| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: 149 Viren erkannt durch MBAMWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
18.10.2016, 21:35
| #31 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  149 Viren erkannt durch MBAM Wie geht das hier noch weiter??? Ich warte immer noch auf das Log von MBAM
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
22.10.2016, 21:04
| #32 |
 | 149 Viren erkannt durch MBAMCode:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 30.09.2016 Suchlaufzeit: 03:00 Protokolldatei: asda.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.09.30.01 Rootkit-Datenbank: v2016.09.26.02 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: thomas hochhalter Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 417393 Abgelaufene Zeit: 34 Min., 30 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 9 PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [7ccdb9bf9dfdd75fe2a852a89f646c94], PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [7bce2a4e9efcd3633d27daeffb0740c0], PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [75d45325227881b5dbafed0d36cd7789], PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [c3864038aeeca78f03618742649eed13], PUP.Optional.InstallCore, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\csastats, In Quarantäne, [5eeb98e053470333493c37c3e41f946c], PUP.Optional.SearchManager, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [86c34434a2f80f279117c9027191718f], PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33912D4F-60FD-493D-B39F-51282B3AFDE4}, In Quarantäne, [2128adcb04969a9c80e35277956d6898], PUP.Optional.ProductSetup, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\PRODUCTSETUP, In Quarantäne, [3118a0d8ebafcc6a952cd2deb3503ec2], PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{21DFC91F-715F-189F-C0DF-681F105FBB9F}, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], Registrierungswerte: 7 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]D1%26b[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]DIE%26cc[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]Dde%26pa[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]Dwincy%26cd[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]D1773792536%26a[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]Dwbf_fsvideosft_16_39%26os_ver[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]D10.0%26os[ad9cc7b1e8b2ff37bfdf1d9f28dc37c9]DWindowsIn QuarantäneB10In QuarantäneBHome, %4, %5 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f[7bce2a4e9efcd3633d27daeffb0740c0]D4%26b[7bce2a4e9efcd3633d27daeffb0740c0]DIE%26cc[7bce2a4e9efcd3633d27daeffb0740c0]Dde%26pa[7bce2a4e9efcd3633d27daeffb0740c0]Dwincy%26cd[7bce2a4e9efcd3633d27daeffb0740c0]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr[7bce2a4e9efcd3633d27daeffb0740c0]D1773792536%26a[7bce2a4e9efcd3633d27daeffb0740c0]Dwbf_fsvideosft_16_39%26os_ver[7bce2a4e9efcd3633d27daeffb0740c0]D10.0%26os[7bce2a4e9efcd3633d27daeffb0740c0]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f[2128afc9f2a82e081b8313a906fe53ad]D1%26b[2128afc9f2a82e081b8313a906fe53ad]DIE%26cc[2128afc9f2a82e081b8313a906fe53ad]Dde%26pa[2128afc9f2a82e081b8313a906fe53ad]Dwincy%26cd[2128afc9f2a82e081b8313a906fe53ad]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr[2128afc9f2a82e081b8313a906fe53ad]D1773792536%26a[2128afc9f2a82e081b8313a906fe53ad]Dwbf_fsvideosft_16_39%26os_ver[2128afc9f2a82e081b8313a906fe53ad]D10.0%26os[2128afc9f2a82e081b8313a906fe53ad]DWindowsIn QuarantäneB10In QuarantäneBHome, %4, %5 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f[c3864038aeeca78f03618742649eed13]D4%26b[c3864038aeeca78f03618742649eed13]DIE%26cc[c3864038aeeca78f03618742649eed13]Dde%26pa[c3864038aeeca78f03618742649eed13]Dwincy%26cd[c3864038aeeca78f03618742649eed13]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr[c3864038aeeca78f03618742649eed13]D1773792536%26a[c3864038aeeca78f03618742649eed13]Dwbf_fsvideosft_16_39%26os_ver[c3864038aeeca78f03618742649eed13]D10.0%26os[c3864038aeeca78f03618742649eed13]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5 PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f[07426810b5e520165f40b90358ac23dd]D1%26b[07426810b5e520165f40b90358ac23dd]DIE%26cc[07426810b5e520165f40b90358ac23dd]Dde%26pa[07426810b5e520165f40b90358ac23dd]Dwincy%26cd[07426810b5e520165f40b90358ac23dd]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr[07426810b5e520165f40b90358ac23dd]D1773792536%26a[07426810b5e520165f40b90358ac23dd]Dwbf_fsvideosft_16_39%26os_ver[07426810b5e520165f40b90358ac23dd]D10.0%26os[07426810b5e520165f40b90358ac23dd]DWindowsIn QuarantäneB10In QuarantäneBHome, %4, %5 PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33912D4F-60FD-493D-B39F-51282B3AFDE4}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f[2128adcb04969a9c80e35277956d6898]D4%26b[2128adcb04969a9c80e35277956d6898]DIE%26cc[2128adcb04969a9c80e35277956d6898]Dde%26pa[2128adcb04969a9c80e35277956d6898]Dwincy%26cd[2128adcb04969a9c80e35277956d6898]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr[2128adcb04969a9c80e35277956d6898]D1773792536%26a[2128adcb04969a9c80e35277956d6898]Dwbf_fsvideosft_16_39%26os_ver[2128adcb04969a9c80e35277956d6898]D10.0%26os[2128adcb04969a9c80e35277956d6898]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5 PUP.Optional.ProductSetup, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\PRODUCTSETUP|tb, 0G2O2W1R0C1R1H, In Quarantäne, [3118a0d8ebafcc6a952cd2deb3503ec2] Registrierungsdaten: 3 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]Dwincy%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]D1773792536%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]Dwbf_fsvideosft_16_39%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[af9ad8a0039780b6221dbbbe42c2c13f]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]Dwincy%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]D1773792536%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]Dwbf_fsvideosft_16_39%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[6fdaaeca5b3fb6805ee190e91aea4fb1]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5 PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]Dwincy%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]D1773792536%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]Dwbf_fsvideosft_16_39%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[79d03a3e4d4d48ee231a80f9a064ca36]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5 Ordner: 17 PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\chrome, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\external, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\external, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\fonts, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\_metadata, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], Dateien: 113 Adware.DealPly, C:\Users\thomas hochhalter\AppData\Local\Temp\tmp10763230\setup.exe, In Quarantäne, [5eebbabeddbd74c219a14b9c29dbf808], PUP.Optional.PricePeep, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, In Quarantäne, [4bfeb2c6a4f6e3531369ae023fc4b749], PUP.Optional.PricePeep, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, In Quarantäne, [e3667701fd9d9e983a42a010ee15f30d], PUP.Optional.WinYahoo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk, In Quarantäne, [8bbe3345603a31059d135987e71caf51], PUP.Optional.UTop, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_utop.it_0.localstorage, In Quarantäne, [35141f594a503cfa2442e50c53b0b848], PUP.Optional.UTop, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_utop.it_0.localstorage-journal, In Quarantäne, [e564f0881387c96d1056817042c107f9], PUP.Optional.UTop, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_utop.it_0.localstorage, In Quarantäne, [0049225693072d09363031c013f044bc], PUP.Optional.UTop, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_utop.it_0.localstorage-journal, In Quarantäne, [50f9c6b2b9e156e0a7bf25ccd0331ce4], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, In Quarantäne, [7acf492f79217db97b0e20da49bab24e], PUP.Optional.Yontoo, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.coupontime00.coupontime.co_0.localstorage, In Quarantäne, [5aef3840b5e546f064306e3542c29b65], PUP.Optional.Yontoo, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.coupontime00.coupontime.co_0.localstorage-journal, In Quarantäne, [4bfeb7c1d9c10531f99bd9caf31140c0], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\manifest.json, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\background.html, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\favicon.ico, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\newtab.html, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\chrome\common.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\chrome\lifecycle.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\chrome\settings.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\chrome\setup.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\chrome\utils.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\abtest.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\conf-sys.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\conf.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\nt_ptr.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\prefs-sys.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\prefs.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\settings-dev.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\common\udata.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\external\jquery-2.1.1.min.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\external\md5.min.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\external\progressbar.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\external\string.min.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\external\underscore-min.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\AutoSuggest.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\contentscript.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\newtab-base.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\newtab-msg.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\search-engines.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\search-form.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\content\search\search-redirect.js, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\css\newtab.css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\css\search.css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\css\search2.css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\css\styles.css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\css\white_bg.css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\external\normalize.css, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\fonts\HelveticaNeue-Thin.otf, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\fonts\neue-bold.woff, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\fonts\neue.woff, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\128.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\16.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\48.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\close.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\01d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\01n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\02d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\02n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\03d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\03n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\04d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\04n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\09d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\09n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\10d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\10n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\11d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\11n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\13d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\13n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\50d.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\icons\weather\50n.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\bg.jpg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\bing.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\bluesky-bg.jpg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\brush.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\clock.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\cloud.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\cupcake-bg.jpg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\desk-bg.jpg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\doodle.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\down.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\google.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\just-the-box.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\mountain-bg.jpg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\sea-bg.jpg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\yahoo.png, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\skin\images\yahoo.svg, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.SearchManager, C:\Users\thomas hochhalter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\1.0.9.1_0\_metadata\verified_contents.json, In Quarantäne, [c584e593bbdfe94d22c215b244be9e62], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\HowToRemove.html, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\chromium-min.jpg, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\control panel-min-min.JPG, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\down.png, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\ff menu.JPG, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\ff search engine-min.png, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\hp-min ff.png, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\hp-min ie.png, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\search engine.gif, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\setup pages.gif, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\sp-min.png, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\start-min.jpg, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\up.png, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\bapi_ff.dat, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\bapi_ie.dat, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\coni, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\install.log, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\neco, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\sili, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\Sqlite3.dll, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\uninst.dat, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\uninst.exe, In Quarantäne, [0d3c5523d4c61e18fc572776778d06fa], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\b1xn5gwy.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_39¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtD0C0BtAzz0DyB0Ezy0FyE0C0B0EtDtN0D0Tzu0StCyBtAtDtN1L2XzutAtFtByEtFtCyBtFyDtBtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0C0DyD0F0A0E0EtGyD0Czz0DtGtCyEtB0FtGyD0F0ByDtGyBtB0F0DyBzy0C0AyBzz0Fzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtDtAyCtA%26cr%3D1773792536%26a%3Dwbf_fsvideosft_16_39%26os_ver%3D10.0%26os%3DWindowsErsetzt,[4900ec8c2c6e41f583147629a55f45bb]B10Ersetzt,[4900ec8c2c6e41f583147629a55f45bb]BHome");), %5 PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\b1xn5gwy.default\searchplugins\yahoo! powered.xml, In Quarantäne, [8dbcbcbcebaf40f6213b1f7e31d31de3], PUP.Optional.SpeedItUp, C:\Windows\Reimage.ini, In Quarantäne, [6fdac0b805958ea875526f8ff113926e], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Protection, 30.09.2016 02:56, SYSTEM, THOMAS, Protection, Malware Protection, Starting, Protection, 30.09.2016 02:56, SYSTEM, THOMAS, Protection, Malware Protection, Started, Protection, 30.09.2016 02:56, SYSTEM, THOMAS, Protection, Malicious Website Protection, Starting, Protection, 30.09.2016 02:56, SYSTEM, THOMAS, Protection, Malicious Website Protection, Started, Update, 30.09.2016 02:57, SYSTEM, THOMAS, Scheduler, IP Database, 2016.9.22.3, 2016.9.28.1, Update, 30.09.2016 02:57, SYSTEM, THOMAS, Scheduler, Rootkit Database, 2016.8.15.1, 2016.9.26.2, Update, 30.09.2016 02:57, SYSTEM, THOMAS, Scheduler, Domain Database, 2016.9.22.5, 2016.9.29.4, Update, 30.09.2016 03:00, SYSTEM, THOMAS, Scheduler, Malware Database, 2016.9.22.12, 2016.9.30.1, Protection, 30.09.2016 03:00, SYSTEM, THOMAS, Protection, Refresh, Starting, Protection, 30.09.2016 03:00, SYSTEM, THOMAS, Protection, Malicious Website Protection, Stopping, Protection, 30.09.2016 03:00, SYSTEM, THOMAS, Protection, Malicious Website Protection, Stopped, Protection, 30.09.2016 03:00, SYSTEM, THOMAS, Protection, Refresh, Success, Protection, 30.09.2016 03:00, SYSTEM, THOMAS, Protection, Malicious Website Protection, Starting, Protection, 30.09.2016 03:00, SYSTEM, THOMAS, Protection, Malicious Website Protection, Started, Scan, 30.09.2016 03:36, SYSTEM, THOMAS, Context, Start: 30.09.2016 03:00, Dauer: 34 Min. 30 Sek., Bedrohungssuchlauf, Abgeschlossen, 2 Malware-Erkennung, 296 Nicht-Malware-Erkennungen, Update, 30.09.2016 04:10, SYSTEM, THOMAS, Scheduler, Domain Database, 2016.9.29.4, 2016.9.30.1, Update, 30.09.2016 04:10, SYSTEM, THOMAS, Scheduler, Malware Database, 2016.9.30.1, 2016.9.30.2, Protection, 30.09.2016 04:10, SYSTEM, THOMAS, Protection, Refresh, Starting, Protection, 30.09.2016 04:10, SYSTEM, THOMAS, Protection, Malicious Website Protection, Stopping, Protection, 30.09.2016 04:10, SYSTEM, THOMAS, Protection, Malicious Website Protection, Stopped, Protection, 30.09.2016 04:10, SYSTEM, THOMAS, Protection, Refresh, Success, Protection, 30.09.2016 04:10, SYSTEM, THOMAS, Protection, Malicious Website Protection, Starting, Protection, 30.09.2016 04:10, SYSTEM, THOMAS, Protection, Malicious Website Protection, Started, Update, 30.09.2016 05:21, SYSTEM, THOMAS, Scheduler, Malware Database, 2016.9.30.2, 2016.9.30.3, Protection, 30.09.2016 05:21, SYSTEM, THOMAS, Protection, Refresh, Starting, Protection, 30.09.2016 05:21, SYSTEM, THOMAS, Protection, Malicious Website Protection, Stopping, Protection, 30.09.2016 05:21, SYSTEM, THOMAS, Protection, Malicious Website Protection, Stopped, Protection, 30.09.2016 05:21, SYSTEM, THOMAS, Protection, Refresh, Success, Protection, 30.09.2016 05:21, SYSTEM, THOMAS, Protection, Malicious Website Protection, Starting, Protection, 30.09.2016 05:21, SYSTEM, THOMAS, Protection, Malicious Website Protection, Started, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 22.10.2016 Suchlaufzeit: 20:48 Protokolldatei: letzte logfile mbam.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.10.22.05 Rootkit-Datenbank: v2016.09.26.02 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: thomas hochhalter Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 429536 Abgelaufene Zeit: 24 Min., 1 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
22.10.2016, 22:26
| #33 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 149 Viren erkannt durch MBAM und bitte nochmal adwCleaner und JRT
__________________Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
__________________ |
|
28.10.2016, 07:15
| #34 |
| | 149 Viren erkannt durch MBAMCode:
ATTFilter # AdwCleaner v6.030 - Bericht erstellt am 24/10/2016 um 18:32:59
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-10-23.2 [Server]
# Betriebssystem : Windows 10 Home (X64)
# Benutzername : thomas hochhalter - THOMAS
# Gestartet von : C:\Users\thomas hochhalter\Downloads\adwcleaner_6.030.exe
# Modus: Löschen
# Unterstützung : hxxps://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [1073 Bytes] - [24/10/2016 18:32:59]
C:\AdwCleaner\AdwCleaner[S0].txt - [1411 Bytes] - [24/10/2016 15:49:52]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1219 Bytes] ##########
Code:
ATTFilter # AdwCleaner v6.030 - Bericht erstellt am 24/10/2016 um 15:49:52
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-10-23.2 [Server]
# Betriebssystem : Windows 10 Home (X64)
# Benutzername : thomas hochhalter - THOMAS
# Gestartet von : C:\Users\thomas hochhalter\Downloads\adwcleaner_6.030.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
Keine schädlichen Dienste gefunden.
