Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Plagegeister aller Art und deren Bekämpfung: Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 3 1 23
Alt 07.12.2016, 15:37   #1
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Hallo liebe Forumer ^^
Und zwar habe ich ein kleines Problem mit einen Virus / Malware weiß ich leider nicht ^^
Also ich jetzt was vorgefallen ist.
Ich habe was runtergeladen nach öffnen dieser Datei ist meine Google Chrome Startseite umgesprungen zu dieser Trotux Suchmaschine habe mir dabei erstmal nicht weiteres gedacht aber nach und nach wurden irgendwelche Programme installiert und auf mein Desktop verknüpft habe dann über die Systemsteuerung diese Programme direkt deinstalliert nur das Trotux problem war halt noch da habe dann Malwarebytes drüberlaufen lassen und bin dann auch fündig geworden. Das selbe habe ich dann noch mit Bitdefender gemacht und auch da wurde was gefunden. Nach mehrfachen Neustarten ist meine Startseite jetzt nicht mehr Trotux sondern wieder google aber ein Problem habe ich trotzdem noch Windows Defender wird geblockt und zwar steht bei mir die App wurde durch eine Gruppenrichtlinie deaktiviert.
Habe schon versucht über dienste windows defender wieder zu starten aber leider ohne Erfolg.
Jetzt habe ich natürlich noch die bedenken das hier noch ein Virus oder Malware drauf ist.
Schonmal danke für Hilfe

Alt 07.12.2016, 15:44   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Zitat:
Ich habe was runtergeladen
Aha und was bitte aus welcher Quelle hast du da runtergeladen?
__________________

__________________
Alt 07.12.2016, 20:47   #3
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Okay die Seite weiß ich leider nicht mehr aber es sollte "eigentlich" ein Crack sein für ein Program

EDIT:
Hatte das Program zwar schonmal gekauft hatte aber leider mein Serialcode nicht mehr gefunden deshalb der Crack (nur zur Klarstellung)

Verwende sonst keine Cracks oder sowas sonst hätte ich nicht bei Steam über 300 Spiele ;D

Okay eine weitere Information. Google Chrome ist jetzt komplett ausgefallen nichts geht mehr. :/

Habe den Text
Zitat:
Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Zur Kenntniss genommen der "Crack" ist auch entfernt aber ich verwende sowas echt wirklich nicht hatte es wirklich nur gebraucht da ich das Programm schonmal gekauft hatte aber nicht mehr den dazu gehörigen Serial hatte. Ich bin eigentlich eine Person die sehr gerne für etwas Geld ausgibt soviel zu meiner Person.
__________________
Geändert von FiinxD (07.12.2016 um 16:35 Uhr)

Alt 07.12.2016, 21:33   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 07.12.2016, 21:40   #5
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Wie schon im vohrigen Post geschrieben ist der Crack jetzt unten so auch alles clean.


Alt 07.12.2016, 22:15   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Das war ein ganz formeller Hinweis...nur für den Fall, dass du hinter meinst, du wüsstest von nix oder so

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
--> Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten

Alt 07.12.2016, 22:48   #7
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Als erstes die FRST.txt
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Patrik (Administrator) auf DESKTOP-6DECSKV (07-12-2016 22:38:26)
Gestartet von D:\Benutzer\Downloads
Geladene Profile: Patrik (Verfügbare Profile: Patrik)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Vodafone) D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Vodafone) D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
() C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Vodafone) D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdwtxag.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Electronic Arts) D:\Program Files (x86)\Origin\Origin.exe
(Electronic Arts) D:\Program Files (x86)\Origin\OriginWebHelperService.exe
() D:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() D:\Program Files (x86)\Origin\QtWebEngineProcess.exe
(Electronic Arts) D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\LeagueClient.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\LeagueClientUx.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\LeagueClientUx.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\LeagueClientUx.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\WINDOWS\System32\browser_broker.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-08-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [LWS] => D:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.)
HKLM-x32\...\Run: [VmbNotifier] => D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe [1896960 2014-09-22] (Vodafone)
HKLM-x32\...\Run: [MobileBroadband] => D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [72192 2014-09-22] (Vodafone)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Run: [EADM] => D:\Program Files (x86)\Origin\Origin.exe [3044848 2016-12-07] (Electronic Arts)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [31744 2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2015-10-20]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{360a10dc-c481-43ca-8d9a-7dc93f0405ce}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3bb85df0-9a44-4b92-b927-44da1d541d67}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ca645fee-24dd-4058-9c31-1541fdeccb90}: [DhcpNameServer] 139.7.30.126 139.7.30.125
Tcpip\..\Interfaces\{dbed33e3-3e8a-4946-8739-095f72c72f60}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=620947&OCID=AVRES000
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {1768C80F-FAB6-4579-A217-CF50D7CD8492} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {5AFCA766-656C-4433-B539-7F2CBBBB43B8} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {A261FC78-95EB-4435-8BB3-F080B0CEEA8A} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {B69EC4E1-86C2-49DF-9AF9-3DD7625B1012} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2016-10-27] (Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2016-10-27] (Bitdefender)
Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2016-10-27] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2016-10-27] (Bitdefender)
Toolbar: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2016-10-27] (Bitdefender)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> hxxp://go.gmx.net/tb/ie_startpage

FireFox:
========
FF DefaultProfile: oge08t4r.default
FF ProfilePath: C:\Users\Patrik\AppData\Roaming\TomTom\HOME\Profiles\lehz977e.default [2016-12-06]
FF Extension: (Kein Name) - D:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nicht gefunden]
FF ProfilePath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default [2016-12-07]
FF NewTab: Mozilla\Firefox\Profiles\oge08t4r.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\oge08t4r.default -> Search Provided by Yahoo
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\oge08t4r.default -> Search Provided by Yahoo
FF Homepage: Mozilla\Firefox\Profiles\oge08t4r.default -> hxxps://www.malwarebytes.org/restorebrowser/_colrom_16_15&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0B0A0D0B0F0FtD0CtB0DtA0DyB0BtN0D0Tzu0StCyDyCzztN1L2XzutAtFtBtCtFtDtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyC0DyCyDyBzz0FzztGtA0FyEtAtGyE0EtDzztGyEyByD0BtG0AzyyE0EyC0EzytAyE0Czz0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0F0ByDyByByDyEtG0Azz0CtBtGyEyEzz0AtGzz0ByB0FtGtC0DtDtD0E0CzyyCtD0E0EyC2QtN0A0LzuyE%26cr%3D2140871707%26a%3Dwncy_colrom_16_15%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
FF Extension: (Kein Name) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default\Extensions\abs@avira.com [2016-12-06]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default\Extensions\ich@maltegoetz.de.xpi [2015-09-20]
FF Extension: (Adblock Plus) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff [2016-11-29]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2016-11-29] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] ()
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2204974081-1436653023-283711051-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Patrik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)

