ 4156E58004C85E180D44EA567CE638A1 ] \Device\Harddisk1\DR1\Partition2
21:59:34.0733 0x0554  \Device\Harddisk1\DR1\Partition2 - ok
21:59:34.0740 0x0554  [ 16B973848A2687690F197E3A04024355 ] \Device\Harddisk2\DR3\Partition1
21:59:34.0746 0x0554  \Device\Harddisk2\DR3\Partition1 - ok
21:59:34.0747 0x0554  ================ Scan generic autorun ======================
21:59:34.0945 0x0554  [ 47CCAA466AD206FFE34C6C9CA3279BC7, 4B7A4779A4EDB8AFE4CF860316EF949EAD2AEE6D56258F2D12924404F9D67A3B ] c:\program files\emsisoft internet security\a2guard.exe
21:59:35.0160 0x0554  emsisoft anti-malware - ok
21:59:35.0187 0x0554  [ 5677C8C60F4659E8626AC9036EEF38DF, 1C7D3EC3BCB3E34900DD9556A3EBAF449C68585DC8E07682E680790497105B8B ] C:\Program Files\Classic Shell\ClassicStartMenu.exe
21:59:35.0209 0x0554  Classic Start Menu - ok
21:59:35.0462 0x0554  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
21:59:35.0841 0x0554  OneDriveSetup - ok
21:59:36.0126 0x0554  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
21:59:36.0419 0x0554  OneDriveSetup - ok
21:59:36.0686 0x0554  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
21:59:36.0977 0x0554  OneDriveSetup - ok
21:59:37.0082 0x0554  [ ADF6C78FC95716CA45A68FD3DA1C1A78, 8250D47AC8C25A3A2DB8AB2148350F7086141F91DB317D0431DA545430B843F5 ] C:\Program Files (x86)\Steam\steam.exe
21:59:37.0239 0x0554  Steam - ok
21:59:37.0250 0x0554  Waiting for KSN requests completion. In queue: 209
21:59:38.0303 0x0554  AV detected via SS2: Emsisoft Internet Security, C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\a2start.exe ( 11.10.0.6563 ), 0x41000 ( enabled : updated )
21:59:38.0305 0x0554  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.0 ), 0x60100 ( disabled : updated )
21:59:38.0308 0x0554  FW detected via SS2: Emsisoft Internet Security, C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\a2start.exe ( 11.10.0.6563 ), 0x41010 ( enabled )
21:59:38.0639 0x0554  ============================================================
21:59:38.0639 0x0554  Scan finished
21:59:38.0639 0x0554  ============================================================
21:59:38.0681 0x0d60  Detected object count: 0
21:59:38.0682 0x0d60  Actual detected object count: 0

M-K-D-B · 04.09.2016, 09:07

Servus,

Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel
- "Prefetch" Dateien
- Proxy
- Winsock
- Internet Explorer Richtlinien
- Chrome Richtlinien
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

Madyou · 04.09.2016, 12:37

Code:

ATTFilter

# AdwCleaner v6.010 - Bericht erstellt am 04/09/2016 um 11:06:50
# Aktualisiert am 12/08/2016 von ToolsLib
# Datenbank : 2016-09-03.2 [Server]
# Betriebssystem : Windows 10 Pro  (X64)
# Benutzername : Jürgen - HOME-PC
# Gestartet von : C:\Users\Jürgen\Desktop\adwcleaner_6.010.exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****



***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [947 Bytes] - [04/09/2016 11:06:50]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1092 Bytes] ##########

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 04.09.2016
Suchlaufzeit: 11:21
Protokolldatei: Malwarebytes.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.09.04.04
Rootkit-Datenbank: v2016.08.15.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Jürgen

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 331363
Abgelaufene Zeit: 7 Min., 44 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.7 (07.03.2016)
Operating System: Windows 10 Pro x64 
Ran by Jrgen (Administrator) on 04.09.2016 at 11:33:57,80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0 


Deleted the following from C:\Users\Jrgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\prefs.js
user_pref(browser.startup.homepage,    hxxps://www.startpage.com/do/mypage.pl?prf=515f7ee04a894369a3da463b448bf96b);
user_pref(extensions.newtaboverride@agenedia.com.url,    hxxps://www.startpage.com/do/mypage.pl?prf=515f7ee04a894369a3da463b448bf96b);



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.09.2016 at 11:35:12,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Finde das nicht gut das JRT meine Startseite aus der Firefox-Einstellung und den Firefox- Addon gelöscht hat.