***** [ Ordner ] *****
Keine schädlichen Ordner gefunden.
***** [ Dateien ] *****
Keine schädlichen Dateien gefunden.
***** [ DLL ] *****
Keine infizierten DLLs gefunden.
***** [ WMI ] *****
Keine schädlichen Schlüssel gefunden.
***** [ Verknüpfungen ] *****
Keine infizierten Verknüpfungen gefunden.
***** [ Aufgabenplanung ] *****
Keine schädlichen Aufgaben gefunden.
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
***** [ Internetbrowser ] *****
Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.
*************************
C:\AdwCleaner\AdwCleaner[S0].txt - [1259 Bytes] - [24/10/2016 15:49:52]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1332 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Home x64
Ran by thomas hochhalter (Administrator) on 28.10.2016 at 8:05:57,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 0
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.10.2016 at 8:09:17,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
28.10.2016, 10:52
| #35 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 149 Viren erkannt durch MBAM Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
|
28.10.2016, 20:37
| #36 |
| | 149 Viren erkannt durch MBAMCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 26-10-2016
durchgeführt von thomas hochhalter (Administrator) auf THOMAS (28-10-2016 21:23:54)
Gestartet von C:\Users\thomas hochhalter\Desktop\LOGDATEIEN\Antivirus Programme\FRST Logfiles
Geladene Profile: thomas hochhalter (Verfügbare Profile: thomas hochhalter)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(© 2015 Microsoft Corporation) C:\Users\thomas hochhalter\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Spotify Ltd) C:\Users\thomas hochhalter\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-16] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2631120 2016-07-28] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Run: [BingSvc] => C:\Users\thomas hochhalter\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Run: [Spotify Web Helper] => C:\Users\thomas hochhalter\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1483888 2016-10-12] (Spotify Ltd)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{c3fa99c0-6d20-46d3-a571-87208c430cb4}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{c765f76d-d772-48cd-a31c-377a2b7b8b64}: [DhcpNameServer] 192.168.42.129
ManualProxies:
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-934394075-4118312357-3984632377-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> DefaultScope {33912D4F-60FD-493D-B39F-51282B3AFDE4} URL =
SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C010DE649D20140620&p={searchTerms}
SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {75E9A305-CA85-46BD-AD1A-B3FC79057BBB} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {CC7B8E83-9661-4617-9C47-06631049DD92} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-9/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {EA35FAC9-0E9F-4C52-A305-F85D8B14DD5E} URL = hxxp://de.shopping.com/?linkin_id=8056363
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Keine Datei
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-07-13] (DVDVideoSoft Ltd.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => Keine Datei
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 [2016-10-28]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 -> Sichere Suche
FF Homepage: Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 -> hxxp://www.google.de/
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\Extensions\langpack-de@firefox.mozilla.org.xpi [2016-10-13] [ist nicht signiert]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2016-10-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_185.dll [2016-10-12] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_185.dll [2016-10-12] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin HKU\S-1-5-21-934394075-4118312357-3984632377-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-934394075-4118312357-3984632377-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-10-17] ()
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
Opera:
=======
OPR Extension: (NoScript Suite Lite) - C:\Users\thomas hochhalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\ipiopppcaojnchgoepoemlbdccogeije [2016-10-13]
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [324304 2016-08-19] (Avira Operations GmbH & Co. KG)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [392168 2016-08-31] (Digital Wave Ltd.)
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()
S2 FLAME II HSPA USB MODEM Service; C:\Program Files (x86)\My Connection\ApplicationController.exe [577704 2014-07-24] () [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [750032 2016-07-28] (Malwarebytes Corporation)
S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-02] (Electronic Arts)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-12-04] ()
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [836608 2010-06-08] (Sony Corporation) [Datei ist nicht signiert]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1656600 2016-03-31] (Sony Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 ArcSoftKsUFilter; C:\WINDOWS\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [211456 2016-10-17] () [Datei ist nicht signiert]
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [75360 2016-08-04] ()
S3 IntcDAud; C:\WINDOWS\System32\DRIVERS\IntcDAud.sys [271872 2010-06-24] (Intel(R) Corporation) [Datei ist nicht signiert]
S2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [35328 2016-10-17] () [Datei ist nicht signiert]
S2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2016-10-17] () [Datei ist nicht signiert]
S0 megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [64352 2016-10-05] (Avago Technologies)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-14] ()
S3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2015-08-04] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 ykinw8; C:\WINDOWS\System32\drivers\ykinx64.sys [288768 2016-07-16] (Marvell)
U3 aspnet_state; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-10-28 21:12 - 2016-10-28 21:23 - 00000000 ____D C:\FRST
2016-10-28 07:31 - 2016-10-15 06:51 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-28 07:31 - 2016-10-15 06:51 - 00894088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-28 07:31 - 2016-10-15 06:48 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 04129928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 01990648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-10-28 07:31 - 2016-10-15 06:26 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-10-28 07:31 - 2016-10-15 06:22 - 01608896 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2016-10-28 07:31 - 2016-10-15 06:22 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-10-28 07:31 - 2016-10-15 06:22 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-10-28 07:31 - 2016-10-15 06:22 - 00628040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-10-28 07:31 - 2016-10-15 06:18 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2016-10-28 07:31 - 2016-10-15 06:18 - 00576400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-10-28 07:31 - 2016-10-15 06:18 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2016-10-28 07:31 - 2016-10-15 06:15 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-10-28 07:31 - 2016-10-15 06:11 - 01424488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2016-10-28 07:31 - 2016-10-15 06:11 - 01263848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-10-28 07:31 - 2016-10-15 05:57 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-10-28 07:31 - 2016-10-15 05:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-10-28 07:31 - 2016-10-15 05:54 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-10-28 07:31 - 2016-10-15 05:54 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-10-28 07:31 - 2016-10-15 05:54 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-10-28 07:31 - 2016-10-15 05:53 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-10-28 07:31 - 2016-10-15 05:53 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-10-28 07:31 - 2016-10-15 05:52 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-10-28 07:31 - 2016-10-15 05:52 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-10-28 07:31 - 2016-10-15 05:50 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-10-28 07:31 - 2016-10-15 05:48 - 03778560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-10-28 07:31 - 2016-10-15 05:46 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-28 07:31 - 2016-10-15 05:44 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-10-28 07:31 - 2016-10-15 05:44 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-28 07:31 - 2016-10-15 05:43 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2016-10-28 07:31 - 2016-10-15 05:42 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-10-28 07:31 - 2016-10-15 05:42 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-28 07:31 - 2016-10-15 05:41 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-28 07:31 - 2016-10-15 05:41 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2016-10-28 07:31 - 2016-10-15 05:40 - 13081600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-28 07:31 - 2016-10-15 05:39 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-10-28 07:31 - 2016-10-15 05:39 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-10-28 07:31 - 2016-10-15 05:38 - 07468032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-10-28 07:31 - 2016-10-15 05:37 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-10-28 07:31 - 2016-10-15 05:36 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-10-28 07:31 - 2016-10-15 05:36 - 02290176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-10-28 07:31 - 2016-10-15 05:36 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-10-28 07:31 - 2016-10-15 05:34 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-10-28 07:31 - 2016-10-15 05:31 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2016-10-28 07:31 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-10-28 07:30 - 2016-10-15 07:11 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-10-28 07:30 - 2016-10-15 06:51 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-28 07:30 - 2016-10-15 06:48 - 07817568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-28 07:30 - 2016-10-15 06:48 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-28 07:30 - 2016-10-15 06:48 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-28 07:30 - 2016-10-15 06:48 - 00773712 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-10-28 07:30 - 2016-10-15 06:47 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-10-28 07:30 - 2016-10-15 06:43 - 01356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-10-28 07:30 - 2016-10-15 06:41 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-10-28 07:30 - 2016-10-15 06:38 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2016-10-28 07:30 - 2016-10-15 06:37 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-10-28 07:30 - 2016-10-15 06:33 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2016-10-28 07:30 - 2016-10-15 06:32 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-10-28 07:30 - 2016-10-15 06:30 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-10-28 07:30 - 2016-10-15 06:30 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-10-28 07:30 - 2016-10-15 06:30 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-10-28 07:30 - 2016-10-15 06:30 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2016-10-28 07:30 - 2016-10-15 06:29 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2016-10-28 07:30 - 2016-10-15 06:29 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2016-10-28 07:30 - 2016-10-15 06:26 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-10-28 07:30 - 2016-10-15 06:26 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-10-28 07:30 - 2016-10-15 06:25 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-10-28 07:30 - 2016-10-15 06:25 - 00742704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-10-28 07:30 - 2016-10-15 06:21 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2016-10-28 07:30 - 2016-10-15 06:19 - 02256592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-28 07:30 - 2016-10-15 06:15 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-28 07:30 - 2016-10-15 06:14 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-10-28 07:30 - 2016-10-15 06:11 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-10-28 07:30 - 2016-10-15 06:10 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2016-10-28 07:30 - 2016-10-15 06:06 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-10-28 07:30 - 2016-10-15 06:05 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-10-28 07:30 - 2016-10-15 06:01 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-10-28 07:30 - 2016-10-15 06:00 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-10-28 07:30 - 2016-10-15 06:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-10-28 07:30 - 2016-10-15 06:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2016-10-28 07:30 - 2016-10-15 05:59 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-10-28 07:30 - 2016-10-15 05:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-10-28 07:30 - 2016-10-15 05:59 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2016-10-28 07:30 - 2016-10-15 05:58 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-10-28 07:30 - 2016-10-15 05:58 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2016-10-28 07:30 - 2016-10-15 05:57 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2016-10-28 07:30 - 2016-10-15 05:57 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2016-10-28 07:30 - 2016-10-15 05:56 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2016-10-28 07:30 - 2016-10-15 05:56 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
2016-10-28 07:30 - 2016-10-15 05:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2016-10-28 07:30 - 2016-10-15 05:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-10-28 07:30 - 2016-10-15 05:55 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-10-28 07:30 - 2016-10-15 05:55 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-10-28 07:30 - 2016-10-15 05:55 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-10-28 07:30 - 2016-10-15 05:55 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2016-10-28 07:30 - 2016-10-15 05:54 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
2016-10-28 07:30 - 2016-10-15 05:54 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll
2016-10-28 07:30 - 2016-10-15 05:54 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-10-28 07:30 - 2016-10-15 05:54 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2016-10-28 07:30 - 2016-10-15 05:53 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-10-28 07:30 - 2016-10-15 05:53 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2016-10-28 07:30 - 2016-10-15 05:53 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-10-28 07:30 - 2016-10-15 05:53 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-10-28 07:30 - 2016-10-15 05:52 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-10-28 07:30 - 2016-10-15 05:52 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
2016-10-28 07:30 - 2016-10-15 05:52 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-10-28 07:30 - 2016-10-15 05:51 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-10-28 07:30 - 2016-10-15 05:51 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2016-10-28 07:30 - 2016-10-15 05:50 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-10-28 07:30 - 2016-10-15 05:50 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-10-28 07:30 - 2016-10-15 05:50 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-10-28 07:30 - 2016-10-15 05:50 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-10-28 07:30 - 2016-10-15 05:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-10-28 07:30 - 2016-10-15 05:49 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-28 07:30 - 2016-10-15 05:49 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-10-28 07:30 - 2016-10-15 05:49 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-10-28 07:30 - 2016-10-15 05:49 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-10-28 07:30 - 2016-10-15 05:49 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-10-28 07:30 - 2016-10-15 05:49 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-10-28 07:30 - 2016-10-15 05:49 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-10-28 07:30 - 2016-10-15 05:48 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-10-28 07:30 - 2016-10-15 05:48 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-10-28 07:30 - 2016-10-15 05:48 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-10-28 07:30 - 2016-10-15 05:47 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-10-28 07:30 - 2016-10-15 05:47 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2016-10-28 07:30 - 2016-10-15 05:46 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-10-28 07:30 - 2016-10-15 05:46 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2016-10-28 07:30 - 2016-10-15 05:45 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-10-28 07:30 - 2016-10-15 05:45 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-28 07:30 - 2016-10-15 05:44 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-10-28 07:30 - 2016-10-15 05:44 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2016-10-28 07:30 - 2016-10-15 05:43 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-10-28 07:30 - 2016-10-15 05:43 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-10-28 07:30 - 2016-10-15 05:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2016-10-28 07:30 - 2016-10-15 05:42 - 12349440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-28 07:30 - 2016-10-15 05:42 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-10-28 07:30 - 2016-10-15 05:42 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