Chrome: 
=======
CHR Profile: C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default [2016-12-07]
CHR Extension: (Docs) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-07]
CHR Extension: (Bitdefender Wallet) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2016-12-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-07]
CHR Extension: (Chrome Media Router) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-07]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-06-21] (Futuremark)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5893272 2016-07-19] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-07] (Electronic Arts)
R2 Origin Web Helper Service; D:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-07] (Electronic Arts)
S2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2016-07-31] ()
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [216880 2016-10-05] (Bitdefender)
R2 VmbService; D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2014-09-22] (Vodafone) [Datei ist nicht signiert]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1307344 2016-11-08] (Bitdefender)
R2 vsservp; C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe [524872 2016-08-25] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)
S2 Chukoypahward; C:\Program Files (x86)\Grupuse\ReentykoertionUpdate.dll [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1605376 2016-09-20] (BitDefender)
R3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-09-20] (BitDefender)
R3 AWOPFilterDriver; C:\Windows\system32\drivers\AWOPFilterDriver.sys [19464 2015-08-18] ()
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23672 2016-03-14] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-24] (BitDefender LLC)
S4 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
S3 CMUSBDAC; C:\WINDOWS\system32\DRIVERS\CMUSBDAC.sys [3778592 2015-11-25] (C-MEDIA)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2015-08-19] (Disc Soft Ltd)
S3 EagleX64; C:\Windows\system32\drivers\EagleX64.sys [140600 2015-08-30] (AhnLab, Inc.)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-10-29] (BitDefender LLC)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [3870464 2015-10-01] (Realtek Semiconductor Corporation                           )
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [40568 2015-10-02] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [51400 2016-05-27] (SteelSeries ApS)
S3 tap0901_openvpn_accl; C:\WINDOWS\System32\drivers\tap0901_openvpn_accl.sys [37912 2016-03-15] (The OpenVPN Project)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-03-10] (BitDefender S.R.L.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-07 22:38 - 2016-12-07 22:38 - 00000000 ____D C:\FRST
2016-12-07 20:23 - 2016-12-07 20:23 - 00000000 ___HD C:\$SysReset
2016-12-07 17:47 - 2016-12-07 17:47 - 00300840 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2016-12-07 17:21 - 2016-12-07 17:23 - 00000000 ____D C:\AdwCleaner
2016-12-07 16:25 - 2016-12-07 16:25 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-06 23:16 - 2016-12-06 23:16 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2016-12-06 22:50 - 2016-12-06 22:50 - 00000000 ____D C:\Users\Patrik\AppData\Local\AviraSpeedup
2016-12-06 22:50 - 2016-12-06 22:50 - 00000000 ____D C:\Users\Patrik\AppData\Local\Avira
2016-12-06 22:36 - 2016-12-06 22:36 - 00000000 ____D C:\Users\Patrik\AppData\Temp
2016-12-06 22:34 - 2016-12-07 20:24 - 00003139 _____ C:\bdlog.txt
2016-12-06 22:33 - 2016-12-07 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2017
2016-12-06 22:33 - 2016-12-06 22:34 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Bitdefender
2016-12-06 22:33 - 2016-12-06 22:33 - 00349001 _____ C:\ProgramData\cl.1481059961.bdinstall.bin
2016-12-06 22:33 - 2016-12-06 22:33 - 00000684 ____H C:\bdr-cf01
2016-12-06 22:33 - 2016-12-06 22:33 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2016-12-06 22:33 - 2016-12-06 22:33 - 00000000 ____D C:\ProgramData\BDLogging
2016-12-06 22:33 - 2016-09-20 04:17 - 01605376 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2016-12-06 22:33 - 2016-09-20 04:16 - 00878072 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2016-12-06 22:33 - 2016-03-14 22:04 - 00023672 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2016-12-06 22:33 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2016-12-06 22:33 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2016-12-06 22:32 - 2016-12-06 22:32 - 00028796 _____ C:\ProgramData\agent.1481059946.bdinstall.bin
2016-12-06 22:27 - 2016-12-06 22:27 - 00028520 _____ C:\ProgramData\agent.1481059619.bdinstall.bin
2016-12-06 22:19 - 2016-12-06 22:33 - 00253404 ____H C:\bdr-ld01
2016-12-06 22:19 - 2016-12-06 22:33 - 00009216 ____H C:\bdr-ld01.mbr
2016-12-06 22:19 - 2016-10-18 11:51 - 49758588 ____H C:\bdr-im01.gz
2016-12-06 22:19 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01
2016-12-06 22:16 - 2016-12-07 17:49 - 00000000 ____D C:\ProgramData\Bitdefender
2016-12-06 22:16 - 2016-12-06 22:16 - 00000000 ____D C:\Program Files\Bitdefender
2016-12-06 22:16 - 2016-10-29 08:54 - 00182944 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2016-12-06 22:16 - 2016-03-10 06:41 - 00520032 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2016-12-06 22:15 - 2016-12-06 22:16 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-12-06 22:15 - 2016-12-06 22:15 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\QuickScan
2016-12-06 21:35 - 2016-12-06 21:35 - 00003794 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2016-12-06 21:33 - 2016-12-07 22:34 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-12-06 21:33 - 2016-12-06 21:33 - 00046885 _____ C:\ProgramData\agent.1481056395.bdinstall.bin
2016-12-06 21:33 - 2016-12-06 21:33 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-12-06 21:11 - 2016-12-06 21:11 - 00000306 __RSH C:\Users\Patrik\ntuser.pol
2016-12-06 21:04 - 2016-12-06 21:04 - 00003506 _____ C:\WINDOWS\System32\Tasks\SRT
2016-12-06 21:04 - 2016-12-06 21:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sstmp
2016-12-06 21:04 - 2016-12-06 21:04 - 00000000 ____D C:\WINDOWS\system32\sstmp
2016-12-06 21:00 - 2016-12-06 21:22 - 00000000 ____D C:\Program Files\HBIGY1OL8V
2016-12-06 20:59 - 2016-12-06 20:59 - 00016838 _____ C:\WINDOWS\System32\Tasks\919z23577t565
2016-12-06 20:59 - 2016-12-06 20:59 - 00000000 ___HD C:\ProgramData\919z23577t565
2016-12-06 20:59 - 2016-12-06 20:59 - 00000000 ____D C:\ProgramData\dbg
2016-12-06 20:57 - 2016-12-06 21:22 - 00000000 ____D C:\Program Files\VUK9J5T6IB
2016-12-06 20:56 - 2016-12-06 23:30 - 00000000 ____D C:\ProgramData\Avira
2016-12-06 20:56 - 2016-12-06 21:22 - 00000000 ____D C:\Program Files (x86)\Grupuse
2016-12-06 20:56 - 2016-12-06 21:11 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Rafage
2016-12-06 20:56 - 2016-12-06 20:56 - 00003654 _____ C:\WINDOWS\System32\Tasks\f6a63bbfe553147895993c7e8697a131
2016-12-06 20:56 - 2016-12-06 20:56 - 00000000 ____D C:\Users\Patrik\AppData\Local\Graserph
2016-12-06 20:56 - 2016-12-06 20:56 - 00000000 ____D C:\ProgramData\Avg
2016-12-06 20:56 - 2016-12-06 20:56 - 00000000 ____D C:\ProgramData\AVAST Software
2016-12-06 20:54 - 2016-12-06 20:54 - 00016830 _____ C:\WINDOWS\System32\Tasks\74159a2475b32161
2016-12-06 18:49 - 2016-12-07 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-12-06 18:49 - 2016-12-06 18:49 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-12-06 18:23 - 2016-10-25 08:30 - 02938920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-12-06 18:23 - 2016-10-25 06:48 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2016-12-06 18:23 - 2016-10-25 06:45 - 00564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2016-12-06 18:23 - 2016-10-25 06:23 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-12-06 18:23 - 2016-10-25 06:00 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-12-06 18:23 - 2016-10-25 05:54 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-12-06 18:23 - 2016-10-25 05:43 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-12-06 18:22 - 2016-12-06 21:08 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-12-06 18:22 - 2016-11-02 16:12 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-12-06 18:22 - 2016-11-02 16:08 - 00636296 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-12-06 18:22 - 2016-11-02 15:25 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-12-06 18:22 - 2016-11-02 14:32 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-12-06 18:22 - 2016-11-02 14:31 - 00546968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-12-06 18:22 - 2016-11-02 13:51 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-12-06 18:22 - 2016-10-25 10:44 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-12-06 18:22 - 2016-10-25 10:44 - 00875480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 07468384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-12-06 18:22 - 2016-10-25 10:42 - 01142560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 01098648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 00125280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2016-12-06 18:22 - 2016-10-25 10:42 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2016-12-06 18:22 - 2016-10-25 10:41 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-12-06 18:22 - 2016-10-25 10:40 - 00384864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-12-06 18:22 - 2016-10-25 10:39 - 01238584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2016-12-06 18:22 - 2016-10-25 10:39 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-12-06 18:22 - 2016-10-25 10:34 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2016-12-06 18:22 - 2016-10-25 10:26 - 00528736 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2016-12-06 18:22 - 2016-10-25 10:25 - 01637216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-12-06 18:22 - 2016-10-25 10:24 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-12-06 18:22 - 2016-10-25 10:19 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-12-06 18:22 - 2016-10-25 10:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-12-06 18:22 - 2016-10-25 09:51 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-12-06 18:22 - 2016-10-25 09:50 - 00439136 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2016-12-06 18:22 - 2016-10-25 09:49 - 00588328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmdev.dll
2016-12-06 18:22 - 2016-10-25 09:49 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01554152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01552104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01017024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 00847648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-12-06 18:22 - 2016-10-25 09:42 - 02607336 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-12-06 18:22 - 2016-10-25 09:42 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-12-06 18:22 - 2016-10-25 09:42 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-12-06 18:22 - 2016-10-25 09:41 - 03694088 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-12-06 18:22 - 2016-10-25 09:39 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-12-06 18:22 - 2016-10-25 09:39 - 00730352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-12-06 18:22 - 2016-10-25 09:39 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-12-06 18:22 - 2016-10-25 09:38 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-12-06 18:22 - 2016-10-25 09:38 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-12-06 18:22 - 2016-10-25 09:38 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-12-06 18:22 - 2016-10-25 09:37 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-12-06 18:22 - 2016-10-25 09:37 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-12-06 18:22 - 2016-10-25 09:37 - 01603224 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2016-12-06 18:22 - 2016-10-25 09:37 - 01040792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-12-06 18:22 - 2016-10-25 09:37 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-12-06 18:22 - 2016-10-25 09:36 - 01540216 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-12-06 18:22 - 2016-10-25 09:36 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-12-06 18:22 - 2016-10-25 09:35 - 06536248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-12-06 18:22 - 2016-10-25 09:34 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-12-06 18:22 - 2016-10-25 09:34 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-12-06 18:22 - 2016-10-25 09:34 - 00106928 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2016-12-06 18:22 - 2016-10-25 09:33 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 01862000 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 00845568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2016-12-06 18:22 - 2016-10-25 09:30 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-12-06 18:22 - 2016-10-25 09:30 - 00360288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-12-06 18:22 - 2016-10-25 09:28 - 01083648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2016-12-06 18:22 - 2016-10-25 09:05 - 00712032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-12-06 18:22 - 2016-10-25 09:03 - 02549456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-12-06 18:22 - 2016-10-25 09:03 - 01988440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-12-06 18:22 - 2016-10-25 09:02 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-12-06 18:22 - 2016-10-25 09:02 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-12-06 18:22 - 2016-10-25 09:01 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-06 18:22 - 2016-10-25 09:01 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-12-06 18:22 - 2016-10-25 09:01 - 00324448 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-12-06 18:22 - 2016-10-25 08:47 - 28851216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-12-06 18:22 - 2016-10-25 08:47 - 02641928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2016-12-06 18:22 - 2016-10-25 08:47 - 00305808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2016-12-06 18:22 - 2016-10-25 08:46 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-12-06 18:22 - 2016-10-25 08:46 - 00376528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-12-06 18:22 - 2016-10-25 08:45 - 00503600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2016-12-06 18:22 - 2016-10-25 08:45 - 00032096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2016-12-06 18:22 - 2016-10-25 08:40 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-12-06 18:22 - 2016-10-25 08:40 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-12-06 18:22 - 2016-10-25 08:39 - 00306840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 01349632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-12-06 18:22 - 2016-10-25 08:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-12-06 18:22 - 2016-10-25 08:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\genericusbfn.sys
2016-12-06 18:22 - 2016-10-25 08:32 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-12-06 18:22 - 2016-10-25 08:32 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 01824272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-12-06 18:22 - 2016-10-25 08:30 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-12-06 18:22 - 2016-10-25 08:30 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2016-12-06 18:22 - 2016-10-25 08:30 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-12-06 18:22 - 2016-10-25 08:29 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-12-06 18:22 - 2016-10-25 08:27 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-12-06 18:22 - 2016-10-25 08:27 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-12-06 18:22 - 2016-10-25 08:27 - 00256704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-12-06 18:22 - 2016-10-25 08:26 - 05240952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-12-06 18:22 - 2016-10-25 08:26 - 01355344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 00836752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 00569752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-12-06 18:22 - 2016-10-25 08:24 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-12-06 18:22 - 2016-10-25 08:23 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-12-06 18:22 - 2016-10-25 08:22 - 00268040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-12-06 18:22 - 2016-10-25 08:22 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2016-12-06 18:22 - 2016-10-25 08:21 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-12-06 18:22 - 2016-10-25 08:21 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-12-06 18:22 - 2016-10-25 08:20 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-12-06 18:22 - 2016-10-25 08:19 - 00295776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-12-06 18:22 - 2016-10-25 08:19 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2016-12-06 18:22 - 2016-10-25 08:18 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-12-06 18:22 - 2016-10-25 08:18 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-12-06 18:22 - 2016-10-25 08:16 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-12-06 18:22 - 2016-10-25 08:14 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-12-06 18:22 - 2016-10-25 08:13 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2016-12-06 18:22 - 2016-10-25 08:13 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-12-06 18:22 - 2016-10-25 08:13 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2016-12-06 18:22 - 2016-10-25 08:12 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSMDesktopProvider.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2016-12-06 18:22 - 2016-10-25 08:10 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-12-06 18:22 - 2016-10-25 08:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2016-12-06 18:22 - 2016-10-25 08:10 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2016-12-06 18:22 - 2016-10-25 08:10 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2016-12-06 18:22 - 2016-10-25 08:09 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2016-12-06 18:22 - 2016-10-25 08:08 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
2016-12-06 18:22 - 2016-10-25 08:06 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-12-06 18:22 - 2016-10-25 08:06 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceConnectApi.dll
2016-12-06 18:22 - 2016-10-25 08:05 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-12-06 18:22 - 2016-10-25 08:05 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-12-06 18:22 - 2016-10-25 08:04 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-12-06 18:22 - 2016-10-25 08:02 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-12-06 18:22 - 2016-10-25 08:02 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-12-06 18:22 - 2016-10-25 08:02 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-12-06 18:22 - 2016-10-25 08:00 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-12-06 18:22 - 2016-10-25 07:59 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2016-12-06 18:22 - 2016-10-25 07:58 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2016-12-06 18:22 - 2016-10-25 07:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-06 18:22 - 2016-10-25 07:58 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2016-12-06 18:22 - 2016-10-25 07:57 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-12-06 18:22 - 2016-10-25 07:57 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 02195640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3ui.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00317952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe
2016-12-06 18:22 - 2016-10-25 07:56 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2016-12-06 18:22 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 01522160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 00752128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 00273760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00577536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack_win.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe
2016-12-06 18:22 - 2016-10-25 07:51 - 00715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-12-06 18:22 - 2016-10-25 07:51 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneOm.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-12-06 18:22 - 2016-10-25 07:49 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-12-06 18:22 - 2016-10-25 07:49 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2016-12-06 18:22 - 2016-10-25 07:49 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2016-12-06 18:22 - 2016-10-25 07:48 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll
2016-12-06 18:22 - 2016-10-25 07:48 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2016-12-06 18:22 - 2016-10-25 07:46 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2016-12-06 18:22 - 2016-10-25 07:46 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-12-06 18:22 - 2016-10-25 07:46 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-12-06 18:22 - 2016-10-25 07:45 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-12-06 18:22 - 2016-10-25 07:44 - 01479168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2016-12-06 18:22 - 2016-10-25 07:44 - 00602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2016-12-06 18:22 - 2016-10-25 07:43 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-12-06 18:22 - 2016-10-25 07:43 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-12-06 18:22 - 2016-10-25 07:43 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe
2016-12-06 18:22 - 2016-10-25 07:43 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-06 18:22 - 2016-10-25 07:42 - 01813504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-12-06 18:22 - 2016-10-25 07:42 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2016-12-06 18:22 - 2016-10-25 07:42 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-12-06 18:22 - 2016-10-25 07:42 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 02331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2016-12-06 18:22 - 2016-10-25 07:40 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 02088960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2016-12-06 18:22 - 2016-10-25 07:36 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-12-06 18:22 - 2016-10-25 07:36 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-12-06 18:22 - 2016-10-25 07:36 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 01434112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 01132544 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 07:34 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-12-06 18:22 - 2016-10-25 07:34 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-12-06 18:22 - 2016-10-25 07:34 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-12-06 18:22 - 2016-10-25 07:33 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-12-06 18:22 - 2016-10-25 07:33 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-12-06 18:22 - 2016-10-25 07:33 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-12-06 18:22 - 2016-10-25 07:33 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2016-12-06 18:22 - 2016-10-25 07:32 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-12-06 18:22 - 2016-10-25 07:32 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 01037824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2016-12-06 18:22 - 2016-10-25 07:30 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-12-06 18:22 - 2016-10-25 07:30 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-12-06 18:22 - 2016-10-25 07:29 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-12-06 18:22 - 2016-10-25 07:29 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-12-06 18:22 - 2016-10-25 07:29 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-12-06 18:22 - 2016-10-25 07:29 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-12-06 18:22 - 2016-10-25 07:28 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-12-06 18:22 - 2016-10-25 07:28 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 02731008 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 01466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pimstore.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-12-06 18:22 - 2016-10-25 07:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-12-06 18:22 - 2016-10-25 07:26 - 02103296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-12-06 18:22 - 2016-10-25 07:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-12-06 18:22 - 2016-10-25 07:25 - 01872896 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2016-12-06 18:22 - 2016-10-25 07:25 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-12-06 18:22 - 2016-10-25 07:25 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2016-12-06 18:22 - 2016-10-25 07:24 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-12-06 18:22 - 2016-10-25 07:24 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-12-06 18:22 - 2016-10-25 07:24 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2016-12-06 18:22 - 2016-10-25 07:23 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-12-06 18:22 - 2016-10-25 07:23 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 07:22 - 01424384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2016-12-06 18:22 - 2016-10-25 07:22 - 00638976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-12-06 18:22 - 2016-10-25 07:22 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2016-12-06 18:22 - 2016-10-25 07:21 - 02054144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-12-06 18:22 - 2016-10-25 07:21 - 01570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2016-12-06 18:22 - 2016-10-25 07:21 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2016-12-06 18:22 - 2016-10-25 07:21 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-12-06 18:22 - 2016-10-25 07:21 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-12-06 18:22 - 2016-10-25 07:20 - 03549696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-12-06 18:22 - 2016-10-25 07:19 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-12-06 18:22 - 2016-10-25 07:18 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-12-06 18:22 - 2016-10-25 07:17 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-12-06 18:22 - 2016-10-25 07:16 - 03415040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-12-06 18:22 - 2016-10-25 07:16 - 01965568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2016-12-06 18:22 - 2016-10-25 07:16 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-12-06 18:22 - 2016-10-25 07:12 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-12-06 18:22 - 2016-10-25 07:11 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2016-12-06 18:22 - 2016-10-25 07:09 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-12-06 18:22 - 2016-10-25 07:09 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-12-06 18:22 - 2016-10-25 07:08 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-12-06 18:22 - 2016-10-25 07:07 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-06 18:22 - 2016-10-25 07:06 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-12-06 18:22 - 2016-10-25 07:05 - 03587584 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-12-06 18:22 - 2016-10-25 07:05 - 02610176 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-12-06 18:22 - 2016-10-25 07:05 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2016-12-06 18:22 - 2016-10-25 07:05 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\StikyNot.exe
2016-12-06 18:22 - 2016-10-25 07:05 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 06675968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-12-06 18:22 - 2016-10-25 07:03 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SCardDlg.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 01755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 01121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSMDesktopProvider.dll
2016-12-06 18:22 - 2016-10-25 07:00 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-12-06 18:22 - 2016-10-25 07:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceClassExtension.dll
2016-12-06 18:22 - 2016-10-25 07:00 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2016-12-06 18:22 - 2016-10-25 06:59 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-12-06 18:22 - 2016-10-25 06:59 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2016-12-06 18:22 - 2016-10-25 06:57 - 02285568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2016-12-06 18:22 - 2016-10-25 06:56 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceConnectApi.dll
2016-12-06 18:22 - 2016-10-25 06:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2016-12-06 18:22 - 2016-10-25 06:53 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-12-06 18:22 - 2016-10-25 06:53 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-12-06 18:22 - 2016-10-25 06:52 - 04170240 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2016-12-06 18:22 - 2016-10-25 06:52 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-12-06 18:22 - 2016-10-25 06:52 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-12-06 18:22 - 2016-10-25 06:51 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-12-06 18:22 - 2016-10-25 06:51 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 02874880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2016-12-06 18:22 - 2016-10-25 06:50 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 03081216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 01997312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3ui.dll
2016-12-06 18:22 - 2016-10-25 06:48 - 04826624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-12-06 18:22 - 2016-10-25 06:48 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-12-06 18:22 - 2016-10-25 06:47 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-12-06 18:22 - 2016-10-25 06:46 - 02055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2016-12-06 18:22 - 2016-10-25 06:46 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnfldr.dll
2016-12-06 18:22 - 2016-10-25 06:46 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-12-06 18:22 - 2016-10-25 06:45 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-12-06 18:22 - 2016-10-25 06:45 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-12-06 18:22 - 2016-10-25 06:45 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-12-06 18:22 - 2016-10-25 06:45 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneOm.dll
2016-12-06 18:22 - 2016-10-25 06:44 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-12-06 18:22 - 2016-10-25 06:43 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-12-06 18:22 - 2016-10-25 06:43 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceApi.dll
2016-12-06 18:22 - 2016-10-25 06:43 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\filemgmt.dll
2016-12-06 18:22 - 2016-10-25 06:42 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2016-12-06 18:22 - 2016-10-25 06:42 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2016-12-06 18:22 - 2016-10-25 06:41 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-12-06 18:22 - 2016-10-25 06:41 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-12-06 18:22 - 2016-10-25 06:41 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-12-06 18:22 - 2016-10-25 06:40 - 01336832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2016-12-06 18:22 - 2016-10-25 06:40 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-12-06 18:22 - 2016-10-25 06:39 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-12-06 18:22 - 2016-10-25 06:39 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-12-06 18:22 - 2016-10-25 06:39 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe
2016-12-06 18:22 - 2016-10-25 06:39 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-06 18:22 - 2016-10-25 06:38 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 04143104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 04646400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-12-06 18:22 - 2016-10-25 06:36 - 00879616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 02902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmsdk.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-12-06 18:22 - 2016-10-25 06:33 - 01063936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-12-06 18:22 - 2016-10-25 06:33 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-12-06 18:22 - 2016-10-25 06:32 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-12-06 18:22 - 2016-10-25 06:32 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-12-06 18:22 - 2016-10-25 06:32 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2016-12-06 18:22 - 2016-10-25 06:32 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2016-12-06 18:22 - 2016-10-25 06:32 - 00645632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2016-12-06 18:22 - 2016-10-25 06:31 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-12-06 18:22 - 2016-10-25 06:30 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-12-06 18:22 - 2016-10-25 06:30 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-12-06 18:22 - 2016-10-25 06:29 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-12-06 18:22 - 2016-10-25 06:29 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-12-06 18:22 - 2016-10-25 06:29 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 02578432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 01186816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00885248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-12-06 18:22 - 2016-10-25 06:27 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-12-06 18:22 - 2016-10-25 06:27 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-12-06 18:22 - 2016-10-25 06:26 - 02563584 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-12-06 18:22 - 2016-10-25 06:26 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-12-06 18:22 - 2016-10-25 06:24 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-12-06 18:22 - 2016-10-25 06:24 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2016-12-06 18:22 - 2016-10-25 06:23 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-12-06 18:22 - 2016-10-25 06:23 - 00964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-12-06 18:22 - 2016-10-25 06:22 - 01562624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2016-12-06 18:22 - 2016-10-25 06:21 - 03577344 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-12-06 18:22 - 2016-10-25 06:21 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-12-06 18:22 - 2016-10-25 06:20 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-12-06 18:22 - 2016-10-25 06:19 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-12-06 18:22 - 2016-10-25 06:17 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-12-06 18:22 - 2016-10-25 06:17 - 00581632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2016-12-06 18:22 - 2016-10-25 06:14 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-12-06 18:22 - 2016-10-25 06:14 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-12-06 18:22 - 2016-10-25 06:14 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-12-06 18:22 - 2016-10-25 06:13 - 22375936 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-12-06 18:22 - 2016-10-25 06:13 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-12-06 18:22 - 2016-10-25 06:12 - 11544576 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-12-06 18:22 - 2016-10-25 06:11 - 06471168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-12-06 18:22 - 2016-10-25 06:11 - 04078592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-12-06 18:22 - 2016-10-25 06:11 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-12-06 18:22 - 2016-10-25 06:10 - 01568256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-12-06 18:22 - 2016-10-25 06:10 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2016-12-06 18:22 - 2016-10-25 06:09 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2016-12-06 18:22 - 2016-10-25 06:09 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-12-06 18:22 - 2016-10-25 06:07 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-12-06 18:22 - 2016-10-25 06:04 - 00835072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2016-12-06 18:22 - 2016-10-25 06:03 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-12-06 18:22 - 2016-10-25 06:03 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 24610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 06976512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 03459584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2016-12-06 18:22 - 2016-10-25 06:01 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-12-06 18:22 - 2016-10-25 06:01 - 02361856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 02555904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 05:59 - 14258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-12-06 18:22 - 2016-10-25 05:59 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-12-06 18:22 - 2016-10-25 05:59 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2016-12-06 18:22 - 2016-10-25 05:58 - 09920512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-12-06 18:22 - 2016-10-25 05:58 - 07536128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-12-06 18:22 - 2016-10-25 05:57 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-12-06 18:22 - 2016-10-25 05:56 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 02217984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnfldr.dll
2016-12-06 18:22 - 2016-10-25 05:53 - 03294208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-12-06 18:22 - 2016-10-25 05:53 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-12-06 18:22 - 2016-10-25 05:53 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2016-12-06 18:22 - 2016-10-25 05:52 - 03555840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-12-06 18:22 - 2016-10-25 05:52 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-12-06 18:22 - 2016-10-25 05:51 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2016-12-06 18:22 - 2016-10-25 05:50 - 01487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-12-06 18:22 - 2016-10-25 05:48 - 07838208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-12-06 18:22 - 2016-10-25 05:48 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-12-06 18:22 - 2016-10-25 05:47 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-12-06 18:22 - 2016-10-25 05:46 - 02771968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-12-06 18:22 - 2016-10-25 05:45 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-12-06 18:22 - 2016-10-25 05:45 - 02679808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 19348480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 12134400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-12-06 18:22 - 2016-10-25 05:43 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-12-06 18:22 - 2016-10-25 05:43 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2016-12-06 18:22 - 2016-10-25 05:41 - 02519552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-12-06 18:22 - 2016-10-25 05:40 - 05325824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-12-06 18:22 - 2016-10-25 05:38 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-12-06 18:22 - 2016-10-25 05:37 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-12-06 18:22 - 2016-10-25 05:36 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-12-06 18:22 - 2016-10-25 05:35 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-12-06 18:22 - 2016-10-25 05:35 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2016-12-06 18:22 - 2016-10-25 05:34 - 02062336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-12-06 18:22 - 2016-10-25 05:34 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-12-06 18:22 - 2016-10-25 05:34 - 01228800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-12-06 18:22 - 2016-10-25 05:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-12-06 18:22 - 2016-10-25 05:32 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-12-06 18:22 - 2016-10-25 05:32 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2016-12-06 18:22 - 2016-10-25 05:32 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-12-06 18:22 - 2016-10-25 05:30 - 12590080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-12-06 18:22 - 2016-10-25 05:29 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2016-12-06 18:22 - 2016-10-25 05:27 - 03065344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-12-06 18:22 - 2016-10-25 05:26 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-12-06 18:22 - 2016-10-25 05:23 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-12-06 18:22 - 2016-10-25 05:21 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2016-12-06 18:22 - 2016-10-25 05:07 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-12-06 18:22 - 2016-10-25 03:19 - 00775336 _____ C:\WINDOWS\SysWOW64\locale.nls
2016-12-06 18:22 - 2016-10-25 03:19 - 00775336 _____ C:\WINDOWS\system32\locale.nls
2016-12-06 18:22 - 2016-10-25 02:47 - 00445873 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-12-06 18:22 - 2016-09-07 06:22 - 00604920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-12-05 18:11 - 2016-11-17 14:45 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-12-05 18:11 - 2016-11-17 14:45 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-12-04 21:09 - 2016-12-04 21:09 - 00007102 _____ C:\Users\Patrik\AppData\Local\recently-used.xbel
2016-11-20 12:14 - 2016-11-20 12:14 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Frontier Developments
2016-11-20 12:14 - 2016-11-20 12:14 - 00000000 ____D C:\Users\Patrik\AppData\Local\Frontier Developments
2016-11-07 21:13 - 2016-11-07 21:13 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Screaming Bee
2016-11-07 21:12 - 2016-11-07 21:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-07 22:38 - 2016-04-15 11:15 - 00000306 _____ C:\WINDOWS\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685}.job
2016-12-07 22:37 - 2015-11-05 15:33 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Origin
2016-12-07 22:15 - 2015-11-03 22:44 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-07 22:15 - 2015-11-03 22:44 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-07 21:37 - 2015-11-05 14:59 - 00000000 ____D C:\ProgramData\Origin
2016-12-07 21:34 - 2015-12-23 18:00 - 00000000 ____D C:\Users\Patrik\AppData\Local\CrashDumps
2016-12-07 20:34 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-12-07 20:33 - 2015-10-30 19:35 - 00775524 _____ C:\WINDOWS\system32\perfh007.dat
2016-12-07 20:33 - 2015-10-30 19:35 - 00155338 _____ C:\WINDOWS\system32\perfc007.dat
2016-12-07 20:33 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-12-07 20:33 - 2015-08-18 17:27 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-07 20:32 - 2016-01-30 18:30 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-07 20:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-07 20:30 - 2016-07-17 00:55 - 00000000 ___HD C:\$WINDOWS.~BT
2016-12-07 20:30 - 2016-01-30 18:30 - 00000000 ____D C:\Users\Patrik
2016-12-07 20:29 - 2016-01-30 18:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-07 20:26 - 2016-10-19 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2016-12-07 20:26 - 2016-10-16 04:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PVZ Garden Warfare
2016-12-07 20:26 - 2016-09-22 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-12-07 20:26 - 2016-09-22 11:10 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-12-07 20:26 - 2016-09-20 16:07 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
2016-12-07 20:26 - 2016-09-18 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2
2016-12-07 20:26 - 2016-09-18 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2016-12-07 20:26 - 2016-08-09 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™
2016-12-07 20:26 - 2016-06-21 19:17 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2016-12-07 20:26 - 2016-05-05 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-12-07 20:26 - 2016-05-05 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-07 20:26 - 2016-05-01 23:44 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium
2016-12-07 20:26 - 2016-04-17 07:25 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyVPN
2016-12-07 20:26 - 2016-04-12 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\skate's Thumbnail Tool
2016-12-07 20:26 - 2016-03-24 23:07 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maniac Mansion Deluxe
2016-12-07 20:26 - 2016-01-30 18:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-07 20:26 - 2016-01-30 18:29 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-07 20:26 - 2016-01-30 18:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-07 20:26 - 2015-11-16 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2016-12-07 20:26 - 2015-11-05 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 16
2016-12-07 20:26 - 2015-11-05 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-12-07 20:26 - 2015-10-22 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4
2016-12-07 20:26 - 2015-09-27 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-12-07 20:26 - 2015-09-08 23:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vodafone
2016-12-07 20:26 - 2015-08-20 11:40 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-07 20:26 - 2015-08-20 11:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-07 20:26 - 2015-08-19 19:25 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2016-12-07 20:26 - 2015-08-19 19:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2016-12-07 20:26 - 2015-08-19 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-12-07 20:26 - 2015-08-18 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-12-07 20:26 - 2015-08-18 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-12-07 20:26 - 2015-08-18 17:22 - 00000000 ____D C:\Users\Patrik\AppData\Local\TileDataLayer
2016-12-07 20:26 - 2015-07-10 12:04 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-12-07 20:21 - 2015-08-18 17:24 - 00002386 _____ C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-07 20:21 - 2015-08-18 17:24 - 00000000 ___RD C:\Users\Patrik\OneDrive
2016-12-07 20:01 - 2016-04-15 11:15 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-12-07 19:59 - 2016-01-30 18:34 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-12-07 19:58 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-12-07 19:42 - 2016-01-30 18:28 - 00000000 ___DC C:\WINDOWS\Panther
2016-12-07 19:42 - 2015-08-18 18:13 - 00008192 __RSH C:\BOOTSECT.BAK
2016-12-07 19:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-12-07 19:39 - 2016-01-30 18:19 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2016-12-07 19:39 - 2016-01-30 18:19 - 00011433 _____ C:\WINDOWS\diagerr.xml
2016-12-07 19:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-07 19:22 - 2016-10-19 16:38 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\obs-studio
2016-12-07 17:30 - 2016-01-30 18:29 - 00203456 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-12-07 17:13 - 2016-05-05 17:15 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-07 16:25 - 2015-11-03 22:44 - 00000000 ____D C:\Users\Patrik\AppData\Local\Google
2016-12-07 16:25 - 2015-11-03 22:44 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-06 23:37 - 2015-08-19 18:58 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\DAEMON Tools Lite
2016-12-06 23:28 - 2015-08-23 18:36 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-06 22:56 - 2016-02-28 17:51 - 00000000 ____D C:\Users\Patrik\AppData\Local\Warframe
2016-12-06 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-12-06 21:22 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DesktopTileResources
2016-12-06 21:20 - 2016-03-13 21:08 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-06 21:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Web
2016-12-06 21:01 - 2016-09-16 19:34 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-12-06 20:56 - 2016-09-20 10:59 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2016-12-06 20:56 - 2016-07-16 22:00 - 00000000 ____D C:\Program Files (x86)\Futuremark
2016-12-06 20:56 - 2016-06-21 19:17 - 00000000 ____D C:\Program Files (x86)\GPU-Z
2016-12-06 20:56 - 2016-04-15 17:09 - 00000000 ____D C:\Program Files (x86)\TomTom International B.V
2016-12-06 20:56 - 2016-04-12 16:45 - 00000000 ____D C:\Program Files (x86)\skate's Thumbnail Tool
2016-12-06 20:56 - 2016-03-29 19:35 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2016-12-06 20:56 - 2016-03-24 23:06 - 00000000 ____D C:\Program Files (x86)\LucasFan Games
2016-12-06 20:56 - 2016-03-20 12:06 - 00000000 ____D C:\Program Files (x86)\OpenAL
2016-12-06 20:56 - 2016-01-30 18:25 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-12-06 20:56 - 2016-01-30 18:25 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-06 20:56 - 2016-01-28 20:20 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-06 20:56 - 2015-12-22 20:25 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-12-06 20:56 - 2015-11-21 12:13 - 00000000 ____D C:\Program Files (x86)\OBS
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-12-06 20:56 - 2015-09-10 19:33 - 00000000 ____D C:\Program Files (x86)\AMD
2016-12-06 20:56 - 2015-09-10 19:21 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-12-06 20:56 - 2015-08-23 18:36 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-12-06 20:56 - 2015-08-19 19:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2016-12-06 20:56 - 2015-08-18 20:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-06 20:56 - 2015-08-18 20:16 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-12-06 20:56 - 2015-08-18 18:32 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-06 20:17 - 2015-08-18 17:22 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-06 18:29 - 2015-08-26 11:04 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-12-06 18:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-12-06 18:26 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-06 18:26 - 2015-08-26 11:04 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-12-05 22:35 - 2016-01-30 18:54 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-12-05 18:12 - 2016-10-15 18:25 - 00003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00004004 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003976 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003914 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003752 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003710 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-04 23:18 - 2015-08-23 18:36 - 00000000 ____D C:\Users\Patrik\AppData\Local\Ubisoft Game Launcher
2016-12-04 21:09 - 2016-10-04 17:47 - 00000000 ____D C:\Users\Patrik\AppData\Local\gtk-2.0
2016-12-04 21:09 - 2016-10-04 16:51 - 00000000 ____D C:\Users\Patrik\.gimp-2.8
2016-11-29 13:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\ELAMBKUP
2016-11-28 11:19 - 2016-08-31 18:17 - 00000000 ____D C:\Users\Patrik\AppData\Local\BANDAI NAMCO Games
2016-11-27 21:58 - 2015-11-16 23:53 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\TS3Client
2016-11-17 14:45 - 2016-10-15 18:25 - 01854400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 01452480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-11-17 14:45 - 2015-09-22 21:46 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-11-16 17:42 - 2016-10-15 18:25 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2016-11-08 20:08 - 2015-12-22 20:25 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Audacity

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-04-15 12:15 - 2016-06-17 17:40 - 0000235 _____ () C:\Users\Patrik\AppData\Roaming\WB.CFG
2016-12-04 21:09 - 2016-12-04 21:09 - 0007102 _____ () C:\Users\Patrik\AppData\Local\recently-used.xbel
2015-10-11 18:55 - 2016-08-12 17:10 - 0007597 _____ () C:\Users\Patrik\AppData\Local\Resmon.ResmonCfg
2015-12-04 17:09 - 2015-12-04 17:09 - 0000000 _____ () C:\Users\Patrik\AppData\Local\{803477A5-35DF-4B63-A7CB-4A0E432D54B0}
2015-12-09 15:23 - 2015-12-09 15:23 - 0000000 _____ () C:\Users\Patrik\AppData\Local\{F947399A-B867-4A87-9355-08F125A047EE}
2016-12-06 21:33 - 2016-12-06 21:33 - 0046885 _____ () C:\ProgramData\agent.1481056395.bdinstall.bin
2016-12-06 22:27 - 2016-12-06 22:27 - 0028520 _____ () C:\ProgramData\agent.1481059619.bdinstall.bin
2016-12-06 22:32 - 2016-12-06 22:32 - 0028796 _____ () C:\ProgramData\agent.1481059946.bdinstall.bin
2016-12-06 22:33 - 2016-12-06 22:33 - 0349001 _____ () C:\ProgramData\cl.1481059961.bdinstall.bin

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685}.job


Einige Dateien in TEMP:
====================
C:\Users\Patrik\AppData\Local\Temp\libeay32.dll
C:\Users\Patrik\AppData\Local\Temp\msvcr120.dll
C:\Users\Patrik\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-03 18:59

==================== Ende von FRST.txt ============================

Alt 07.12.2016, 22:49   #8
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


und die Addition.txt
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Patrik (07-12-2016 22:38:58)
Gestartet von D:\Benutzer\Downloads
Windows 10 Home Version 1511 (X64) (2016-01-30 17:37:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2204974081-1436653023-283711051-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2204974081-1436653023-283711051-503 - Limited - Disabled)
Gast (S-1-5-21-2204974081-1436653023-283711051-501 - Limited - Disabled)
Patrik (S-1-5-21-2204974081-1436653023-283711051-1001 - Administrator - Enabled) => C:\Users\Patrik