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von Jürgen (Administrator) auf HOME-PC (04-09-2016 11:36:56)
Gestartet von C:\Users\Jürgen\Desktop
Geladene Profile: Jürgen (Verfügbare Profile: Jürgen)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7241200 2016-07-26] (Emsisoft Ltd)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{240cf37f-1292-4e27-a919-7d779558b896}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-09-01] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-26] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-26] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-09-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-31] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-26] (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWoW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-31] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-09-01] (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-1976182191-4087556911-4006232103-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1976182191-4087556911-4006232103-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Extension: (Status-4-Evar) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\status4evar@caligonstudios.com.xpi [2016-01-03]
FF Extension: (Restart) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\Restart@schuzak.jp.xpi [2016-01-03]
FF Extension: (Secure Login) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\secureLogin@blueimp.net.xpi [2016-07-12]
FF Extension: (Stylish) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2016-08-11]
FF Extension: (Greasemonkey) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20]
FF Extension: (Menu Wizard) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\s3menu@wizard.xpi [2016-09-03]
FF Extension: (Modify Headers) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2016-07-12]
FF Extension: (HTTPS Everywhere) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\https-everywhere-eff@eff.org.xpi [2016-09-02]
FF Extension: (RefControl) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{455D905A-D37C-4643-A9E2-F6FEFAA0424A}.xpi [2016-07-12]
FF Extension: (CanvasBlocker) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\CanvasBlocker@kkapsner.de.xpi [2016-08-08]
FF Extension: (Wörterbuch Deutsch (de-DE), Hunspell-unterstützt) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\de_DE@dicts.j3e.de [2016-08-30]
FF Extension: (Self-Destructing Cookies) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2016-08-14]
FF Extension: (I don't care about cookies) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2016-08-28]
FF Extension: (Privacy Badger) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-MnnxcxisBPnSXQ-eff@jetpack.xpi [2016-08-11]
FF Extension: (Searchonymous) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-WF1v8esuNM9pRg@jetpack.xpi [2016-02-18]
FF Extension: (New Tab Override (browser.newtab.url replacement)) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\newtaboverride@agenedia.com.xpi [2016-07-12]
FF Extension: (uBlock Origin) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\uBlock0@raymondhill.net.xpi [2016-09-02]
FF Extension: (DownThemAll!) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2016-09-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9331168 2016-07-26] (Emsisoft Ltd)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3189488 2016-07-05] (Microsoft Corporation)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-08-29] (Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-17] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [115832 2016-07-21] (Emsisoft Ltd)
R1 FWNDIS_LWF; C:\Windows\system32\DRIVERS\fwndislwf64.sys [204688 2016-06-30] ()
S1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [144392 2016-06-30] ()
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72b89f8d71abda5d\nvlddmkm.sys [14199352 2016-08-16] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2016-07-16] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-04 11:36 - 2016-09-04 11:37 - 00013574 _____ C:\Users\Jürgen\Desktop\FRST.txt
2016-09-04 11:33 - 2016-09-02 22:53 - 01610560 _____ (Malwarebytes) C:\Users\Jürgen\Desktop\JRT.exe
2016-09-04 11:16 - 2016-09-04 11:16 - 00001175 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-09-04 11:16 - 2016-09-04 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-09-04 11:16 - 2016-09-04 11:16 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-09-04 11:16 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-09-04 11:16 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-09-04 11:15 - 2016-09-04 11:15 - 22851472 _____ (Malwarebytes ) C:\Users\Jürgen\Desktop\mbam-setup-2.2.1.1043.exe
2016-09-04 11:03 - 2016-09-04 11:15 - 00000000 ____D C:\AdwCleaner
2016-09-04 10:57 - 2016-08-28 16:57 - 03826240 _____ C:\Users\Jürgen\Desktop\adwcleaner_6.010.exe
2016-09-03 21:07 - 2016-09-04 11:36 - 00000000 ____D C:\FRST
2016-09-02 23:33 - 2016-09-04 11:20 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-02 23:33 - 2016-09-04 11:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-02 23:33 - 2016-09-03 00:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-02 23:32 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-02 23:18 - 2016-09-02 23:30 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Jürgen\Desktop\tdsskiller.exe
2016-09-02 23:06 - 2016-09-02 23:23 - 02397696 _____ (Farbar) C:\Users\Jürgen\Desktop\FRST64.exe
2016-09-01 22:31 - 2016-08-27 14:45 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-09-01 22:31 - 2016-08-27 11:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2016-09-01 22:31 - 2016-08-27 07:12 - 04130944 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-09-01 22:31 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-01 22:31 - 2016-08-27 06:58 - 03893376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-09-01 22:31 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-01 22:31 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-09-01 22:31 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll
2016-09-01 22:31 - 2016-08-27 06:39 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-09-01 22:31 - 2016-08-27 06:38 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-09-01 22:31 - 2016-08-27 06:38 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2016-09-01 22:31 - 2016-08-27 06:37 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2016-09-01 22:31 - 2016-08-27 06:25 - 00804864 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-09-01 22:31 - 2016-08-20 08:26 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-01 22:31 - 2016-08-20 08:13 - 00590952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-01 22:31 - 2016-08-20 08:06 - 01046976 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-01 22:31 - 2016-08-20 08:06 - 00885832 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-09-01 22:31 - 2016-08-20 08:06 - 00108384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-09-01 22:31 - 2016-08-20 08:05 - 01377008 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-09-01 22:31 - 2016-08-20 08:04 - 07814488 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-01 22:31 - 2016-08-20 08:04 - 01349120 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-01 22:31 - 2016-08-20 08:04 - 01163696 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-09-01 22:31 - 2016-08-20 08:03 - 02257248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-09-01 22:31 - 2016-08-20 08:03 - 01883784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 02190688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 01279328 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-09-01 22:31 - 2016-08-20 07:52 - 00658776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 00178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2016-09-01 22:31 - 2016-08-20 07:51 - 00681312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-09-01 22:31 - 2016-08-20 07:50 - 02913104 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-09-01 22:31 - 2016-08-20 07:50 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-09-01 22:31 - 2016-08-20 07:50 - 01099608 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00987992 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00942424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2016-09-01 22:31 - 2016-08-20 07:50 - 00807776 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00073568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2016-09-01 22:31 - 2016-08-20 07:50 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00020320 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 22218808 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 01453992 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 01071728 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-09-01 22:31 - 2016-08-20 07:46 - 01570680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-01 22:31 - 2016-08-20 07:43 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-09-01 22:31 - 2016-08-20 07:42 - 02537824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-01 22:31 - 2016-08-20 07:34 - 01430200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-09-01 22:31 - 2016-08-20 07:34 - 00782176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-09-01 22:31 - 2016-08-20 07:34 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2016-09-01 22:31 - 2016-08-20 07:33 - 05722312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-09-01 22:31 - 2016-08-20 07:33 - 00852824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-09-01 22:31 - 2016-08-20 07:32 - 02166232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-09-01 22:31 - 2016-08-20 07:32 - 00846552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 20965240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 00980832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-09-01 22:31 - 2016-08-20 07:25 - 01264912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-09-01 22:31 - 2016-08-20 07:22 - 22571008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-09-01 22:31 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-01 22:31 - 2016-08-20 07:21 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-09-01 22:31 - 2016-08-20 07:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-09-01 22:31 - 2016-08-20 07:20 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-09-01 22:31 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-09-01 22:31 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-09-01 22:31 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-09-01 22:31 - 2016-08-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-09-01 22:31 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-09-01 22:31 - 2016-08-20 07:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-09-01 22:31 - 2016-08-20 07:17 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-09-01 22:31 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-09-01 22:31 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-01 22:31 - 2016-08-20 07:16 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-09-01 22:31 - 2016-08-20 07:16 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-09-01 22:31 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
2016-09-01 22:31 - 2016-08-20 07:14 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
2016-09-01 22:31 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
2016-09-01 22:31 - 2016-08-20 07:13 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-09-01 22:31 - 2016-08-20 07:12 - 01014784 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-09-01 22:31 - 2016-08-20 07:12 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00476672 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-09-01 22:31 - 2016-08-20 07:10 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-09-01 22:31 - 2016-08-20 07:10 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-09-01 22:31 - 2016-08-20 07:10 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 09128448 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 00491520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-09-01 22:31 - 2016-08-20 07:08 - 01906176 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-09-01 22:31 - 2016-08-20 07:08 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-09-01 22:31 - 2016-08-20 07:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-01 22:31 - 2016-08-20 07:06 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-09-01 22:31 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-09-01 22:31 - 2016-08-20 07:05 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-09-01 22:31 - 2016-08-20 07:05 - 00380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 23682560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 03245056 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2016-09-01 22:31 - 2016-08-20 07:04 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 05398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 02846208 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 00944640 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-01 22:31 - 2016-08-20 07:02 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 04612096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 00936960 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 19423232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 08124416 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 07624192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 05511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01690112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01106944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll
2016-09-01 22:31 - 2016-08-20 06:58 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-09-01 22:31 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 02680832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 00558080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02711040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02315264 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02289664 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02143232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 01006080 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll
2016-09-01 22:31 - 2016-08-20 06:55 - 19418624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-01 22:31 - 2016-08-20 06:55 - 00726016 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-09-01 22:31 - 2016-08-20 06:54 - 00806912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2016-09-01 22:31 - 2016-08-20 06:53 - 03617792 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-09-01 22:31 - 2016-08-20 06:53 - 03299328 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-09-01 22:31 - 2016-08-20 06:53 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2016-09-01 22:31 - 2016-08-20 06:52 - 00640000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 06044672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-09-01 22:31 - 2016-08-20 06:50 - 01875456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-09-01 22:31 - 2016-08-20 06:49 - 02999296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-09-01 22:31 - 2016-08-20 06:46 - 03105792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-09-01 22:31 - 2016-08-19 03:33 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-08-31 01:59 - 2016-08-31 01:59 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 01:59 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-08-31 01:59 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-08-31 01:59 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-08-31 01:59 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-08-31 01:57 - 2016-08-11 16:33 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 34837952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 28236856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10728856 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10530960 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10273096 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 09086344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 08681720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 08644456 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 03901520 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 03443152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 02914752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 02553912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437254.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437254.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01023544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00961080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00945088 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00897592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00803096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00694952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00644648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00584712 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00442816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00413256 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00393664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00386104 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00345936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-08-31 01:57 - 2016-08-11 16:33 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-08-28 18:24 - 2016-08-28 18:27 - 00000000 ____D C:\Users\Jürgen\AppData\Local\niemiro
2016-08-26 18:09 - 2016-08-30 21:56 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\TV-Browser
2016-08-26 18:08 - 2016-08-26 18:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TV-Browser
2016-08-26 18:08 - 2016-08-26 18:08 - 00000000 ____D C:\Program Files (x86)\TV-Browser
2016-08-26 17:07 - 2016-08-26 17:27 - 00000000 ____D C:\ProgramData\Oracle
2016-08-26 17:07 - 2016-08-26 17:07 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\Sun
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Sun
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-26 17:06 - 2016-08-26 17:06 - 00000000 ____D C:\Program Files\Java
2016-08-24 08:58 - 2016-08-24 08:58 - 00000000 ____D C:\Users\Jürgen\AppData\Local\TempTaskUpdateDetection1DE98E15-615A-4DE7-8E55-8178461CB8B2
2016-08-21 10:13 - 2016-08-21 10:13 - 02370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 02251432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01847048 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01595904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01557296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01343928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01066096 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00955008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00313560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-08-21 10:13 - 2016-08-21 10:13 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 17187328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13867520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13433856 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13080576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 12345344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 12174336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 09260032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-08-21 10:12 - 2016-08-21 10:12 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-08-21 10:12 - 2016-08-21 10:12 - 03116032 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02745224 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02422784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAJApi.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-21 10:12 - 2016-08-21 10:12 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-21 10:12 - 2016-08-21 10:12 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01780736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01694200 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01469120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01052672 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00860672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00619368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00595488 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00587968 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00529928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00509784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00450400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00435040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00381760 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00361096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00354264 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00321280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00224096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00151224 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00077664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00050880 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-08-21 10:12 - 2016-08-21 10:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-08-21 10:12 - 2016-08-21 10:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-08-21 09:54 - 2016-08-21 09:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-21 09:54 - 2016-08-21 09:54 - 00000000 ____D C:\Program Files\7-Zip
2016-08-16 10:56 - 2016-08-16 10:56 - 00000000 __RHD C:\MSOCache
2016-08-16 10:48 - 2016-08-16 10:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-16 10:48 - 2016-08-16 10:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-13 08:45 - 2016-08-13 08:50 - 00000000 ____D C:\Windows\system32\MRT
2016-08-13 08:45 - 2016-08-13 08:45 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 05622600 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 01066328 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00939872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00665768 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2016-08-11 15:38 - 2016-08-11 15:38 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Google
2016-08-11 15:35 - 2016-08-11 15:35 - 00002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-08-11 15:35 - 2016-08-11 15:35 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-11 08:38 - 2016-08-02 10:11 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-08-11 08:38 - 2016-08-02 10:10 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-08-11 08:38 - 2016-08-02 09:58 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-08-11 08:38 - 2016-08-02 06:25 - 01456640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-08-11 04:09 - 2016-09-02 16:42 - 00007596 _____ C:\Users\Jürgen\AppData\Local\Resmon.ResmonCfg
2016-08-09 14:14 - 2016-08-24 15:24 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\dvdcss
2016-08-09 13:01 - 2016-09-01 23:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-08-09 12:41 - 2016-08-09 13:00 - 00000000 ____D C:\Program Files\office.tmp
2016-08-09 12:32 - 2016-08-09 12:32 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Microsoft Help
2016-08-06 21:06 - 2016-08-06 21:07 - 00000000 ____D C:\Program Files (x86)\Xvid
2016-08-06 21:06 - 2016-08-06 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2016-08-06 21:06 - 2015-06-21 17:09 - 00713216 _____ C:\Windows\system32\xvidcore.dll
2016-08-06 21:06 - 2015-06-21 17:09 - 00251392 _____ C:\Windows\system32\xvidvfw.dll
2016-08-06 21:06 - 2015-06-21 17:09 - 00171520 _____ C:\Windows\system32\xvid.ax
2016-08-06 21:06 - 2015-06-21 17:09 - 00147968 _____ C:\Windows\SysWOW64\xvid.ax
2016-08-06 21:06 - 2015-06-21 17:08 - 00638976 _____ C:\Windows\SysWOW64\xvidcore.dll
2016-08-06 21:06 - 2015-06-21 17:08 - 00235520 _____ C:\Windows\SysWOW64\xvidvfw.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-04 11:34 - 2016-07-31 09:34 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\vlc
2016-09-04 11:33 - 2016-07-30 16:03 - 00000000 ____D C:\Program Files\Emsisoft Internet Security
2016-09-04 11:33 - 2016-07-30 15:43 - 00000000 ____D C:\Users\Jürgen\AppData\Local\ClassicShell
2016-09-04 11:32 - 2016-07-30 17:21 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-04 11:14 - 2016-07-30 15:31 - 04152036 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-04 11:14 - 2016-07-17 00:51 - 01939390 _____ C:\Windows\system32\perfh007.dat
2016-09-04 11:14 - 2016-07-17 00:51 - 00503712 _____ C:\Windows\system32\perfc007.dat
2016-09-04 11:08 - 2016-07-30 15:18 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-04 11:07 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2016-09-04 11:06 - 2016-07-30 17:19 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-09-04 09:39 - 2016-07-30 15:15 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-09-04 08:48 - 2016-08-03 03:28 - 00004158 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{54B9C561-9CE1-4BD5-B0E6-219E0259160A}
2016-09-04 00:45 - 2016-07-30 15:27 - 00000000 ____D C:\Users\Jürgen
2016-09-03 23:35 - 2016-08-01 14:39 - 00000000 ____D C:\Users\Jürgen\Documents\Euro Truck Simulator 2
2016-09-03 23:35 - 2016-07-30 20:28 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\TS3Client
2016-09-03 23:10 - 2016-07-30 20:28 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Overwolf
2016-09-03 10:28 - 2016-07-30 16:52 - 00000000 ____D C:\ProgramData\Emsisoft
2016-09-02 22:55 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2016-09-02 19:32 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2016-09-01 23:20 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-09-01 22:50 - 2016-08-01 21:09 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-09-01 22:50 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-01 22:49 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2016-09-01 22:37 - 2016-07-30 15:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-09-01 22:37 - 2016-07-30 15:15 - 00231584 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-01 22:35 - 2016-07-17 00:56 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\dsc
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lv-LV
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lt-LT
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\et-EE
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\es-MX
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\en-GB
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-09-01 22:33 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2016-09-01 22:11 - 2016-07-16 13:43 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2016-09-01 22:11 - 2016-07-16 13:43 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-09-01 22:11 - 2016-07-16 13:42 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-09-01 22:11 - 2016-07-16 13:42 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-01 22:11 - 2016-07-16 13:42 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-01 22:11 - 2016-07-16 13:42 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-09-01 22:11 - 2016-07-16 13:42 - 00114192 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00079544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-08-31 01:59 - 2016-07-30 15:51 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-29 22:58 - 2016-07-30 15:27 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Packages
2016-08-28 17:24 - 2016-07-30 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-28 10:00 - 2016-07-31 18:36 - 00000000 ____D C:\Users\Jürgen\Documents\Masters of the World
2016-08-26 21:08 - 2016-08-03 18:47 - 00000000 ____D C:\ProgramData\Steam
2016-08-26 07:43 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-08-26 07:43 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-08-25 07:34 - 2016-07-30 15:54 - 00001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-25 07:34 - 2016-07-30 15:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-08-22 12:15 - 2016-07-30 15:24 - 00000000 ____D C:\Users\defaultuser0
2016-08-21 10:14 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2016-08-12 18:37 - 2016-08-03 18:47 - 00000000 ____D C:\Users\Jürgen\Documents\KONAMI
2016-08-11 16:33 - 2016-07-30 15:48 - 00040827 _____ C:\Windows\system32\nvinfo.pb
2016-08-11 14:27 - 2016-07-30 15:50 - 06386048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 02468288 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 01365048 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-08-11 14:27 - 2016-07-30 15:50 - 00548920 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-08-09 18:06 - 2016-07-30 15:50 - 07255045 _____ C:\Windows\system32\nvcoproc.bin
2016-08-07 22:40 - 2016-08-03 13:42 - 00000000 ____D C:\Users\Jürgen\AppData\Local\JDownloader v2.0
2016-08-06 21:06 - 2016-08-02 20:05 - 00000000 ____D C:\Users\Jürgen\Documents\American Truck Simulator
2016-08-05 11:20 - 2016-08-04 12:04 - 00000638 _____ C:\Windows\Tasks\TrackerAutoUpdate.job