2016-10-28 07:30 - 2016-10-15 05:42 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-10-28 07:30 - 2016-10-15 05:42 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-10-28 07:30 - 2016-10-15 05:41 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-10-28 07:30 - 2016-10-15 05:41 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-10-28 07:30 - 2016-10-15 05:41 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2016-10-28 07:30 - 2016-10-15 05:41 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2016-10-28 07:30 - 2016-10-15 05:41 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
2016-10-28 07:30 - 2016-10-15 05:39 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-10-28 07:30 - 2016-10-15 05:38 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-10-28 07:30 - 2016-10-15 05:38 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-10-28 07:30 - 2016-10-15 05:38 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-10-28 07:30 - 2016-10-15 05:38 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2016-10-28 07:30 - 2016-10-15 05:38 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-10-28 07:30 - 2016-10-15 05:37 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-10-28 07:30 - 2016-10-15 05:37 - 02256896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-28 07:30 - 2016-10-15 05:37 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-10-28 07:30 - 2016-10-15 05:37 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-10-28 07:30 - 2016-10-15 05:37 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-10-28 07:30 - 2016-10-15 05:37 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-10-28 07:30 - 2016-10-15 05:36 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2016-10-28 07:30 - 2016-10-15 05:36 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 02999808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-10-28 07:30 - 2016-10-15 05:35 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-10-28 07:30 - 2016-10-15 05:35 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2016-10-28 07:30 - 2016-10-15 05:34 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-28 07:30 - 2016-10-15 05:34 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-28 07:30 - 2016-10-15 05:34 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-10-28 07:30 - 2016-09-10 15:21 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-10-28 07:29 - 2016-10-15 06:51 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-10-28 07:29 - 2016-10-15 06:38 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-10-28 07:29 - 2016-10-15 06:34 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-10-28 07:29 - 2016-10-15 06:32 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-10-28 07:29 - 2016-10-15 06:31 - 02827864 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-10-28 07:29 - 2016-10-15 06:31 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-28 07:29 - 2016-10-15 06:31 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-10-28 07:29 - 2016-10-15 06:31 - 00658272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-10-28 07:29 - 2016-10-15 06:31 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-10-28 07:29 - 2016-10-15 06:30 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-10-28 07:29 - 2016-10-15 06:30 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-10-28 07:29 - 2016-10-15 06:29 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-10-28 07:29 - 2016-10-15 06:29 - 01267504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-10-28 07:29 - 2016-10-15 06:29 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-10-28 07:29 - 2016-10-15 06:26 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-10-28 07:29 - 2016-10-15 06:26 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-10-28 07:29 - 2016-10-15 06:26 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-28 07:29 - 2016-10-15 06:21 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-10-28 07:29 - 2016-10-15 06:21 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-10-28 07:29 - 2016-10-15 06:21 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-10-28 07:29 - 2016-10-15 06:20 - 02276736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-10-28 07:29 - 2016-10-15 06:19 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-10-28 07:29 - 2016-10-15 06:18 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-10-28 07:29 - 2016-10-15 06:18 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-10-28 07:29 - 2016-10-15 06:18 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-10-28 07:29 - 2016-10-15 06:15 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-10-28 07:29 - 2016-10-15 06:15 - 01853776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-10-28 07:29 - 2016-10-15 06:15 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-10-28 07:29 - 2016-10-15 06:15 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-10-28 07:29 - 2016-10-15 06:15 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-10-28 07:29 - 2016-10-15 06:15 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-10-28 07:29 - 2016-10-15 06:11 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-10-28 07:29 - 2016-10-15 06:02 - 22568960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-10-28 07:29 - 2016-10-15 06:00 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2016-10-28 07:29 - 2016-10-15 05:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2016-10-28 07:29 - 2016-10-15 05:58 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2016-10-28 07:29 - 2016-10-15 05:57 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-10-28 07:29 - 2016-10-15 05:57 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2016-10-28 07:29 - 2016-10-15 05:56 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2016-10-28 07:29 - 2016-10-15 05:56 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-10-28 07:29 - 2016-10-15 05:56 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2016-10-28 07:29 - 2016-10-15 05:56 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-10-28 07:29 - 2016-10-15 05:56 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-10-28 07:29 - 2016-10-15 05:56 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2016-10-28 07:29 - 2016-10-15 05:55 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2016-10-28 07:29 - 2016-10-15 05:55 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2016-10-28 07:29 - 2016-10-15 05:55 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-10-28 07:29 - 2016-10-15 05:55 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-10-28 07:29 - 2016-10-15 05:55 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-10-28 07:29 - 2016-10-15 05:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2016-10-28 07:29 - 2016-10-15 05:54 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-10-28 07:29 - 2016-10-15 05:54 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-10-28 07:29 - 2016-10-15 05:54 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-28 07:29 - 2016-10-15 05:54 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-10-28 07:29 - 2016-10-15 05:54 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
2016-10-28 07:29 - 2016-10-15 05:53 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2016-10-28 07:29 - 2016-10-15 05:53 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-10-28 07:29 - 2016-10-15 05:53 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2016-10-28 07:29 - 2016-10-15 05:52 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-10-28 07:29 - 2016-10-15 05:51 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-10-28 07:29 - 2016-10-15 05:51 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2016-10-28 07:29 - 2016-10-15 05:50 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-10-28 07:29 - 2016-10-15 05:50 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2016-10-28 07:29 - 2016-10-15 05:50 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-10-28 07:29 - 2016-10-15 05:50 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-10-28 07:29 - 2016-10-15 05:50 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-10-28 07:29 - 2016-10-15 05:49 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-10-28 07:29 - 2016-10-15 05:49 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2016-10-28 07:29 - 2016-10-15 05:49 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-10-28 07:29 - 2016-10-15 05:48 - 23680000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-28 07:29 - 2016-10-15 05:47 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-10-28 07:29 - 2016-10-15 05:47 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-28 07:29 - 2016-10-15 05:47 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-10-28 07:29 - 2016-10-15 05:47 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-28 07:29 - 2016-10-15 05:47 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2016-10-28 07:29 - 2016-10-15 05:46 - 19418112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-10-28 07:29 - 2016-10-15 05:46 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-28 07:29 - 2016-10-15 05:46 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-28 07:29 - 2016-10-15 05:45 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-10-28 07:29 - 2016-10-15 05:45 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-28 07:29 - 2016-10-15 05:45 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-10-28 07:29 - 2016-10-15 05:44 - 03307520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-10-28 07:29 - 2016-10-15 05:44 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-10-28 07:29 - 2016-10-15 05:42 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-10-28 07:29 - 2016-10-15 05:42 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-10-28 07:29 - 2016-10-15 05:42 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2016-10-28 07:29 - 2016-10-15 05:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe
2016-10-28 07:29 - 2016-10-15 05:41 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-10-28 07:29 - 2016-10-15 05:41 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2016-10-28 07:29 - 2016-10-15 05:40 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2016-10-28 07:29 - 2016-10-15 05:39 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2016-10-28 07:29 - 2016-10-15 05:38 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-10-28 07:29 - 2016-10-15 05:38 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2016-10-28 07:29 - 2016-10-15 05:37 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-10-28 07:29 - 2016-10-15 05:37 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-10-28 07:29 - 2016-10-15 05:37 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-10-28 07:29 - 2016-10-15 05:37 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-10-28 07:29 - 2016-10-15 05:37 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-10-28 07:29 - 2016-10-15 05:37 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 01492480 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 00909824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-10-28 07:29 - 2016-10-15 05:36 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-10-28 07:29 - 2016-10-15 05:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 02670592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 01512960 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-10-28 07:29 - 2016-10-15 05:35 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-10-28 07:29 - 2016-10-15 05:35 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2016-10-28 07:29 - 2016-10-15 05:34 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-28 07:29 - 2016-10-15 05:34 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-10-28 07:29 - 2016-10-15 05:32 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-10-28 07:29 - 2016-08-06 06:17 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-10-24 15:46 - 2016-10-24 18:32 - 00000000 ____D C:\AdwCleaner
2016-10-24 15:46 - 2016-10-24 15:47 - 03910208 _____ C:\Users\thomas hochhalter\Downloads\adwcleaner_6.030.exe
2016-10-17 19:48 - 2016-10-17 19:49 - 00000000 ____D C:\Users\Public\Facebook Games
2016-10-17 19:38 - 2016-10-17 19:38 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Facebook
2016-10-17 19:36 - 2016-10-17 19:36 - 00110912 _____ () C:\Users\thomas hochhalter\Downloads\FacebookGameroom.exe
2016-10-17 18:16 - 2016-10-17 20:13 - 00000000 ____D C:\Program Files (x86)\Die Römer
2016-10-17 18:12 - 2016-10-17 20:14 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari
2016-10-17 18:12 - 2016-10-17 18:37 - 00211456 _____ C:\WINDOWS\system32\Drivers\atksgt.sys
2016-10-17 18:12 - 2016-10-17 18:37 - 00035328 _____ C:\WINDOWS\system32\Drivers\lirsgt.sys
2016-10-17 18:09 - 2016-10-17 18:11 - 38370165 _____ C:\Users\thomas hochhalter\Downloads\Desperados2_Update_v101.exe
2016-10-17 17:31 - 2016-10-17 18:12 - 00018048 _____ C:\WINDOWS\SysWOW64\Drivers\lirsgt.sys
2016-10-17 17:12 - 2016-10-17 17:12 - 00000000 ____D C:\Program Files (x86)\Atari
2016-10-13 12:16 - 2016-10-28 21:05 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2016-10-13 12:16 - 2016-10-13 12:16 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2016-10-13 12:15 - 2016-10-13 12:15 - 01875208 _____ (Malwarebytes ) C:\Users\thomas hochhalter\Downloads\mbae-setup-1.08.1.2572.exe
2016-10-13 04:31 - 2016-10-13 04:33 - 00000000 ____D C:\Users\thomas hochhalter\Downloads\exe
2016-10-13 04:30 - 2016-10-13 04:31 - 00000000 ____D C:\Users\thomas hochhalter\Downloads\Dokumente von Liane
2016-10-13 04:29 - 2016-10-13 04:30 - 00000000 ____D C:\Users\thomas hochhalter\Downloads\Bilder
2016-10-13 04:08 - 2016-10-17 17:39 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-10-13 04:08 - 2016-10-13 04:08 - 00004032 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-10-13 00:03 - 2016-10-13 00:03 - 00003662 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2016-10-13 00:02 - 2016-10-13 00:02 - 00000000 ____D C:\WINDOWS\ERUNT
2016-10-13 00:00 - 2016-10-13 00:03 - 00000825 _____ C:\DelFix.txt
2016-10-12 20:16 - 2016-10-12 20:22 - 00001063 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk
2016-10-12 20:16 - 2016-10-12 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2016-10-12 20:16 - 2016-10-12 20:22 - 00000000 ____D C:\Program Files\Tracker Software