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3DMark Demo (HKLM\...\Steam App 231350) (Version:  - Futuremark)
AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version:  - Frictional Games)
Ansel (Version: 375.70 - NVIDIA Corporation) Hidden
Assassin's Creed (HKLM-x32\...\Steam App 15100) (Version:  - Ubisoft Montreal)
Assassin's Creed Brotherhood (HKLM-x32\...\Steam App 48190) (Version:  - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version:  - Ubisoft Montreal)
Assassin's Creed Revelations (HKLM-x32\...\Steam App 201870) (Version:  - Ubisoft Montreal)
Assassin's Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Bastion (HKLM\...\Steam App 107100) (Version:  - Supergiant Games)
Batman: Arkham Asylum GOTY Edition (HKLM-x32\...\Steam App 35140) (Version:  - Rocksteady Studios)
BioShock Remastered (HKLM\...\Steam App 409710) (Version:  - 2K Boston)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.21.970 - Bitdefender)
Bitdefender Antivirus Plus 2017 (HKLM\...\Bitdefender) (Version: 21.0.22.1011 - Bitdefender)
Borderlands (HKLM-x32\...\Steam App 8980) (Version:  - Gearbox Software)
Bridge! 2 (HKLM\...\Steam App 434090) (Version:  - toxtronyx interactive GmbH)
Call of Juarez Gunslinger (HKLM\...\Steam App 204450) (Version:  - Techland)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Castlevania: Lords of Shadow – Mirror of Fate HD (HKLM\...\Steam App 282530) (Version:  - MercurySteam)
CCleaner (HKLM\...\CCleaner) (Version: 5.17 - Piriform)
Command Center (HKLM-x32\...\InstallShield_{AE1E0DFB-A3D9-451C-AA7F-46FD390400D4}) (Version: 2.5.51.0 - Alienware Corp.)
Command Center (Version: 2.5.51.0 - Alienware Corp.) Hidden
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.76 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Crawl (HKLM\...\Steam App 293780) (Version:  - Powerhoof)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Dangerous Golf (HKLM\...\Steam App 405500) (Version:  - Three Fields Entertainment)
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version:  - FromSoftware)
DARK SOULS™ II: Scholar of the First Sin (HKLM-x32\...\Steam App 335300) (Version:  - FromSoftware, Inc)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
Darksiders (HKLM\...\Steam App 50620) (Version:  - Vigil Games)
Dead Island (HKLM\...\Steam App 91310) (Version:  - Techland)
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version:  - Capcom Game Studio Vancouver)
Deadpool (HKLM-x32\...\Steam App 224060) (Version:  - High Moon Studios)
DOOM 3: BFG Edition (HKLM-x32\...\Steam App 208200) (Version:  - id Software)
DRAGON BALL XENOVERSE (HKLM\...\Steam App 323470) (Version:  - DIMPS)
Dragon's Dogma: Dark Arisen (HKLM-x32\...\Steam App 367500) (Version:  - Capcom)
DreadOut (HKLM\...\Steam App 269790) (Version:  - Digital Happiness)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Dying Light (HKLM-x32\...\Steam App 239140) (Version:  - Techland)
Endless Legend (HKLM-x32\...\Steam App 289130) (Version:  - AMPLITUDE Studios)
Epistory - Typing Chronicles (HKLM\...\Steam App 398850) (Version:  - Fishing Cactus)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Evoland (HKLM\...\Steam App 233470) (Version:  - Shiro Games)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Far Cry 4 Version 1. (HKLM-x32\...\Far Cry 4_is1) (Version: 1. - RFT)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.44.20513.9 - Electronic Arts)
FlyVPN (HKLM-x32\...\FlyVPN) (Version: 3.3.0.10 - FlyVPN)
FORCED SHOWDOWN (HKLM\...\Steam App 265000) (Version:  - BetaDwarf)
Futuremark SystemInfo (HKLM-x32\...\{C7FF0DD8-90C1-4612-B41F-0CA013062953}) (Version: 4.47.597.0 - Futuremark)
Gameforge Live 2.0.12 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.12 - Gameforge)
GameRanger (HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\GameRanger) (Version:  - GameRanger Technologies)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
GOD EATER 2 Rage Burst (HKLM\...\Steam App 438490) (Version:  - BANDAI NAMCO Studio)
GOD EATER RESURRECTION (HKLM\...\Steam App 460870) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.75 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM\...\Steam App 12210) (Version:  - Rockstar North)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grand Theft Auto: Vice City (HKLM-x32\...\Steam App 12110) (Version:  - Rockstar Games)
GRID (HKLM\...\Steam App 12750) (Version:  - Codemasters Studios)
Guards (HKLM\...\Steam App 460340) (Version:  - Battlecruiser Games)
Hero Defense - Haunted Island (HKLM\...\Steam App 423620) (Version:  - Happy Tuesday)
Hero Zero (HKLM\...\Steam App 482920) (Version:  - Playata GmbH)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version:  - IO Interactive)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version:  - Steel Crate Games)
L.A. Noire (HKLM-x32\...\Steam App 110800) (Version:  - Team Bondi)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Layers of Fear (HKLM\...\Steam App 391720) (Version:  - Bloober Team SA)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lego Harry Potter (HKLM-x32\...\Steam App 21130) (Version:  - TT Games)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Mad Games Tycoon (HKLM-x32\...\Steam App 341000) (Version:  - Eggcode)
Mafia II (HKLM\...\Steam App 50130) (Version:  - 2K Czech)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Maniac Mansion Deluxe (HKLM-x32\...\Maniac Mansion Deluxe) (Version:  - )
Metin2 (HKLM-x32\...\Metin2_DE_is1) (Version:  - Gameforge 4D GmbH)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minion Masters (HKLM\...\Steam App 489520) (Version:  - BetaDwarf)
Mirror's Edge (HKLM\...\Steam App 17410) (Version:  - DICE)
MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee)
Movie Studio Platinum 13.0 (64-bit) (HKLM\...\{F4721C9E-74D6-11E4-9122-F04DA23A5C58}) (Version: 13.0.943 - Sony)
Mozilla Firefox 41.0.2 (x86 de) (HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
MX vs. ATV Reflex (HKLM\...\Steam App 55140) (Version:  - Double Helix Games)
NARUTO SHIPPUDEN: Ultimate Ninja STORM Revolution (HKLM-x32\...\Steam App 272510) (Version:  - CyberConnect2 Co., Ltd.)
NBA 2K16 (HKLM\...\Steam App 370240) (Version:  - Visual Concepts)
Need for Speed™ (HKLM-x32\...\{F8643E83-A868-4EE8-A0B9-389386830453}) (Version: 1.3.0.0 - Electronic Arts)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Grafiktreiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.16.2 - OBS Project)
ONE PIECE PIRATE WARRIORS 3 (HKLM-x32\...\Steam App 331600) (Version:  - KOEI TECMO GAMES CO., LTD.)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Outlast (HKLM-x32\...\Steam App 238320) (Version:  - Red Barrels)
Pizza Connection 2 (HKLM-x32\...\{DA47ABC4-52DF-468D-988D-B9E768A3DF52}) (Version:  - )
Plague Inc: Evolved (HKLM\...\Steam App 246620) (Version:  - Ndemic Creations)
Planet Coaster (HKLM\...\Steam App 493340) (Version:  - Frontier Developments)
Planetary Annihilation: TITANS (HKLM\...\Steam App 386070) (Version:  - Uber Entertainment)
Plantera (HKLM\...\Steam App 421040) (Version:  - VaragtP)
Pro Gamer Manager (HKLM-x32\...\Steam App 408740) (Version:  - Millenway Studios)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - Slightly Mad Studios)
Prototype (HKLM-x32\...\Steam App 10150) (Version:  - Radical Entertainment)
Punch Club (HKLM-x32\...\Steam App 394310) (Version:  - Lazy Bear Games)
PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Remember Me (HKLM\...\Steam App 228300) (Version:  - DONTNOD Entertainment)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version:  - CAPCOM Co., Ltd.)
RimWorld (HKLM\...\Steam App 294100) (Version:  - Ludeon Studios)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
Serious Sam: The Random Encounter (HKLM-x32\...\Steam App 201480) (Version:  - Vlambeer)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM\...\Steam App 8930) (Version:  - Firaxis Games)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
skate's Thumbnail Tool Version 1.1.2 (HKLM-x32\...\{E68C580F-B6A5-4D47-89EC-307B9096FC10}_is1) (Version: 1.1.2 - skate702.de)
Sleeping Dogs: Definitive Edition (HKLM\...\Steam App 307690) (Version:  - United Front Games)
Slender: The Arrival (HKLM\...\Steam App 252330) (Version:  - Blue Isle Studios)
Slime Rancher (HKLM\...\Steam App 433340) (Version:  - Monomi Park)
Sniper Elite (HKLM-x32\...\Steam App 3700) (Version:  - Rebellion)
Soccer Manager 2017 (HKLM\...\Steam App 510630) (Version:  - Soccer Manager Ltd)
Star Wars Jedi Knight: Jedi Academy (HKLM\...\Steam App 6020) (Version:  - Raven Software)
Stardew Valley (HKLM\...\Steam App 413150) (Version:  - ConcernedApe)
SteelSeries Engine 3.5.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.5.2 - SteelSeries ApS)
Stronghold Crusader HD (HKLM\...\Steam App 40970) (Version:  - FireFly Studios)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
The Deadly Tower of Monsters (HKLM\...\Steam App 353700) (Version:  - ACE Team)
The Evil Within (HKLM\...\Steam App 268050) (Version:  - Tango Gameworks)
The Incredible Adventures of Van Helsing: Final Cut (HKLM\...\Steam App 400170) (Version:  - NeocoreGames)
The Last Remnant (HKLM\...\Steam App 23310) (Version:  - SQUARE ENIX)
The Red Solstice (HKLM\...\Steam App 265590) (Version:  - Ironward)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version:  - CD PROJEKT RED)
The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version:  - CD PROJEKT RED)
There's Poop In My Soup (HKLM\...\Steam App 449540) (Version:  - Rudder Games)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - Runic Games)
Train Valley (HKLM\...\Steam App 353640) (Version:  - Alexey Davydov)
Tropico 5 (HKLM\...\Steam App 245620) (Version:  - Haemimont Games)
True Fear: Forsaken Souls Part 1 (HKLM\...\Steam App 440420) (Version:  - Goblinz)
UE4 Prerequisites (x64) (HKLM-x32\...\{31b49e1e-03f8-4a04-8faa-f6476d8fad02}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Unity Web Player (HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vodafone Mobile Broadband (HKLM-x32\...\{6C29152D-3FF9-43B2-84E4-9B35FC0BF5C2}) (Version: 10.3.414.50177 - Vodafone)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
Watch_Dogs (HKLM\...\Steam App 243470) (Version:  - Ubisoft)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
We Happy Few (HKLM\...\Steam App 320240) (Version:  - Compulsion Games)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1 (HKLM-x32\...\Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1) (Version:  - )
WWE 2K16 (HKLM\...\Steam App 385730) (Version:  - Visual Concepts)
Youtubers Life (HKLM\...\Steam App 428690) (Version:  - U-Play online)
Zombie Night Terror (HKLM\...\Steam App 416680) (Version:  - NoClip)
Zombie Party (HKLM\...\Steam App 384500) (Version:  - Peach Pie Productions)
Zombie Shooter (HKLM\...\Steam App 33130) (Version:  - Sigma Team Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2204974081-1436653023-283711051-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncApi64.dll => Keine Dat (Der Dateneintrag hat 2 mehr Zeichen).

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3ED8FD2E-120E-4A3E-9BCE-5C299B47E70E} - System32\Tasks\74159a2475b32161 => Rundll32.exe "C:\ProgramData\74159a2475b32161\74159a2475b32161.dll",get_module
Task: {42B6F3C9-814F-4084-9EF1-28942A1E8D3F} - System32\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685} => C:\Users\Patrik\AppData\Local\{89AFB~1\UNINST~1.EXE <==== ACHTUNG
Task: {535E0215-2D16-4BAD-A5C2-2B8AB430DE7A} - System32\Tasks\f6a63bbfe553147895993c7e8697a131 => Rundll32.exe "C:\Program Files (x86)\VulkanRT\dprtox.dll",e62dc6c6547f46bda862da2d05af6862 <==== ACHTUNG
Task: {6D31B433-B341-4C2A-B653-3964068288DD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {6E629C55-F5BC-40EE-A957-74BBC473DD2C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03] (Google Inc.)
Task: {7CB09AF8-3DA6-43FD-B7C9-7CC406193466} - System32\Tasks\SRT => C:\Program Files (x86)\GNR\src\Smart_Registry_Care.exe
Task: {7CB64D5B-B163-4228-B3D6-89E5A8D18E79} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated)
Task: {7FACC8F8-5595-4094-90B9-124504D15326} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)
Task: {849522AB-D9A9-4411-B9E1-4C7299CE7CA9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {8E469095-6708-4F9E-8E15-9798D5664A07} - System32\Tasks\919z23577t565 => Rundll32.exe "C:\ProgramData\919z23577t565\919z23577t565.dll",drvGetDefaultCommConfig
Task: {9CAFA45F-46A1-4C74-BFFD-3C4075F13B50} - System32\Tasks\{226CB921-4B24-4540-A1CB-4FB7BAFE932B} => pcalua.exe -a "C:\Program Files (x86)\LucasFan Games\MMD\autorun.exe" -d "C:\Program Files (x86)\LucasFan Games\MMD"
Task: {CC55A50A-06A7-4F6F-97C3-3BF2C7CF4081} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-04-15] (Piriform Ltd)
Task: {CC8CFFBC-F489-4D16-8C1A-0DB7CA2387DA} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {CFA58031-21D4-48C2-AE20-A96402E3C8BA} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {D4BBEEEA-D9C0-459F-81E8-C4C45F1CC8D7} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {DE17055A-5DEE-432D-8789-B39004E40404} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {FD422A6D-00E5-43AA-A5A1-3A0C6340564F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685}.job => 