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-11 04:09 - 2016-09-02 16:42 - 0007596 _____ () C:\Users\Jürgen\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
C:\Users\Jürgen\AppData\Local\Temp\libeay32.dll
C:\Users\Jürgen\AppData\Local\Temp\msvcr120.dll
C:\Users\Jürgen\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-02 19:03

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von Jürgen (04-09-2016 11:38:01)
Gestartet von C:\Users\Jürgen\Desktop
Windows 10 Pro Version 1607 (X64) (2016-07-30 13:25:07)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1976182191-4087556911-4006232103-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1976182191-4087556911-4006232103-503 - Limited - Disabled)
Gast (S-1-5-21-1976182191-4087556911-4006232103-501 - Limited - Disabled)
Jürgen (S-1-5-21-1976182191-4087556911-4006232103-1001 - Administrator - Enabled) => C:\Users\Jürgen

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Emsisoft Internet Security (Disabled - Up to date) {D1196F3E-3487-585D-3681-0661BD157EC3}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Internet Security (Disabled - Up to date) {6A788EDA-12BD-57D3-0C31-3D13C692347E}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Disabled) {E922EE1B-7EE8-5905-1DDE-AF5443C639B8}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
American Truck Simulator (HKLM\...\Steam App 270880) (Version:  - SCS Software)
Ansel (Version: 372.54 - NVIDIA Corporation) Hidden
Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.9 - Emsisoft Ltd.)
Euro Truck Simulator 2 (HKLM\...\Steam App 227300) (Version:  - SCS Software)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Masters of the World (HKLM\...\Steam App 268890) (Version:  - Eversim)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4849.1003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x64 de) (HKLM\...\Mozilla Firefox 48.0.2 (x64 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
NASCAR '15 Victory Edition (HKLM\...\Steam App 345890) (Version:  - Eutechnyx)
NBA 2K15 (HKLM\...\Steam App 282350) (Version:  - Visual Concepts)
NVIDIA Grafiktreiber 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.97.209.0 - Overwolf Ltd.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.1 - Tracker Software Products Ltd)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
This War of Mine (HKLM\...\Steam App 282070) (Version:  - 11 bit studios)
TruckersMP 0.2.1.0.1 Alpha (HKLM\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.2.1.0.1 Alpha - ETS2MP Team)
TV-Browser 3.4.4 (HKLM-x32\...\tvbrowser) (Version: 3.4.4 - TV-Browser Team)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.4) (Version: 1.3.4 - Xvid Team)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1976182191-4087556911-4006232103-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Jürgen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {191EB3E0-B1CA-405A-B452-2F2E36B2F615} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-31] (Adobe Systems Incorporated)
Task: {6C0D14EF-B931-4769-81E4-3CE2DBACE41C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-07-05] (Microsoft Corporation)
Task: {71E0203C-2EAF-43F6-9A41-67602FD3DD9E} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-08-29] (Overwolf LTD)
Task: {C39712FC-C540-49A6-8DC4-C82961651D2A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-07-05] (Microsoft Corporation)
Task: {E2C0AE1E-64CA-48FE-83CA-187AC6E454E9} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-04-19] (Tracker Software Products (Canada) Ltd.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-08-22 20:49 - 2016-05-24 09:51 - 00116416 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-07-30 15:46 - 2016-07-30 15:46 - 00959168 _____ () C:\Users\Jürgen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\Windows\SYSTEM32\CHARTV.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 13:43 - 2016-09-01 22:11 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2016-07-16 13:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.42.129
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\StartupApproved\Run: => "Xvid"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{19B5D688-0EFF-4935-97D1-198C364D5788}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{44154BD3-F1BA-4DED-9F5A-792D5D154AA5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9A74D8E0-106E-44D8-AF6C-40734BF176AD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{EC01AB36-5E24-457D-80B9-ED1E4CEB7E11}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A94F0BEC-6282-4C44-B497-683AC611A03A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C7D35C96-D770-4C5D-BEC8-ED8F90FFB45E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{656BF8EC-534F-4771-AB73-8E3FAB1BEC65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Masters of the World\_start.exe
FirewallRules: [{FA09400D-23A6-4CCE-A6FD-74DA85DA79FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Masters of the World\_start.exe
FirewallRules: [{E197C4E1-AAAF-4A00-B6D6-D404BFC6F76E}] => (Allow) E:\Spiele\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{4F14E046-AC0F-4F5F-8745-B1FC365B5B92}] => (Allow) E:\Spiele\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{F7C85B8B-9DD5-451D-9FC1-56813E7122FD}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{8DE3A8AB-7F7F-463D-AD19-B555B5F5A247}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{30B619BC-DA06-4801-8AB9-4FBCD38C4916}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{B1912E92-8792-479E-97D4-0DC152217C99}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D47C7B79-AAEA-425B-88DE-289F3AB4C300}] => (Allow) E:\Spiele\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{D0A29DB8-5A82-49B2-8CFB-8C777F7E63CE}] => (Allow) E:\Spiele\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{C5627CBD-0A6F-4813-AB00-0A863170719C}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B3AAE6BF-B0F4-42BC-BB2E-963B9307FE41}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{EB7EB2A8-D78F-447E-8911-5AD3B0088749}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{E1BC8B3B-10A3-4E08-A09C-6C35B3450E5F}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{0A4AFC20-FCE3-4C5E-A66C-C39B1C6FFE46}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{25E37EE7-7DB8-4C7A-A7D2-9D30D7376648}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{309ED787-6BD3-4F59-A0F4-4BAF4E97CC81}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{567BF71A-09AF-4BCF-A2AB-540A4ECE48CF}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B3DFD2C7-387A-411E-A006-C756A8DED450}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{50EC71A7-53D9-4A16-9AF0-CC55FC8C7F6A}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{BFF76B59-C2C4-46C4-8FA7-F603C84D689D}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B0DFC732-1864-4CBC-94AD-7A3A9C0DB02F}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe

==================== Wiederherstellungspunkte =========================

24-08-2016 15:21:04 Windows Update
29-08-2016 21:45:23 Windows Modules Installer
01-09-2016 22:32:08 Windows Update
04-09-2016 11:34:02 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============



==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/04/2016 11:34:04 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.
Error: (09/03/2016 11:10:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/03/2016 11:10:54 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (09/03/2016 11:10:54 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (09/03/2016 11:10:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/03/2016 11:10:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/03/2016 11:10:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (09/03/2016 11:10:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.


Systemfehler:
=============
Error: (09/04/2016 11:10:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet: 
Unbekannter Fehler

Error: (09/04/2016 11:08:14 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "CDPUserSvc_28c7f" wurde mit folgendem Fehler beendet: 
Unbekannter Fehler

Error: (09/04/2016 11:06:33 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/04/2016 11:06:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office-Klick-und-Los-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/04/2016 11:06:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/04/2016 11:06:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-08-02 14:08:16.234
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll.old because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-02 03:18:06.620
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-02 00:51:21.254
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-02 00:38:52.996
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 23:03:50.278
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:28:29.257
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:22:42.716
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:10:52.604
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 20:11:13.512
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 18:09:39.061
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: AMD Athlon(tm) II X4 620 Processor
Prozentuale Nutzung des RAM: 28%
Installierter physikalischer RAM: 6141.55 MB
Verfügbarer physikalischer RAM: 4389.4 MB
Summe virtueller Speicher: 7165.55 MB
Verfügbarer virtueller Speicher: 5362.36 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:118.75 GB) (Free:72.35 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 6D6F6B20)
No partition Table on disk 0.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: B29ED051)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

M-K-D-B · 05.09.2016, 08:33

Servus,

das mit JRT tut mir Leid, müsstest du selber neu einrichten.

Hinweis: Der Suchlauf mit ESET kann länger dauern.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
CMD: dir "C:\Program Files (x86)"
CMD: dir "C:\Program Files"
CMD: dir "C:\ProgramData"
CMD: dir "%appdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von ESET,
die Logdatei von HitmanPro,
die beiden neuen Logdateien von FRST,
die Beantwortung der gestellten Fragen.

Madyou · 05.09.2016, 13:00

Zitat:

Zitat von [SIZE="4"

Schritt 1[/SIZE]
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
CMD: dir "C:\Program Files (x86)"
CMD: dir "C:\Program Files"
CMD: dir "C:\ProgramData"
CMD: dir "%appdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Was bewirkt dieser Fix? Weil ein schädlich wurde bis jetzt nicht gefunden.

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von Jürgen (05-09-2016 10:55:10) Run:1
Gestartet von C:\Users\Jürgen\Desktop
Geladene Profile: Jürgen (Verfügbare Profile: Jürgen)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
CMD: dir "C:\Program Files (x86)"
CMD: dir "C:\Program Files"
CMD: dir "C:\ProgramData"
CMD: dir "%appdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************

Prozess erfolgreich geschlossen.

========= dir "C:\Program Files (x86)" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: C4F7-78FD

 Verzeichnis von C:\Program Files (x86)

04.09.2016  11:16    <DIR>          .
04.09.2016  11:16    <DIR>          ..
26.07.2016  07:37    <DIR>          CMAK
01.09.2016  23:20    <DIR>          Common Files
11.08.2016  15:35    <DIR>          Google
17.07.2016  00:50    <DIR>          Internet Explorer
04.09.2016  11:16    <DIR>           Malwarebytes Anti-Malware 
16.08.2016  10:48    <DIR>          Microsoft Office
16.08.2016  10:49    <DIR>          Microsoft.NET
04.09.2016  10:34    <DIR>          MozBackup
28.08.2016  17:24    <DIR>          Mozilla Maintenance Service
30.07.2016  17:10    <DIR>          Mozilla Thunderbird
30.07.2016  23:22    <DIR>          MSBuild
30.07.2016  15:51    <DIR>          NVIDIA Corporation
01.09.2016  22:50    <DIR>          Overwolf
30.07.2016  23:22    <DIR>          Reference Assemblies
05.09.2016  08:37    <DIR>          Steam
26.08.2016  18:08    <DIR>          TV-Browser
31.08.2016  01:59    <DIR>          VulkanRT
17.07.2016  00:50    <DIR>          Windows Defender
01.09.2016  22:35    <DIR>          Windows Mail
21.08.2016  10:14    <DIR>          Windows Media Player
16.07.2016  13:47    <DIR>          Windows Multimedia Platform
16.07.2016  13:47    <DIR>          Windows NT
17.07.2016  00:50    <DIR>          Windows Photo Viewer
16.07.2016  13:47    <DIR>          Windows Portable Devices
16.07.2016  13:47    <DIR>          WindowsPowerShell
06.08.2016  21:07    <DIR>          Xvid
               0 Datei(en),              0 Bytes
              30 Verzeichnis(se), 75.853.520.896 Bytes frei

========= Ende von CMD: =========


========= dir "C:\Program Files" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: C4F7-78FD

 Verzeichnis von C:\Program Files

26.08.2016  17:06    <DIR>          .
26.08.2016  17:06    <DIR>          ..
21.08.2016  09:54    <DIR>          7-Zip
01.08.2016  15:17    <DIR>          Classic Shell
26.07.2016  07:37    <DIR>          CMAK
16.07.2016  13:47    <DIR>          Common Files
05.09.2016  10:55    <DIR>          Emsisoft Internet Security
17.07.2016  00:50    <DIR>          Internet Explorer
26.08.2016  17:06    <DIR>          Java
01.09.2016  23:19    <DIR>          Microsoft Office 15
25.08.2016  07:34    <DIR>          Mozilla Firefox
30.07.2016  23:22    <DIR>          MSBuild
30.07.2016  15:51    <DIR>          NVIDIA Corporation
09.08.2016  13:00    <DIR>          office.tmp
30.07.2016  23:22    <DIR>          Reference Assemblies
31.07.2016  12:55    <DIR>          TeamSpeak 3 Client
04.08.2016  12:04    <DIR>          Tracker Software
01.08.2016  21:22    <DIR>          TruckersMP
31.07.2016  09:31    <DIR>          VideoLAN
31.07.2016  10:45    <DIR>          VS Revo Group
17.07.2016  00:50    <DIR>          Windows Defender
01.09.2016  22:35    <DIR>          Windows Defender Advanced Threat Protection
01.09.2016  22:35    <DIR>          Windows Mail
21.08.2016  10:14    <DIR>          Windows Media Player
16.07.2016  13:47    <DIR>          Windows Multimedia Platform
30.07.2016  15:24    <DIR>          Windows NT
17.07.2016  00:50    <DIR>          Windows Photo Viewer
16.07.2016  13:47    <DIR>          Windows Portable Devices
16.07.2016  13:47    <DIR>          WindowsPowerShell
               0 Datei(en),              0 Bytes
              29 Verzeichnis(se), 75.854.127.104 Bytes frei

========= Ende von CMD: =========


========= dir "C:\ProgramData" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: C4F7-78FD