2016-10-12 20:12 - 2016-10-17 17:39 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-10-12 20:12 - 2016-10-13 04:08 - 00003870 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-10-12 16:56 - 2016-10-05 12:17 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2016-10-12 16:56 - 2016-10-05 12:12 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-10-12 16:56 - 2016-10-05 11:36 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-12 16:56 - 2016-10-05 11:35 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-12 16:56 - 2016-10-05 11:35 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-12 16:56 - 2016-10-05 11:33 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-12 16:56 - 2016-10-05 11:33 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-10-12 16:56 - 2016-10-05 11:32 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-10-12 16:56 - 2016-10-05 11:31 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2016-10-12 16:56 - 2016-10-05 11:31 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2016-10-12 16:56 - 2016-10-05 11:30 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2016-10-12 16:56 - 2016-10-05 11:29 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2016-10-12 16:56 - 2016-10-05 11:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-10-12 16:56 - 2016-10-05 11:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-10-12 16:56 - 2016-10-05 11:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-10-12 16:56 - 2016-10-05 11:25 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-10-12 16:56 - 2016-10-05 11:25 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2016-10-12 16:56 - 2016-10-05 11:25 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-10-12 16:56 - 2016-10-05 11:24 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-10-12 16:56 - 2016-10-05 11:23 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-10-12 16:56 - 2016-10-05 11:23 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-12 16:56 - 2016-10-05 11:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-12 16:56 - 2016-10-05 11:18 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-10-12 16:56 - 2016-10-05 11:18 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-10-12 16:56 - 2016-10-05 11:17 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-10-12 16:56 - 2016-10-05 11:15 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-10-12 16:56 - 2016-10-05 11:15 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2016-10-12 16:56 - 2016-10-05 11:10 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-10-12 16:56 - 2016-10-05 11:09 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-10-12 16:56 - 2016-10-05 11:08 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-10-12 16:56 - 2016-10-05 11:07 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-10-12 16:55 - 2016-10-05 12:13 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-12 16:55 - 2016-10-05 12:13 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-12 16:55 - 2016-10-05 12:09 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2016-10-12 16:55 - 2016-10-05 12:03 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-10-12 16:55 - 2016-10-05 11:51 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-10-12 16:55 - 2016-10-05 11:46 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-10-12 16:55 - 2016-10-05 11:38 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-12 16:55 - 2016-10-05 11:33 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-12 16:55 - 2016-10-05 11:32 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-10-12 16:55 - 2016-10-05 11:31 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-10-12 16:55 - 2016-10-05 11:27 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-12 16:55 - 2016-10-05 11:26 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-10-12 16:55 - 2016-10-05 11:26 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2016-10-12 16:55 - 2016-10-05 11:25 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-10-12 16:55 - 2016-10-05 11:25 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-10-12 16:55 - 2016-10-05 11:24 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-10-12 16:55 - 2016-10-05 11:23 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-10-12 16:55 - 2016-10-05 11:23 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2016-10-12 16:55 - 2016-10-05 11:23 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-10-12 16:55 - 2016-10-05 11:21 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-10-12 16:55 - 2016-10-05 11:21 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-10-12 16:55 - 2016-10-05 11:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-10-12 16:55 - 2016-10-05 11:19 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2016-10-12 16:55 - 2016-10-05 11:18 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-10-12 16:55 - 2016-10-05 11:17 - 08126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-10-12 16:55 - 2016-10-05 11:16 - 04747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-10-12 16:55 - 2016-10-05 11:16 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-12 16:55 - 2016-10-05 11:16 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-10-12 16:55 - 2016-10-05 11:14 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-12 16:55 - 2016-10-05 11:14 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-10-12 16:55 - 2016-10-05 11:13 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-12 16:55 - 2016-10-05 11:12 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-10-12 16:55 - 2016-10-05 11:11 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-10-12 16:55 - 2016-10-05 11:11 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-10-12 16:55 - 2016-10-05 11:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-10-12 16:55 - 2016-10-05 11:07 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-10-12 16:55 - 2016-10-05 11:07 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-10-12 16:55 - 2016-10-05 11:07 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-10-12 16:55 - 2016-10-05 11:06 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-10-12 16:55 - 2016-10-05 11:05 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-10-12 16:55 - 2016-09-07 07:34 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-12 16:54 - 2016-10-05 12:35 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-10-12 16:54 - 2016-10-05 12:33 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-12 16:54 - 2016-10-05 12:31 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-10-12 16:54 - 2016-10-05 12:22 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-10-12 16:54 - 2016-10-05 12:16 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-10-12 16:54 - 2016-10-05 12:12 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-10-12 16:54 - 2016-10-05 12:09 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-10-12 16:54 - 2016-10-05 12:08 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-12 16:54 - 2016-10-05 11:50 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-10-12 16:54 - 2016-10-05 11:49 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-10-12 16:54 - 2016-10-05 11:48 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-10-12 16:54 - 2016-10-05 11:46 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-10-12 16:54 - 2016-10-05 11:38 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-12 16:54 - 2016-10-05 11:36 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2016-10-12 16:54 - 2016-10-05 11:36 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-10-12 16:54 - 2016-10-05 11:35 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2016-10-12 16:54 - 2016-10-05 11:35 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-12 16:54 - 2016-10-05 11:34 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-12 16:54 - 2016-10-05 11:32 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-10-12 16:54 - 2016-10-05 11:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-12 16:54 - 2016-10-05 11:31 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-10-12 16:54 - 2016-10-05 11:31 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-12 16:54 - 2016-10-05 11:31 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-10-12 16:54 - 2016-10-05 11:31 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-10-12 16:54 - 2016-10-05 11:29 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-10-12 16:54 - 2016-10-05 11:28 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-10-12 16:54 - 2016-10-05 11:28 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-10-12 16:54 - 2016-10-05 11:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-10-12 16:54 - 2016-10-05 11:28 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2016-10-12 16:54 - 2016-10-05 11:27 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-10-12 16:54 - 2016-10-05 11:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-12 16:54 - 2016-10-05 11:23 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-12 16:54 - 2016-10-05 11:22 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-10-12 16:54 - 2016-10-05 11:21 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2016-10-12 16:54 - 2016-10-05 11:20 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-12 16:54 - 2016-10-05 11:18 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-10-12 16:54 - 2016-10-05 11:17 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-12 16:54 - 2016-10-05 11:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-12 16:54 - 2016-10-05 11:16 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-10-12 16:54 - 2016-10-05 11:16 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-10-12 16:54 - 2016-10-05 11:15 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-10-12 16:54 - 2016-10-05 11:15 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-10-12 16:54 - 2016-10-05 11:15 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-10-12 16:54 - 2016-10-05 11:14 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-10-12 16:54 - 2016-10-05 11:13 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-12 16:54 - 2016-10-05 11:12 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2016-10-12 16:54 - 2016-10-05 11:12 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-12 16:54 - 2016-10-05 11:11 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-10-12 16:54 - 2016-10-05 11:09 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-10-12 16:54 - 2016-10-05 11:08 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-10-12 16:54 - 2016-10-05 11:08 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-10-12 16:54 - 2016-10-05 11:07 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-10-12 16:54 - 2016-10-05 11:06 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-10-12 16:54 - 2016-10-05 11:05 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-12 16:54 - 2016-10-05 02:01 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-10-10 13:13 - 2016-10-22 20:48 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-10-10 13:12 - 2016-10-10 13:12 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-10-10 13:12 - 2016-10-10 13:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-10-10 13:12 - 2016-10-10 13:12 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-10-10 13:12 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-10-10 13:12 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-10-10 13:12 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-10-10 10:16 - 2016-10-10 10:17 - 00000000 ____D C:\Users\thomas hochhalter\Desktop\Dokumente
2016-10-10 03:29 - 2016-10-10 03:29 - 00000000 ____D C:\Program Files\McAfee
2016-10-08 17:34 - 2016-10-08 17:34 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-10-08 17:34 - 2016-10-08 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-10-08 17:33 - 2016-10-08 17:34 - 00000000 ____D C:\Program Files\iTunes
2016-10-08 17:33 - 2016-10-08 17:33 - 00000000 ____D C:\Program Files\iPod
|
|
28.10.2016, 20:39
| #37 |
| | 149 Viren erkannt durch MBAMCode:
ATTFilter 2016-10-08 17:28 - 2016-10-08 17:28 - 00000000 ____D C:\Program Files\Bonjour
2016-10-08 17:28 - 2016-10-08 17:28 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-10-08 17:26 - 2016-10-08 17:26 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2016-10-08 17:26 - 2016-10-08 17:26 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-10-05 13:40 - 2016-10-08 22:48 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-10-04 20:40 - 2016-10-04 20:40 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Bluestacks
2016-10-04 17:31 - 2016-10-04 17:31 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Downloaded Installations
2016-10-04 03:01 - 2016-10-04 03:01 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Evernote
2016-10-02 14:24 - 2016-02-20 18:05 - 00001849 _____ C:\Users\thomas hochhalter\Desktop\Spotify.lnk
2016-10-02 14:22 - 2016-10-02 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-10-02 13:32 - 2016-10-10 18:34 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\JDownloader 2.0
2016-10-01 02:18 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-10-01 02:18 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-10-01 02:18 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-10-01 02:17 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-10-01 02:17 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-10-01 02:17 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-09-30 04:47 - 2016-09-15 19:40 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2016-09-30 04:47 - 2016-09-15 19:37 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-09-30 04:47 - 2016-09-15 19:25 - 00340320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-09-30 04:47 - 2016-09-15 19:25 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-09-30 04:47 - 2016-09-15 19:23 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-09-30 04:47 - 2016-09-15 19:22 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-09-30 04:47 - 2016-09-15 19:22 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-09-30 04:47 - 2016-09-15 19:22 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-09-30 04:47 - 2016-09-15 19:22 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-09-30 04:47 - 2016-09-15 19:19 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-09-30 04:47 - 2016-09-15 19:18 - 06654616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-09-30 04:47 - 2016-09-15 19:18 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-09-30 04:47 - 2016-09-15 19:18 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-09-30 04:47 - 2016-09-15 19:03 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-09-30 04:47 - 2016-09-15 19:03 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2016-09-30 04:47 - 2016-09-15 19:03 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-09-30 04:47 - 2016-09-15 19:01 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2016-09-30 04:47 - 2016-09-15 19:00 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2016-09-30 04:47 - 2016-09-15 19:00 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-09-30 04:47 - 2016-09-15 18:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-09-30 04:47 - 2016-09-15 18:59 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2016-09-30 04:47 - 2016-09-15 18:58 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2016-09-30 04:47 - 2016-09-15 18:58 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2016-09-30 04:47 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 04:47 - 2016-09-15 18:58 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2016-09-30 04:47 - 2016-09-15 18:57 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2016-09-30 04:47 - 2016-09-15 18:57 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-09-30 04:47 - 2016-09-15 18:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2016-09-30 04:47 - 2016-09-15 18:57 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-09-30 04:47 - 2016-09-15 18:56 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2016-09-30 04:47 - 2016-09-15 18:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-09-30 04:47 - 2016-09-15 18:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2016-09-30 04:47 - 2016-09-15 18:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-09-30 04:47 - 2016-09-15 18:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2016-09-30 04:47 - 2016-09-15 18:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-09-30 04:47 - 2016-09-15 18:55 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-09-30 04:47 - 2016-09-15 18:54 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2016-09-30 04:47 - 2016-09-15 18:54 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-09-30 04:47 - 2016-09-15 18:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2016-09-30 04:47 - 2016-09-15 18:54 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-09-30 04:47 - 2016-09-15 18:53 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-09-30 04:47 - 2016-09-15 18:53 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-09-30 04:47 - 2016-09-15 18:53 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-09-30 04:47 - 2016-09-15 18:53 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2016-09-30 04:47 - 2016-09-15 18:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-09-30 04:47 - 2016-09-15 18:52 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-09-30 04:47 - 2016-09-15 18:51 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-09-30 04:47 - 2016-09-15 18:50 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-09-30 04:47 - 2016-09-15 18:50 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2016-09-30 04:47 - 2016-09-15 18:49 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-09-30 04:47 - 2016-09-15 18:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-30 04:47 - 2016-09-15 18:48 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-09-30 04:47 - 2016-09-15 18:47 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-09-30 04:47 - 2016-09-15 18:47 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2016-09-30 04:47 - 2016-09-15 18:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2016-09-30 04:47 - 2016-09-15 18:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2016-09-30 04:47 - 2016-09-15 18:46 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-09-30 04:47 - 2016-09-15 18:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-09-30 04:47 - 2016-09-15 18:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-09-30 04:47 - 2016-09-15 18:44 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-09-30 04:47 - 2016-09-15 18:44 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2016-09-30 04:47 - 2016-09-15 18:43 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-09-30 04:47 - 2016-09-15 18:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2016-09-30 04:47 - 2016-09-15 18:42 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-09-30 04:47 - 2016-09-15 18:42 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2016-09-30 04:47 - 2016-09-15 18:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2016-09-30 04:47 - 2016-09-15 18:41 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-09-30 04:47 - 2016-09-15 18:40 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-09-30 04:47 - 2016-09-15 18:40 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-09-30 04:47 - 2016-09-15 18:40 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2016-09-30 