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:17 - 2015-10-30 08:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-06 22:33 - 2013-09-03 14:29 - 00111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll
2016-12-06 22:33 - 2016-11-15 12:21 - 00132104 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\ECEvents.dll
2016-12-06 22:33 - 2016-11-14 16:52 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpbr.mdl
2016-12-06 22:33 - 2016-11-14 16:52 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpdsp.mdl
2016-12-06 22:33 - 2016-11-14 16:52 - 03202816 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpph.mdl
2016-12-06 22:33 - 2016-11-14 16:52 - 01542976 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttprbl.mdl
2016-12-06 20:59 - 2014-03-22 12:36 - 02976256 _____ () C:\ProgramData\919z23577t565\919z23577t565.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-04-19 17:06 - 2016-04-19 17:07 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-01-30 18:54 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 21:09 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-04-15 19:07 - 2016-04-15 19:07 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2010-04-07 15:04 - 2010-04-07 15:04 - 00154424 _____ () C:\Program Files\Alienware\Command Center\AlienFusionDomain.dll
2016-01-30 18:31 - 2016-01-30 18:31 - 00075056 _____ () C:\WINDOWS\assembly\GAC_MSIL\AlienLabsTools\1.0.90.0__bebb3c8816410241\AlienLabsTools.dll
2010-04-07 15:04 - 2010-04-07 15:04 - 00009032 _____ () C:\Program Files\Alienware\Command Center\de\AlienFusionDomain.resources.dll
2010-04-07 15:04 - 2010-04-07 15:04 - 00016704 _____ () C:\Program Files\Alienware\Command Center\AlienFusionController.exe
2016-01-30 18:30 - 2016-10-25 21:17 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-06 22:33 - 2016-12-07 17:46 - 00023328 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\lang\en-US\bdsystray.txtui
2016-12-06 18:22 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-06 18:22 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-06 18:22 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-07 21:08 - 2016-12-07 21:08 - 00022024 _____ () D:\Program Files (x86)\Origin\QtWebEngineProcess.exe
2016-12-07 21:16 - 2016-12-07 21:16 - 04555256 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\LeagueClient.exe
2016-12-07 21:16 - 2016-12-07 21:16 - 03461112 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\LeagueClientUx.exe
2016-04-19 17:06 - 2016-04-19 17:07 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 17:06 - 2016-04-19 17:08 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-10-15 18:25 - 2016-11-17 11:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-15 18:25 - 2016-11-17 11:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-15 18:25 - 2016-11-17 11:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-15 18:25 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-15 18:25 - 2016-11-17 11:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-15 18:25 - 2016-11-17 11:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-15 18:25 - 2016-11-17 11:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-15 18:25 - 2016-11-17 11:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2015-08-18 18:21 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-01-30 18:31 - 2016-01-30 18:31 - 00037712 _____ () C:\WINDOWS\assembly\GAC_MSIL\Alienlabs.CommandCenter.Tools\1.0.90.0__bebb3c8816410241\Alienlabs.CommandCenter.Tools.dll
2016-10-15 17:10 - 2016-09-08 04:14 - 00784672 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2016-10-15 17:10 - 2016-09-01 02:02 - 04969248 _____ () D:\Program Files (x86)\Steam\v8.dll
2016-10-15 17:10 - 2016-10-13 02:58 - 02321696 _____ () D:\Program Files (x86)\Steam\video.dll
2016-10-15 17:10 - 2016-09-01 02:02 - 01563936 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2016-10-15 17:10 - 2016-09-01 02:02 - 01195296 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 02549760 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2016-10-15 17:10 - 2016-10-13 02:58 - 00836896 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-10-15 17:10 - 2016-07-04 23:17 - 00266560 _____ () D:\Program Files (x86)\Steam\openvr_api.dll
2016-10-15 17:10 - 2016-08-04 21:56 - 49825056 _____ () D:\Program Files (x86)\Steam\bin\cef\cef.winxp\libcef.dll
2016-10-15 17:10 - 2015-09-25 00:52 - 00119208 _____ () D:\Program Files (x86)\Steam\winh264.dll
2016-12-07 21:08 - 2016-12-07 21:08 - 02493440 _____ () D:\Program Files (x86)\Origin\libGLESv2.dll
2016-12-07 21:08 - 2016-12-07 21:08 - 00012288 _____ () D:\Program Files (x86)\Origin\libEGL.DLL
2016-06-12 00:58 - 2016-06-12 00:57 - 00266240 _____ () D:\Program Files (x86)\Origin\imageformats\qmng.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 03328512 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-patcher\rcp-be-patcher.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01024000 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-rso-auth\rcp-be-rso-auth.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 02518016 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-login\rcp-be-lol-login.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00583680 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-account-settings\rcp-be-lol-account-settings.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00582144 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-platform-config\rcp-be-lol-platform-config.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00719872 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-summoner\rcp-be-lol-summoner.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00632832 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-ranked-stats\rcp-be-lol-ranked-stats.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00563200 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-maps\rcp-be-lol-maps.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00696832 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-game-queues\rcp-be-lol-game-queues.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00858624 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-gameflow\rcp-be-lol-gameflow.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00938496 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-player-preferences\rcp-be-lol-player-preferences.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00683520 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-game-settings\rcp-be-lol-game-settings.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00628224 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-settings\rcp-be-lol-settings.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00631296 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-sanitizer\rcp-be-sanitizer.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 02468352 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-chat\rcp-be-lol-chat.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00159224 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\libexpat.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 02014720 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-riot-messaging-service\rcp-be-lol-riot-messaging-service.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00561664 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-heartbeat\rcp-be-lol-heartbeat.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00582144 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-shutdown\rcp-be-lol-shutdown.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00583168 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-acs\rcp-be-lol-acs.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00604160 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-player-notifications\rcp-be-player-notifications.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00564224 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-loyalty\rcp-be-lol-loyalty.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01116160 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-collections\rcp-be-lol-collections.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00954880 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-loot\rcp-be-lol-loot.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00557056 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-kr-shutdown-law\rcp-be-lol-kr-shutdown-law.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01041408 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-lobby-team-builder\rcp-be-lol-lobby-team-builder.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00684032 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-queue-eligibility\rcp-be-lol-queue-eligibility.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01540096 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-lobby\rcp-be-lol-lobby.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00854016 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-license-agreement\rcp-be-lol-license-agreement.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01166848 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-champ-select-legacy\rcp-be-lol-champ-select-legacy.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00700416 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-champ-select\rcp-be-lol-champ-select.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00816640 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-matchmaking\rcp-be-lol-matchmaking.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00543744 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-kr-playtime-reminder\rcp-be-lol-kr-playtime-reminder.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00552960 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-game-client-chat\rcp-be-lol-game-client-chat.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00798208 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-end-of-game\rcp-be-lol-end-of-game.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00585728 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-active-boosts\rcp-be-lol-active-boosts.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00594432 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-kudos\rcp-be-lol-kudos.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00667136 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-parties\rcp-be-lol-parties.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00899072 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-leagues\rcp-be-lol-leagues.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00675840 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-pft\rcp-be-lol-pft.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00681984 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-player-behavior\rcp-be-lol-player-behavior.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00668160 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-suggested-players\rcp-be-lol-suggested-players.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00594944 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-service-status\rcp-be-lol-service-status.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00611840 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-leaver-buster\rcp-be-lol-leaver-buster.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00739840 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-match-history\rcp-be-lol-match-history.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00620544 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-team-boosts\rcp-be-lol-team-boosts.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00712192 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-recofriender\rcp-be-recofriender.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00857088 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-clubs\rcp-be-lol-clubs.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01705472 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-clubs-public\rcp-be-lol-clubs-public.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00637952 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-esport-stream-notifications\rcp-be-lol-esport-stream-notifications.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00779776 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-replays\rcp-be-lol-replays.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00579072 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-spectator\rcp-be-lol-spectator.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00700928 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-store\rcp-be-lol-store.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00571392 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-player-level-up\rcp-be-lol-player-level-up.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00547328 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-tencent-qt\rcp-be-lol-tencent-qt.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00600064 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-beta-opt-in\rcp-be-lol-beta-opt-in.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00607744 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-lol-player-messaging\rcp-be-lol-player-messaging.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00549888 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\Plugins\rcp-be-network-testing\rcp-be-network-testing.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 55617504 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\libcef.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 01876448 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\libglesv2.dll
2016-12-07 21:16 - 2016-12-07 21:16 - 00021984 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.38\deploy\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 12:04 - 2016-12-07 22:30 - 00001370 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\StartupFolder: => "SteelSeries Engine 3.lnk"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run32: => "LWS"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_1B28AC0629F4B3A1DB6E8E19FB6D49DA"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{7232750C-D33C-477F-B8AA-ADEE2A1CA866}] => D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E7EF615A-57D7-4451-ACD4-7851E7130793}] => D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{9BB62858-E5BA-487A-91F6-640E5BEAAEB8}D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe] => D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{9598136C-2BEB-4E5A-8FF9-CD86EE9AAD73}D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe] => D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe
FirewallRules: [TCP Query User{C82280BE-091D-44E4-959F-6199A9D70346}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [UDP Query User{8F0DF167-6F4C-43A5-8EA8-542664C8C2BD}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [{460175D8-3902-4E43-A1EE-5AB9DFE98CE9}] => D:\Program Files (x86)\Steam\steamapps\common\Car Mechanic Simulator 2015\cms2015.exe
FirewallRules: [{87111C6A-41B2-4209-A6EF-95269337B998}] => D:\Program Files (x86)\Steam\steamapps\common\Car Mechanic Simulator 2015\cms2015.exe
FirewallRules: [{FCED636B-2109-4046-B38B-271379FD5553}] => D:\Program Files (x86)\Steam\steamapps\common\Mad Games Tycoon\MadGamesTycoon.exe
FirewallRules: [{88482DD3-953C-4195-ACCF-F84B2ACF07C7}] => D:\Program Files (x86)\Steam\steamapps\common\Mad Games Tycoon\MadGamesTycoon.exe
FirewallRules: [{BAC758F6-BF4B-49C9-8A64-44D837A7FE6F}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{846A4569-8627-4FEC-B3F5-EEE5DFE99024}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{6B949EF0-4950-431A-A026-F9973B27DA6A}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{420624F4-A9CE-4320-A331-91CE3459686B}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{4E8D14B6-2548-4EA7-88FE-2C39E80FFEE9}] => D:\Program Files (x86)\Steam\steamapps\common\Bridge 2\Bridge.exe
FirewallRules: [{FBC702D3-98A6-4B4C-8825-2A4765F72521}] => D:\Program Files (x86)\Steam\steamapps\common\Bridge 2\Bridge.exe
FirewallRules: [{C78DFFFD-DD32-49A1-9C3B-D1BD84C45066}] => D:\Program Files (x86)\Steam\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{02E2D9C0-B56B-436A-8824-CC0EA3D90436}] => D:\Program Files (x86)\Steam\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{62553584-EE7B-4460-BE00-7FD09BED83A3}] => D:\Program Files (x86)\Steam\steamapps\common\NBA 2K16\NBA2K16.exe
FirewallRules: [{2EC1988A-CE3D-4C04-B727-09E425FFA90F}] => D:\Program Files (x86)\Steam\steamapps\common\NBA 2K16\NBA2K16.exe
FirewallRules: [{090EE83C-728F-4686-B3F2-3DCCE2F65D47}] => D:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
FirewallRules: [{AD554903-CBA0-44D7-BE8B-2E10B98A96CF}] => D:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
FirewallRules: [{EFA2C1DE-2691-4B32-A577-F8249E2AFB4A}] => D:\Program Files (x86)\Steam\steamapps\common\Crawl\Crawl.exe
FirewallRules: [{C2C40718-FFCE-42C5-BC91-41553C78FA47}] => D:\Program Files (x86)\Steam\steamapps\common\Crawl\Crawl.exe
FirewallRules: [{5CE9D379-CE67-4374-A7CC-7FE7AD767D01}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D9B4AB37-4EDE-48A6-828F-084748CF9055}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{47921631-9A36-4DE1-B8AA-62EDB12F8FF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8C7D7268-D762-46C0-B098-2DBF78E17B19}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{5359660F-F965-495B-99F4-0BD73577AA3A}D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe] => D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe
FirewallRules: [UDP Query User{262CB3B9-1E8B-4146-8098-C0001AA378F0}D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe] => D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe
FirewallRules: [{17009FF5-3A1E-43A4-B5E4-1EA5164B2412}] => D:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{29E0F4E5-85CB-47B9-A938-43EB437D3B3E}] => D:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [TCP Query User{2BDCD99A-49D7-4DB0-8BE5-82F0E6EE0137}D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{32F3EB8D-3DA9-4642-B89E-F7981DEB1C99}D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [TCP Query User{A93AE28A-2A52-4B80-90D7-1D193DA6F4EC}D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe] => D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe
FirewallRules: [UDP Query User{9BEBF06C-AA20-4A4A-9C86-A22F194F5C75}D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe] => D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe
FirewallRules: [{BD2E3AF2-3718-4505-85D7-D7D063A29AE6}] => D:\Program Files (x86)\Steam\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{D2BBDE6C-3695-4DAC-92A6-C11A295267EC}] => D:\Program Files (x86)\Steam\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{95EA4DB0-4FBE-4ABD-96A3-4DE4AD9B3778}] => D:\Program Files (x86)\Steam\steamapps\common\The Last Remnant\Binaries\TLR.exe
FirewallRules: [{29870C16-6DC1-4FF6-A1D9-4B05095D66B4}] => D:\Program Files (x86)\Steam\steamapps\common\The Last Remnant\Binaries\TLR.exe
FirewallRules: [{F8896255-BDE7-46C2-AB4E-15EADD53CBA3}] => D:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7D668E16-440E-4B46-BB65-E72F1BEA300C}] => D:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{FECE9CBF-0362-40FF-95D6-8A103C379D52}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{3BC9C7E5-4373-4BF1-8E33-20C8C930B747}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{9CED4C4B-C1B1-4FAA-8405-C6EDE3D808CF}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{024AB959-2347-4711-8E9C-6DD65F755084}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{4D202415-A2E4-46B5-A887-005228A65E21}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Defense - Haunted Island\HauntedIsland.exe
FirewallRules: [{BC2654D9-0D15-4D55-91E3-71FC2E6D17C6}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Defense - Haunted Island\HauntedIsland.exe
FirewallRules: [{E3B01284-6C62-4013-A037-DA0886A8CFE2}] => D:\Program Files (x86)\Steam\steamapps\common\Evoland\Evoland.exe
FirewallRules: [{649AB23A-D6FC-4370-9352-0DB7E07726E1}] => D:\Program Files (x86)\Steam\steamapps\common\Evoland\Evoland.exe
FirewallRules: [{2ABD6011-9A7E-40D0-824F-BD844C29446D}] => D:\Program Files (x86)\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{F1938475-B978-4077-AB13-A7F119D4F39A}] => D:\Program Files (x86)\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{06CF38EF-CD90-4486-94F0-EA36FBCA4893}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\PA.exe
FirewallRules: [{DC3B1FEC-F892-4BA4-9E6F-48B2A71A2F8B}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\PA.exe
FirewallRules: [{01E26E6C-2683-4658-A2DA-B4A9692084A7}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\PA.exe
FirewallRules: [{526DE9BF-999D-422E-BF11-6BD63718E0D6}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\PA.exe
FirewallRules: [{D9312965-EC48-4BC8-9573-847959527395}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\crashupload.exe
FirewallRules: [{74AECABB-183D-4BAE-B655-6F7F1137FCF4}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\crashupload.exe
FirewallRules: [{6021A78A-8601-41E7-AC4F-170EFF5248F0}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\host\CoherentUI_Host.exe
FirewallRules: [{519E4BC0-39C8-450C-BEBE-7B0A37276EE4}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\host\CoherentUI_Host.exe
FirewallRules: [{37C88F68-4F55-4947-9493-FD1B8A172A42}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\crashupload.exe
FirewallRules: [{52B00A11-D604-4314-88CE-BBABDDCE05ED}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\crashupload.exe
FirewallRules: [{54543A45-2C67-4D68-B314-EAC232D2F24C}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\host\CoherentUI_Host.exe
FirewallRules: [{62651386-94A0-4076-9A0C-0E02D1A234E5}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\host\CoherentUI_Host.exe
FirewallRules: [{EA5515E8-CB05-4587-A796-323D8A077F4D}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\server.exe
FirewallRules: [{1C251F3C-0408-48DE-B0EA-E1DEB21EE438}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\server.exe
FirewallRules: [{B6F5F9FC-2071-47CC-A1FA-228BC8233FA9}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Party\Zombie_Party_v2.exe
FirewallRules: [{A685CE71-B7D1-41A9-9011-3FE37FF93969}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Party\Zombie_Party_v2.exe
FirewallRules: [{70BFCBEB-A69A-4D1D-81F2-F48A22BC3141}] => D:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{275BF7F5-E3B9-4D17-8ACB-1AF9ABE6CABB}] => D:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{BCD216F0-7E5E-4ABA-A5BF-12DFCFC93513}] => D:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{DCB57B35-2343-4FDA-9A96-2CCBCE91B28A}] => D:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{D30F363F-9F7A-4F7A-AB5D-36D61B02F009}] => D:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{0ACB707E-231A-4044-828F-8302B4991FCD}] => D:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{53355F87-F6EC-4B1C-B113-163E2BD64705}D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{66A3F9E1-E590-46D2-B2B6-DD844E461426}D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{0D67C7D3-6B2E-4653-94E3-524BD4CD7777}] => D:\Program Files (x86)\Steam\steamapps\common\Pro Gamer Manager\PGM.exe
FirewallRules: [{28C09B0A-2FB3-48CA-8AF3-11642122E601}] => D:\Program Files (x86)\Steam\steamapps\common\Pro Gamer Manager\PGM.exe
FirewallRules: [{6403FB85-B7F5-4A32-A1F8-E34F8DE1FCB7}] => D:\Program Files (x86)\Steam\steamapps\common\Punch Club\Punch Club.exe
FirewallRules: [{9030C6F3-C19A-4D92-9904-7B5F94CE3D42}] => D:\Program Files (x86)\Steam\steamapps\common\Punch Club\Punch Club.exe
FirewallRules: [{CF084055-B892-4608-B0D8-EEB0E0E4279D}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{876CBA00-7ED3-4227-B0DA-7F4B99AE8084}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{9F8E3401-CC50-4BB3-B04D-53B2E368E56F}] => D:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{BE66FB2B-F645-43CA-8232-AB1B1C618EE7}] => D:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{F875506E-BCC4-4825-8F3E-ED4ED2D9C959}] => D:\Program Files (x86)\Steam\steamapps\common\Castlevania Lords of Shadow - Mirror of Fate HD\CMOF.exe
FirewallRules: [{E0B7A09F-3D18-4A62-B54E-6B6D2B71D65B}] => D:\Program Files (x86)\Steam\steamapps\common\Castlevania Lords of Shadow - Mirror of Fate HD\CMOF.exe
FirewallRules: [{B6947272-181F-4811-AF7E-FC4BA42AD42E}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Zero\Hero Zero.exe
FirewallRules: [{70717C44-020C-44EE-BE24-859F759EF6D9}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Zero\Hero Zero.exe
FirewallRules: [{A64D792D-F769-47A5-B147-D1F8314335B9}] => D:\Program Files (x86)\Steam\steamapps\common\Dangerous Golf\Orlando.exe
FirewallRules: [{974A405A-F4C0-419C-8FFB-5338CCEB91D8}] => D:\Program Files (x86)\Steam\steamapps\common\Dangerous Golf\Orlando.exe
FirewallRules: [TCP Query User{0AE0FD59-A2E6-4C4C-B1D5-9EDE33295933}D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe] => D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe
FirewallRules: [UDP Query User{430AF276-5D67-49F2-8F3C-FE88299CA538}D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe] => D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe
FirewallRules: [{5D0622FD-3DF8-4D0E-9465-2784667605C9}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{31DD7B58-B392-4C49-8ED8-DC40A3870C2A}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{8FADEFFB-76DF-4E63-A599-523DDC23DA1D}] => D:\Program Files (x86)\Steam\steamapps\common\Bastion\Bastion.exe
FirewallRules: [{B527AE37-0AE7-451B-982D-D35769DF3680}] => D:\Program Files (x86)\Steam\steamapps\common\Bastion\Bastion.exe
FirewallRules: [{1EBE714C-3195-4031-B6B0-E8AB9F3D2FEF}] => D:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{2304257C-5806-414F-9CAA-E2A0765D94F9}] => D:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{1372DE4C-7A5E-40EF-9C76-36F2D8B57910}] => D:\Program Files (x86)\Steam\steamapps\common\The Crew\TheCrew.exe
FirewallRules: [{9E96650A-6C9D-40A3-AC2D-14EE2059065D}] => D:\Program Files (x86)\Steam\steamapps\common\The Crew\TheCrew.exe
FirewallRules: [TCP Query User{BFC48E74-5789-4991-A9F2-D50F710A52D2}D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe] => D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe
FirewallRules: [UDP Query User{DD015E84-ACEE-46A3-8101-DC38F7AA936D}D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe] => D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe
FirewallRules: [{7562F019-F28B-4721-B89B-3F42C6A1BB89}] => D:\Program Files (x86)\Steam\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{3CE0EB2A-AB7B-478B-B4A9-7F101DDBF850}] => D:\Program Files (x86)\Steam\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{CDC33484-35A9-41D2-A585-B6DD4A465E53}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe
FirewallRules: [{6AE3EA52-BC07-4137-B4AE-EB6894E620E2}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe
FirewallRules: [TCP Query User{6F851FC8-2A70-4C9C-94E1-F8597016AEE8}D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{DA2CDE15-0C48-496A-B35B-955A9BB3DA15}D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{24D36424-112E-4F0E-A0E5-854F5C36454F}D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe] => D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe
FirewallRules: [UDP Query User{EC497583-E5F6-4483-8F80-AC0C3EEEE412}D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe] => D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe
FirewallRules: [{F1761434-B1A6-4BD5-B172-27B3D765C381}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16.exe
FirewallRules: [{D1D44BEF-8AC9-4AC9-B0A4-AF11786FD377}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16.exe
FirewallRules: [{F253608D-273B-4622-AD44-96B7BA7C720D}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16_trial.exe
FirewallRules: [{08B85745-76BA-4879-A6FB-20530FB1E3F4}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16_trial.exe
FirewallRules: [{B412EF36-4AEE-40D9-9FDB-646E36CDAC5A}] => D:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{F7907348-A21C-47CB-8BE8-CF741C8AA7BA}] => D:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{72F091DF-158D-491B-B490-3AB4D89D8B09}] => D:\Program Files (x86)\Steam\steamapps\common\FORCED SHOWDOWN\forced_showdown.exe
FirewallRules: [{E23CB038-345C-4C91-9B61-422242A74533}] => D:\Program Files (x86)\Steam\steamapps\common\FORCED SHOWDOWN\forced_showdown.exe
FirewallRules: [TCP Query User{0D74AEE5-6FE3-4A7F-B1CA-D74FBF75C0A9}D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe] => D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe
FirewallRules: [UDP Query User{4F3BB0E4-16FC-47F4-ABA4-018C2DE613A9}D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe] => D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe
FirewallRules: [{5189A79D-AB4A-417C-9008-A2ED4EBD9AA0}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{97CF77BA-F658-483F-8D97-2B2C2F873221}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{047E26B4-E094-4F0C-AE11-345B72787A9A}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{0E347198-84EE-43E5-9425-C525A0263EA4}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{3DAE6D10-7899-4FBC-99FF-F1CE516D93D8}] => D:\Program Files (x86)\Steam\steamapps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{BCAD3F75-6B12-4859-A480-5F6C8B394DEE}] => D:\Program Files (x86)\Steam\steamapps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{0CF09AAE-2C01-4528-B129-B6D2EF7A824B}] => D:\Program Files (x86)\Steam\steamapps\common\darksiders\DarksidersPC.exe
FirewallRules: [{1F950507-1AFE-4ADD-B791-2864DD2837E3}] => D:\Program Files (x86)\Steam\steamapps\common\darksiders\DarksidersPC.exe
FirewallRules: [{7A1FD558-4650-4151-A6DA-67E34956E932}] => D:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse\DBXV.exe
FirewallRules: [{9ACEC64E-AF9C-4FBC-995C-832E8C43D414}] => D:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse\DBXV.exe
FirewallRules: [{1DE28A8B-8F34-405F-B1DE-DFDB51E9FE36}] => D:\Program Files (x86)\Steam\steamapps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{BF476F53-2483-4508-8E6E-9EA80E234EE1}] => D:\Program Files (x86)\Steam\steamapps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{DE11F87F-F0BB-4877-8036-132331D6B861}] => D:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{E59E0C2D-93E0-470B-A510-596EFC0A4823}] => D:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{60410D3D-9CFB-4802-B074-C9A8B37A094D}] => D:\Program Files (x86)\Steam\steamapps\common\po\po.exe
FirewallRules: [{36DE06DB-D9C2-4D41-8924-FE956FCE7443}] => D:\Program Files (x86)\Steam\steamapps\common\po\po.exe
FirewallRules: [{3C3970C5-95ED-4858-A8E4-2C08C456D937}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXReflex.exe
FirewallRules: [{EA73782B-F0CF-40BB-BAFB-473961643FD6}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXReflex.exe
FirewallRules: [{1954E238-39EE-40AE-92D9-7E9D1682A251}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXSettings.exe
FirewallRules: [{3CB93393-9C2E-434D-BBCC-6E2CE6B9B5D4}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXSettings.exe
FirewallRules: [{028EC8A4-7EB6-420B-947E-308FB48F22EF}] => D:\Program Files (x86)\Steam\steamapps\common\RimWorld\RimWorldWin.exe
FirewallRules: [{D3F753EC-1F64-4A14-9B60-38AA46707042}] => D:\Program Files (x86)\Steam\steamapps\common\RimWorld\RimWorldWin.exe
FirewallRules: [{C393752D-E474-4F86-86D0-269EF1974B0E}] => D:\Program Files (x86)\Steam\steamapps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{DB270FE0-09B2-400B-821E-2470FC22A600}] => D:\Program Files (x86)\Steam\steamapps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{FD6DF594-23C5-4897-B0CE-A6995C8161F1}] => D:\Program Files (x86)\Steam\steamapps\common\WeHappyFew\GlimpseGame\Binaries\Win64\GlimpseGame.exe
FirewallRules: [{0D546B7B-7A1B-4CB2-80C9-D7DF5F2FB89F}] => D:\Program Files (x86)\Steam\steamapps\common\WeHappyFew\GlimpseGame\Binaries\Win64\GlimpseGame.exe
FirewallRules: [{16098F79-0340-4453-8287-D7A89AA2D3FE}] => D:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{4D3381BB-3273-49FE-8368-E4953E19BAA5}D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe] => D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{AE59C6C9-6B50-4F02-BCD9-C227D9E10E80}D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe] => D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [{B65A1358-E1FA-4F0A-8E77-D26C5B084407}] => D:\Program Files (x86)\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{13302E5A-CAD8-49D7-8156-110F434CB48C}] => D:\Program Files (x86)\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{5D7A7996-1EDE-4E03-B4E9-1209AB1FA4DF}] => D:\Program Files (x86)\Steam\steamapps\common\Epistory\Epistory.exe
FirewallRules: [{1AFA2954-E787-4996-A7DF-8DAD1149B51F}] => D:\Program Files (x86)\Steam\steamapps\common\Epistory\Epistory.exe
FirewallRules: [{C3AF405D-955B-465C-9641-389D411683F2}] => D:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{D64D36F3-8BB8-4A28-AEEF-4E5E91EBB616}] => D:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{E7EC53A8-ABF7-458A-9610-76424A735C6E}] => D:\Program Files (x86)\Steam\steamapps\common\TheRedSolstice\bin\Game.exe
FirewallRules: [{9BD36761-66DB-40F4-AE01-913C0A1B6906}] => D:\Program Files (x86)\Steam\steamapps\common\TheRedSolstice\bin\Game.exe
FirewallRules: [{8BF70A80-70FF-4893-8D3F-4497366D0899}] => D:\Program Files (x86)\Steam\steamapps\common\Soccer Manager 2017\Soccer Manager 2017.exe
FirewallRules: [{E720CE4C-F98B-4A6D-A91A-97879A169BA2}] => D:\Program Files (x86)\Steam\steamapps\common\Soccer Manager 2017\Soccer Manager 2017.exe
FirewallRules: [{62D00E5D-F94D-4082-9C67-945592F98293}] => D:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{A66C8F90-2F7A-4849-BF2D-53DAD64B21A4}] => D:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{6E1E67C1-EE20-4273-8679-F6C9862DEED6}] => D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{BE8F29FD-BE27-491C-A667-F3CC7EF08852}] => D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{99F5E817-3D4D-48BB-9D4D-319F465131B1}] => D:\Program Files (x86)\Steam\steamapps\common\Slime Rancher\SlimeRancher.exe
FirewallRules: [{EC3847C0-E230-4806-9399-0AE451C12680}] => D:\Program Files (x86)\Steam\steamapps\common\Slime Rancher\SlimeRancher.exe
FirewallRules: [{FD885657-377D-494A-AA36-49E7EF1D8025}] => D:\Program Files (x86)\Steam\steamapps\common\Train Valley\train-valley.exe
FirewallRules: [{F46B8732-94E3-408C-8BCC-A49E6F6A54D2}] => D:\Program Files (x86)\Steam\steamapps\common\Train Valley\train-valley.exe
FirewallRules: [{87696A79-054D-44D9-A061-51A10EFDBBF5}] => D:\Program Files (x86)\Steam\steamapps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{8539F83E-6B26-47FB-9CA8-4D4A71E4AF6B}] => D:\Program Files (x86)\Steam\steamapps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{A57F3F69-AF62-411D-8676-3F66A238FCE4}] => D:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{607D5160-96C8-463F-B300-C42197F7A2C6}] => D:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{6C3A5C30-01B5-41AA-8BEF-7C9B3E7DE084}] => D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{90428648-475B-4957-8634-0474D65EA881}] => D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{D7BEEB57-46DD-4502-AE3C-47F890872D09}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{9BC4C282-B74C-42D4-BEFA-F304D1EF9397}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{8CD31A09-7E8C-493F-917A-C4C5CB8C9EA1}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{F06A2A80-8E99-4791-AB8D-9E37FE2F65E8}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{8ED6A658-E837-43E9-86AD-505560751A7D}] => D:\Program Files (x86)\Steam\steamapps\common\Endless Legend\EndlessLegend.exe
FirewallRules: [{2B848C1D-6F5A-4273-9E2E-EEB3577F1AB6}] => D:\Program Files (x86)\Steam\steamapps\common\Endless Legend\EndlessLegend.exe
FirewallRules: [{7A007B86-4F01-4F93-9711-F4ADD4C72BEE}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout.exe
FirewallRules: [{0B9F5851-F729-4FF5-AFFD-432B4CF41A80}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout.exe
FirewallRules: [{BE66E506-64B4-4982-9CFB-EAFEB48D5398}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout32.exe
FirewallRules: [{A93A459F-62B4-4C39-B112-107E79872223}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout32.exe
FirewallRules: [{53F29591-586C-496D-956B-CB17CF541FA1}] => D:\Program Files (x86)\Steam\steamapps\common\True Fear Forsaken Souls\True Fear.exe
FirewallRules: [{20339839-89FF-4101-9267-516F72DD68F9}] => D:\Program Files (x86)\Steam\steamapps\common\True Fear Forsaken Souls\True Fear.exe
FirewallRules: [{6F5D14BC-9A0F-4F4F-88EF-2566E31C7398}] => D:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{C4E8B110-8FC5-4DB1-A4B3-46DBD654A68D}] => D:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{9149A7A8-1D41-4AD2-827A-BAED010A809A}] => D:\Program Files (x86)\Steam\steamapps\common\BioShock Remastered\Build\Final\Bioshock.exe
FirewallRules: [{FBEA1254-BBFC-4D23-8C55-E00520C3DCDA}] => D:\Program Files (x86)\Steam\steamapps\common\BioShock Remastered\Build\Final\Bioshock.exe
FirewallRules: [TCP Query User{82B73BCF-2E8F-438F-90AE-817C4B8F87D6}D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe] => D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe
FirewallRules: [UDP Query User{1D7988F4-CA9D-4A8C-823F-7BB3A47345F6}D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe] => D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe
FirewallRules: [{3FEDE003-9B80-4533-B0AB-5542FC9F56AE}] => D:\Program Files (x86)\Steam\steamapps\common\Serious Sam HD The First Encounter\Bin\SamHD.exe
FirewallRules: [{302DB4F3-1819-4100-895D-ED30EDA0A333}] => D:\Program Files (x86)\Steam\steamapps\common\Serious Sam HD The First Encounter\Bin\SamHD.exe
FirewallRules: [{97F0DCF0-4E16-49D6-BDED-E45B57C8244F}] => D:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{9141A063-A20A-4D78-9CA6-0841BEC6C175}] => D:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{6AF47B5E-C218-498B-9AAB-B2744958C64E}] => D:\Program Files (x86)\Steam\steamapps\common\WWE2K16\WWE2K16.exe
FirewallRules: [{E729FC27-82F3-4F51-B29D-A7454B84C044}] => D:\Program Files (x86)\Steam\steamapps\common\WWE2K16\WWE2K16.exe
FirewallRules: [{78D7FD07-2013-48A6-A32F-C6382F392FC1}] => D:\Program Files (x86)\Steam\steamapps\common\The Incredible Adventures of Van Helsing Final Cut\VanHelsing.exe
FirewallRules: [{B42B70D2-816D-4392-A326-EBE4700FAF28}] => D:\Program Files (x86)\Steam\steamapps\common\The Incredible Adventures of Van Helsing Final Cut\VanHelsing.exe
FirewallRules: [{7FF73460-A548-4A06-9E41-84D33F2ACB15}] => D:\Program Files (x86)\Steam\steamapps\common\Plantera\Plantera.exe
FirewallRules: [{FD9571A7-B86D-4A5B-A3FA-263BC516BFFC}] => D:\Program Files (x86)\Steam\steamapps\common\Plantera\Plantera.exe
FirewallRules: [{FEB8C6A6-A27D-433B-947C-DB3E685DB179}] => D:\Program Files (x86)\Steam\steamapps\common\GOD EATER RESURRECTION\GER.exe
FirewallRules: [{D513B435-3169-4716-9D8A-200EE97F5BBC}] => D:\Program Files (x86)\Steam\steamapps\common\GOD EATER RESURRECTION\GER.exe
FirewallRules: [{AD84E14C-9975-42B0-929D-BF2B4A3B22C5}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{4BCE6FC8-169E-419B-810E-982E7705A3C2}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{6603D5F7-6259-460A-AF85-6267020FC02E}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{85156740-691C-4BE2-AF3E-26FC52DA5CCC}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{5493FBE9-91AA-4836-8C68-D1A582E11F28}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{BE503761-1E0E-4B8C-B75C-B1DEF1FDB5E2}] => C:\WINDOWS\system32\rundll32.exe
FirewallRules: [{5E097147-EFC9-4B4C-BD91-7CDFC2D2AA12}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{E41339C2-42A5-4BE6-AC69-C9E23E1BEB83}] => C:\WINDOWS\System32\rundll32.exe
FirewallRules: [{99491E34-2893-4026-929F-C60B13076D8B}] => C:\WINDOWS\System32\rundll32.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/07/2016 09:34:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.10586.672, Zeitstempel: 0x580ef184
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1f20
Startzeit der fehlerhaften Anwendung: 0x01d250c9515a42c6
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 2ea40d64-897a-4e5b-bde4-6aba4a789541
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/07/2016 09:26:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SearchUI.exe, Version: 10.0.10586.672, Zeitstempel: 0x580ee74d
Name des fehlerhaften Moduls: CortanaApi.dll, Version: 0.0.0.0, Zeitstempel: 0x580ee453
Ausnahmecode: 0x80000003
Fehleroffset: 0x00000000000b5c6d
ID des fehlerhaften Prozesses: 0x18dc
Startzeit der fehlerhaften Anwendung: 0x01d250c121f2a406
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Pfad des fehlerhaften Moduls: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
Berichtskennung: e83f0190-c4cc-44df-80f3-5bd4d6c6d2a0
Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: CortanaUI

Error: (12/07/2016 08:41:12 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for D:\Program Files (x86)\Steam\bin\steamwebhelper.exe

Error: (12/07/2016 07:37:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2016 07:37:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2016 07:37:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2016 06:32:55 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for D:\Program Files (x86)\Steam\bin\steamwebhelper.exe

Error: (12/07/2016 04:52:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: steamwebhelper.exe, Version: 3.65.13.80, Zeitstempel: 0x57fed9f2
Name des fehlerhaften Moduls: steamwebhelper.exe, Version: 3.65.13.80, Zeitstempel: 0x57fed9f2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00037b59
ID des fehlerhaften Prozesses: 0xc58
Startzeit der fehlerhaften Anwendung: 0x01d250a1c523008b
Pfad der fehlerhaften Anwendung: D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
Pfad des fehlerhaften Moduls: D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
Berichtskennung: 08fa221b-d4fb-424f-850a-6eddfa335ef8
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/06/2016 11:44:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000007ccfc
ID des fehlerhaften Prozesses: 0x374
Startzeit der fehlerhaften Anwendung: 0x01d25007f1a43bf0
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll
Berichtskennung: b68022ae-c915-4161-9f6b-2a17e428108e
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/06/2016 11:44:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (12/07/2016 09:44:29 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6DECSKV)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "DESKTOP-6DECSKV\Patrik" (SID: S-1-5-21-2204974081-1436653023-283711051-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
 und der APPID 
{CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2}
 im Anwendungscontainer "Microsoft.WindowsStore_11609.1001.28.0_x64__8wekyb3d8bbwe" (SID: S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/07/2016 08:44:28 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6DECSKV)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "DESKTOP-6DECSKV\Patrik" (SID: S-1-5-21-2204974081-1436653023-283711051-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
 und der APPID 
{CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2}
 im Anwendungscontainer "Microsoft.WindowsStore_11609.1001.28.0_x64__8wekyb3d8bbwe" (SID: S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/07/2016 08:32:00 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Chukoypahward" wurde mit folgendem Fehler beendet: 
Das angegebene Modul wurde nicht gefunden.

Error: (12/07/2016 08:31:51 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6DECSKV)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "DESKTOP-6DECSKV\Patrik" (SID: S-1-5-21-2204974081-1436653023-283711051-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
 und der APPID 
{CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2}
 im Anwendungscontainer "Microsoft.WindowsStore_11609.1001.28.0_x64__8wekyb3d8bbwe" (SID: S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/07/2016 08:31:41 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\WINDOWS\system32\Rtlihvs.dll
Fehlercode: 126

Error: (12/07/2016 08:30:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{9A4948D9-13FC-4FAC-B60A-FBA6EE0FB11C}
 und der APPID 
{50E1C3FD-EC35-490E-9CCF-C68F9AE91919}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/07/2016 08:29:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "PnkBstrA" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (12/07/2016 08:29:59 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst PnkBstrA erreicht.

Error: (12/07/2016 08:29:49 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\WINDOWS\system32\Rtlihvs.dll
Fehlercode: 21

Error: (12/07/2016 08:29:20 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.