 Verzeichnis von C:\ProgramData

01.08.2016  15:18    <DIR>          ClassicShell
16.07.2016  13:47    <DIR>          Comms
03.09.2016  10:28    <DIR>          Emsisoft
04.09.2016  11:16    <DIR>          Malwarebytes
03.09.2016  00:28    <DIR>          Malwarebytes' Anti-Malware (portable)
30.07.2016  15:28    <DIR>          Microsoft OneDrive
04.08.2016  12:37    <DIR>          Microsoft SkyDrive
31.08.2016  01:59    <DIR>          NVIDIA
30.07.2016  15:50    <DIR>          NVIDIA Corporation
26.08.2016  17:27    <DIR>          Oracle
01.08.2016  21:10    <DIR>          Overwolf
04.08.2016  11:05    <DIR>          Package Cache
01.09.2016  23:20    <DIR>          regid.1991-06.com.microsoft
16.07.2016  13:47    <DIR>          SoftwareDistribution
26.08.2016  21:08    <DIR>          Steam
30.07.2016  15:19    <DIR>          USOPrivate
30.07.2016  15:19    <DIR>          USOShared
31.07.2016  10:45    <DIR>          VS Revo Group
               0 Datei(en),              0 Bytes
              20 Verzeichnis(se), 75.854.114.816 Bytes frei

========= Ende von CMD: =========


========= dir "%appdata%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: C4F7-78FD

 Verzeichnis von C:\Users\Jrgen\AppData\Roaming

26.08.2016  18:09    <DIR>          .
26.08.2016  18:09    <DIR>          ..
03.08.2016  23:22    <DIR>          11bitstudios
01.08.2016  07:47    <DIR>          2K Sports
30.07.2016  15:27    <DIR>          Adobe
30.07.2016  15:43    <DIR>          ClassicShell
24.08.2016  15:24    <DIR>          dvdcss
31.07.2016  18:52    <DIR>          Macromedia
30.07.2016  15:55    <DIR>          Mozilla
31.07.2016  18:37    <DIR>          NVIDIA
26.08.2016  17:07    <DIR>          Sun
30.07.2016  17:10    <DIR>          Thunderbird
04.09.2016  15:47    <DIR>          TS3Client
04.09.2016  15:35    <DIR>          TV-Browser
04.09.2016  17:47    <DIR>          vlc
               0 Datei(en),              0 Bytes
              15 Verzeichnis(se), 75.854.114.816 Bytes frei

========= Ende von CMD: =========


========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========


========= netsh winsock reset =========


Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.


========= Ende von CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30483984 B
Java, Flash, Steam htmlcache => 10472 B
Windows/system/drivers => 1420456 B
Edge => 0 B
Chrome => 0 B
Firefox => 117491501 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 17136176 B
NetworkService => 88540 B
defaultuser0 => 0 B
Jürgen => 107351037 B

RecycleBin => 0 B
EmptyTemp: => 261.3 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 10:55:34 ====

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=623d5024d7f30547b9cb0b96ccae3e5c
# end=init
# utc_time=2016-09-05 09:42:12
# local_time=2016-09-05 11:42:12 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 30651
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=623d5024d7f30547b9cb0b96ccae3e5c
# end=updated
# utc_time=2016-09-05 10:04:30
# local_time=2016-09-05 12:04:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=623d5024d7f30547b9cb0b96ccae3e5c
# engine=30651
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2016-09-05 10:40:45
# local_time=2016-09-05 12:40:45 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 91936 4402661 0 0
# scanned=153807
# found=0
# cleaned=0
# scan_time=2174

Code:

ATTFilter

HitmanPro 3.7.14.265
www.hitmanpro.com

   Computer name . . . . : HOME-PC
   Windows . . . . . . . : 10.0.0.14393.X64/4
   User name . . . . . . : HOME-PC\Jürgen
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2016-09-05 12:56:20
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 2m 58s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 1

   Objects scanned . . . : 1.366.617
   Files scanned . . . . : 26.353
   Remnants scanned  . . : 245.035 files / 1.095.229 keys