04:47 - 2016-09-15 18:39 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-09-30 04:47 - 2016-09-15 18:39 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2016-09-30 04:47 - 2016-09-15 18:39 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2016-09-30 04:47 - 2016-09-15 18:39 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-09-30 04:47 - 2016-09-15 18:39 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-09-30 04:47 - 2016-09-15 18:38 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-09-30 04:47 - 2016-09-15 18:38 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-09-30 04:47 - 2016-09-15 18:38 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-09-30 04:47 - 2016-09-15 18:38 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-09-30 04:47 - 2016-09-15 18:36 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2016-09-30 04:47 - 2016-09-15 18:35 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-09-30 04:47 - 2016-08-06 05:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-09-30 04:47 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-30 04:46 - 2016-09-15 19:37 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-09-30 04:46 - 2016-09-15 19:33 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-09-30 04:46 - 2016-09-15 19:32 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-09-30 04:46 - 2016-09-15 19:23 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-09-30 04:46 - 2016-09-15 19:14 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-09-30 04:46 - 2016-09-15 19:13 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2016-09-30 04:46 - 2016-09-15 19:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2016-09-30 04:46 - 2016-09-15 19:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-09-30 04:46 - 2016-09-15 19:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-09-30 04:46 - 2016-09-15 18:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2016-09-30 04:46 - 2016-09-15 18:58 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-09-30 04:46 - 2016-09-15 18:58 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-09-30 04:46 - 2016-09-15 18:58 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2016-09-30 04:46 - 2016-09-15 18:57 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2016-09-30 04:46 - 2016-09-15 18:57 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-09-30 04:46 - 2016-09-15 18:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2016-09-30 04:46 - 2016-09-15 18:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-09-30 04:46 - 2016-09-15 18:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2016-09-30 04:46 - 2016-09-15 18:55 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2016-09-30 04:46 - 2016-09-15 18:55 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2016-09-30 04:46 - 2016-09-15 18:55 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-09-30 04:46 - 2016-09-15 18:55 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2016-09-30 04:46 - 2016-09-15 18:55 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 04:46 - 2016-09-15 18:55 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2016-09-30 04:46 - 2016-09-15 18:54 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-09-30 04:46 - 2016-09-15 18:54 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2016-09-30 04:46 - 2016-09-15 18:53 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2016-09-30 04:46 - 2016-09-15 18:51 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2016-09-30 04:46 - 2016-09-15 18:49 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-09-30 04:46 - 2016-09-15 18:49 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-09-30 04:46 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2016-09-30 04:46 - 2016-09-15 18:45 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2016-09-30 04:46 - 2016-09-15 18:43 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-09-30 04:46 - 2016-09-15 18:43 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2016-09-30 04:46 - 2016-09-15 18:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-09-30 04:46 - 2016-09-15 18:42 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-09-30 04:46 - 2016-09-15 18:40 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-09-30 04:46 - 2016-09-15 18:40 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-09-30 04:46 - 2016-09-15 18:40 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-09-30 04:46 - 2016-09-15 18:40 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-09-30 04:46 - 2016-09-15 18:40 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2016-09-30 04:46 - 2016-09-15 18:16 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-09-30 04:41 - 2016-09-15 19:29 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-09-30 04:41 - 2016-09-15 19:18 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-09-30 04:41 - 2016-09-15 18:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2016-09-30 04:41 - 2016-09-15 18:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2016-09-30 04:41 - 2016-09-15 18:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-09-30 04:41 - 2016-09-15 18:40 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-09-30 04:41 - 2016-09-15 18:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-09-30 04:41 - 2016-09-15 18:40 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-09-30 04:41 - 2016-09-15 18:39 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-09-30 04:41 - 2016-09-15 18:38 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2016-09-30 04:41 - 2016-09-15 18:37 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-09-30 04:41 - 2016-09-15 18:37 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-09-30 04:41 - 2016-09-15 18:36 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2016-09-30 04:41 - 2016-09-15 18:35 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-09-30 04:41 - 2016-09-15 18:32 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-09-30 04:41 - 2016-09-15 18:24 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-09-30 04:41 - 2016-09-15 18:23 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-09-30 04:41 - 2016-09-15 18:21 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-09-30 04:41 - 2016-09-15 18:19 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-09-30 04:41 - 2016-08-05 10:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-30 04:40 - 2016-09-15 19:29 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2016-09-30 04:40 - 2016-09-15 19:29 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-09-30 04:40 - 2016-09-15 19:29 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-09-30 04:40 - 2016-09-15 19:16 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-09-30 04:40 - 2016-09-15 19:16 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-09-30 04:40 - 2016-09-15 19:15 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2016-09-30 04:40 - 2016-09-15 19:12 - 08158672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-09-30 04:40 - 2016-09-15 18:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-09-30 04:40 - 2016-09-15 18:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-09-30 04:40 - 2016-09-15 18:38 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-09-30 04:40 - 2016-09-15 18:37 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2016-09-30 04:40 - 2016-09-15 18:37 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-09-30 04:40 - 2016-09-15 18:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-09-30 04:40 - 2016-09-15 18:35 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-09-30 04:40 - 2016-09-15 18:35 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-09-30 04:40 - 2016-09-15 18:34 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2016-09-30 04:40 - 2016-09-15 18:33 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-09-30 04:40 - 2016-09-15 18:25 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2016-09-30 04:40 - 2016-09-15 18:24 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-09-30 04:40 - 2016-09-15 18:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-09-30 04:40 - 2016-09-15 18:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-09-30 04:40 - 2016-09-15 18:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-09-30 04:40 - 2016-09-15 18:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-09-30 04:40 - 2016-09-15 18:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-09-30 04:40 - 2016-09-15 18:19 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-09-30 04:40 - 2016-09-15 18:18 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-09-30 04:40 - 2016-08-06 05:34 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-09-30 04:39 - 2016-09-15 19:30 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-09-30 04:39 - 2016-09-15 19:16 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-09-30 04:39 - 2016-09-15 19:16 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-09-30 04:39 - 2016-09-15 18:44 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-09-30 04:39 - 2016-09-15 18:38 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-09-30 04:39 - 2016-09-15 18:37 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2016-09-30 04:39 - 2016-09-15 18:36 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2016-09-30 04:39 - 2016-09-15 18:36 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2016-09-30 04:39 - 2016-09-15 18:34 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-30 04:39 - 2016-09-15 18:33 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2016-09-30 04:39 - 2016-09-15 18:29 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-09-30 04:39 - 2016-09-15 18:21 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-09-30 04:39 - 2016-09-15 18:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-09-30 04:39 - 2016-09-15 18:16 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-09-30 04:39 - 2016-09-15 18:16 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-09-30 04:39 - 2016-09-15 18:16 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-09-30 04:38 - 2016-09-15 19:29 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-09-30 04:38 - 2016-09-15 19:25 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2016-09-30 04:38 - 2016-09-15 19:21 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-09-30 04:38 - 2016-09-15 19:18 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-09-30 04:38 - 2016-09-15 19:15 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-09-30 04:38 - 2016-09-15 19:15 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-09-30 04:38 - 2016-09-15 18:42 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2016-09-30 04:38 - 2016-09-15 18:41 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2016-09-30 04:38 - 2016-09-15 18:41 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2016-09-30 04:38 - 2016-09-15 18:41 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2016-09-30 04:38 - 2016-09-15 18:39 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-09-30 04:38 - 2016-09-15 18:39 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2016-09-30 04:38 - 2016-09-15 18:38 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-09-30 04:38 - 2016-09-15 18:36 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-09-30 04:38 - 2016-09-15 18:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-09-30 04:38 - 2016-09-15 18:35 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-09-30 04:38 - 2016-09-15 18:35 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-09-30 04:38 - 2016-09-15 18:35 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-09-30 04:38 - 2016-09-15 18:34 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-09-30 04:38 - 2016-09-15 18:32 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-09-30 04:38 - 2016-09-15 18:30 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-09-30 04:38 - 2016-09-15 18:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-09-30 04:38 - 2016-09-15 18:29 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-09-30 04:38 - 2016-09-15 18:27 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-09-30 04:38 - 2016-09-15 18:27 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-09-30 04:38 - 2016-09-15 18:27 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2016-09-30 04:38 - 2016-09-15 18:27 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-09-30 04:38 - 2016-09-15 18:27 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2016-09-30 04:38 - 2016-09-15 18:27 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2016-09-30 04:38 - 2016-09-15 18:27 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2016-09-30 04:38 - 2016-09-15 18:26 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-09-30 04:38 - 2016-09-15 18:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2016-09-30 04:38 - 2016-09-15 18:24 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-09-30 04:38 - 2016-09-15 18:23 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-09-30 04:38 - 2016-09-15 18:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-09-30 04:38 - 2016-09-15 18:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-09-30 04:38 - 2016-09-15 18:19 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-09-30 04:38 - 2016-09-15 18:16 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2016-09-30 04:37 - 2016-09-15 19:29 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2016-09-30 04:37 - 2016-09-15 19:27 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-09-30 04:37 - 2016-09-15 19:14 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-09-30 04:37 - 2016-09-15 19:12 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-09-30 04:37 - 2016-09-15 19:11 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-09-30 04:37 - 2016-09-15 19:11 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-09-30 04:37 - 2016-09-15 19:11 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2016-09-30 04:37 - 2016-09-15 19:06 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-09-30 04:37 - 2016-09-15 18:47 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-09-30 04:37 - 2016-09-15 18:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2016-09-30 04:37 - 2016-09-15 18:40 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2016-09-30 04:37 - 2016-09-15 18:39 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-09-30 04:37 - 2016-09-15 18:39 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-09-30 04:37 - 2016-09-15 18:39 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-09-30 04:37 - 2016-09-15 18:38 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2016-09-30 04:37 - 2016-09-15 18:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-09-30 04:37 - 2016-09-15 18:38 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2016-09-30 04:37 - 2016-09-15 18:37 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-09-30 04:37 - 2016-09-15 18:36 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-09-30 04:37 - 2016-09-15 18:36 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-09-30 04:37 - 2016-09-15 18:36 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-09-30 04:37 - 2016-09-15 18:36 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-09-30 04:37 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-09-30 04:37 - 2016-09-15 18:35 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-09-30 04:37 - 2016-09-15 18:35 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-09-30 04:37 - 2016-09-15 18:35 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-09-30 04:37 - 2016-09-15 18:35 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-09-30 04:37 - 2016-09-15 18:34 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-09-30 04:37 - 2016-09-15 18:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2016-09-30 04:37 - 2016-09-15 18:32 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2016-09-30 04:37 - 2016-09-15 18:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2016-09-30 04:37 - 2016-09-15 18:30 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-30 04:37 - 2016-09-15 18:30 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2016-09-30 04:37 - 2016-09-15 18:29 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-09-30 04:37 - 2016-09-15 18:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2016-09-30 04:37 - 2016-09-15 18:28 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2016-09-30 04:37 - 2016-09-15 18:28 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-09-30 04:37 - 2016-09-15 18:27 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-09-30 04:37 - 2016-09-15 18:27 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2016-09-30 04:37 - 2016-09-15 18:26 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-09-30 04:37 - 2016-09-15 18:25 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-30 04:37 - 2016-09-15 18:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-09-30 04:37 - 2016-09-15 18:25 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2016-09-30 04:37 - 2016-09-15 18:25 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-09-30 04:37 - 2016-09-15 18:24 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-09-30 04:37 - 2016-09-15 18:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-09-30 04:37 - 2016-09-15 18:23 