CodeIntegrity:
===================================
  Date: 2016-12-07 20:32:27.734
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 20:32:27.733
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 17:59:08.035
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 17:59:08.035
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 16:26:14.227
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 16:16:23.642
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-06 23:32:13.874
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-06 21:12:21.595
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-12-06 18:51:43.005
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-11-27 23:44:24.529
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7 CPU 930 @ 2.80GHz
Prozentuale Nutzung des RAM: 26%
Installierter physikalischer RAM: 12278.92 MB
Verfügbarer physikalischer RAM: 8974.04 MB
Summe virtueller Speicher: 14134.92 MB
Verfügbarer virtueller Speicher: 10034.82 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:110.86 GB) (Free:59.5 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Festplatte 1) (Fixed) (Total:1863.01 GB) (Free:539.9 GB) NTFS
Drive e: (Festplatte 2) (Fixed) (Total:1863.01 GB) (Free:1862.7 GB) NTFS
Drive h: (INTENSO) (Fixed) (Total:465.76 GB) (Free:126.88 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0D8CBB29)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0D8CBB28)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 8698802F)
Partition 1: (Active) - (Size=110.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 3 (Size: 465.8 GB) (Disk ID: F5876578)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Alt 07.12.2016, 22:54   #9
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers




2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 07.12.2016, 23:14   #10
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Hier schonmal Malwarebytes. Neustart wurde nicht nachgefragt
Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.12.07.14
  rootkit: v2016.11.20.01

Windows 10 x64 NTFS
Internet Explorer 11.672.10586.0
Patrik :: DESKTOP-6DECSKV [administrator]

07.12.2016 23:00:40
mbar-log-2016-12-07 (23-00-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 329279
Time elapsed: 7 minute(s), 54 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Und einmal TDSSKiller: Positiv. Wurde geskipt und warte auch weitere Anweisungen