Suspicious files ____________________________________________________________

   C:\Users\Jürgen\Desktop\FRST64.exe
      Size . . . . . . . : 2.397.696 bytes
      Age  . . . . . . . : 2.6 days (2016-09-02 23:06:48)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : EFF67DD0CB40498753A49A710C08A3A6376C7DE296D23B8AEF5D4221A6017692
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von Jürgen (Administrator) auf HOME-PC (05-09-2016 13:10:45)
Gestartet von C:\Users\Jürgen\Desktop
Geladene Profile: Jürgen (Verfügbare Profile: Jürgen)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(VS Revo Group) C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7241200 2016-07-26] (Emsisoft Ltd)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\MountPoints2: {107daf9b-5660-11e6-a624-806e6f6e6963} - "F:\LaunchU3.exe" -a
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{240cf37f-1292-4e27-a919-7d779558b896}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-09-01] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-26] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-09-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-26] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-09-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554
FF Homepage: hxxps://www.startpage.com/do/mypage.pl?prf=515f7ee04a894369a3da463b448bf96b
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-31] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-26] (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWoW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-31] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-09-01] (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-1976182191-4087556911-4006232103-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1976182191-4087556911-4006232103-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd.)
FF Extension: (Status-4-Evar) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\status4evar@caligonstudios.com.xpi [2016-01-03]
FF Extension: (Restart) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\Restart@schuzak.jp.xpi [2016-01-03]
FF Extension: (Secure Login) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\secureLogin@blueimp.net.xpi [2016-07-12]
FF Extension: (Stylish) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2016-08-11]
FF Extension: (Greasemonkey) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20]
FF Extension: (Menu Wizard) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\s3menu@wizard.xpi [2016-09-03]
FF Extension: (Modify Headers) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2016-07-12]
FF Extension: (HTTPS Everywhere) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\https-everywhere-eff@eff.org.xpi [2016-09-02]
FF Extension: (RefControl) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\extensions\{455D905A-D37C-4643-A9E2-F6FEFAA0424A}.xpi [2016-07-12]
FF Extension: (CanvasBlocker) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\CanvasBlocker@kkapsner.de.xpi [2016-08-08]
FF Extension: (Wörterbuch Deutsch (de-DE), Hunspell-unterstützt) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\de_DE@dicts.j3e.de [2016-08-30]
FF Extension: (Self-Destructing Cookies) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2016-08-14]
FF Extension: (I don't care about cookies) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2016-08-28]
FF Extension: (Privacy Badger) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-MnnxcxisBPnSXQ-eff@jetpack.xpi [2016-08-11]
FF Extension: (Searchonymous) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\jid1-WF1v8esuNM9pRg@jetpack.xpi [2016-02-18]
FF Extension: (New Tab Override (browser.newtab.url replacement)) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\newtaboverride@agenedia.com.xpi [2016-07-12]
FF Extension: (uBlock Origin) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\uBlock0@raymondhill.net.xpi [2016-09-02]
FF Extension: (DownThemAll!) - C:\Users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\p83fxwrb.default-1451812689554\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2016-09-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9331168 2016-07-26] (Emsisoft Ltd)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3189488 2016-07-05] (Microsoft Corporation)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-08-29] (Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-17] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [115832 2016-07-21] (Emsisoft Ltd)
R1 FWNDIS_LWF; C:\Windows\system32\DRIVERS\fwndislwf64.sys [204688 2016-06-30] ()
R1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [144392 2016-06-30] ()
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72b89f8d71abda5d\nvlddmkm.sys [14199352 2016-08-16] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2016-07-16] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-05 13:10 - 2016-09-05 13:11 - 00014033 _____ C:\Users\Jürgen\Desktop\FRST.txt
2016-09-05 12:55 - 2016-09-05 13:09 - 00000000 ____D C:\ProgramData\HitmanPro
2016-09-05 12:55 - 2016-09-05 12:55 - 11438608 _____ (SurfRight B.V.) C:\Users\Jürgen\Desktop\HitmanPro_x64.exe
2016-09-05 11:06 - 2016-09-05 12:54 - 00000000 ____D C:\Program Files (x86)\ESET
2016-09-05 11:05 - 2016-09-05 11:06 - 02870984 _____ (ESET) C:\Users\Jürgen\Desktop\esetsmartinstaller_deu.exe
2016-09-04 15:35 - 2016-09-04 15:35 - 00000000 ____D C:\Users\Jürgen\.oracle_jre_usage
2016-09-04 11:33 - 2016-09-02 22:53 - 01610560 _____ (Malwarebytes) C:\Users\Jürgen\Desktop\JRT.exe
2016-09-04 11:16 - 2016-09-04 11:16 - 00001175 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-09-04 11:16 - 2016-09-04 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-09-04 11:16 - 2016-09-04 11:16 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-09-04 11:16 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-09-04 11:16 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-09-04 11:15 - 2016-09-04 11:15 - 22851472 _____ (Malwarebytes ) C:\Users\Jürgen\Desktop\mbam-setup-2.2.1.1043.exe
2016-09-04 11:03 - 2016-09-04 11:15 - 00000000 ____D C:\AdwCleaner
2016-09-04 10:57 - 2016-08-28 16:57 - 03826240 _____ C:\Users\Jürgen\Desktop\adwcleaner_6.010.exe
2016-09-03 21:07 - 2016-09-05 13:10 - 00000000 ____D C:\FRST
2016-09-02 23:33 - 2016-09-04 11:20 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-02 23:33 - 2016-09-04 11:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-02 23:33 - 2016-09-03 00:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-02 23:32 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-02 23:18 - 2016-09-02 23:30 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Jürgen\Desktop\tdsskiller.exe
2016-09-02 23:06 - 2016-09-02 23:23 - 02397696 _____ (Farbar) C:\Users\Jürgen\Desktop\FRST64.exe
2016-09-01 22:31 - 2016-08-27 14:45 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-09-01 22:31 - 2016-08-27 11:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2016-09-01 22:31 - 2016-08-27 07:12 - 04130944 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-09-01 22:31 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-01 22:31 - 2016-08-27 06:58 - 03893376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-09-01 22:31 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-01 22:31 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2016-09-01 22:31 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\encapi.dll
2016-09-01 22:31 - 2016-08-27 06:39 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-09-01 22:31 - 2016-08-27 06:38 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-09-01 22:31 - 2016-08-27 06:38 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2016-09-01 22:31 - 2016-08-27 06:37 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2016-09-01 22:31 - 2016-08-27 06:25 - 00804864 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-09-01 22:31 - 2016-08-20 08:26 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-01 22:31 - 2016-08-20 08:13 - 00590952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-01 22:31 - 2016-08-20 08:06 - 01046976 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-01 22:31 - 2016-08-20 08:06 - 00885832 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-09-01 22:31 - 2016-08-20 08:06 - 00108384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-09-01 22:31 - 2016-08-20 08:05 - 01377008 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-09-01 22:31 - 2016-08-20 08:04 - 07814488 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-01 22:31 - 2016-08-20 08:04 - 01349120 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-01 22:31 - 2016-08-20 08:04 - 01163696 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-09-01 22:31 - 2016-08-20 08:03 - 02257248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-09-01 22:31 - 2016-08-20 08:03 - 01883784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 02190688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 01279328 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-09-01 22:31 - 2016-08-20 07:52 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-09-01 22:31 - 2016-08-20 07:52 - 00658776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-09-01 22:31 - 2016-08-20 07:52 - 00178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2016-09-01 22:31 - 2016-08-20 07:51 - 00681312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2016-09-01 22:31 - 2016-08-20 07:50 - 02913104 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-09-01 22:31 - 2016-08-20 07:50 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-09-01 22:31 - 2016-08-20 07:50 - 01099608 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00987992 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00942424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2016-09-01 22:31 - 2016-08-20 07:50 - 00807776 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00073568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2016-09-01 22:31 - 2016-08-20 07:50 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-01 22:31 - 2016-08-20 07:50 - 00020320 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 22218808 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 01453992 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-09-01 22:31 - 2016-08-20 07:47 - 01071728 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-09-01 22:31 - 2016-08-20 07:46 - 01570680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-01 22:31 - 2016-08-20 07:43 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-09-01 22:31 - 2016-08-20 07:42 - 02537824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-01 22:31 - 2016-08-20 07:34 - 01430200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-09-01 22:31 - 2016-08-20 07:34 - 00782176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-09-01 22:31 - 2016-08-20 07:34 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2016-09-01 22:31 - 2016-08-20 07:33 - 05722312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-09-01 22:31 - 2016-08-20 07:33 - 00852824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-09-01 22:31 - 2016-08-20 07:32 - 02166232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-09-01 22:31 - 2016-08-20 07:32 - 00846552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 20965240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-09-01 22:31 - 2016-08-20 07:29 - 00980832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-09-01 22:31 - 2016-08-20 07:25 - 01264912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-09-01 22:31 - 2016-08-20 07:22 - 22571008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-09-01 22:31 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-01 22:31 - 2016-08-20 07:21 - 00568832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.UXRes.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2016-09-01 22:31 - 2016-08-20 07:21 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-01 22:31 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\c_GSM7.DLL
2016-09-01 22:31 - 2016-08-20 07:20 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-09-01 22:31 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xinputhid.sys
2016-09-01 22:31 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2016-09-01 22:31 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-09-01 22:31 - 2016-08-20 07:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2016-09-01 22:31 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-09-01 22:31 - 2016-08-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-09-01 22:31 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2016-09-01 22:31 - 2016-08-20 07:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2016-09-01 22:31 - 2016-08-20 07:17 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-09-01 22:31 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerSvc.dll
2016-09-01 22:31 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-01 22:31 - 2016-08-20 07:16 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-09-01 22:31 - 2016-08-20 07:16 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-09-01 22:31 - 2016-08-20 07:15 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-09-01 22:31 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_G18030.DLL
2016-09-01 22:31 - 2016-08-20 07:14 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00121344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2016-09-01 22:31 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\C_IS2022.DLL
2016-09-01 22:31 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\c_GSM7.DLL
2016-09-01 22:31 - 2016-08-20 07:13 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-01 22:31 - 2016-08-20 07:13 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-09-01 22:31 - 2016-08-20 07:12 - 01014784 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-09-01 22:31 - 2016-08-20 07:12 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00476672 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-09-01 22:31 - 2016-08-20 07:12 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-09-01 22:31 - 2016-08-20 07:11 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-09-01 22:31 - 2016-08-20 07:10 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-09-01 22:31 - 2016-08-20 07:10 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2016-09-01 22:31 - 2016-08-20 07:10 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 09128448 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2016-09-01 22:31 - 2016-08-20 07:09 - 00491520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-09-01 22:31 - 2016-08-20 07:08 - 01906176 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DscCoreConfProv.dll
2016-09-01 22:31 - 2016-08-20 07:08 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-09-01 22:31 - 2016-08-20 07:08 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2016-09-01 22:31 - 2016-08-20 07:07 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\smphost.dll
2016-09-01 22:31 - 2016-08-20 07:06 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-01 22:31 - 2016-08-20 07:06 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-09-01 22:31 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi_passthru.dll
2016-09-01 22:31 - 2016-08-20 07:05 - 00715264 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-09-01 22:31 - 2016-08-20 07:05 - 00380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 23682560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 03245056 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2016-09-01 22:31 - 2016-08-20 07:04 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-09-01 22:31 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\delegatorprovider.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 05398016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 02846208 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-09-01 22:31 - 2016-08-20 07:03 - 00944640 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-01 22:31 - 2016-08-20 07:02 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 04612096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 00936960 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2016-09-01 22:31 - 2016-08-20 07:01 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 19423232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 08124416 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2016-09-01 22:31 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DscCoreConfProv.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 07624192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 05511680 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01690112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01106944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2016-09-01 22:31 - 2016-08-20 06:59 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smphost.dll
2016-09-01 22:31 - 2016-08-20 06:58 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-09-01 22:31 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi_passthru.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 02680832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-09-01 22:31 - 2016-08-20 06:57 - 00558080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02711040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02315264 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02289664 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 02143232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 01006080 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-09-01 22:31 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\delegatorprovider.dll