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2016-09-30 04:37 - 2016-09-15 18:23 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-09-30 04:37 - 2016-09-15 18:23 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-09-30 04:37 - 2016-09-15 18:23 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-09-30 04:37 - 2016-09-15 18:22 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-09-30 04:37 - 2016-09-15 18:22 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-09-30 04:37 - 2016-09-15 18:21 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-09-30 04:37 - 2016-09-15 18:19 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-09-30 04:37 - 2016-09-15 18:19 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-09-30 04:36 - 2016-09-15 19:16 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-09-30 04:36 - 2016-09-15 18:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-09-30 04:36 - 2016-09-15 18:38 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-09-30 04:36 - 2016-09-15 18:38 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-09-30 04:36 - 2016-09-15 18:36 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-09-30 04:36 - 2016-09-15 18:35 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-09-30 04:36 - 2016-09-15 18:34 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-09-30 04:36 - 2016-09-15 18:34 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-09-30 04:36 - 2016-09-15 18:26 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2016-09-30 04:36 - 2016-09-15 18:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-09-30 04:36 - 2016-09-15 18:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-09-30 04:36 - 2016-09-15 18:19 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-09-30 04:35 - 2016-09-15 19:30 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-09-30 04:35 - 2016-09-15 19:27 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-09-30 04:35 - 2016-09-15 19:26 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-09-30 04:35 - 2016-09-15 19:25 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-30 04:35 - 2016-09-15 19:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2016-09-30 04:35 - 2016-09-15 19:16 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-09-30 04:35 - 2016-09-15 19:07 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-09-30 04:35 - 2016-09-15 19:07 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2016-09-30 04:35 - 2016-09-15 18:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-09-30 04:35 - 2016-09-15 18:41 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-09-30 04:35 - 2016-09-15 18:39 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-09-30 04:35 - 2016-09-15 18:38 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-09-30 04:35 - 2016-09-15 18:38 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-09-30 04:35 - 2016-09-15 18:38 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-09-30 04:35 - 2016-09-15 18:38 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-09-30 04:35 - 2016-09-15 18:37 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-09-30 04:35 - 2016-09-15 18:37 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-09-30 04:35 - 2016-09-15 18:37 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-09-30 04:35 - 2016-09-15 18:37 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-09-30 04:35 - 2016-09-15 18:36 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-09-30 04:35 - 2016-09-15 18:36 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-09-30 04:35 - 2016-09-15 18:36 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-09-30 04:35 - 2016-09-15 18:35 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-09-30 04:35 - 2016-09-15 18:35 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-09-30 04:35 - 2016-09-15 18:35 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2016-09-30 04:35 - 2016-09-15 18:34 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-09-30 04:35 - 2016-09-15 18:33 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-09-30 04:35 - 2016-09-15 18:30 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-09-30 04:35 - 2016-09-15 18:30 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2016-09-30 04:35 - 2016-09-15 18:30 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-09-30 04:35 - 2016-09-15 18:29 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-09-30 04:35 - 2016-09-15 18:28 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2016-09-30 04:35 - 2016-09-15 18:27 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-09-30 04:35 - 2016-09-15 18:27 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-09-30 04:35 - 2016-09-15 18:27 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2016-09-30 04:35 - 2016-09-15 18:26 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-09-30 04:35 - 2016-09-15 18:25 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-09-30 04:35 - 2016-09-15 18:25 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-09-30 04:35 - 2016-09-15 18:23 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-09-30 04:35 - 2016-09-15 18:22 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-09-30 04:35 - 2016-09-15 18:22 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-09-30 04:35 - 2016-09-15 18:22 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-09-30 04:35 - 2016-09-15 18:22 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-09-30 04:35 - 2016-09-15 18:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-09-30 04:35 - 2016-09-15 18:18 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-09-30 04:35 - 2016-09-15 18:17 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-09-30 04:35 - 2016-09-15 18:17 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-09-30 04:34 - 2016-09-15 19:29 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-09-30 04:34 - 2016-09-15 19:29 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2016-09-30 04:34 - 2016-09-15 19:14 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2016-09-30 04:34 - 2016-09-15 19:06 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-09-30 04:34 - 2016-09-15 18:40 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-09-30 04:34 - 2016-09-15 18:40 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-09-30 04:34 - 2016-09-15 18:37 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2016-09-30 04:34 - 2016-09-15 18:36 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2016-09-30 04:34 - 2016-09-15 18:35 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-09-30 04:34 - 2016-09-15 18:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2016-09-30 04:34 - 2016-09-15 18:33 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2016-09-30 04:34 - 2016-09-15 18:33 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-09-30 04:34 - 2016-09-15 18:30 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-09-30 04:34 - 2016-09-15 18:27 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2016-09-30 04:34 - 2016-09-15 18:22 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-09-30 04:33 - 2016-09-15 19:29 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2016-09-30 04:33 - 2016-09-15 19:24 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-09-30 04:33 - 2016-09-15 19:14 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-09-30 04:33 - 2016-09-15 19:14 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-09-30 04:33 - 2016-09-15 19:14 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-09-30 04:33 - 2016-09-15 19:14 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-09-30 04:33 - 2016-09-15 19:06 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-09-30 04:33 - 2016-09-15 18:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2016-09-30 04:33 - 2016-09-15 18:38 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-09-30 04:33 - 2016-09-15 18:38 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2016-09-30 04:33 - 2016-09-15 18:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-09-30 04:33 - 2016-09-15 18:35 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-09-30 04:33 - 2016-09-15 18:35 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2016-09-30 04:33 - 2016-09-15 18:33 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-09-30 04:33 - 2016-09-15 18:23 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-09-30 04:32 - 2016-09-15 19:15 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-09-30 04:32 - 2016-09-15 18:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-10-28 21:17 - 2015-05-26 15:17 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\Skype
2016-10-28 20:38 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-28 20:36 - 2016-09-16 17:09 - 00000000 ____D C:\Users\thomas hochhalter
2016-10-28 20:36 - 2016-07-17 00:51 - 00692352 _____ C:\WINDOWS\system32\perfh007.dat
2016-10-28 20:36 - 2016-07-17 00:51 - 00151214 _____ C:\WINDOWS\system32\perfc007.dat
2016-10-28 20:36 - 2016-03-12 01:57 - 01871786 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-28 20:33 - 2016-09-16 17:01 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-10-28 20:33 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-28 19:22 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-10-28 19:19 - 2016-09-16 17:33 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-10-28 19:18 - 2016-09-16 17:00 - 00374152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-28 19:17 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2016-10-28 19:15 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-10-28 19:15 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-10-28 19:15 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-10-28 19:15 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-28 19:14 - 2016-07-16 13:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-10-28 14:58 - 2014-07-13 23:10 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Ubisoft Game Launcher
2016-10-28 11:56 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-10-28 08:50 - 2015-07-14 22:14 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\DVDVideoSoft
2016-10-28 08:16 - 2016-03-20 16:12 - 00000000 ____D C:\Users\thomas hochhalter\Desktop\Bilder
2016-10-28 08:16 - 2016-01-24 14:43 - 00000000 ____D C:\Users\thomas hochhalter\Desktop\LOGDATEIEN
2016-10-28 06:46 - 2015-05-24 16:37 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-10-28 06:41 - 2016-09-16 17:33 - 00003974 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1436905118
2016-10-28 06:41 - 2015-07-14 22:18 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-10-28 06:41 - 2015-07-14 22:17 - 00000000 ____D C:\Program Files (x86)\Opera
2016-10-27 18:40 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-26 19:18 - 2015-05-17 01:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-10-26 19:18 - 2014-06-20 22:47 - 00000000 ____D C:\ProgramData\Skype
2016-10-25 01:30 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-10-25 01:30 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-23 19:55 - 2016-03-20 16:12 - 00000000 ____D C:\Users\thomas hochhalter\Desktop\Spiele
2016-10-23 04:46 - 2014-07-09 23:02 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\vlc
2016-10-19 02:09 - 2015-11-04 21:47 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Spotify
2016-10-19 01:58 - 2015-11-04 21:45 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\Spotify
2016-10-17 20:16 - 2010-07-12 23:29 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-10-17 17:38 - 2014-06-20 22:38 - 00000000 ____D C:\Program Files\Google
2016-10-17 17:38 - 2014-06-20 22:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-10-14 21:50 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-10-13 08:18 - 2015-06-04 08:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-13 08:16 - 2014-06-20 23:08 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Google
2016-10-13 04:08 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-10-13 04:08 - 2014-06-23 00:35 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\Adobe
2016-10-13 04:07 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-10-13 03:28 - 2015-10-12 00:12 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-13 03:28 - 2015-10-12 00:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-13 03:25 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-10-13 03:25 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-10-13 03:25 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-10-13 03:25 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-13 03:25 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-12 20:03 - 2014-06-20 22:31 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-10-12 20:03 - 2014-06-20 22:30 - 00000000 ____D C:\ProgramData\Adobe
2016-10-12 17:24 - 2015-12-22 12:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-10-12 17:12 - 2015-12-22 12:32 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-10-12 17:10 - 2015-10-12 00:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-12 16:16 - 2016-07-16 13:43 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2016-10-12 16:16 - 2016-07-16 13:42 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2016-10-11 04:11 - 2016-09-16 17:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-10-10 18:22 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-10-10 03:32 - 2014-06-20 22:28 - 00000000 ____D C:\ProgramData\McAfee
2016-10-09 20:01 - 2016-09-27 01:04 - 00280976 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2016-10-09 20:01 - 2014-07-13 22:33 - 00280976 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2016-10-09 02:06 - 2015-11-23 19:21 - 00000000 ____D C:\Users\thomas hochhalter\Desktop\gemeindeinformtionen
2016-10-09 00:51 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-10-08 23:03 - 2015-10-11 13:45 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-10-08 23:00 - 2015-07-14 22:15 - 00000000 ____D C:\Program Files (x86)\Lavasoft
2016-10-08 23:00 - 2015-07-14 22:14 - 00000000 ____D C:\ProgramData\Lavasoft
2016-10-08 22:59 - 2015-07-14 22:15 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\Lavasoft
2016-10-08 17:33 - 2015-07-17 00:21 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-10-08 17:26 - 2015-07-17 00:21 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-10-05 14:48 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Globalization
2016-10-04 20:39 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-10-04 18:06 - 2016-01-31 14:26 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-10-02 14:22 - 2016-09-16 17:05 - 00000000 ____D C:\ProgramData\Package Cache
2016-10-02 12:04 - 2015-10-11 14:24 - 00000000 ____D C:\Program Files (x86)\Avira
2016-10-02 12:01 - 2015-10-11 14:24 - 00000000 ____D C:\ProgramData\Avira
2016-10-02 12:00 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-09-30 05:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-09-30 05:51 - 2016-09-16 17:09 - 00000000 ____D C:\Users\DefaultAppPool
2016-09-30 05:49 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-09-30 05:49 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-09-30 05:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-09-30 05:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
2016-09-30 05:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-09-30 05:49 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-09-30 05:49 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-09-30 05:49 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-09-29 02:19 - 2014-07-13 22:33 - 00280976 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-04-18 21:35 - 2015-04-18 21:35 - 0000000 _____ () C:\Users\thomas hochhalter\AppData\Local\{9331956F-E7D8-491B-A1BC-1C7A0AF5B332}
Einige Dateien in TEMP:
====================
C:\Users\thomas hochhalter\AppData\Local\Temp\libeay32.dll
C:\Users\thomas hochhalter\AppData\Local\Temp\msvcr120.dll
C:\Users\thomas hochhalter\AppData\Local\Temp\proxy_vole5334183344008302495.dll
C:\Users\thomas hochhalter\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-10-27 18:55
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 26-10-2016
durchgeführt von thomas hochhalter (28-10-2016 21:26:40)
Gestartet von C:\Users\thomas hochhalter\Desktop\LOGDATEIEN\Antivirus Programme\FRST Logfiles
Windows 10 Home Version 1607 (X64) (2016-09-16 15:45:34)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-934394075-4118312357-3984632377-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-934394075-4118312357-3984632377-503 - Limited - Disabled)
Gast (S-1-5-21-934394075-4118312357-3984632377-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-934394075-4118312357-3984632377-1002 - Limited - Enabled)
thomas hochhalter (S-1-5-21-934394075-4118312357-3984632377-1000 - Administrator - Enabled) => C:\Users\thomas hochhalter
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 8.0 (HKLM-x32\...\PremElem80) (Version: 8.0 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Apple Application Support (32-Bit) (HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.115 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.368 - ArcSoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)
ATI Catalyst Install Manager (HKLM\...\{687C26DE-9A70-B256-170A-717DFA8B360E}) (Version: 3.0.750.0 - ATI Technologies, Inc.)