Code:
ATTFilter
23:11:09.0815 0x11c4  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
23:11:40.0388 0x11c4  ============================================================
23:11:40.0388 0x11c4  Current date / time: 2016/12/07 23:11:40.0388
23:11:40.0388 0x11c4  SystemInfo:
23:11:40.0389 0x11c4  
23:11:40.0389 0x11c4  OS Version: 10.0.10586 ServicePack: 0.0
23:11:40.0389 0x11c4  Product type: Workstation
23:11:40.0389 0x11c4  ComputerName: DESKTOP-6DECSKV
23:11:40.0390 0x11c4  UserName: Patrik
23:11:40.0390 0x11c4  Windows directory: C:\WINDOWS
23:11:40.0390 0x11c4  System windows directory: C:\WINDOWS
23:11:40.0390 0x11c4  Running under WOW64
23:11:40.0390 0x11c4  Processor architecture: Intel x64
23:11:40.0390 0x11c4  Number of processors: 8
23:11:40.0390 0x11c4  Page size: 0x1000
23:11:40.0390 0x11c4  Boot type: Normal boot
23:11:40.0390 0x11c4  CodeIntegrityOptions = 0x00000001
23:11:40.0390 0x11c4  ============================================================
23:11:40.0447 0x11c4  KLMD registered as C:\WINDOWS\system32\drivers\71093961.sys
23:11:40.0447 0x11c4  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 10586.672, osProperties = 0x19
23:11:40.0623 0x11c4  System UUID: {E1C618DF-B3A0-16FE-D777-EA59F0775CED}
23:11:40.0899 0x11c4  Drive \Device\Harddisk0\DR0 - Size: 0x1D1C1116000 ( 1863.02 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:11:40.0900 0x11c4  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 ( 1863.02 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:11:40.0900 0x11c4  Drive \Device\Harddisk2\DR2 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:11:42.0715 0x11c4  Drive \Device\Harddisk3\DR3 - Size: 0x7470C05800 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:11:42.0717 0x11c4  ============================================================
23:11:42.0717 0x11c4  \Device\Harddisk0\DR0:
23:11:42.0717 0x11c4  MBR partitions:
23:11:42.0717 0x11c4  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E07800
23:11:42.0717 0x11c4  \Device\Harddisk1\DR1:
23:11:42.0718 0x11c4  MBR partitions:
23:11:42.0718 0x11c4  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E07800
23:11:42.0718 0x11c4  \Device\Harddisk2\DR2:
23:11:42.0718 0x11c4  MBR partitions:
23:11:42.0718 0x11c4  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0xFA800, BlocksNum 0xDDB8800
23:11:42.0718 0x11c4  \Device\Harddisk3\DR3:
23:11:42.0718 0x11c4  MBR partitions:
23:11:42.0719 0x11c4  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A384441
23:11:42.0719 0x11c4  ============================================================
23:11:42.0720 0x11c4  C: <-> \Device\Harddisk2\DR2\Partition1
23:11:42.0729 0x11c4  D: <-> \Device\Harddisk0\DR0\Partition1
23:11:43.0214 0x11c4  E: <-> \Device\Harddisk1\DR1\Partition1
23:11:43.0262 0x11c4  H: <-> \Device\Harddisk3\DR3\Partition1
23:11:43.0262 0x11c4  ============================================================
23:11:43.0262 0x11c4  Initialize success
23:11:43.0262 0x11c4  ============================================================
23:12:17.0531 0x0160  ============================================================
23:12:17.0531 0x0160  Scan started
23:12:17.0531 0x0160  Mode: Manual; SigCheck; TDLFS; 
23:12:17.0531 0x0160  ============================================================
23:12:17.0531 0x0160  KSN ping started
23:12:17.0649 0x0160  KSN ping finished: true
23:12:19.0592 0x0160  ================ Scan system memory ========================
23:12:19.0592 0x0160  System memory - ok
23:12:19.0592 0x0160  ================ Scan services =============================
23:12:19.0652 0x0160  1394ohci - ok
23:12:19.0655 0x0160  3ware - ok
23:12:19.0658 0x0160  ACPI - ok
23:12:19.0661 0x0160  acpiex - ok
23:12:19.0663 0x0160  acpipagr - ok
23:12:19.0666 0x0160  AcpiPmi - ok
23:12:19.0668 0x0160  acpitime - ok
23:12:19.0703 0x0160  [ 8C194A201698B4B4F77D974549819D1F, 081A2496FE1CE519E48677D99A831FF1FEEB1B33C75224CF288FA52F3E0E5FF0 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:12:19.0733 0x0160  AdobeFlashPlayerUpdateSvc - ok
23:12:19.0747 0x0160  ADP80XX - ok
23:12:19.0751 0x0160  AFD - ok
23:12:19.0753 0x0160  agp440 - ok
23:12:19.0757 0x0160  ahcache - ok
23:12:19.0759 0x0160  AJRouter - ok
23:12:19.0762 0x0160  ALG - ok
23:12:19.0767 0x0160  [ 2614AA6C833AEA48065B00DF6573E3D5, 1CD8E89FDDC7588568D067342512F5D5E5E08A89F07AC65CA5BA6BF2EE3FD892 ] AlienFusionService C:\Program Files\Alienware\Command Center\AlienFusionService.exe
23:12:19.0776 0x0160  AlienFusionService - ok
23:12:19.0779 0x0160  AmdK8 - ok
23:12:19.0782 0x0160  AmdPPM - ok
23:12:19.0785 0x0160  amdsata - ok
23:12:19.0788 0x0160  amdsbs - ok
23:12:19.0790 0x0160  amdxata - ok
23:12:19.0793 0x0160  AppID - ok
23:12:19.0796 0x0160  AppIDSvc - ok
23:12:19.0799 0x0160  Appinfo - ok
23:12:19.0802 0x0160  AppReadiness - ok
23:12:19.0805 0x0160  AppXSvc - ok
23:12:19.0807 0x0160  arcsas - ok
23:12:19.0810 0x0160  AsyncMac - ok
23:12:19.0812 0x0160  atapi - ok
23:12:19.0816 0x0160  AudioEndpointBuilder - ok
23:12:19.0818 0x0160  Audiosrv - ok
23:12:19.0850 0x0160  [ DA978AB6E0AAEA82235C943DEED3484C, 42A3ADB76B9E5F7309992C9737956CBE1706DD0FEC9565F493EDD104D8E64C97 ] avc3            C:\WINDOWS\system32\DRIVERS\avc3.sys
23:12:19.0890 0x0160  avc3 - ok
23:12:19.0912 0x0160  [ 09A3015AEA14CF9A4ECDE1CEA6AFE0AA, 77A58DE0961F1C2BD9627A975EF661A63EA5E4A3361433353408EABCE6869317 ] avckf           C:\WINDOWS\system32\DRIVERS\avckf.sys
23:12:19.0934 0x0160  avckf - ok
23:12:19.0939 0x0160  [ 5B64B0D162AABDE795B3F7A7234F2FE1, D1E97A2EB432BD41F77761BD65AD3B6235EA99E44115FD90EC224CF8BF30586A ] AWOPFilterDriver C:\Windows\system32\drivers\AWOPFilterDriver.sys
23:12:19.0945 0x0160  AWOPFilterDriver - ok
23:12:19.0948 0x0160  AxInstSV - ok
23:12:19.0950 0x0160  b06bdrv - ok
23:12:19.0953 0x0160  BasicDisplay - ok
23:12:19.0956 0x0160  BasicRender - ok
23:12:19.0960 0x0160  bcmfn - ok
23:12:19.0962 0x0160  bcmfn2 - ok
23:12:19.0965 0x0160  [ 4B190ACAE90EC79AD4D43EFCD3743DA0, 9D5187D4E1DF1672DEA2EF5C910FCA08BD8ED0573A55DF774E5300312ED87E05 ] bdelam          C:\WINDOWS\system32\drivers\bdelam.sys
23:12:19.0984 0x0160  bdelam - ok
23:12:19.0987 0x0160  BDESVC - ok
23:12:19.0992 0x0160  [ 14F686FA27C2914128031504B70D2B5E, BED77F4A6DC8B30ADB698FBCC00153D924310188EFBE22ADD2BAA3321C746556 ] bdfwfpf         C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys
23:12:20.0001 0x0160  bdfwfpf - ok
23:12:20.0006 0x0160  [ D8FAF7CFBC81E5E15CA7A7EC8EE1B409, 75E60DF2147DFB109E628FDF80EB1BFA5360E5935BB9237B67053588F906E1B1 ] BDVEDISK        C:\WINDOWS\system32\DRIVERS\bdvedisk.sys
23:12:20.0015 0x0160  BDVEDISK - ok
23:12:20.0018 0x0160  Beep - ok
23:12:20.0021 0x0160  BFE - ok
23:12:20.0023 0x0160  BITS - ok
23:12:20.0025 0x0160  bowser - ok
23:12:20.0028 0x0160  BrokerInfrastructure - ok
23:12:20.0030 0x0160  Browser - ok
23:12:20.0032 0x0160  BthAvrcpTg - ok
23:12:20.0035 0x0160  BthHFEnum - ok
23:12:20.0038 0x0160  bthhfhid - ok
23:12:20.0040 0x0160  BthHFSrv - ok
23:12:20.0043 0x0160  BTHMODEM - ok
23:12:20.0046 0x0160  bthserv - ok
23:12:20.0049 0x0160  buttonconverter - ok
23:12:20.0051 0x0160  CapImg - ok
23:12:20.0054 0x0160  cdfs - ok
23:12:20.0056 0x0160  CDPSvc - ok
23:12:20.0058 0x0160  cdrom - ok
23:12:20.0060 0x0160  CertPropSvc - ok
23:12:20.0063 0x0160  Chukoypahward - ok
23:12:20.0066 0x0160  circlass - ok
23:12:20.0067 0x0160  CLFS - ok
23:12:20.0070 0x0160  ClipSVC - ok
23:12:20.0076 0x0160  CmBatt - ok
23:12:20.0142 0x0160  [ BC52C29F562125AE078B95A7C7158909, 5FFFAC73D38BAF94B6A8917D97373BD89BEAD89149E7F4ACD8EBB41DE2F47BD7 ] CMUSBDAC        C:\WINDOWS\system32\DRIVERS\CMUSBDAC.sys
23:12:20.0243 0x0160  CMUSBDAC - ok
23:12:20.0249 0x0160  CNG - ok
23:12:20.0251 0x0160  cnghwassist - ok
23:12:20.0254 0x0160  [ 81F2B52C47B8AD32CC4FF967FC8D73DA, 13D84B4096E0F9AB9D04F6CD9E9C0DE4B6DF6F11D63C797266D719FD2429A655 ] CompFilter64    C:\WINDOWS\System32\drivers\lvbflt64.sys
23:12:20.0263 0x0160  CompFilter64 - ok
23:12:20.0286 0x0160  CompositeBus - ok
23:12:20.0288 0x0160  COMSysApp - ok
23:12:20.0291 0x0160  condrv - ok
23:12:20.0293 0x0160  CoreMessagingRegistrar - ok
23:12:20.0298 0x0160  CryptSvc - ok
23:12:20.0300 0x0160  dam - ok
23:12:20.0304 0x0160  DcomLaunch - ok
23:12:20.0306 0x0160  DcpSvc - ok
23:12:20.0309 0x0160  defragsvc - ok
23:12:20.0311 0x0160  DeviceAssociationService - ok
23:12:20.0314 0x0160  DeviceInstall - ok
23:12:20.0316 0x0160  DevQueryBroker - ok
23:12:20.0318 0x0160  Dfsc - ok
23:12:20.0321 0x0160  Dhcp - ok
23:12:20.0324 0x0160  diagnosticshub.standardcollector.service - ok
23:12:20.0327 0x0160  DiagTrack - ok
23:12:20.0411 0x0160  [ 91DF13EC831BDCFA36A7A12CD13D66B9, 5054281FE91D4BE0DB446F6F30E3D59E669185555F6C20B988DEC250713FFCED ] Disc Soft Lite Bus Service D:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
23:12:20.0444 0x0160  Disc Soft Lite Bus Service - ok
23:12:20.0450 0x0160  disk - ok
23:12:20.0452 0x0160  DmEnrollmentSvc - ok
23:12:20.0456 0x0160  dmvsc - ok
23:12:20.0459 0x0160  dmwappushservice - ok
23:12:20.0461 0x0160  Dnscache - ok
23:12:20.0464 0x0160  dot3svc - ok
23:12:20.0467 0x0160  DPS - ok
23:12:20.0469 0x0160  drmkaud - ok
23:12:20.0472 0x0160  DsmSvc - ok
23:12:20.0474 0x0160  DsSvc - ok
23:12:20.0478 0x0160  [ 496C3C6BC3D930D0960C9E75AA30F4A7, 3FE0E86DA8C2C6A990BB2F1B92C22BD3483882B8D69FF8025BB68A199362C234 ] dtlitescsibus   C:\WINDOWS\System32\drivers\dtlitescsibus.sys
23:12:20.0486 0x0160  dtlitescsibus - ok
23:12:20.0489 0x0160  DXGKrnl - ok
23:12:20.0494 0x0160  [ D117ACADF6B3AA39EE23EE6D66F05DCE, 7FFEAC8FF58B277569DF77384744ACF06D3788BD96515F7F7DEF1C3B8A2E2FF6 ] EagleX64        C:\Windows\system32\drivers\EagleX64.sys
23:12:20.0503 0x0160  EagleX64 - ok
23:12:20.0506 0x0160  Eaphost - ok
23:12:20.0508 0x0160  ebdrv - ok
23:12:20.0511 0x0160  EFS - ok
23:12:20.0513 0x0160  EhStorClass - ok
23:12:20.0516 0x0160  EhStorTcgDrv - ok
23:12:20.0518 0x0160  embeddedmode - ok
23:12:20.0521 0x0160  EntAppSvc - ok
23:12:20.0523 0x0160  ErrDev - ok
23:12:20.0528 0x0160  EventSystem - ok
23:12:20.0530 0x0160  exfat - ok
23:12:20.0533 0x0160  fastfat - ok
23:12:20.0535 0x0160  Fax - ok
23:12:20.0538 0x0160  fdc - ok
23:12:20.0540 0x0160  fdPHost - ok
23:12:20.0542 0x0160  FDResPub - ok
23:12:20.0545 0x0160  fhsvc - ok
23:12:20.0548 0x0160  FileCrypt - ok
23:12:20.0551 0x0160  FileInfo - ok
23:12:20.0553 0x0160  Filetrace - ok
23:12:20.0555 0x0160  flpydisk - ok
23:12:20.0558 0x0160  FltMgr - ok
23:12:20.0560 0x0160  FontCache - ok
23:12:20.0563 0x0160  FontCache3.0.0.0 - ok
23:12:20.0566 0x0160  FsDepends - ok
23:12:20.0568 0x0160  Fs_Rec - ok
23:12:20.0576 0x0160  [ 7F1CA4D562EB7BBFEBAFE740F2618365, 4545D3CE95275D90A5D0B2CDFEF0052B1A59A9E229A1275A348C485ADD19D5A8 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
23:12:20.0591 0x0160  Futuremark SystemInfo Service - ok
23:12:20.0594 0x0160  fvevol - ok
23:12:20.0596 0x0160  gagp30kx - ok
23:12:20.0599 0x0160  gencounter - ok
23:12:20.0601 0x0160  genericusbfn - ok
23:12:20.0604 0x0160  GPIOClx0101 - ok
23:12:20.0606 0x0160  gpsvc - ok
23:12:20.0608 0x0160  GpuEnergyDrv - ok
23:12:20.0614 0x0160  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:12:20.0621 0x0160  gupdate - ok
23:12:20.0626 0x0160  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:12:20.0633 0x0160  gupdatem - ok
23:12:20.0639 0x0160  [ F72818A52CBB5A9E8B2C9E350638A945, BB8E637DA21C911465FB13D7D28AAAE80691EA824146EEEA4AB94F86E5203567 ] gzflt           C:\WINDOWS\system32\DRIVERS\gzflt.sys
23:12:20.0650 0x0160  gzflt - ok
23:12:20.0653 0x0160  HDAudBus - ok
23:12:20.0656 0x0160  HidBatt - ok
23:12:20.0659 0x0160  HidBth - ok
23:12:20.0661 0x0160  hidi2c - ok
23:12:20.0664 0x0160  hidinterrupt - ok
23:12:20.0666 0x0160  HidIr - ok
23:12:20.0668 0x0160  hidserv - ok
23:12:20.0671 0x0160  HidUsb - ok
23:12:20.0673 0x0160  HomeGroupListener - ok
23:12:20.0675 0x0160  HomeGroupProvider - ok
23:12:20.0677 0x0160  HpSAMD - ok
23:12:20.0680 0x0160  HTTP - ok
23:12:20.0684 0x0160  [ 5651FBB74B1CE691BA1BE3E9D19D1BE1, 5CBB4C4C572B48068F79739A24A59FDBA8B53AA1C6DB72F60C4A452B5864470D ] huawei_enumerator C:\WINDOWS\System32\drivers\ew_jubusenum.sys
23:12:20.0704 0x0160  huawei_enumerator - ok
23:12:20.0706 0x0160  hwpolicy - ok
23:12:20.0709 0x0160  hyperkbd - ok
23:12:20.0711 0x0160  i8042prt - ok
23:12:20.0713 0x0160  iai2c - ok
23:12:20.0716 0x0160  iaLPSS2i_I2C - ok
23:12:20.0718 0x0160  iaLPSSi_GPIO - ok
23:12:20.0720 0x0160  iaLPSSi_I2C - ok
23:12:20.0722 0x0160  iaStorAV - ok
23:12:20.0725 0x0160  iaStorV - ok
23:12:20.0727 0x0160  ibbus - ok
23:12:20.0729 0x0160  icssvc - ok
23:12:20.0731 0x0160  IEEtwCollectorService - ok
23:12:20.0734 0x0160  IKEEXT - ok
23:12:20.0831 0x0160  [ 622868E4BAE8FBCD22CB1A5901A2C824, C1A2264C0984DD16C83B663C9CE43E049E1356E32C5771C3ACE225F285699138 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
23:12:20.0915 0x0160  IntcAzAudAddService - ok
23:12:20.0921 0x0160  intelide - ok
23:12:20.0924 0x0160  intelpep - ok
23:12:20.0928 0x0160  intelppm - ok
23:12:20.0930 0x0160  IoQos - ok
23:12:20.0932 0x0160  IpFilterDriver - ok
23:12:20.0935 0x0160  iphlpsvc - ok
23:12:20.0937 0x0160  IPMIDRV - ok
23:12:20.0939 0x0160  IPNAT - ok
23:12:20.0942 0x0160  IRENUM - ok
23:12:20.0944 0x0160  isapnp - ok
23:12:20.0947 0x0160  iScsiPrt - ok
23:12:20.0949 0x0160  k57nd60a - ok
23:12:20.0951 0x0160  kbdclass - ok
23:12:20.0953 0x0160  kbdhid - ok
23:12:20.0957 0x0160  kdnic - ok
23:12:20.0959 0x0160  KeyIso - ok
23:12:20.0961 0x0160  KSecDD - ok
23:12:20.0964 0x0160  KSecPkg - ok
23:12:20.0966 0x0160  ksthunk - ok
23:12:20.0969 0x0160  KtmRm - ok
23:12:20.0971 0x0160  LanmanServer - ok
23:12:20.0973 0x0160  LanmanWorkstation - ok
23:12:20.0978 0x0160  lfsvc - ok
23:12:20.0980 0x0160  LicenseManager - ok
23:12:20.0983 0x0160  lltdio - ok
23:12:20.0986 0x0160  lltdsvc - ok
23:12:20.0987 0x0160  lmhosts - ok
23:12:20.0991 0x0160  LSI_SAS - ok
23:12:20.0993 0x0160  LSI_SAS2i - ok
23:12:20.0997 0x0160  LSI_SAS3i - ok
23:12:21.0000 0x0160  LSI_SSS - ok
23:12:21.0002 0x0160  LSM - ok
23:12:21.0005 0x0160  luafv - ok
23:12:21.0013 0x0160  [ A0A527569856B9814E8920F52EBB67F5, 4347277C84B47E4CC048850BDEFB258CFB3B476AA99FD503FD71FBB70FFF5ACF ] LVRS64          C:\WINDOWS\system32\DRIVERS\lvrs64.sys
23:12:21.0025 0x0160  LVRS64 - ok
23:12:21.0111 0x0160  [ 415E344294D1C0D04627B29146F68481, B4A1A05BDF07E8F226A98E51F62BE18BE2C046A084C495BD8A95CABC79FD0614 ] LVUVC64         C:\WINDOWS\system32\DRIVERS\lvuvc64.sys
23:12:21.0195 0x0160  LVUVC64 - ok
23:12:21.0204 0x0160  MapsBroker - ok
23:12:21.0206 0x0160  [ F168E237D9919D22E2071FF7995D20CF, DFFDCDE9BE1F7C6ADE9452C0566826A7D49FEAA29E92D1ADC3FAF822BE5DE401 ] massfilter      C:\WINDOWS\System32\drivers\massfilter.sys
23:12:21.0218 0x0160  massfilter - ok
23:12:21.0220 0x0160  megasas - ok
23:12:21.0223 0x0160  megasr - ok
23:12:21.0225 0x0160  MessagingService - ok
23:12:21.0247 0x0160  mlx4_bus - ok
23:12:21.0250 0x0160  MMCSS - ok
23:12:21.0252 0x0160  Modem - ok
23:12:21.0255 0x0160  monitor - ok
23:12:21.0257 0x0160  mouclass - ok
23:12:21.0260 0x0160  mouhid - ok
23:12:21.0262 0x0160  mountmgr - ok
23:12:21.0264 0x0160  mpsdrv - ok
23:12:21.0267 0x0160  MpsSvc - ok
23:12:21.0269 0x0160  MRxDAV - ok
23:12:21.0271 0x0160  mrxsmb - ok
23:12:21.0274 0x0160  mrxsmb10 - ok
23:12:21.0276 0x0160  mrxsmb20 - ok
23:12:21.0279 0x0160  MsBridge - ok
23:12:21.0281 0x0160  MSDTC - ok
23:12:21.0285 0x0160  Msfs - ok
23:12:21.0289 0x0160  msgpiowin32 - ok
23:12:21.0291 0x0160  mshidkmdf - ok
23:12:21.0293 0x0160  mshidumdf - ok
23:12:21.0296 0x0160  msisadrv - ok
23:12:21.0298 0x0160  MSiSCSI - ok
23:12:21.0301 0x0160  msiserver - ok
23:12:21.0303 0x0160  MSKSSRV - ok
23:12:21.0306 0x0160  MsLldp - ok
23:12:21.0308 0x0160  MSPCLOCK - ok
23:12:21.0310 0x0160  MSPQM - ok
23:12:21.0313 0x0160  MsRPC - ok
23:12:21.0316 0x0160  mssmbios - ok
23:12:21.0319 0x0160  MSTEE - ok
23:12:21.0321 0x0160  MTConfig - ok
23:12:21.0324 0x0160  Mup - ok
23:12:21.0326 0x0160  mvumis - ok
23:12:21.0329 0x0160  NativeWifiP - ok
23:12:21.0332 0x0160  NcaSvc - ok
23:12:21.0334 0x0160  NcbService - ok
23:12:21.0337 0x0160  NcdAutoSetup - ok
23:12:21.0339 0x0160  ndfltr - ok
23:12:21.0342 0x0160  NDIS - ok
23:12:21.0344 0x0160  NdisCap - ok
23:12:21.0346 0x0160  NdisImPlatform - ok
23:12:21.0349 0x0160  NdisTapi - ok
23:12:21.0351 0x0160  Ndisuio - ok
23:12:21.0354 0x0160  NdisVirtualBus - ok
23:12:21.0356 0x0160  NdisWan - ok
23:12:21.0359 0x0160  ndiswanlegacy - ok
23:12:21.0361 0x0160  ndproxy - ok
23:12:21.0363 0x0160  Ndu - ok
23:12:21.0366 0x0160  NetBIOS - ok
23:12:21.0369 0x0160  NetBT - ok
23:12:21.0372 0x0160  Netlogon - ok
23:12:21.0374 0x0160  Netman - ok
23:12:21.0377 0x0160  netprofm - ok
23:12:21.0380 0x0160  NetSetupSvc - ok
23:12:21.0387 0x0160  NetTcpPortSharing - ok
23:12:21.0390 0x0160  NgcCtnrSvc - ok
23:12:21.0393 0x0160  NgcSvc - ok
23:12:21.0396 0x0160  NlaSvc - ok
23:12:21.0398 0x0160  Npfs - ok
23:12:21.0401 0x0160  npggsvc - ok
23:12:21.0403 0x0160  npsvctrig - ok
23:12:21.0406 0x0160  nsi - ok
23:12:21.0408 0x0160  nsiproxy - ok
23:12:21.0412 0x0160  NTFS - ok
23:12:21.0414 0x0160  Null - ok
23:12:21.0426 0x0160  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
23:12:21.0440 0x0160  NvContainerLocalSystem - ok
23:12:21.0451 0x0160  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
23:12:21.0464 0x0160  NvContainerNetworkService - ok
23:12:21.0472 0x0160  [ 64DA1993B1973F049C1347DA1B05185E, 2A04E263DB13751D033E2F9B9518820CF4942EEAFA5A32488570EEB699EE2A96 ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys
23:12:21.0482 0x0160  NVHDA - ok
23:12:21.0505 0x0160  [ 0B7CFF94C247E661A9D5F7FDAB2F726B, 16D651A50347131CC6B96EB17096EFB22F9767572964E6C12CA1BF928E6C1397 ] NVIDIA Wireless Controller Service C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
23:12:21.0530 0x0160  NVIDIA Wireless Controller Service - ok
23:12:21.0790 0x0160  [ 76ECA562B95DB26C64BEC14BB188A3F6, B4DB40D391B227393EEC13659C64B03499632FD11A75E5183BE8A0C8F3C9688B ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
23:12:22.0032 0x0160  nvlddmkm - ok
23:12:22.0048 0x0160  nvraid - ok
23:12:22.0050 0x0160  nvstor - ok
23:12:22.0053 0x0160  [ 5FA3A8CE5BAA23E2C9D18EA154017BC4, 6C2B0546FB9D8A4C7A747AB776BB98C8A90D2745FA0D293FA63DABBF67C7ED58 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
23:12:22.0060 0x0160  NvStreamKms - ok
23:12:22.0063 0x0160  [ 1D54A108BFAD4ED568E393518769F516, D0BE8343784DDD2B7CADFC85779CC72C78D49601E9C746D13D8134CE38DD920F ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
23:12:22.0071 0x0160  nvvad_WaveExtensible - ok
23:12:22.0074 0x0160  nv_agp - ok
23:12:22.0077 0x0160  OneSyncSvc - ok
23:12:22.0193 0x0160  [ AD851D818F399DD946A9C17AB2156F22, 4A541E7A3A3164581BFB9080DE0976E18F6DD00E39458EBBCBD3B2445708BEB5 ] Origin Client Service D:\Program Files (x86)\Origin\OriginClientService.exe
23:12:22.0248 0x0160  Origin Client Service - ok
23:12:22.0316 0x0160  [ 788363C87EBD90AC1EAD2DC5A9A40759, B565663B459414C5C9F81451D9A127D62CDF605BC2A9E686F74A2E4FD44A9B43 ] Origin Web Helper Service D:\Program Files (x86)\Origin\OriginWebHelperService.exe
23:12:22.0373 0x0160  Origin Web Helper Service - ok
23:12:22.0379 0x0160  p2pimsvc - ok
23:12:22.0381 0x0160  p2psvc - ok
23:12:22.0384 0x0160  Parport - ok
23:12:22.0386 0x0160  partmgr - ok
23:12:22.0388 0x0160  PcaSvc - ok
23:12:22.0390 0x0160  pci - ok
23:12:22.0393 0x0160  pciide - ok
23:12:22.0395 0x0160  pcmcia - ok
23:12:22.0397 0x0160  pcw - ok
23:12:22.0400 0x0160  pdc - ok
23:12:22.0407 0x0160  PEAUTH - ok
23:12:22.0409 0x0160  percsas2i - ok
23:12:22.0412 0x0160  percsas3i - ok
23:12:22.0442 0x0160  PerfHost - ok
23:12:22.0449 0x0160  PhoneSvc - ok
23:12:22.0451 0x0160  PimIndexMaintenanceSvc - ok
23:12:22.0472 0x0160  pla - ok
23:12:22.0475 0x0160  PlugPlay - ok
23:12:22.0478 0x0160  PnkBstrA - ok
23:12:22.0480 0x0160  PNRPAutoReg - ok
23:12:22.0482 0x0160  PNRPsvc - ok
23:12:22.0485 0x0160  PolicyAgent - ok
23:12:22.0488 0x0160  Power - ok
23:12:22.0491 0x0160  PptpMiniport - ok
23:12:22.0560 0x0160  [ 2195908CEF288E1C10E5266B9DF75D29, 30E0664A03C58DD3B325A9A4A248AD1FA9297DD65F0D472C3AD90E21B238169F ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
23:12:22.0658 0x0160  PrintNotify - ok
23:12:22.0663 0x0160  Processor - ok
23:12:22.0686 0x0160  [ BA2DA685FB152180908C7D778B2BBD61, 335C81941855D3DE90443E47E42D44645BE2AB736334DB96C0890D82EEF03475 ] ProductAgentService C:\Program Files\Bitdefender Agent\ProductAgentService.exe
23:12:22.0712 0x0160  ProductAgentService - ok
23:12:22.0715 0x0160  ProfSvc - ok
23:12:22.0718 0x0160  Psched - ok
23:12:22.0720 0x0160  QWAVE - ok
23:12:22.0723 0x0160  QWAVEdrv - ok
23:12:22.0725 0x0160  RasAcd - ok
23:12:22.0728 0x0160  RasAgileVpn - ok
23:12:22.0730 0x0160  RasAuto - ok
23:12:22.0733 0x0160  Rasl2tp - ok
23:12:22.0736 0x0160  RasMan - ok
23:12:22.0738 0x0160  RasPppoe - ok
23:12:22.0741 0x0160  RasSstp - ok
23:12:22.0743 0x0160  rdbss - ok
23:12:22.0747 0x0160  rdpbus - ok
23:12:22.0750 0x0160  RDPDR - ok
23:12:22.0755 0x0160  RdpVideoMiniport - ok
23:12:22.0757 0x0160  rdyboost - ok
23:12:22.0759 0x0160  ReFSv1 - ok
23:12:22.0762 0x0160  RemoteAccess - ok
23:12:22.0764 0x0160  RemoteRegistry - ok
23:12:22.0767 0x0160  RetailDemo - ok
23:12:22.0769 0x0160  RpcEptMapper - ok
23:12:22.0772 0x0160  RpcLocator - ok
23:12:22.0775 0x0160  RpcSs - ok
23:12:22.0777 0x0160  rspndr - ok
23:12:22.0848 0x0160  [ 844CB9DBE08797A2A875DF9E2AF108D7, 53463064C2F34DB9C5E1484FA370AC00C4A3486713EC80E2323B07150A27DD1F ] RtlWlanu        C:\WINDOWS\System32\drivers\rtwlanu.sys
23:12:22.0920 0x0160  RtlWlanu - ok
23:12:22.0927 0x0160  s3cap - ok
23:12:22.0929 0x0160  SamSs - ok
23:12:22.0931 0x0160  sbp2port - ok
23:12:22.0933 0x0160  SCardSvr - ok
23:12:22.0936 0x0160  ScDeviceEnum - ok
23:12:22.0939 0x0160  scfilter - ok
23:12:22.0941 0x0160  Schedule - ok
23:12:22.0943 0x0160  SCPolicySvc - ok
23:12:22.0946 0x0160  [ 8B56BDCE6A303DDE63D63440D1CF9AD1, 66A4356C29D00A1B8A95975C073AE4E6D2A90CBF3B143FE9B83B96BEC0805D46 ] ScreamBAudioSvc C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys
23:12:22.0954 0x0160  ScreamBAudioSvc - ok
23:12:22.0956 0x0160  sdbus - ok
23:12:22.0959 0x0160  SDRSVC - ok
23:12:22.0961 0x0160  sdstor - ok
23:12:22.0964 0x0160  seclogon - ok
23:12:22.0966 0x0160  SENS - ok
23:12:22.0969 0x0160  SensorDataService - ok
23:12:22.0971 0x0160  SensorService - ok
23:12:22.0973 0x0160  SensrSvc - ok
23:12:22.0976 0x0160  SerCx - ok
23:12:22.0979 0x0160  SerCx2 - ok
23:12:22.0981 0x0160  Serenum - ok
23:12:22.0983 0x0160  Serial - ok
23:12:22.0986 0x0160  sermouse - ok
23:12:22.0991 0x0160  SessionEnv - ok
23:12:22.0993 0x0160  sfloppy - ok
23:12:22.0997 0x0160  SharedAccess - ok
23:12:23.0001 0x0160  ShellHWDetection - ok
23:12:23.0004 0x0160  SiSRaid2 - ok
23:12:23.0006 0x0160  SiSRaid4 - ok
23:12:23.0009 0x0160  smphost - ok
23:12:23.0011 0x0160  SmsRouter - ok
23:12:23.0016 0x0160  SNMPTRAP - ok
23:12:23.0018 0x0160  spaceport - ok
23:12:23.0021 0x0160  SpbCx - ok
23:12:23.0024 0x0160  Spooler - ok
23:12:23.0027 0x0160  sppsvc - ok
23:12:23.0029 0x0160  srv - ok
23:12:23.0031 0x0160  srv2 - ok
23:12:23.0034 0x0160  srvnet - ok
23:12:23.0037 0x0160  [ AFC159BDB8CD5A804D015D8A3624ECC6, 863150170D7F84D793C7CECD40439A5B46D337A8B904183ED8C53FDA9FB71091 ] ssdevfactory    C:\WINDOWS\System32\drivers\ssdevfactory.sys
23:12:23.0046 0x0160  ssdevfactory - ok
23:12:23.0049 0x0160  SSDPSRV - ok
23:12:23.0052 0x0160  [ BA25B85C9F21486C144E59A2C3873C21, B8CF01BD70C938807A932C8177DA30F639AD8161A445A7B89D21620BEAD094F8 ] sshid           C:\WINDOWS\System32\drivers\sshid.sys
23:12:23.0060 0x0160  sshid - ok
23:12:23.0063 0x0160  SstpSvc - ok
23:12:23.0066 0x0160  StateRepository - ok
23:12:23.0094 0x0160  [ 90E22D7CDE08E07446D238A569BCAB7C, 3D4F413D0B0C9CF28D06E0476F24AC6441C8678DF786D9971B39C91C9F9B8020 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
23:12:23.0123 0x0160  Steam Client Service - ok
23:12:23.0127 0x0160  stexstor - ok
23:12:23.0130 0x0160  stisvc - ok
23:12:23.0132 0x0160  storahci - ok
23:12:23.0135 0x0160  storflt - ok
23:12:23.0137 0x0160  stornvme - ok
23:12:23.0140 0x0160  storqosflt - ok
23:12:23.0142 0x0160  StorSvc - ok
23:12:23.0144 0x0160  storufs - ok
23:12:23.0147 0x0160  storvsc - ok
23:12:23.0149 0x0160  svsvc - ok
23:12:23.0152 0x0160  swenum - ok
23:12:23.0154 0x0160  swprv - ok
23:12:23.0158 0x0160  Synth3dVsc - ok
23:12:23.0160 0x0160  SysMain - ok
23:12:23.0163 0x0160  SystemEventsBroker - ok
23:12:23.0165 0x0160  TabletInputService - ok
23:12:23.0168 0x0160  [ DABC1C08AD2CD6578A1B49C38366110A, D1D4D5ACF2A4847F6E3F35B10658F01E1BA3901436E00BFF09F4871BBC5AFBEB ] tap0901_openvpn_accl C:\WINDOWS\System32\drivers\tap0901_openvpn_accl.sys
23:12:23.0177 0x0160  tap0901_openvpn_accl - ok
23:12:23.0180 0x0160  TapiSrv - ok
23:12:23.0182 0x0160  Tcpip - ok
23:12:23.0185 0x0160  Tcpip6 - ok
23:12:23.0188 0x0160  tcpipreg - ok
23:12:23.0192 0x0160  tdx - ok
23:12:23.0194 0x0160  terminpt - ok
23:12:23.0197 0x0160  TermService - ok
23:12:23.0200 0x0160  Themes - ok
23:12:23.0202 0x0160  TieringEngineService - ok
23:12:23.0205 0x0160  tiledatamodelsvc - ok
23:12:23.0207 0x0160  TimeBroker - ok
23:12:23.0210 0x0160  TPM - ok
23:12:23.0212 0x0160  TrkWks - ok
23:12:23.0226 0x0160  [ ADD8AFDAB539AF2B1FB75F6DB2CD7B71, 46BA69DA6114A167D6C467AB9BA583514475509184C6FF056460ADE76D0A76B1 ] trufos          C:\WINDOWS\system32\DRIVERS\trufos.sys
23:12:23.0243 0x0160  trufos - ok
23:12:23.0247 0x0160  TrustedInstaller - ok
23:12:23.0251 0x0160  tsusbflt - ok
23:12:23.0253 0x0160  TsUsbGD - ok
23:12:23.0256 0x0160  tunnel - ok
23:12:23.0258 0x0160  tzautoupdate - ok
23:12:23.0261 0x0160  uagp35 - ok
23:12:23.0263 0x0160  UASPStor - ok
23:12:23.0265 0x0160  UcmCx0101 - ok
23:12:23.0267 0x0160  UcmUcsi - ok
23:12:23.0270 0x0160  Ucx01000 - ok
23:12:23.0272 0x0160  UdeCx - ok
23:12:23.0275 0x0160  udfs - ok
23:12:23.0277 0x0160  UEFI - ok
23:12:23.0280 0x0160  Ufx01000 - ok
23:12:23.0283 0x0160  UfxChipidea - ok
23:12:23.0285 0x0160  ufxsynopsys - ok
23:12:23.0290 0x0160  UI0Detect - ok
23:12:23.0293 0x0160  uliagpkx - ok
23:12:23.0297 0x0160  umbus - ok
23:12:23.0299 0x0160  UmPass - ok
23:12:23.0302 0x0160  UmRdpService - ok
23:12:23.0304 0x0160  UnistoreSvc - ok
23:12:23.0338 0x0160  [ 8D75BADCE729E1314197ACAF4A19EF63, 3D83AFE4B866C4305B94C753C21F7B5E7A2AF1F5CA1CA0FFEFB8073409265336 ] UPDATESRV       C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe
23:12:23.0349 0x0160  UPDATESRV - ok
23:12:23.0352 0x0160  upnphost - ok
23:12:23.0355 0x0160  UrsChipidea - ok
23:12:23.0357 0x0160  UrsCx01000 - ok
23:12:23.0360 0x0160  UrsSynopsys - ok
23:12:23.0363 0x0160  usbaudio - ok
23:12:23.0365 0x0160  usbccgp - ok
23:12:23.0368 0x0160  usbcir - ok
23:12:23.0370 0x0160  usbehci - ok
23:12:23.0373 0x0160  usbhub - ok
23:12:23.0376 0x0160  USBHUB3 - ok
23:12:23.0378 0x0160  usbohci - ok
23:12:23.0381 0x0160  usbprint - ok
23:12:23.0383 0x0160  usbser - ok
23:12:23.0386 0x0160  USBSTOR - ok
23:12:23.0389 0x0160  usbuhci - ok
23:12:23.0391 0x0160  usbvideo - ok
23:12:23.0394 0x0160  USBXHCI - ok
23:12:23.0396 0x0160  usb_rndisx - ok
23:12:23.0399 0x0160  UserDataSvc - ok
23:12:23.0425 0x0160  UserManager - ok
23:12:23.0428 0x0160  UsoSvc - ok
23:12:23.0430 0x0160  VaultSvc - ok
23:12:23.0433 0x0160  vdrvroot - ok
23:12:23.0437 0x0160  vds - ok
23:12:23.0440 0x0160  VerifierExt - ok
23:12:23.0442 0x0160  vhdmp - ok
23:12:23.0445 0x0160  vhf - ok
23:12:23.0494 0x0160  [ AAEBFBB125E2B1D4C1A6352F707DEFF7, 0ABADD245EFDB8C12C10C275A53661F31E4DB046CC1C7B825015EFB7E5E25850 ] VmbService      D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
23:12:23.0502 0x0160  VmbService - detected UnsignedFile.Multi.Generic ( 1 )
23:12:23.0710 0x0160  VmbService ( UnsignedFile.Multi.Generic ) - warning
23:12:23.0918 0x0160  vmbus - ok
23:12:23.0923 0x0160  VMBusHID - ok
23:12:23.0929 0x0160  vmicguestinterface - ok
23:12:23.0934 0x0160  vmicheartbeat - ok
23:12:23.0939 0x0160  vmickvpexchange - ok
23:12:23.0943 0x0160  vmicrdv - ok
23:12:23.0948 0x0160  vmicshutdown - ok
23:12:23.0953 0x0160  vmictimesync - ok
23:12:23.0957 0x0160  vmicvmsession - ok
23:12:23.0960 0x0160  vmicvss - ok
23:12:23.0964 0x0160  [ 1E4D31FEC921300C5F262C52F5FCC666, 19FF08BD37908C1C49427DE8E6E69AA84E8EEEBD5A4B0F2226ED1A73C862D63D ] vodafone_K3805-z_dc_enum C:\WINDOWS\System32\drivers\vodafone_K3805-z_dc_enum.sys
23:12:23.0975 0x0160  vodafone_K3805-z_dc_enum - ok
23:12:23.0978 0x0160  volmgr - ok
23:12:23.0981 0x0160  volmgrx - ok
23:12:23.0983 0x0160  volsnap - ok
23:12:23.0986 0x0160  vpci - ok
23:12:23.0988 0x0160  vsmraid - ok
23:12:23.0991 0x0160  VSS - ok
23:12:24.0017 0x0160  [ 3AD565ABBC3B11F14440A3ECEC94BD01, 129FB871C712001ABD476CBF8E8F9D9D7F14B9CCB734953E29B2C1FB844B3783 ] VSSERV          C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe
23:12:24.0045 0x0160  VSSERV - ok
23:12:24.0058 0x0160  [ 4889BF61752AD05C2AC73CF72A7C8F16, 9B2FF0CAF57855AA1F37933F2B9DC2B845D6BAD80C5DD400BD688DF343AFCDF5 ] vsservp         C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe
23:12:24.0073 0x0160  vsservp - ok
23:12:24.0076 0x0160  VSTXRAID - ok
23:12:24.0079 0x0160  vwifibus - ok
23:12:24.0081 0x0160  vwififlt - ok
23:12:24.0084 0x0160  vwifimp - ok
23:12:24.0087 0x0160  W32Time - ok
23:12:24.0089 0x0160  WacomPen - ok
23:12:24.0092 0x0160  WalletService - ok
23:12:24.0094 0x0160  wanarp - ok
23:12:24.0097 0x0160  wanarpv6 - ok
23:12:24.0100 0x0160  wbengine - ok
23:12:24.0103 0x0160  WbioSrvc - ok
23:12:24.0105 0x0160  Wcmsvc - ok
23:12:24.0108 0x0160  wcncsvc - ok
23:12:24.0111 0x0160  WcsPlugInService - ok
23:12:24.0114 0x0160  WdBoot - ok
23:12:24.0117 0x0160  Wdf01000 - ok
23:12:24.0119 0x0160  WdFilter - ok
23:12:24.0122 0x0160  WdiServiceHost - ok
23:12:24.0124 0x0160  WdiSystemHost - ok
23:12:24.0127 0x0160  wdiwifi - ok
23:12:24.0130 0x0160  WdNisDrv - ok
23:12:24.0132 0x0160  WdNisSvc - ok
23:12:24.0136 0x0160  WebClient - ok
23:12:24.0138 0x0160  Wecsvc - ok
23:12:24.0141 0x0160  WEPHOSTSVC - ok
23:12:24.0144 0x0160  wercplsupport - ok
23:12:24.0146 0x0160  WerSvc - ok
23:12:24.0150 0x0160  WFPLWFS - ok
23:12:24.0152 0x0160  WiaRpc - ok
23:12:24.0155 0x0160  WIMMount - ok
23:12:24.0157 0x0160  WinDefend - ok
23:12:24.0163 0x0160  WindowsTrustedRT - ok
23:12:24.0165 0x0160  WindowsTrustedRTProxy - ok
23:12:24.0168 0x0160  WinHttpAutoProxySvc - ok
23:12:24.0171 0x0160  WinMad - ok
23:12:24.0176 0x0160  Winmgmt - ok
23:12:24.0179 0x0160  WinRM - ok
23:12:24.0184 0x0160  WINUSB - ok
23:12:24.0187 0x0160  WinVerbs - ok
23:12:24.0190 0x0160  WlanSvc - ok
23:12:24.0192 0x0160  wlidsvc - ok
23:12:24.0195 0x0160  WmiAcpi - ok
23:12:24.0199 0x0160  wmiApSrv - ok
23:12:24.0201 0x0160  WMPNetworkSvc - ok
23:12:24.0208 0x0160  [ 2A9650FCC696DB28E45EA8B33B99B8E6, FBEBC6C05D50F578C6EEE0A7285EBE1DEADB08DD21FA3232630FD8D5A68FC3FB ] Wof             C:\WINDOWS\system32\drivers\Wof.sys
23:12:24.0222 0x0160  Wof - ok
23:12:24.0227 0x0160  workfolderssvc - ok
23:12:24.0230 0x0160  wpcfltr - ok
23:12:24.0232 0x0160  WPDBusEnum - ok
23:12:24.0235 0x0160  WpdUpFltr - ok
23:12:24.0238 0x0160  WpnService - ok
23:12:24.0241 0x0160  ws2ifsl - ok
23:12:24.0244 0x0160  wscsvc - ok
23:12:24.0246 0x0160  WSearch - ok
23:12:24.0251 0x0160  WSService - ok
23:12:24.0294 0x0160  [ F970E37C0020653227AAD3CC5E339EC6, 4FFAEEDD4CB46513440F21CA553CF9A7621672836F183E566324C354958C62D8 ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
23:12:24.0379 0x0160  wuauserv - ok
23:12:24.0384 0x0160  WudfPf - ok
23:12:24.0386 0x0160  WUDFRd - ok
23:12:24.0390 0x0160  wudfsvc - ok
23:12:24.0392 0x0160  WUDFWpdFs - ok
23:12:24.0395 0x0160  WUDFWpdMtp - ok
23:12:24.0398 0x0160  WwanSvc - ok
23:12:24.0400 0x0160  XblAuthManager - ok
23:12:24.0403 0x0160  XblGameSave - ok
23:12:24.0406 0x0160  xboxgip - ok
23:12:24.0409 0x0160  XboxNetApiSvc - ok
23:12:24.0411 0x0160  xinputhid - ok
23:12:24.0416 0x0160  xusb22 - ok
23:12:24.0421 0x0160  [ 40826B3282E5D17A32695ABC7F55B129, BBDC08987A4F80CC29540DAFF75E784EC4B5D4CF80114BAC747B4223B44716FA ] ZTEusbmdm6k     C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys
23:12:24.0433 0x0160  ZTEusbmdm6k - ok
23:12:24.0439 0x0160  [ 2027F0FB014474FA494C3A28D87BD836, 6DF3FFE4430FC90C4DB07F306B2B81D568DEA9F47BE0A5A77FDE5D941E9D9A19 ] ZTEusbnet       C:\WINDOWS\System32\drivers\ZTEusbnet.sys
23:12:24.0452 0x0160  ZTEusbnet - ok
23:12:24.0457 0x0160  [ 40826B3282E5D17A32695ABC7F55B129, BBDC08987A4F80CC29540DAFF75E784EC4B5D4CF80114BAC747B4223B44716FA ] ZTEusbnmea      C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys
23:12:24.0469 0x0160  ZTEusbnmea - ok
23:12:24.0474 0x0160  [ 40826B3282E5D17A32695ABC7F55B129, BBDC08987A4F80CC29540DAFF75E784EC4B5D4CF80114BAC747B4223B44716FA ] ZTEusbser6k     C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys
23:12:24.0486 0x0160  ZTEusbser6k - ok
23:12:24.0491 0x0160  [ 40826B3282E5D17A32695ABC7F55B129, BBDC08987A4F80CC29540DAFF75E784EC4B5D4CF80114BAC747B4223B44716FA ] ZTEusbvoice     C:\WINDOWS\system32\DRIVERS\ZTEusbvoice.sys
23:12:24.0504 0x0160  ZTEusbvoice - ok
23:12:24.0504 0x0160  ================ Scan global ===============================
23:12:24.0514 0x0160  [ Global ] - ok
23:12:24.0514 0x0160  ================ Scan MBR ==================================
23:12:24.0515 0x0160  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:12:24.0584 0x0160  \Device\Harddisk0\DR0 - ok
23:12:24.0588 0x0160  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
23:12:24.0677 0x0160  \Device\Harddisk1\DR1 - ok
23:12:24.0680 0x0160  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
23:12:24.0773 0x0160  \Device\Harddisk2\DR2 - ok
23:12:24.0804 0x0160  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk3\DR3
23:12:25.0054 0x0160  \Device\Harddisk3\DR3 - ok
23:12:25.0055 0x0160  ================ Scan VBR ==================================
23:12:25.0057 0x0160  [ 33D97A36A7422D96C353A9D9BD1D369F ] \Device\Harddisk0\DR0\Partition1
23:12:25.0059 0x0160  \Device\Harddisk0\DR0\Partition1 - ok
23:12:25.0062 0x0160  [ 97A1ADDEDAD8391916289C41FB01E89E ] \Device\Harddisk1\DR1\Partition1
23:12:25.0064 0x0160  \Device\Harddisk1\DR1\Partition1 - ok
23:12:25.0068 0x0160  [ B60BE4D8D1540CD9148F8C1219AC1EAB ] \Device\Harddisk2\DR2\Partition1
23:12:25.0070 0x0160  \Device\Harddisk2\DR2\Partition1 - ok
23:12:25.0073 0x0160  [ 916D54336C9822134148422715A8A341 ] \Device\Harddisk3\DR3\Partition1
23:12:25.0076 0x0160  \Device\Harddisk3\DR3\Partition1 - ok
23:12:25.0076 0x0160  ================ Scan generic autorun ======================
23:12:25.0335 0x0160  [ 65E8545F1297CD83534C354A7BED1848, 19B3F3C17A335837454DC1851C6436D0BB2D8B1595AEB4DC71265FB20868B48F ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
23:12:25.0562 0x0160  RtHDVCpl - ok
23:12:25.0575 0x0160  [ EBC0E8C0A4DDA2C32A7D5863462A321A, 2F410138DB66D0219254339F1F098E401CEDAA032596F1F67BC54F394256FC68 ] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
23:12:25.0582 0x0160  amd_dc_opt - detected UnsignedFile.Multi.Generic ( 1 )
23:12:25.0712 0x0160  Detect skipped due to KSN trusted
23:12:25.0712 0x0160  amd_dc_opt - ok
23:12:25.0773 0x0160  [ 8FFDB89A0FB7C8ABC3A8825E38047341, B9107FAA3A885CD9A08C20F78D31C3642FA76812E417F41C4F2ADF7D90CA8C72 ] D:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
23:12:25.0788 0x0160  LWS - ok
23:12:25.0871 0x0160  [ E10C1403D635EEABCA1DB5B82B98EB87, 806854D712212657F6BA84242FBCDBB84DF98CCD2B1216C9B21E4B4A5A128F1B ] D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe
23:12:25.0930 0x0160  VmbNotifier - detected UnsignedFile.Multi.Generic ( 1 )
23:12:26.0080 0x0160  VmbNotifier ( UnsignedFile.Multi.Generic ) - warning
23:12:26.0229 0x0160  [ 06A9971B6F5701B95624532C65193D87, 731AD2C67CD91CC1FA8CB90FB672A8EB4083D7C1685F42BC1D76F3CF21356B14 ] D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
23:12:26.0241 0x0160  MobileBroadband - detected UnsignedFile.Multi.Generic ( 1 )
23:12:26.0397 0x0160  MobileBroadband ( UnsignedFile.Multi.Generic ) - warning
23:12:26.0397 0x0160  Force sending object to P2P due to detect: D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
23:12:26.0775 0x0160  Object send P2P result: true
23:12:27.0003 0x0160  OneDriveSetup - ok
23:12:27.0005 0x0160  OneDriveSetup - ok
23:12:27.0027 0x0160  [ FD9A7F99A09DB266D0C1361B0ACCBD7E, 579160BDACDFE39AE5DDD7B5C2964453E89BA8D933F3FB16C6E3897EA3BDED29 ] C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\OneDrive.exe
23:12:27.0053 0x0160  OneDrive - ok
23:12:27.0173 0x0160  [ 3D5D4137594D2EBA8868EAD504B89366, D5FEB5B8303B083A79A4617E59B2FB34FAD71BE72F3F8DD6E4B69B3D03FE658A ] D:\Program Files\DAEMON Tools Lite\DTAgent.exe
23:12:27.0251 0x0160  DAEMON Tools Lite Automount - ok
23:12:27.0335 0x0160  [ 376E709A4AE341CDB7E05FBFBF2E49AB, 7942E1EECC26A8B6B26EDB759723E5666654C5218E2BBC8F50FF192009EEF9FC ] D:\Program Files (x86)\Origin\Origin.exe
23:12:27.0391 0x0160  EADM - ok
23:12:27.0571 0x0160  [ 79B65FCC2AC6169B0B898F2894C61221, 5D4801D5D3C8E60F02D93E07B0068471C37B7E25359786A868DBC391D9E4E9DD ] C:\Program Files\CCleaner\CCleaner64.exe
23:12:27.0715 0x0160  CCleaner Monitoring - ok
23:12:27.0722 0x0160  Waiting for KSN requests completion. In queue: 28
23:12:28.0741 0x0160  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.9.10586.672 ), 0x60100 ( disabled : updated )
23:12:28.0743 0x0160  AV detected via SS2: Bitdefender Antivirus, C:\Program Files\Bitdefender\Bitdefender 2017\wscfix.exe ( 21.0.21.992 ), 0x41000 ( enabled : updated )
23:12:28.0747 0x0160  Win FW state via NFP2: enabled ( trusted )
23:12:28.0842 0x0160  ============================================================
23:12:28.0842 0x0160  Scan finished
23:12:28.0842 0x0160  ============================================================
23:12:28.0852 0x23b4  Detected object count: 3
23:12:28.0852 0x23b4  Actual detected object count: 3
23:13:39.0804 0x23b4  VmbService ( UnsignedFile.Multi.Generic ) - skipped by user
23:13:39.0804 0x23b4  VmbService ( UnsignedFile.Multi.Generic ) - User select action: Skip 
23:13:39.0804 0x23b4  VmbNotifier ( UnsignedFile.Multi.Generic ) - skipped by user
23:13:39.0804 0x23b4  VmbNotifier ( UnsignedFile.Multi.Generic ) - User select action: Skip 
23:13:39.0805 0x23b4  MobileBroadband ( UnsignedFile.Multi.Generic ) - skipped by user
23:13:39.0805 0x23b4  MobileBroadband ( UnsignedFile.Multi.Generic ) - User select action: Skip