2016-09-01 22:31 - 2016-08-20 06:55 - 19418624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-01 22:31 - 2016-08-20 06:55 - 00726016 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-09-01 22:31 - 2016-08-20 06:54 - 00806912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2016-09-01 22:31 - 2016-08-20 06:53 - 03617792 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-09-01 22:31 - 2016-08-20 06:53 - 03299328 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-09-01 22:31 - 2016-08-20 06:53 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2016-09-01 22:31 - 2016-08-20 06:52 - 00640000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 06044672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-09-01 22:31 - 2016-08-20 06:51 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-09-01 22:31 - 2016-08-20 06:50 - 01875456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-09-01 22:31 - 2016-08-20 06:49 - 02999296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-09-01 22:31 - 2016-08-20 06:46 - 03105792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-09-01 22:31 - 2016-08-19 03:33 - 00162850 _____ C:\Windows\system32\C_932.NLS
2016-08-31 01:59 - 2016-08-31 01:59 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 01:59 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-08-31 01:59 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-08-31 01:59 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-08-31 01:59 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-08-31 01:57 - 2016-08-11 16:33 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 34837952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 28236856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10728856 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10530960 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 10273096 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 09086344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 08681720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 08644456 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 03901520 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 03443152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 02914752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 02553912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437254.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437254.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 01023544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00961080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00945088 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00897592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00803096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00694952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00644648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00584712 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00442816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00413256 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00393664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00386104 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00345936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-08-31 01:57 - 2016-08-11 16:33 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-08-31 01:57 - 2016-08-11 16:33 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-08-28 18:24 - 2016-08-28 18:27 - 00000000 ____D C:\Users\Jürgen\AppData\Local\niemiro
2016-08-26 18:09 - 2016-09-04 15:35 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\TV-Browser
2016-08-26 18:08 - 2016-08-26 18:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TV-Browser
2016-08-26 18:08 - 2016-08-26 18:08 - 00000000 ____D C:\Program Files (x86)\TV-Browser
2016-08-26 17:07 - 2016-08-26 17:27 - 00000000 ____D C:\ProgramData\Oracle
2016-08-26 17:07 - 2016-08-26 17:07 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\Sun
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Sun
2016-08-26 17:07 - 2016-08-26 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-26 17:06 - 2016-08-26 17:06 - 00000000 ____D C:\Program Files\Java
2016-08-24 08:58 - 2016-08-24 08:58 - 00000000 ____D C:\Users\Jürgen\AppData\Local\TempTaskUpdateDetection1DE98E15-615A-4DE7-8E55-8178461CB8B2
2016-08-21 10:13 - 2016-08-21 10:13 - 02370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 02251432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01847048 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01595904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01557296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01343928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 01066096 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00955008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00396168 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00313560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\wifiprofilessettinghandler.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-08-21 10:13 - 2016-08-21 10:13 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WiFiConfigSP.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-08-21 10:13 - 2016-08-21 10:13 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 17187328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13867520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13433856 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 13080576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 12345344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 12174336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 09260032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-08-21 10:12 - 2016-08-21 10:12 - 09260032 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-08-21 10:12 - 2016-08-21 10:12 - 03116032 _____ (Microsoft Corporation) C:\Windows\system32\MSAJApi.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02745224 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02422784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAJApi.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-21 10:12 - 2016-08-21 10:12 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-21 10:12 - 2016-08-21 10:12 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01780736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01694200 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01469120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01176664 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01082368 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 01052672 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00884224 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00860672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00619368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00595488 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00587968 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00529928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00520192 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00509784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00450400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00435040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00381760 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00361096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00354264 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00321280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\offlinesam.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00224096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinesam.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00199008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00181760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpipcfg.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00151224 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offlinelsa.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00077664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00050880 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\StorageUsage.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00044472 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00041824 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-08-21 10:12 - 2016-08-21 10:12 - 00036168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiougc.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2016-08-21 10:12 - 2016-08-21 10:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-08-21 10:12 - 2016-08-21 10:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-08-21 10:12 - 2016-08-21 10:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-08-21 10:12 - 2016-08-21 10:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-08-21 09:54 - 2016-08-21 09:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-21 09:54 - 2016-08-21 09:54 - 00000000 ____D C:\Program Files\7-Zip
2016-08-16 10:56 - 2016-08-16 10:56 - 00000000 __RHD C:\MSOCache
2016-08-16 10:48 - 2016-08-16 10:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-16 10:48 - 2016-08-16 10:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-13 08:45 - 2016-08-13 08:50 - 00000000 ____D C:\Windows\system32\MRT
2016-08-13 08:45 - 2016-08-13 08:45 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 05622600 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 01066328 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00939872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pidgenx.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00665768 _____ (Microsoft Corporation) C:\Windows\system32\GenValObj.exe
2016-08-11 22:03 - 2016-08-11 22:03 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2016-08-11 22:03 - 2016-08-11 22:03 - 00019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2016-08-11 15:38 - 2016-08-11 15:38 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Google
2016-08-11 15:35 - 2016-08-11 15:35 - 00002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-08-11 15:35 - 2016-08-11 15:35 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-11 08:38 - 2016-08-02 10:11 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-08-11 08:38 - 2016-08-02 10:10 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-08-11 08:38 - 2016-08-02 09:58 - 01656320 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-08-11 08:38 - 2016-08-02 06:25 - 01456640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-08-11 04:09 - 2016-09-02 16:42 - 00007596 _____ C:\Users\Jürgen\AppData\Local\Resmon.ResmonCfg
2016-08-09 14:14 - 2016-08-24 15:24 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\dvdcss
2016-08-09 13:01 - 2016-09-01 23:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-08-09 12:41 - 2016-08-09 13:00 - 00000000 ____D C:\Program Files\office.tmp
2016-08-09 12:32 - 2016-08-09 12:32 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Microsoft Help
2016-08-06 21:06 - 2016-08-06 21:07 - 00000000 ____D C:\Program Files (x86)\Xvid
2016-08-06 21:06 - 2016-08-06 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2016-08-06 21:06 - 2015-06-21 17:09 - 00713216 _____ C:\Windows\system32\xvidcore.dll
2016-08-06 21:06 - 2015-06-21 17:09 - 00251392 _____ C:\Windows\system32\xvidvfw.dll
2016-08-06 21:06 - 2015-06-21 17:09 - 00171520 _____ C:\Windows\system32\xvid.ax
2016-08-06 21:06 - 2015-06-21 17:09 - 00147968 _____ C:\Windows\SysWOW64\xvid.ax
2016-08-06 21:06 - 2015-06-21 17:08 - 00638976 _____ C:\Windows\SysWOW64\xvidcore.dll
2016-08-06 21:06 - 2015-06-21 17:08 - 00235520 _____ C:\Windows\SysWOW64\xvidvfw.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-05 13:11 - 2016-07-30 15:43 - 00000000 ____D C:\Users\Jürgen\AppData\Local\ClassicShell
2016-09-05 12:56 - 2016-07-30 16:03 - 00000000 ____D C:\Program Files\Emsisoft Internet Security
2016-09-05 12:49 - 2016-07-30 15:15 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-09-05 11:12 - 2016-07-30 17:21 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-05 11:04 - 2016-07-30 15:31 - 04297986 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-05 11:04 - 2016-07-17 00:51 - 02017830 _____ C:\Windows\system32\perfh007.dat
2016-09-05 11:04 - 2016-07-17 00:51 - 00526302 _____ C:\Windows\system32\perfc007.dat
2016-09-05 10:57 - 2016-07-30 15:18 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-05 10:56 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2016-09-05 10:55 - 2016-07-31 11:54 - 00000000 ____D C:\Users\Jürgen\AppData\LocalLow\Temp
2016-09-05 08:24 - 2016-08-03 03:28 - 00004158 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{54B9C561-9CE1-4BD5-B0E6-219E0259160A}
2016-09-05 00:34 - 2016-07-30 15:27 - 00000000 ____D C:\Users\Jürgen
2016-09-04 17:47 - 2016-07-31 09:34 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\vlc
2016-09-04 16:10 - 2016-07-30 20:28 - 00000000 ____D C:\Users\Jürgen\AppData\Roaming\TS3Client
2016-09-04 11:06 - 2016-07-30 17:19 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-09-03 23:35 - 2016-08-01 14:39 - 00000000 ____D C:\Users\Jürgen\Documents\Euro Truck Simulator 2
2016-09-03 23:10 - 2016-07-30 20:28 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Overwolf
2016-09-03 10:28 - 2016-07-30 16:52 - 00000000 ____D C:\ProgramData\Emsisoft
2016-09-02 22:55 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2016-09-02 19:32 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2016-09-01 23:20 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-09-01 22:50 - 2016-08-01 21:09 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-09-01 22:50 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-01 22:49 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2016-09-01 22:37 - 2016-07-30 15:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-09-01 22:37 - 2016-07-30 15:15 - 00231584 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-01 22:35 - 2016-07-17 00:56 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\dsc
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lv-LV
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\lt-LT
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\et-EE
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\es-MX
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\en-GB
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2016-09-01 22:35 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-09-01 22:33 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2016-09-01 22:11 - 2016-07-16 13:43 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2016-09-01 22:11 - 2016-07-16 13:43 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-09-01 22:11 - 2016-07-16 13:43 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-09-01 22:11 - 2016-07-16 13:42 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-09-01 22:11 - 2016-07-16 13:42 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-01 22:11 - 2016-07-16 13:42 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-01 22:11 - 2016-07-16 13:42 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-09-01 22:11 - 2016-07-16 13:42 - 00114192 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00079544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-01 22:11 - 2016-07-16 13:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-08-31 01:59 - 2016-07-30 15:51 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-29 22:58 - 2016-07-30 15:27 - 00000000 ____D C:\Users\Jürgen\AppData\Local\Packages
2016-08-28 17:24 - 2016-07-30 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-28 10:00 - 2016-07-31 18:36 - 00000000 ____D C:\Users\Jürgen\Documents\Masters of the World
2016-08-26 21:08 - 2016-08-03 18:47 - 00000000 ____D C:\ProgramData\Steam
2016-08-26 07:43 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-08-26 07:43 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-08-25 07:34 - 2016-07-30 15:54 - 00001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-25 07:34 - 2016-07-30 15:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-08-22 12:15 - 2016-07-30 15:24 - 00000000 ____D C:\Users\defaultuser0
2016-08-21 10:14 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2016-08-11 16:33 - 2016-07-30 15:48 - 00040827 _____ C:\Windows\system32\nvinfo.pb
2016-08-11 14:27 - 2016-07-30 15:50 - 06386048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 02468288 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 01365048 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-08-11 14:27 - 2016-07-30 15:50 - 00548920 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-08-11 14:27 - 2016-07-30 15:50 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-08-09 18:06 - 2016-07-30 15:50 - 07255045 _____ C:\Windows\system32\nvcoproc.bin
2016-08-07 22:40 - 2016-08-03 13:42 - 00000000 ____D C:\Users\Jürgen\AppData\Local\JDownloader v2.0
2016-08-06 21:06 - 2016-08-02 20:05 - 00000000 ____D C:\Users\Jürgen\Documents\American Truck Simulator