Avira Launcher (HKLM-x32\...\{82dc2ab6-088f-4e0a-8e27-bb829481d3bc}) (Version: 1.2.70.16079 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.2.70.16079 - Avira Operations GmbH & Co. KG) Hidden
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
Battlefield 1942: The Road To Rome (HKLM-x32\...\{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}) (Version: - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Call of Duty: Black Ops - Multiplayer (HKLM-x32\...\Steam App 42710) (Version: - Treyarch)
Call of Duty: Black Ops (HKLM-x32\...\Steam App 42700) (Version: - Treyarch)
ccc-core-static (x32 Version: 2010.0209.16.306 - Ihr Firmenname) Hidden
Command & Conquer™ 4 Tiberian Twilight (HKLM-x32\...\{82696435-8572-4D8B-A230-D1AA567D0F0F}) (Version: 1.0.0.0 - Electronic Arts)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.4.2224 - Evernote Corp.)
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.28.831 - Digital Wave Ltd)
GameShadow (HKLM-x32\...\{F7C1C17E-70E3-475F-BD52-EA554391F15D}) (Version: 2.01.0000 - Ihr Firmenname)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
Hitman Blood Money (HKLM-x32\...\{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}) (Version: 1.00.0000 - Eidos)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{9946A4F7-E0FD-4A33-82D1-06CBFFBBB9F9}) (Version: 12.5.1.21 - Apple Inc.)
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Malwarebytes Anti-Exploit version 1.8.1.2572 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.8.1.2572 - Malwarebytes)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Media Gallery (Version: 1.3.0 - Sony Corporation) Hidden
Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Opera Stable 41.0.2353.46 (HKLM-x32\...\Opera 41.0.2353.46) (Version: 41.0.2353.46 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.318.1 - Tracker Software Products Ltd)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.3.00.06040 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.3.00.06040 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180 - Sony Corporation) Hidden
PunkBuster für Battlefield 1942 (HKLM-x32\...\{127B684B-A002-44C8-99A7-6CF8F1E26873}) (Version: - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.2.06210 - Sony Corporation)
Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden
Remote-Tastatur mit PlayStation 3 (HKLM-x32\...\{65B138AE-F636-4D4C-BA5D-A06E21E47C53}) (Version: 1.0.2.06170 - Sony Corporation)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.29 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.29.102 - Skype Technologies S.A.)
SmartSound Quicktracks for Premiere Elements 8.0 (HKLM-x32\...\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}) (Version: 3.11.3090 - SmartSound Software Inc)
SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden
Spotify (HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Spotify) (Version: 1.0.39.157.g674ae377 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.353 - TuneUp Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
VAIO - Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.3.0.06230 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.3.00.06040 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.3.00.06180 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.3.00.06110 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.3.00.06180 - Sony Corporation)
VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.3.0.05310 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.4.0.05240 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.2.00.05120 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.2.0.06080 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.2.0.07020 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.18210 - Sony Corporation)
VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden
VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 2.1.0.13220 - Sony Corporation)
VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.3.00.06040 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden
VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.3.4.2 - Sony Corporation)
VAIO Quick Web Access (x32 Version: 1.3.4.2 - Sony Corporation) Hidden
VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.3.0.06041 - Sony Corporation)
VAIO screensaver (HKLM-x32\...\VAIO screensaver) (Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.0.06080 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.2.0.16270 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.1.0.05280 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.2.0.06230 - Sony Corporation)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VUx64 (Version: 1.2.0 - Sony Corporation) Hidden
VUx86 (x32 Version: 1.2.0 - Sony Corporation) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5600 - Broadcom Corporation)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-934394075-4118312357-3984632377-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\thomas hochhalter\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileCoAuth.exe (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0214FB42-5A67-4A76-9057-C56D82BE37B9} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {05B48B42-1267-405F-BD06-DF7E4710D4F3} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {06412047-E73A-4856-AA97-34FB95E95D95} - System32\Tasks\{08B912A8-EFAA-47A2-B155-01E7A5248712} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {0890CED9-0FB8-4799-9439-76A80194973C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {09179B73-5021-470B-8CE2-179404589993} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {13B5C638-4B8D-4FF7-9423-DC3464A92DC6} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {15B5E6FD-7A1B-4FF9-9B6D-3509C0FD4A0C} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {19D4651C-1764-4636-AC1D-48ECA7D5983B} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-06-08] (Sony Corporation)
Task: {1B712D48-3C97-4224-B39A-B37EE6B1F6F4} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe
Task: {1B8FBE5A-C6B5-4C3B-900C-40F749F241A5} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {208BBE3D-C041-439A-ADF0-D28BC87AF048} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {241DF46B-4270-443B-B953-8CEB2E38F09D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24C76B40-CC20-44D9-B724-8B11E2E9365F} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {26BA986D-D7E2-4758-9F13-C6E1A0F18822} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {3230FDDE-7FB4-4C66-BB05-1B2DC03E57EE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {441AB9A0-19DE-4CE7-BB1E-FCC5D85F1EA2} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {46545930-0AC7-418F-AF72-3E8C7BA288A9} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2016-04-25] (Sony Corporation)
Task: {48BE8B3C-646D-444B-A56A-E7689C00A2B0} - System32\Tasks\Opera scheduled Autoupdate 1436905118 => C:\Program Files (x86)\Opera\launcher.exe [2016-10-24] (Opera Software)
Task: {4C0B71C7-3D3F-47A9-A1A6-115131EC327C} - System32\Tasks\Java(TM) Platform SE Auto Updater 2 0 => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {51A7D641-A933-4FC1-9D9E-75BD1DB74E76} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {54E1D2FD-FE10-474B-A9E3-56F2A5138099} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeNowTask => C:\WINDOWS\System32\GWX\GWXUXWorker.exe
Task: {5A66AF35-81C0-4967-B340-15A61F2BAA7D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5E5296E6-3D51-4849-9EEC-571A6C02B78E} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {61E0BE7D-5C01-4D62-8F03-B0530BE83A49} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {65905F9B-F63F-45A7-A800-D1E18CC9EE34} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {69EC53B8-F76D-41A0-A65A-CA29CAC94D21} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {6B1352F9-CABF-4DD2-A616-7AE3B931CEAD} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK
Task: {73925E44-95E0-4E0F-B8FC-8F177E82346C} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {7BC415EB-CD6A-4C1E-BD63-AB15C5C44686} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {8B58317B-EC86-4DEF-A3A3-BFBA5C3EEC77} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2016-03-31] (Sony Corporation)
Task: {92C8983E-66FF-471E-86A0-2675A67FC6FD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_23_0_0_185_pepper.exe [2016-10-13] (Adobe Systems Incorporated)
Task: {9BFD9057-E0CC-45AE-8E6A-87DD45423B77} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {9C209932-3FAF-4956-997C-6FB4D99D60F7} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {A24FF8A8-F2EF-471C-88E2-FA8C998BA202} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A30B1EA9-906B-4F5E-BB40-9020453CCC0D} - System32\Tasks\Adobe Reader and Acrobat Manager => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {A67AE021-E2D1-433A-AB3C-1570745680F6} - System32\Tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3 => C:\Program Files\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe [2010-06-17] (Sony Corporation)
Task: {AFC94DD5-A5CD-44E2-B713-125A668F2E4D} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {B7B18293-0EB1-478D-AE17-287A50F772BB} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BAD2EBDC-34C6-4E04-A594-9102D0829FAD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BD6D9779-7D48-460F-8B08-BF18894A572D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BF78CEED-1E55-4910-B79C-929294B38FED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {CBF0DAA8-9B26-4366-9C75-524EC00327AC} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {D46A2232-B9A1-4918-B395-EA0E4640442A} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\thomas hochhalter\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-21] (Microsoft Corporation)
Task: {D62BC902-1821-49E0-8F8E-4F8EE193BD52} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D8A0C781-5A12-4D76-81E2-E64C40C8A57B} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {DBF62AFF-0031-4E14-8437-FF454DCE0125} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2015-07-23] (Sony Corporation)
Task: {DC6C6830-07B1-4524-807D-E78B456CE7FE} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-06-08] (Sony Corporation)
Task: {DCA66913-2C9F-4463-84FF-2076E3DAC0E4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DEA5C286-F4DB-446F-9BDD-8F6B24ABA5FC} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {E2D25C47-C8F3-4351-BC55-1CF48E181EDF} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E528D49A-36B5-44FB-BF95-DFF10BFBE794} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-13] (Adobe Systems Incorporated)
Task: {E8E77DAA-F3F5-48A8-B451-E62CBB828C9A} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2015-02-04] (Sony Corporation)
Task: {ED395077-22C7-4778-9D4A-43142C1C33C0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {F000158A-F4FE-4F83-BC03-BC966F01EFC0} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {F42616D7-4279-4262-986C-099135072BCD} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F790E92F-E786-4ABC-BF46-73781608D482} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {FA6E0238-4A4D-4C9A-BC9A-6230A370F5D1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_23_0_0_185_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-30 04:35 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-01 18:12 - 2016-09-01 18:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-09-01 18:12 - 2016-09-01 18:12 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2014-07-13 22:32 - 2014-12-04 18:36 - 00075136 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe
2015-08-26 13:06 - 2015-08-26 13:06 - 00413336 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
2015-08-26 13:06 - 2015-08-26 13:06 - 00709272 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00130712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_process_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00025752 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_system_power_state_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00059544 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_quality_and_reliability_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00194712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\acpi_battery_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00159896 _____ () C:\Program Files\Sony\VAIO Care\ESRV\sema_thermal_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00158360 _____ () C:\Program Files\Sony\VAIO Care\ESRV\wifi_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00050840 _____ () C:\Program Files\Sony\VAIO Care\ESRV\devices_use_input.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00032920 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_disktrace_input.dll
2016-09-30 04:35 - 2016-09-15 19:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-16 18:20 - 2016-09-16 18:20 - 01864384 _____ () C:\Users\thomas hochhalter\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-09-16 17:52 - 2016-09-16 17:52 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-12 16:54 - 2016-10-05 11:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-22 20:29 - 2016-10-22 20:32 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-22 20:29 - 2016-10-22 20:32 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-22 20:29 - 2016-10-22 20:32 - 35253760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2015-08-26 13:06 - 2015-08-26 13:06 - 00458904 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
2015-08-26 13:06 - 2015-08-26 13:06 - 00185496 _____ () C:\Program Files\Sony\VAIO Care\ESRV\foreground_window_input.dll
2016-10-28 07:31 - 2016-10-15 05:34 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-28 07:31 - 2016-10-15 05:41 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-28 07:31 - 2016-10-15 05:34 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-28 07:31 - 2016-10-15 05:34 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-10-28 07:31 - 2016-10-15 05:34 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-28 07:31 - 2016-10-15 05:38 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-14 22:14 - 2016-08-31 20:04 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-07-14 22:14 - 2016-08-31 20:04 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-07-14 22:14 - 2016-08-31 20:04 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-07-14 22:14 - 2016-08-31 20:04 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2014-06-20 22:29 - 2010-05-31 19:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2014-06-20 22:29 - 2010-05-31 19:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2016-09-16 17:54 - 2016-09-16 17:54 - 01383616 _____ () C:\Users\thomas hochhalter\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2016-09-16 17:55 - 2016-09-16 17:55 - 00118976 _____ () C:\Users\thomas hochhalter\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncViews.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\localhost -> localhost