Alt 07.12.2016, 23:26   #11
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 07.12.2016, 23:49   #12
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Das Internet läuft auf jeden fall schonmal schneller oder besser gesagt die Seiten öffnen schneller
Einmal adwcleaner Teil 1 hatte das schonmal auf laufen gehabt
Code:
ATTFilter
# AdwCleaner v6.040 - Bericht erstellt am 07/12/2016 um 17:23:24
# Aktualisiert am 02/12/2016 von Malwarebytes
# Datenbank : 2016-12-06.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Patrik - DESKTOP-6DECSKV
# Gestartet von : D:\Benutzer\Downloads\AdwCleaner_6.040.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelöscht: C:\ProgramData\74159a2475b32161
[-] Ordner gelöscht: C:\Users\Patrik\AppData\Local\DriverToolkit
[-] Ordner gelöscht: C:\Users\Patrik\AppData\Local\slimware utilities inc
[#] Ordner mit Neustart gelöscht: C:\Users\Patrik\AppData\Local\SlimWare Utilities Inc
[-] Ordner gelöscht: C:\ProgramData\7b24ec7cc000461ebe26d116b88142c8
[-] Ordner gelöscht: C:\Users\Public\Documents\Downloaded Installers
[-] Ordner gelöscht: C:\Program Files (x86)\DPower
[-] Ordner gelöscht: C:\Program Files (x86)\BestCleaner
[#] Ordner mit Neustart gelöscht: C:\Program Files (x86)\DPower


***** [ Dateien ] *****

[-] Datei gelöscht: C:\END


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****

[-] Aufgabe gelöscht: DRIVERTOOLKIT AUTORUN


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\jhdbca
[-] Schlüssel gelöscht: HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Software\DriverToolkit
[-] Schlüssel gelöscht: HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Software\SlimWare Utilities Inc
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\jhdbca
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\DriverToolkit
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\SlimWare Utilities Inc
[-] Schlüssel gelöscht: HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Schlüssel gelöscht: HKLM\SOFTWARE\jhdbca
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\DriverToolkit
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\SlimWare Utilities Inc
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\MGT
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\jhdbca


***** [ Browser ] *****

[-] [C:\Users\Patrik\AppData\Local\Chromium\User Data\Default\Web data] [Search Provider] Gelöscht: search provided by yahoo
[-] [C:\Users\Patrik\AppData\Local\Chromium\User Data\Default] [startup_urls] Gelöscht: hxxps://de.search.yahoo.com/yhs/web?hspart=elm&hsimp=yhs-001&type=hdr_s_16_17_orgnl&param1=1&param2=f%3D7%26b%3Dchmm%26cc%3Dde%26pa%3DHodor%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0B0A0D0B0F0FtD0CtB0DtA0DyB0BtN0D0Tzu0StCyDzztBtN1L2XzutAtFtCzytFtAtFtCtN1L1Czu1M1Q1CtBtBtFtCtFtDtN1L1G1B1V1N2Y1L1Qzu2SyE0FyC0EtA0F0F0CtGyCzytD0BtGyB0ByEyEtGyC0CyEyDtGzyzy0ByCtDyCyDyCyD0CzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0F0ByDyByByDyEtG0Azz0CtBtGyEyEzz0AtGzz0ByB0FtGtC0DtDtD0E0CzyyCtD0E0EyC2QtN0A0LzuyE%26cr%3D1641210216%26a%3Dhdr_s_16_17_orgnl%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&uref=chmm
[-] [C:\Users\Patrik\AppData\Local\Chromium\User Data\Default] [homepage] Gelöscht: hxxps://de.search.yahoo.com/yhs/web?hspart=elm&hsimp=yhs-001&type=hdr_s_16_17_orgnl&param1=1&param2=f%3D1%26b%3Dchmm%26cc%3Dde%26pa%3DHodor%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0B0A0D0B0F0FtD0CtB0DtA0DyB0BtN0D0Tzu0StCyDzztBtN1L2XzutAtFtCzytFtAtFtCtN1L1Czu1M1Q1CtBtBtFtCtFtDtN1L1G1B1V1N2Y1L1Qzu2SyE0FyC0EtA0F0F0CtGyCzytD0BtGyB0ByEyEtGyC0CyEyDtGzyzy0ByCtDyCyDyCyD0CzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0F0ByDyByByDyEtG0Azz0CtBtGyEyEzz0AtGzz0ByB0FtGtC0DtDtD0E0CzyyCtD0E0EyC2QtN0A0LzuyE%26cr%3D1641210216%26a%3Dhdr_s_16_17_orgnl%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&uref=chmm


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3869 Bytes] - [07/12/2016 17:23:24]
C:\AdwCleaner\AdwCleaner[S0].txt - [3090 Bytes] - [07/12/2016 17:22:42]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4015 Bytes] ##########
Einmal der Durchlauf von grade
Code:
ATTFilter
# AdwCleaner v6.040 - Bericht erstellt am 07/12/2016 um 23:36:19
# Aktualisiert am 02/12/2016 von Malwarebytes
# Datenbank : 2016-12-07.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Patrik - DESKTOP-6DECSKV
# Gestartet von : D:\Benutzer\Downloads\AdwCleaner_6.040 (1).exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\MGT


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [4110 Bytes] - [07/12/2016 17:23:24]
C:\AdwCleaner\AdwCleaner[C2].txt - [1057 Bytes] - [07/12/2016 23:36:19]
C:\AdwCleaner\AdwCleaner[S0].txt - [3090 Bytes] - [07/12/2016 17:22:42]
C:\AdwCleaner\AdwCleaner[S1].txt - [1472 Bytes] - [07/12/2016 23:35:53]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1276 Bytes] ##########
und einmal JRT

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Home x64 
Ran by Patrik (Administrator) on 07.12.2016 at 23:43:45,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 3 

Successfully deleted: C:\Users\Patrik\AppData\Local\orlando (Folder) 
Successfully deleted: C:\WINDOWS\prefetch\DRIVER_TOOLKIT_8.EXE-E5172DC9.pf (File) 
Successfully deleted: C:\WINDOWS\prefetch\DRIVERTOOLKITINSTALLER.TMP-F864183D.pf (File) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.12.2016 at 23:45:52,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 08.12.2016, 01:04   #13
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.12.2016, 01:23   #14
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


einmal Addition.txt
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Patrik (08-12-2016 01:22:30)
Gestartet von D:\Benutzer\Downloads
Windows 10 Home Version 1511 (X64) (2016-01-30 17:37:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2204974081-1436653023-283711051-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2204974081-1436653023-283711051-503 - Limited - Disabled)
Gast (S-1-5-21-2204974081-1436653023-283711051-501 - Limited - Disabled)
Patrik (S-1-5-21-2204974081-1436653023-283711051-1001 - Administrator - Enabled) => C:\Users\Patrik

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3DMark Demo (HKLM\...\Steam App 231350) (Version:  - Futuremark)
AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version:  - Frictional Games)
Ansel (Version: 375.70 - NVIDIA Corporation) Hidden
Assassin's Creed (HKLM-x32\...\Steam App 15100) (Version:  - Ubisoft Montreal)
Assassin's Creed Brotherhood (HKLM-x32\...\Steam App 48190) (Version:  - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version:  - Ubisoft Montreal)
Assassin's Creed Revelations (HKLM-x32\...\Steam App 201870) (Version:  - Ubisoft Montreal)
Assassin's Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Bastion (HKLM\...\Steam App 107100) (Version:  - Supergiant Games)
Batman: Arkham Asylum GOTY Edition (HKLM-x32\...\Steam App 35140) (Version:  - Rocksteady Studios)
BioShock Remastered (HKLM\...\Steam App 409710) (Version:  - 2K Boston)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.21.970 - Bitdefender)
Bitdefender Antivirus Plus 2017 (HKLM\...\Bitdefender) (Version: 21.0.22.1011 - Bitdefender)
Borderlands (HKLM-x32\...\Steam App 8980) (Version:  - Gearbox Software)
Bridge! 2 (HKLM\...\Steam App 434090) (Version:  - toxtronyx interactive GmbH)
Call of Juarez Gunslinger (HKLM\...\Steam App 204450) (Version:  - Techland)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Castlevania: Lords of Shadow – Mirror of Fate HD (HKLM\...\Steam App 282530) (Version:  - MercurySteam)
CCleaner (HKLM\...\CCleaner) (Version: 5.17 - Piriform)
Command Center (HKLM-x32\...\InstallShield_{AE1E0DFB-A3D9-451C-AA7F-46FD390400D4}) (Version: 2.5.51.0 - Alienware Corp.)
Command Center (Version: 2.5.51.0 - Alienware Corp.) Hidden
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.76 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Crawl (HKLM\...\Steam App 293780) (Version:  - Powerhoof)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Dangerous Golf (HKLM\...\Steam App 405500) (Version:  - Three Fields Entertainment)
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version:  - FromSoftware)
DARK SOULS™ II: Scholar of the First Sin (HKLM-x32\...\Steam App 335300) (Version:  - FromSoftware, Inc)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
Darksiders (HKLM\...\Steam App 50620) (Version:  - Vigil Games)
Dead Island (HKLM\...\Steam App 91310) (Version:  - Techland)
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version:  - Capcom Game Studio Vancouver)
Deadpool (HKLM-x32\...\Steam App 224060) (Version:  - High Moon Studios)
DOOM 3: BFG Edition (HKLM-x32\...\Steam App 208200) (Version:  - id Software)
DRAGON BALL XENOVERSE (HKLM\...\Steam App 323470) (Version:  - DIMPS)
Dragon's Dogma: Dark Arisen (HKLM-x32\...\Steam App 367500) (Version:  - Capcom)
DreadOut (HKLM\...\Steam App 269790) (Version:  - Digital Happiness)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Dying Light (HKLM-x32\...\Steam App 239140) (Version:  - Techland)
Endless Legend (HKLM-x32\...\Steam App 289130) (Version:  - AMPLITUDE Studios)
Epistory - Typing Chronicles (HKLM\...\Steam App 398850) (Version:  - Fishing Cactus)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Evoland (HKLM\...\Steam App 233470) (Version:  - Shiro Games)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Far Cry 4 Version 1. (HKLM-x32\...\Far Cry 4_is1) (Version: 1. - RFT)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.44.20513.9 - Electronic Arts)
FlyVPN (HKLM-x32\...\FlyVPN) (Version: 3.3.0.10 - FlyVPN)
FORCED SHOWDOWN (HKLM\...\Steam App 265000) (Version:  - BetaDwarf)
Futuremark SystemInfo (HKLM-x32\...\{C7FF0DD8-90C1-4612-B41F-0CA013062953}) (Version: 4.47.597.0 - Futuremark)
Gameforge Live 2.0.12 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.12 - Gameforge)
GameRanger (HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\GameRanger) (Version:  - GameRanger Technologies)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
GOD EATER 2 Rage Burst (HKLM\...\Steam App 438490) (Version:  - BANDAI NAMCO Studio)
GOD EATER RESURRECTION (HKLM\...\Steam App 460870) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.75 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM\...\Steam App 12210) (Version:  - Rockstar North)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grand Theft Auto: Vice City (HKLM-x32\...\Steam App 12110) (Version:  - Rockstar Games)
GRID (HKLM\...\Steam App 12750) (Version:  - Codemasters Studios)
Guards (HKLM\...\Steam App 460340) (Version:  - Battlecruiser Games)
Hero Defense - Haunted Island (HKLM\...\Steam App 423620) (Version:  - Happy Tuesday)
Hero Zero (HKLM\...\Steam App 482920) (Version:  - Playata GmbH)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version:  - IO Interactive)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version:  - Steel Crate Games)
L.A. Noire (HKLM-x32\...\Steam App 110800) (Version:  - Team Bondi)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Layers of Fear (HKLM\...\Steam App 391720) (Version:  - Bloober Team SA)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lego Harry Potter (HKLM-x32\...\Steam App 21130) (Version:  - TT Games)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Mad Games Tycoon (HKLM-x32\...\Steam App 341000) (Version:  - Eggcode)
Mafia II (HKLM\...\Steam App 50130) (Version:  - 2K Czech)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Maniac Mansion Deluxe (HKLM-x32\...\Maniac Mansion Deluxe) (Version:  - )
Metin2 (HKLM-x32\...\Metin2_DE_is1) (Version:  - Gameforge 4D GmbH)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minion Masters (HKLM\...\Steam App 489520) (Version:  - BetaDwarf)
Mirror's Edge (HKLM\...\Steam App 17410) (Version:  - DICE)
MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee)
Movie Studio Platinum 13.0 (64-bit) (HKLM\...\{F4721C9E-74D6-11E4-9122-F04DA23A5C58}) (Version: 13.0.943 - Sony)
Mozilla Firefox 41.0.2 (x86 de) (HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
MX vs. ATV Reflex (HKLM\...\Steam App 55140) (Version:  - Double Helix Games)
NARUTO SHIPPUDEN: Ultimate Ninja STORM Revolution (HKLM-x32\...\Steam App 272510) (Version:  - CyberConnect2 Co., Ltd.)
NBA 2K16 (HKLM\...\Steam App 370240) (Version:  - Visual Concepts)
Need for Speed™ (HKLM-x32\...\{F8643E83-A868-4EE8-A0B9-389386830453}) (Version: 1.3.0.0 - Electronic Arts)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Grafiktreiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.16.2 - OBS Project)
ONE PIECE PIRATE WARRIORS 3 (HKLM-x32\...\Steam App 331600) (Version:  - KOEI TECMO GAMES CO., LTD.)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Outlast (HKLM-x32\...\Steam App 238320) (Version:  - Red Barrels)
Pizza Connection 2 (HKLM-x32\...\{DA47ABC4-52DF-468D-988D-B9E768A3DF52}) (Version:  - )
Plague Inc: Evolved (HKLM\...\Steam App 246620) (Version:  - Ndemic Creations)
Planet Coaster (HKLM\...\Steam App 493340) (Version:  - Frontier Developments)
Planetary Annihilation: TITANS (HKLM\...\Steam App 386070) (Version:  - Uber Entertainment)
Plantera (HKLM\...\Steam App 421040) (Version:  - VaragtP)
Pro Gamer Manager (HKLM-x32\...\Steam App 408740) (Version:  - Millenway Studios)
Project CARS (HKLM-x32\...\Steam App 234630) (Version:  - Slightly Mad Studios)
Prototype (HKLM-x32\...\Steam App 10150) (Version:  - Radical Entertainment)
Punch Club (HKLM-x32\...\Steam App 394310) (Version:  - Lazy Bear Games)
PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Remember Me (HKLM\...\Steam App 228300) (Version:  - DONTNOD Entertainment)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version:  - CAPCOM Co., Ltd.)
RimWorld (HKLM\...\Steam App 294100) (Version:  - Ludeon Studios)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
Serious Sam: The Random Encounter (HKLM-x32\...\Steam App 201480) (Version:  - Vlambeer)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM\...\Steam App 8930) (Version:  - Firaxis Games)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
skate's Thumbnail Tool Version 1.1.2 (HKLM-x32\...\{E68C580F-B6A5-4D47-89EC-307B9096FC10}_is1) (Version: 1.1.2 - skate702.de)
Sleeping Dogs: Definitive Edition (HKLM\...\Steam App 307690) (Version:  - United Front Games)
Slender: The Arrival (HKLM\...\Steam App 252330) (Version:  - Blue Isle Studios)
Slime Rancher (HKLM\...\Steam App 433340) (Version:  - Monomi Park)
Sniper Elite (HKLM-x32\...\Steam App 3700) (Version:  - Rebellion)
Soccer Manager 2017 (HKLM\...\Steam App 510630) (Version:  - Soccer Manager Ltd)
Star Wars Jedi Knight: Jedi Academy (HKLM\...\Steam App 6020) (Version:  - Raven Software)
Stardew Valley (HKLM\...\Steam App 413150) (Version:  - ConcernedApe)
SteelSeries Engine 3.5.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.5.2 - SteelSeries ApS)
Stronghold Crusader HD (HKLM\...\Steam App 40970) (Version:  - FireFly Studios)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
The Deadly Tower of Monsters (HKLM\...\Steam App 353700) (Version:  - ACE Team)
The Evil Within (HKLM\...\Steam App 268050) (Version:  - Tango Gameworks)
The Incredible Adventures of Van Helsing: Final Cut (HKLM\...\Steam App 400170) (Version:  - NeocoreGames)
The Last Remnant (HKLM\...\Steam App 23310) (Version:  - SQUARE ENIX)
The Red Solstice (HKLM\...\Steam App 265590) (Version:  - Ironward)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version:  - CD PROJEKT RED)
The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version:  - CD PROJEKT RED)
There's Poop In My Soup (HKLM\...\Steam App 449540) (Version:  - Rudder Games)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - Runic Games)
Train Valley (HKLM\...\Steam App 353640) (Version:  - Alexey Davydov)
Tropico 5 (HKLM\...\Steam App 245620) (Version:  - Haemimont Games)
True Fear: Forsaken Souls Part 1 (HKLM\...\Steam App 440420) (Version:  - Goblinz)
UE4 Prerequisites (x64) (HKLM-x32\...\{31b49e1e-03f8-4a04-8faa-f6476d8fad02}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Unity Web Player (HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vodafone Mobile Broadband (HKLM-x32\...\{6C29152D-3FF9-43B2-84E4-9B35FC0BF5C2}) (Version: 10.3.414.50177 - Vodafone)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
Watch_Dogs (HKLM\...\Steam App 243470) (Version:  - Ubisoft)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
We Happy Few (HKLM\...\Steam App 320240) (Version:  - Compulsion Games)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1 (HKLM-x32\...\Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1) (Version:  - )
WWE 2K16 (HKLM\...\Steam App 385730) (Version:  - Visual Concepts)
Youtubers Life (HKLM\...\Steam App 428690) (Version:  - U-Play online)
Zombie Night Terror (HKLM\...\Steam App 416680) (Version:  - NoClip)
Zombie Party (HKLM\...\Steam App 384500) (Version:  - Peach Pie Productions)
Zombie Shooter (HKLM\...\Steam App 33130) (Version:  - Sigma Team Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2204974081-1436653023-283711051-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncApi64.dll => Keine Dat (Der Dateneintrag hat 2 mehr Zeichen).