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-11 04:09 - 2016-09-02 16:42 - 0007596 _____ () C:\Users\Jürgen\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-02 19:03

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von Jürgen (05-09-2016 13:11:39)
Gestartet von C:\Users\Jürgen\Desktop
Windows 10 Pro Version 1607 (X64) (2016-07-30 13:25:07)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1976182191-4087556911-4006232103-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1976182191-4087556911-4006232103-503 - Limited - Disabled)
Gast (S-1-5-21-1976182191-4087556911-4006232103-501 - Limited - Disabled)
Jürgen (S-1-5-21-1976182191-4087556911-4006232103-1001 - Administrator - Enabled) => C:\Users\Jürgen

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Emsisoft Internet Security (Enabled - Out of date) {D1196F3E-3487-585D-3681-0661BD157EC3}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Internet Security (Enabled - Out of date) {6A788EDA-12BD-57D3-0C31-3D13C692347E}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Enabled) {E922EE1B-7EE8-5905-1DDE-AF5443C639B8}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
American Truck Simulator (HKLM\...\Steam App 270880) (Version:  - SCS Software)
Ansel (Version: 372.54 - NVIDIA Corporation) Hidden
Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.9 - Emsisoft Ltd.)
Euro Truck Simulator 2 (HKLM\...\Steam App 227300) (Version:  - SCS Software)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Masters of the World (HKLM\...\Steam App 268890) (Version:  - Eversim)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4849.1003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x64 de) (HKLM\...\Mozilla Firefox 48.0.2 (x64 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
NASCAR '15 Victory Edition (HKLM\...\Steam App 345890) (Version:  - Eutechnyx)
NBA 2K15 (HKLM\...\Steam App 282350) (Version:  - Visual Concepts)
NVIDIA Grafiktreiber 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.97.209.0 - Overwolf Ltd.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.1 - Tracker Software Products Ltd)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
This War of Mine (HKLM\...\Steam App 282070) (Version:  - 11 bit studios)
TruckersMP 0.2.1.0.1 Alpha (HKLM\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.2.1.0.1 Alpha - ETS2MP Team)
TV-Browser 3.4.4 (HKLM-x32\...\tvbrowser) (Version: 3.4.4 - TV-Browser Team)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.4) (Version: 1.3.4 - Xvid Team)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1976182191-4087556911-4006232103-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Jürgen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {191EB3E0-B1CA-405A-B452-2F2E36B2F615} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-31] (Adobe Systems Incorporated)
Task: {6C0D14EF-B931-4769-81E4-3CE2DBACE41C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-07-05] (Microsoft Corporation)
Task: {71E0203C-2EAF-43F6-9A41-67602FD3DD9E} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-08-29] (Overwolf LTD)
Task: {C39712FC-C540-49A6-8DC4-C82961651D2A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-07-05] (Microsoft Corporation)
Task: {E2C0AE1E-64CA-48FE-83CA-187AC6E454E9} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-04-19] (Tracker Software Products (Canada) Ltd.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-07-30 15:50 - 2016-08-11 14:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-07-30 16:03 - 2016-06-30 16:49 - 01043568 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2016-08-22 20:49 - 2016-05-24 09:51 - 00116416 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-07-30 15:46 - 2016-07-30 15:46 - 00959168 _____ () C:\Users\Jürgen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\Windows\SYSTEM32\CHARTV.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 13:43 - 2016-09-01 22:11 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-09-01 22:43 - 2016-09-01 22:43 - 03763712 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2016-07-16 13:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1976182191-4087556911-4006232103-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.42.129
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1976182191-4087556911-4006232103-1001\...\StartupApproved\Run: => "Xvid"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{19B5D688-0EFF-4935-97D1-198C364D5788}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{44154BD3-F1BA-4DED-9F5A-792D5D154AA5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9A74D8E0-106E-44D8-AF6C-40734BF176AD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{EC01AB36-5E24-457D-80B9-ED1E4CEB7E11}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A94F0BEC-6282-4C44-B497-683AC611A03A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C7D35C96-D770-4C5D-BEC8-ED8F90FFB45E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{656BF8EC-534F-4771-AB73-8E3FAB1BEC65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Masters of the World\_start.exe
FirewallRules: [{FA09400D-23A6-4CCE-A6FD-74DA85DA79FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Masters of the World\_start.exe
FirewallRules: [{E197C4E1-AAAF-4A00-B6D6-D404BFC6F76E}] => (Allow) E:\Spiele\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{4F14E046-AC0F-4F5F-8745-B1FC365B5B92}] => (Allow) E:\Spiele\steamapps\common\NBA2K15\NBA2K15.exe
FirewallRules: [{F7C85B8B-9DD5-451D-9FC1-56813E7122FD}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{8DE3A8AB-7F7F-463D-AD19-B555B5F5A247}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{30B619BC-DA06-4801-8AB9-4FBCD38C4916}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{B1912E92-8792-479E-97D4-0DC152217C99}] => (Allow) E:\Spiele\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D47C7B79-AAEA-425B-88DE-289F3AB4C300}] => (Allow) E:\Spiele\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{D0A29DB8-5A82-49B2-8CFB-8C777F7E63CE}] => (Allow) E:\Spiele\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe
FirewallRules: [{C5627CBD-0A6F-4813-AB00-0A863170719C}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B3AAE6BF-B0F4-42BC-BB2E-963B9307FE41}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{EB7EB2A8-D78F-447E-8911-5AD3B0088749}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{E1BC8B3B-10A3-4E08-A09C-6C35B3450E5F}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{0A4AFC20-FCE3-4C5E-A66C-C39B1C6FFE46}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{25E37EE7-7DB8-4C7A-A7D2-9D30D7376648}] => (Allow) E:\Spiele\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{309ED787-6BD3-4F59-A0F4-4BAF4E97CC81}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{567BF71A-09AF-4BCF-A2AB-540A4ECE48CF}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B3DFD2C7-387A-411E-A006-C756A8DED450}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{50EC71A7-53D9-4A16-9AF0-CC55FC8C7F6A}] => (Allow) C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{BFF76B59-C2C4-46C4-8FA7-F603C84D689D}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe
FirewallRules: [{B0DFC732-1864-4CBC-94AD-7A3A9C0DB02F}] => (Allow) E:\Spiele\steamapps\common\NASCAR 15\bin\NASCAR15.exe

==================== Wiederherstellungspunkte =========================

24-08-2016 15:21:04 Windows Update
29-08-2016 21:45:23 Windows Modules Installer
01-09-2016 22:32:08 Windows Update
04-09-2016 11:34:02 JRT Pre-Junkware Removal
05-09-2016 12:53:35 Revo Uninstaller Pro's restore point - ESET Online Scanner v3

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/05/2016 12:53:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/05/2016 12:53:31 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {83b64af3-adc8-444e-a219-bc12ced04301}


Systemfehler:
=============
Error: (09/05/2016 12:40:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/05/2016 12:40:47 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\JRGEN~1\AppData\Local\Temp\ehdrv.sys

Error: (09/05/2016 12:40:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/05/2016 12:40:46 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\JRGEN~1\AppData\Local\Temp\ehdrv.sys

Error: (09/05/2016 12:40:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/05/2016 12:40:46 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\JRGEN~1\AppData\Local\Temp\ehdrv.sys

Error: (09/05/2016 12:40:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/05/2016 12:40:46 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\JRGEN~1\AppData\Local\Temp\ehdrv.sys

Error: (09/05/2016 12:40:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/05/2016 12:40:45 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\JRGEN~1\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2016-08-02 14:08:16.234
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll.old because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-02 03:18:06.620
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-02 00:51:21.254
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-02 00:38:52.996
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 23:03:50.278
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:28:29.257
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:22:42.716
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 21:10:52.604
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 20:11:13.512
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2016-08-01 18:09:39.061
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: AMD Athlon(tm) II X4 620 Processor
Prozentuale Nutzung des RAM: 31%
Installierter physikalischer RAM: 8189.55 MB
Verfügbarer physikalischer RAM: 5609.1 MB
Summe virtueller Speicher: 9469.55 MB
Verfügbarer virtueller Speicher: 6354.87 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:118.75 GB) (Free:70.63 GB) NTFS
Drive d: (Microsoft Windows 10) (Removable) (Total:7.45 GB) (Free:2.98 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: B29ED051)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 232.9 GB) (Disk ID: 6D6F6B20)
No partition Table on disk 1.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 7.5 GB) (Disk ID: 03021B47)
Partition 1: (Not Active) - (Size=7.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

M-K-D-B · 05.09.2016, 13:08

Servus,

Zitat:

Zitat von Madyou

Was bewirkt dieser Fix? Weil ein schädlich wurde bis jetzt nicht gefunden.

Er gibt mir einen Überblick über bestimmten Ordner und entfernt temporäre Dateien.

Malware ist auf jeden Fall nicht der Grund für deine Probleme.

Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Cleanup:
Alle Logs gepostet? Dann lade Dir bitte

DelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:

Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.

NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Lade Software von einem sauberen Portal wie

.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:

Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...

und/oder das Forum mit einer kleinen Spende unterstützen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Madyou · 05.09.2016, 13:17

Zitat:

Zitat von [B

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?[/B]

Also Online Banking geht wieder problemlos.
Das Problem mit Stub erhielt falsche Daten
ist seit 2 Tagen nicht mehr aufgetreten aber ob das jetzt weg ist
muss ich sehen werde das erst mal eine Woche beobachten.
Wenn das wieder Aufritt melde ich mich sofort wieder.
und wenn nicht dann sagt ich dir in einer Woche bescheid
das das Problem auch erledigt ist.

Gruß
Madyou

M-K-D-B · 05.09.2016, 13:28

Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Stub erhielt falsche Daten / Online Banking Problem

Plagegeister aller Art und deren Bekämpfung: Stub erhielt falsche Daten / Online Banking Problem