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-934394075-4118312357-3984632377-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\thomas hochhalter\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{4d1f1dad-413d-4a7f-a0a5-f40b64149c52}.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: Apoint => C:\Program Files\Apoint\Apoint.exe
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{653C8ED8-9DE0-4F3D-B989-9E0BCCCBA823}C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe] => (Allow) C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe
FirewallRules: [TCP Query User{B8D680A7-0BAD-4BFA-90CA-82F5E0746CD6}C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe] => (Allow) C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe
FirewallRules: [{9A0BB65F-894B-4D23-B127-349F04720B00}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{70086ABE-16BC-48A6-A3A6-BDA30F1E28E9}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{F517A38E-E31E-4DC4-B753-1CE9A8B7E774}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9E58A6E9-DB87-4125-AAE8-0D65F0D5DA44}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{D021B6B9-05F6-4D17-9072-74FEDB1F5C81}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C2F5CF7C-466B-49C5-831D-745429F87216}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{5E53A0F8-2E26-4F84-8258-9DEB240D552F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AA0191C3-5D1D-4EE7-AD14-A5337B4E39AC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{24211C6A-E5D3-4553-BF59-C5C2AC4F463A}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [{1F137AE3-88A8-4CA1-9CFE-B8B081B3B3A8}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [{70C55487-07FE-4E18-85C8-A787BB2288DA}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{E2539541-4CB3-4810-B93C-0914CCEF8B65}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{63BF27F9-6426-49C9-88FE-C4C890F70BBB}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe
FirewallRules: [{6ED59EB9-D436-4273-91BB-487A94DBCA1A}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe
FirewallRules: [{D15C421C-49E1-4325-AEC1-760F6DD3262D}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe
FirewallRules: [{8FD20503-0256-45D5-A554-D83FCF084870}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe
FirewallRules: [{65E52265-3F1D-43A5-932A-AFC3747F95CA}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe
FirewallRules: [{61D323FA-5C66-43FE-9A83-B0E583AF3E9A}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe
FirewallRules: [{F8272140-18B7-4737-B51E-43F4A3907A9F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C3BE9C28-EEC8-4EB3-ABB0-26E9D827BF31}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{069029ED-A81E-45CF-BDBD-AA359C411811}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2D126419-E169-430E-8C41-7521A7031AA6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{18202045-F1D7-417C-A5F2-3DEDB32D513B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOpsMP.exe
FirewallRules: [{120C623F-9D83-422A-A5F9-88354677EB01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOpsMP.exe
FirewallRules: [{9911F5C2-A1C7-47A1-BBE6-6CA0EDF980DB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOps.exe
FirewallRules: [{FF98024F-D766-4102-BB3F-8538B5CCB558}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOps.exe
FirewallRules: [{A8A5191E-BD21-4B78-A1EC-EC1006D5CE82}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{C6AE13F1-6772-4E80-906E-7A95D13381F5}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{538741CA-C29B-4171-93F7-229DD2D9100E}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3MP.exe
FirewallRules: [{F3E80AF0-2FA3-4895-BC07-46F85C701591}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3MP.exe
FirewallRules: [{DD90A16C-8EA3-4B2E-AF0C-AAFD360293CD}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{D54202AF-FFA4-4E3A-9884-951ECA2A142B}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{860AD3DE-A544-45ED-81E5-785401F7FD7B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8330EBFB-C944-4646-A0ED-E651F860EE6F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C591C438-8566-4C3D-B594-84F584FC2C94}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{3B8F8104-EB9B-459D-B6B1-C34D9DC5D5FB}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{BC1BCE53-6466-45A3-B4C7-F20C5AA5EDF2}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{6B609E03-CD02-4795-A43A-5E69E870CDBD}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [TCP Query User{D2D61280-B03D-441A-95D6-6527B00B52FB}C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{55401B53-8A0B-4E1B-BFF9-889676F8293F}C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{E9A573FD-C606-422D-8B79-6BA361F23C1E}C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe
FirewallRules: [UDP Query User{4F9D4669-F880-42F4-9447-9ABC8DCC5561}C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe
FirewallRules: [TCP Query User{EA5356CB-4C44-4FD0-8CDE-632F6FC1A48F}C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe] => (Allow) C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe
FirewallRules: [UDP Query User{1130A740-3593-418C-B3FC-34E293C8D60B}C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe] => (Allow) C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe
FirewallRules: [{D2D0E1FF-ED17-4CEE-AEC2-7E7753A7FA6A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5A35A0D3-726A-4B65-B7EF-6076577DF8DD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{37C045C7-2635-477D-99E9-AC635E2AB5B0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F34B52A4-C879-490C-A4A3-741FF474C928}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F9F82964-ABEE-4B51-B862-3A702E9BB14C}] => (Allow) C:\Program Files\iTunes\iTunes.exe
==================== Wiederherstellungspunkte =========================
13-10-2016 08:16:17 chip 1-click download service wurde entfernt.
22-10-2016 20:20:55 Windows Update
28-10-2016 08:05:58 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/28/2016 07:27:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.
Details:
(HRESULT : 0x80040210) (0x80040210)
Error: (10/28/2016 06:48:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 252328
Error: (10/28/2016 06:48:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 252328
Error: (10/28/2016 06:48:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/28/2016 06:44:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1203
Error: (10/28/2016 06:44:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1203
Error: (10/28/2016 06:44:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/28/2016 06:13:41 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 89953
Error: (10/28/2016 06:13:41 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 89953
Error: (10/28/2016 06:13:41 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Systemfehler:
=============
Error: (10/28/2016 08:33:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/28/2016 07:22:19 PM) (Source: Microsoft-Windows-Eventlog) (EventID: 30) (User: NT-AUTORITÄT)
Description: Der Ereignisprotokollierungsdienst hat beim Aktivieren des Herausgebers "{0BF2FB94-7B60-4B4D-9766-E82F658DF540}" für den Kanal "Microsoft-Windows-Kernel-ShimEngine/Operational" einen Fehler (5) erkannt. Dieser Fehler hat keinen Einfluss auf den Betrieb des Kanals, beeinträchtigt jedoch die Fähigkeit des Herausgebers, Ereignisse für den Kanal auszulösen. Dieser Fehler ist oft darauf zurückzuführen, dass der Anbieter die ETW-Anbietersicherheit verwendet und der Ereignisprotokoll-Dienstidentität keine Berechtigungen zum Aktivieren gewährt hat.
Error: (10/28/2016 07:21:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "FLAME II HSPA USB MODEM Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/28/2016 07:21:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "FLAME II HSPA USB MODEM Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Pipe wurde beendet.
Error: (10/28/2016 07:21:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lirsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die digitale Signatur dieser Datei kann nicht überprüft werden. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um böswillige Software aus einer unbekannten Quelle handelt, installiert.
Error: (10/28/2016 07:21:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die digitale Signatur dieser Datei kann nicht überprüft werden. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um böswillige Software aus einer unbekannten Quelle handelt, installiert.
Error: (10/28/2016 11:14:33 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT-AUTORITÄT)
Description: Bei der automatischen WLAN-Konfiguration wurde eine eingeschränkte Konnektivität erkannt, "Reset/Recover.adapter" wird ausgeführt.
Code: 8 0x0 0x0
Error: (10/28/2016 11:14:30 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT-AUTORITÄT)
Description: Bei der automatischen WLAN-Konfiguration wurde eine eingeschränkte Konnektivität erkannt, "Reset/Recover.adapter" wird ausgeführt.
Code: 2 0xdeaddeed 0xeeec
Error: (10/28/2016 11:14:30 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT-AUTORITÄT)
Description: Bei der automatischen WLAN-Konfiguration wurde eine eingeschränkte Konnektivität erkannt, "Reset/Recover.adapter" wird ausgeführt.
Code: 1 0xc 0x4
Error: (10/26/2016 06:40:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
CodeIntegrity:
===================================
Date: 2016-10-28 19:21:17.283
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-10-28 19:21:12.873
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-10-25 22:53:56.843
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-25 21:37:19.164
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-10-25 21:37:18.819
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-10-24 18:56:47.970
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-10-24 18:56:47.352
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-10-22 21:55:42.776
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-18 00:49:25.312
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-18 00:49:25.308
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 3950.09 MB
Verfügbarer physikalischer RAM: 1434.49 MB
Summe virtueller Speicher: 8302.09 MB
Verfügbarer virtueller Speicher: 5007.4 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:451.9 GB) (Free:289.84 GB) NTFS
Drive e: () (Removable) (Total:29.8 GB) (Free:23.8 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4E0AB827)
Partition 1: (Not Active) - (Size=13.3 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (Size: 29.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
28.10.2016, 21:02
| #38 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 149 Viren erkannt durch MBAM Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: MBAM Downloade Dir bitte  Malwarebytes Anti-Malware
2. Schritt: ESET ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte  SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
29.10.2016, 04:26
| #39 |
| | 149 Viren erkannt durch MBAMCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7740ecfc3a124547b14d4ff11a6737dc
# end=init
# utc_time=2016-10-29 12:43:39
# local_time=2016-10-29 02:43:39 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31233
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7740ecfc3a124547b14d4ff11a6737dc
# end=updated
# utc_time=2016-10-29 12:49:04
# local_time=2016-10-29 02:49:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=7740ecfc3a124547b14d4ff11a6737dc
# engine=31233
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-10-29 03:16:44
# local_time=2016-10-29 05:16:44 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 35280 9041620 0 0
# scanned=296815
# found=1
# cleaned=1
# scan_time=8859
sh=8D914C57C3C5D24CB1CE03329A860C1ECB74AE50 ft=1 fh=c3f75091d1a56ae1 vn="Variante von Win32/FusionCore.I evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\thomas hochhalter\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter.exe"
Code:
ATTFilter Results of screen317's Security Check version 1.009
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Defender
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities 2014 (de-DE)
Adobe Flash Player 23.0.0.205
Mozilla Firefox 38.0.5 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
Windows Defender MSMpEng.exe
thomas hochhalter Desktop LOGDATEIEN Antivirus Programme\SecurityCheck\SecurityCheck.exe
Malwarebytes Anti-Exploit mbae-svc.exe
Malwarebytes Anti-Exploit mbae64.exe
Windows Defender MpCmdRun.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
|
|
29.10.2016, 10:20
| #40 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 149 Viren erkannt durch MBAM 1.) Logs immer posten, keine Zusammenfassungen oder Nacherzählungen 2.) TuneUp Utilities 2014 (de-DE) umgehend deinstallieren, mit sowas schrotten sich viele regelmäßig das System 3.) Mozilla Firefox 38.0.5 ist veraltet!! Wir sind jetzt bei Firefox 49.0.2 - deinstallieren und neuen Firefox laden und installieren => https://ftp.mozilla.org/pub/firefox/...p%2049.0.2.exe
__________________ Logfiles bitte immer in CODE-Tags posten |
|
29.10.2016, 12:49
| #41 |
| | 149 Viren erkannt durch MBAM Hallo, ich kann Tune Up Utilities 2014 nicht auf meiner PC unter Programme und features finden um das zu deinstallieren....Firefox hab ich jetzt geupdated |
|
06.11.2016, 18:22
| #42 |
| | 149 Viren erkannt durch MBAM Hallo, ist mein Pc jetzt clean? MBAM suchlauf zeigt keine gefundenen Viren mehr an... |
|
06.11.2016, 19:34
| #43 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 149 Viren erkannt durch MBAM Ich warte immer noch auf das Log.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu 149 Viren erkannt durch MBAM |
| .dll, appdata, code, control, erkannt, explorer, firefox, google, icons, internet, internet explorer, logfile, malwarebytes, microsoft, mozilla, roaming, setup, software, temp, tmp, viren, virus, websites, windows, yahoo |
Linear-Darstellung