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3ED8FD2E-120E-4A3E-9BCE-5C299B47E70E} - System32\Tasks\74159a2475b32161 => Rundll32.exe "C:\ProgramData\74159a2475b32161\74159a2475b32161.dll",get_module
Task: {42B6F3C9-814F-4084-9EF1-28942A1E8D3F} - System32\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685} => C:\Users\Patrik\AppData\Local\{89AFB~1\UNINST~1.EXE <==== ACHTUNG
Task: {535E0215-2D16-4BAD-A5C2-2B8AB430DE7A} - System32\Tasks\f6a63bbfe553147895993c7e8697a131 => Rundll32.exe "C:\Program Files (x86)\VulkanRT\dprtox.dll",e62dc6c6547f46bda862da2d05af6862 <==== ACHTUNG
Task: {6D31B433-B341-4C2A-B653-3964068288DD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {6E629C55-F5BC-40EE-A957-74BBC473DD2C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03] (Google Inc.)
Task: {7CB09AF8-3DA6-43FD-B7C9-7CC406193466} - System32\Tasks\SRT => C:\Program Files (x86)\GNR\src\Smart_Registry_Care.exe
Task: {7CB64D5B-B163-4228-B3D6-89E5A8D18E79} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated)
Task: {7FACC8F8-5595-4094-90B9-124504D15326} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)
Task: {849522AB-D9A9-4411-B9E1-4C7299CE7CA9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {8E469095-6708-4F9E-8E15-9798D5664A07} - System32\Tasks\919z23577t565 => Rundll32.exe "C:\ProgramData\919z23577t565\919z23577t565.dll",drvGetDefaultCommConfig
Task: {9CAFA45F-46A1-4C74-BFFD-3C4075F13B50} - System32\Tasks\{226CB921-4B24-4540-A1CB-4FB7BAFE932B} => pcalua.exe -a "C:\Program Files (x86)\LucasFan Games\MMD\autorun.exe" -d "C:\Program Files (x86)\LucasFan Games\MMD"
Task: {CC55A50A-06A7-4F6F-97C3-3BF2C7CF4081} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-04-15] (Piriform Ltd)
Task: {CC8CFFBC-F489-4D16-8C1A-0DB7CA2387DA} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {CFA58031-21D4-48C2-AE20-A96402E3C8BA} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {D4BBEEEA-D9C0-459F-81E8-C4C45F1CC8D7} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {DE17055A-5DEE-432D-8789-B39004E40404} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {FD422A6D-00E5-43AA-A5A1-3A0C6340564F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-03] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685}.job => 

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:17 - 2015-10-30 08:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-06 22:33 - 2013-09-03 14:29 - 00111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll
2016-12-06 22:33 - 2016-11-15 12:21 - 00132104 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\ECEvents.dll
2016-12-06 22:33 - 2016-11-14 16:52 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpbr.mdl
2016-12-06 22:33 - 2016-11-14 16:52 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpdsp.mdl
2016-12-06 22:33 - 2016-11-14 16:52 - 03202816 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpph.mdl
2016-12-06 22:33 - 2016-11-14 16:52 - 01542976 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttprbl.mdl
2016-12-06 20:59 - 2014-03-22 12:36 - 02976256 _____ () C:\ProgramData\919z23577t565\919z23577t565.dll
2015-11-15 16:28 - 2016-07-31 18:25 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-04-19 17:06 - 2016-04-19 17:07 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-15 19:07 - 2016-04-15 19:07 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2010-04-07 15:04 - 2010-04-07 15:04 - 00154424 _____ () C:\Program Files\Alienware\Command Center\AlienFusionDomain.dll
2016-01-30 18:31 - 2016-01-30 18:31 - 00075056 _____ () C:\WINDOWS\assembly\GAC_MSIL\AlienLabsTools\1.0.90.0__bebb3c8816410241\AlienLabsTools.dll
2010-04-07 15:04 - 2010-04-07 15:04 - 00009032 _____ () C:\Program Files\Alienware\Command Center\de\AlienFusionDomain.resources.dll
2016-12-06 22:33 - 2016-12-07 17:46 - 00023328 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\lang\en-US\bdsystray.txtui
2016-10-15 18:25 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-01-30 18:54 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 21:09 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2010-04-07 15:04 - 2010-04-07 15:04 - 00016704 _____ () C:\Program Files\Alienware\Command Center\AlienFusionController.exe
2016-08-16 19:16 - 2016-08-16 19:17 - 00017408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-08-16 19:16 - 2016-08-16 19:17 - 13475840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 18:00 - 2016-06-03 19:57 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-03-05 23:32 - 2016-03-05 23:36 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2016-12-06 18:22 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-06 18:22 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-06 18:22 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-07 21:08 - 2016-12-07 21:08 - 02493440 _____ () D:\Program Files (x86)\Origin\libGLESv2.dll
2016-04-19 17:06 - 2016-04-19 17:07 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 17:06 - 2016-04-19 17:08 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-08-18 18:21 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-15 18:25 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-01-30 18:31 - 2016-01-30 18:31 - 00037712 _____ () C:\WINDOWS\assembly\GAC_MSIL\Alienlabs.CommandCenter.Tools\1.0.90.0__bebb3c8816410241\Alienlabs.CommandCenter.Tools.dll
2016-10-15 17:10 - 2016-09-08 04:14 - 00784672 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2016-10-15 17:10 - 2016-09-01 02:02 - 04969248 _____ () D:\Program Files (x86)\Steam\v8.dll
2016-10-15 17:10 - 2016-10-13 02:58 - 02321696 _____ () D:\Program Files (x86)\Steam\video.dll
2016-10-15 17:10 - 2016-09-01 02:02 - 01563936 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2016-10-15 17:10 - 2016-09-01 02:02 - 01195296 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 02549760 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2016-10-15 17:10 - 2016-01-27 08:49 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2016-10-15 17:10 - 2016-10-13 02:58 - 00836896 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-10-15 17:10 - 2016-07-04 23:17 - 00266560 _____ () D:\Program Files (x86)\Steam\openvr_api.dll
2016-10-15 17:10 - 2016-08-04 21:56 - 49825056 _____ () D:\Program Files (x86)\Steam\bin\cef\cef.winxp\libcef.dll
2016-10-15 17:10 - 2015-09-25 00:52 - 00119208 _____ () D:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 12:04 - 2016-12-08 00:38 - 00001370 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\StartupFolder: => "SteelSeries Engine 3.lnk"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run32: => "LWS"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_1B28AC0629F4B3A1DB6E8E19FB6D49DA"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{7232750C-D33C-477F-B8AA-ADEE2A1CA866}] => D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E7EF615A-57D7-4451-ACD4-7851E7130793}] => D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{9BB62858-E5BA-487A-91F6-640E5BEAAEB8}D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe] => D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{9598136C-2BEB-4E5A-8FF9-CD86EE9AAD73}D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe] => D:\program files (x86)\steam\steamapps\common\dying light\dyinglightgame.exe
FirewallRules: [TCP Query User{C82280BE-091D-44E4-959F-6199A9D70346}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [UDP Query User{8F0DF167-6F4C-43A5-8EA8-542664C8C2BD}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [{460175D8-3902-4E43-A1EE-5AB9DFE98CE9}] => D:\Program Files (x86)\Steam\steamapps\common\Car Mechanic Simulator 2015\cms2015.exe
FirewallRules: [{87111C6A-41B2-4209-A6EF-95269337B998}] => D:\Program Files (x86)\Steam\steamapps\common\Car Mechanic Simulator 2015\cms2015.exe
FirewallRules: [{FCED636B-2109-4046-B38B-271379FD5553}] => D:\Program Files (x86)\Steam\steamapps\common\Mad Games Tycoon\MadGamesTycoon.exe
FirewallRules: [{88482DD3-953C-4195-ACCF-F84B2ACF07C7}] => D:\Program Files (x86)\Steam\steamapps\common\Mad Games Tycoon\MadGamesTycoon.exe
FirewallRules: [{BAC758F6-BF4B-49C9-8A64-44D837A7FE6F}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{846A4569-8627-4FEC-B3F5-EEE5DFE99024}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{6B949EF0-4950-431A-A026-F9973B27DA6A}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{420624F4-A9CE-4320-A331-91CE3459686B}] => D:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
FirewallRules: [{4E8D14B6-2548-4EA7-88FE-2C39E80FFEE9}] => D:\Program Files (x86)\Steam\steamapps\common\Bridge 2\Bridge.exe
FirewallRules: [{FBC702D3-98A6-4B4C-8825-2A4765F72521}] => D:\Program Files (x86)\Steam\steamapps\common\Bridge 2\Bridge.exe
FirewallRules: [{C78DFFFD-DD32-49A1-9C3B-D1BD84C45066}] => D:\Program Files (x86)\Steam\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{02E2D9C0-B56B-436A-8824-CC0EA3D90436}] => D:\Program Files (x86)\Steam\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{62553584-EE7B-4460-BE00-7FD09BED83A3}] => D:\Program Files (x86)\Steam\steamapps\common\NBA 2K16\NBA2K16.exe
FirewallRules: [{2EC1988A-CE3D-4C04-B727-09E425FFA90F}] => D:\Program Files (x86)\Steam\steamapps\common\NBA 2K16\NBA2K16.exe
FirewallRules: [{090EE83C-728F-4686-B3F2-3DCCE2F65D47}] => D:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
FirewallRules: [{AD554903-CBA0-44D7-BE8B-2E10B98A96CF}] => D:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
FirewallRules: [{EFA2C1DE-2691-4B32-A577-F8249E2AFB4A}] => D:\Program Files (x86)\Steam\steamapps\common\Crawl\Crawl.exe
FirewallRules: [{C2C40718-FFCE-42C5-BC91-41553C78FA47}] => D:\Program Files (x86)\Steam\steamapps\common\Crawl\Crawl.exe
FirewallRules: [{5CE9D379-CE67-4374-A7CC-7FE7AD767D01}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D9B4AB37-4EDE-48A6-828F-084748CF9055}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{47921631-9A36-4DE1-B8AA-62EDB12F8FF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8C7D7268-D762-46C0-B098-2DBF78E17B19}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{5359660F-F965-495B-99F4-0BD73577AA3A}D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe] => D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe
FirewallRules: [UDP Query User{262CB3B9-1E8B-4146-8098-C0001AA378F0}D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe] => D:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe
FirewallRules: [{17009FF5-3A1E-43A4-B5E4-1EA5164B2412}] => D:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{29E0F4E5-85CB-47B9-A938-43EB437D3B3E}] => D:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [TCP Query User{2BDCD99A-49D7-4DB0-8BE5-82F0E6EE0137}D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{32F3EB8D-3DA9-4642-B89E-F7981DEB1C99}D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => D:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe
FirewallRules: [TCP Query User{A93AE28A-2A52-4B80-90D7-1D193DA6F4EC}D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe] => D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe
FirewallRules: [UDP Query User{9BEBF06C-AA20-4A4A-9C86-A22F194F5C75}D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe] => D:\program files (x86)\steam\steamapps\common\dead island\deadislandgame.exe
FirewallRules: [{BD2E3AF2-3718-4505-85D7-D7D063A29AE6}] => D:\Program Files (x86)\Steam\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{D2BBDE6C-3695-4DAC-92A6-C11A295267EC}] => D:\Program Files (x86)\Steam\steamapps\common\Layers of Fear\Layers Of Fear.exe
FirewallRules: [{95EA4DB0-4FBE-4ABD-96A3-4DE4AD9B3778}] => D:\Program Files (x86)\Steam\steamapps\common\The Last Remnant\Binaries\TLR.exe
FirewallRules: [{29870C16-6DC1-4FF6-A1D9-4B05095D66B4}] => D:\Program Files (x86)\Steam\steamapps\common\The Last Remnant\Binaries\TLR.exe
FirewallRules: [{F8896255-BDE7-46C2-AB4E-15EADD53CBA3}] => D:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7D668E16-440E-4B46-BB65-E72F1BEA300C}] => D:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{FECE9CBF-0362-40FF-95D6-8A103C379D52}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{3BC9C7E5-4373-4BF1-8E33-20C8C930B747}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{9CED4C4B-C1B1-4FAA-8405-C6EDE3D808CF}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{024AB959-2347-4711-8E9C-6DD65F755084}] => D:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{4D202415-A2E4-46B5-A887-005228A65E21}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Defense - Haunted Island\HauntedIsland.exe
FirewallRules: [{BC2654D9-0D15-4D55-91E3-71FC2E6D17C6}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Defense - Haunted Island\HauntedIsland.exe
FirewallRules: [{E3B01284-6C62-4013-A037-DA0886A8CFE2}] => D:\Program Files (x86)\Steam\steamapps\common\Evoland\Evoland.exe
FirewallRules: [{649AB23A-D6FC-4370-9352-0DB7E07726E1}] => D:\Program Files (x86)\Steam\steamapps\common\Evoland\Evoland.exe
FirewallRules: [{2ABD6011-9A7E-40D0-824F-BD844C29446D}] => D:\Program Files (x86)\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{F1938475-B978-4077-AB13-A7F119D4F39A}] => D:\Program Files (x86)\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{06CF38EF-CD90-4486-94F0-EA36FBCA4893}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\PA.exe
FirewallRules: [{DC3B1FEC-F892-4BA4-9E6F-48B2A71A2F8B}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\PA.exe
FirewallRules: [{01E26E6C-2683-4658-A2DA-B4A9692084A7}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\PA.exe
FirewallRules: [{526DE9BF-999D-422E-BF11-6BD63718E0D6}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\PA.exe
FirewallRules: [{D9312965-EC48-4BC8-9573-847959527395}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\crashupload.exe
FirewallRules: [{74AECABB-183D-4BAE-B655-6F7F1137FCF4}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\crashupload.exe
FirewallRules: [{6021A78A-8601-41E7-AC4F-170EFF5248F0}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\host\CoherentUI_Host.exe
FirewallRules: [{519E4BC0-39C8-450C-BEBE-7B0A37276EE4}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x86\host\CoherentUI_Host.exe
FirewallRules: [{37C88F68-4F55-4947-9493-FD1B8A172A42}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\crashupload.exe
FirewallRules: [{52B00A11-D604-4314-88CE-BBABDDCE05ED}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\crashupload.exe
FirewallRules: [{54543A45-2C67-4D68-B314-EAC232D2F24C}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\host\CoherentUI_Host.exe
FirewallRules: [{62651386-94A0-4076-9A0C-0E02D1A234E5}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\host\CoherentUI_Host.exe
FirewallRules: [{EA5515E8-CB05-4587-A796-323D8A077F4D}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\server.exe
FirewallRules: [{1C251F3C-0408-48DE-B0EA-E1DEB21EE438}] => D:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation Titans\bin_x64\server.exe
FirewallRules: [{B6F5F9FC-2071-47CC-A1FA-228BC8233FA9}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Party\Zombie_Party_v2.exe
FirewallRules: [{A685CE71-B7D1-41A9-9011-3FE37FF93969}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Party\Zombie_Party_v2.exe
FirewallRules: [{70BFCBEB-A69A-4D1D-81F2-F48A22BC3141}] => D:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{275BF7F5-E3B9-4D17-8ACB-1AF9ABE6CABB}] => D:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{BCD216F0-7E5E-4ABA-A5BF-12DFCFC93513}] => D:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{DCB57B35-2343-4FDA-9A96-2CCBCE91B28A}] => D:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{D30F363F-9F7A-4F7A-AB5D-36D61B02F009}] => D:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{0ACB707E-231A-4044-828F-8302B4991FCD}] => D:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{53355F87-F6EC-4B1C-B113-163E2BD64705}D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{66A3F9E1-E590-46D2-B2B6-DD844E461426}D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => D:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{0D67C7D3-6B2E-4653-94E3-524BD4CD7777}] => D:\Program Files (x86)\Steam\steamapps\common\Pro Gamer Manager\PGM.exe
FirewallRules: [{28C09B0A-2FB3-48CA-8AF3-11642122E601}] => D:\Program Files (x86)\Steam\steamapps\common\Pro Gamer Manager\PGM.exe
FirewallRules: [{6403FB85-B7F5-4A32-A1F8-E34F8DE1FCB7}] => D:\Program Files (x86)\Steam\steamapps\common\Punch Club\Punch Club.exe
FirewallRules: [{9030C6F3-C19A-4D92-9904-7B5F94CE3D42}] => D:\Program Files (x86)\Steam\steamapps\common\Punch Club\Punch Club.exe
FirewallRules: [{CF084055-B892-4608-B0D8-EEB0E0E4279D}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{876CBA00-7ED3-4227-B0DA-7F4B99AE8084}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{9F8E3401-CC50-4BB3-B04D-53B2E368E56F}] => D:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{BE66FB2B-F645-43CA-8232-AB1B1C618EE7}] => D:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{F875506E-BCC4-4825-8F3E-ED4ED2D9C959}] => D:\Program Files (x86)\Steam\steamapps\common\Castlevania Lords of Shadow - Mirror of Fate HD\CMOF.exe
FirewallRules: [{E0B7A09F-3D18-4A62-B54E-6B6D2B71D65B}] => D:\Program Files (x86)\Steam\steamapps\common\Castlevania Lords of Shadow - Mirror of Fate HD\CMOF.exe
FirewallRules: [{B6947272-181F-4811-AF7E-FC4BA42AD42E}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Zero\Hero Zero.exe
FirewallRules: [{70717C44-020C-44EE-BE24-859F759EF6D9}] => D:\Program Files (x86)\Steam\steamapps\common\Hero Zero\Hero Zero.exe
FirewallRules: [{A64D792D-F769-47A5-B147-D1F8314335B9}] => D:\Program Files (x86)\Steam\steamapps\common\Dangerous Golf\Orlando.exe
FirewallRules: [{974A405A-F4C0-419C-8FFB-5338CCEB91D8}] => D:\Program Files (x86)\Steam\steamapps\common\Dangerous Golf\Orlando.exe
FirewallRules: [TCP Query User{0AE0FD59-A2E6-4C4C-B1D5-9EDE33295933}D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe] => D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe
FirewallRules: [UDP Query User{430AF276-5D67-49F2-8F3C-FE88299CA538}D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe] => D:\program files (x86)\steam\steamapps\common\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe
FirewallRules: [{5D0622FD-3DF8-4D0E-9465-2784667605C9}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{31DD7B58-B392-4C49-8ED8-DC40A3870C2A}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{8FADEFFB-76DF-4E63-A599-523DDC23DA1D}] => D:\Program Files (x86)\Steam\steamapps\common\Bastion\Bastion.exe
FirewallRules: [{B527AE37-0AE7-451B-982D-D35769DF3680}] => D:\Program Files (x86)\Steam\steamapps\common\Bastion\Bastion.exe
FirewallRules: [{1EBE714C-3195-4031-B6B0-E8AB9F3D2FEF}] => D:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{2304257C-5806-414F-9CAA-E2A0765D94F9}] => D:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{1372DE4C-7A5E-40EF-9C76-36F2D8B57910}] => D:\Program Files (x86)\Steam\steamapps\common\The Crew\TheCrew.exe
FirewallRules: [{9E96650A-6C9D-40A3-AC2D-14EE2059065D}] => D:\Program Files (x86)\Steam\steamapps\common\The Crew\TheCrew.exe
FirewallRules: [TCP Query User{BFC48E74-5789-4991-A9F2-D50F710A52D2}D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe] => D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe
FirewallRules: [UDP Query User{DD015E84-ACEE-46A3-8101-DC38F7AA936D}D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe] => D:\program files (x86)\steam\steamapps\common\borderlands\binaries\borderlands.exe
FirewallRules: [{7562F019-F28B-4721-B89B-3F42C6A1BB89}] => D:\Program Files (x86)\Steam\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{3CE0EB2A-AB7B-478B-B4A9-7F101DDBF850}] => D:\Program Files (x86)\Steam\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{CDC33484-35A9-41D2-A585-B6DD4A465E53}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe
FirewallRules: [{6AE3EA52-BC07-4137-B4AE-EB6894E620E2}] => D:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe
FirewallRules: [TCP Query User{6F851FC8-2A70-4C9C-94E1-F8597016AEE8}D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{DA2CDE15-0C48-496A-B35B-955A9BB3DA15}D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => D:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{24D36424-112E-4F0E-A0E5-854F5C36454F}D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe] => D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe
FirewallRules: [UDP Query User{EC497583-E5F6-4483-8F80-AC0C3EEEE412}D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe] => D:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe
FirewallRules: [{F1761434-B1A6-4BD5-B172-27B3D765C381}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16.exe
FirewallRules: [{D1D44BEF-8AC9-4AC9-B0A4-AF11786FD377}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16.exe
FirewallRules: [{F253608D-273B-4622-AD44-96B7BA7C720D}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16_trial.exe
FirewallRules: [{08B85745-76BA-4879-A6FB-20530FB1E3F4}] => D:\Program Files (x86)\Origin Games\Need for Speed\NFS16_trial.exe
FirewallRules: [{B412EF36-4AEE-40D9-9FDB-646E36CDAC5A}] => D:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{F7907348-A21C-47CB-8BE8-CF741C8AA7BA}] => D:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{72F091DF-158D-491B-B490-3AB4D89D8B09}] => D:\Program Files (x86)\Steam\steamapps\common\FORCED SHOWDOWN\forced_showdown.exe
FirewallRules: [{E23CB038-345C-4C91-9B61-422242A74533}] => D:\Program Files (x86)\Steam\steamapps\common\FORCED SHOWDOWN\forced_showdown.exe
FirewallRules: [TCP Query User{0D74AEE5-6FE3-4A7F-B1CA-D74FBF75C0A9}D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe] => D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe
FirewallRules: [UDP Query User{4F3BB0E4-16FC-47F4-ABA4-018C2DE613A9}D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe] => D:\program files (x86)\steam\steamapps\common\forced showdown\bugtracker\forcedshowdownbugtracker.exe
FirewallRules: [{5189A79D-AB4A-417C-9008-A2ED4EBD9AA0}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{97CF77BA-F658-483F-8D97-2B2C2F873221}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{047E26B4-E094-4F0C-AE11-345B72787A9A}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{0E347198-84EE-43E5-9425-C525A0263EA4}] => D:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{3DAE6D10-7899-4FBC-99FF-F1CE516D93D8}] => D:\Program Files (x86)\Steam\steamapps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{BCAD3F75-6B12-4859-A480-5F6C8B394DEE}] => D:\Program Files (x86)\Steam\steamapps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{0CF09AAE-2C01-4528-B129-B6D2EF7A824B}] => D:\Program Files (x86)\Steam\steamapps\common\darksiders\DarksidersPC.exe
FirewallRules: [{1F950507-1AFE-4ADD-B791-2864DD2837E3}] => D:\Program Files (x86)\Steam\steamapps\common\darksiders\DarksidersPC.exe
FirewallRules: [{7A1FD558-4650-4151-A6DA-67E34956E932}] => D:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse\DBXV.exe
FirewallRules: [{9ACEC64E-AF9C-4FBC-995C-832E8C43D414}] => D:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse\DBXV.exe
FirewallRules: [{1DE28A8B-8F34-405F-B1DE-DFDB51E9FE36}] => D:\Program Files (x86)\Steam\steamapps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{BF476F53-2483-4508-8E6E-9EA80E234EE1}] => D:\Program Files (x86)\Steam\steamapps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{DE11F87F-F0BB-4877-8036-132331D6B861}] => D:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{E59E0C2D-93E0-470B-A510-596EFC0A4823}] => D:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{60410D3D-9CFB-4802-B074-C9A8B37A094D}] => D:\Program Files (x86)\Steam\steamapps\common\po\po.exe
FirewallRules: [{36DE06DB-D9C2-4D41-8924-FE956FCE7443}] => D:\Program Files (x86)\Steam\steamapps\common\po\po.exe
FirewallRules: [{3C3970C5-95ED-4858-A8E4-2C08C456D937}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXReflex.exe
FirewallRules: [{EA73782B-F0CF-40BB-BAFB-473961643FD6}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXReflex.exe
FirewallRules: [{1954E238-39EE-40AE-92D9-7E9D1682A251}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXSettings.exe
FirewallRules: [{3CB93393-9C2E-434D-BBCC-6E2CE6B9B5D4}] => D:\Program Files (x86)\Steam\steamapps\common\MX vs ATV Reflex\MXSettings.exe
FirewallRules: [{028EC8A4-7EB6-420B-947E-308FB48F22EF}] => D:\Program Files (x86)\Steam\steamapps\common\RimWorld\RimWorldWin.exe
FirewallRules: [{D3F753EC-1F64-4A14-9B60-38AA46707042}] => D:\Program Files (x86)\Steam\steamapps\common\RimWorld\RimWorldWin.exe
FirewallRules: [{C393752D-E474-4F86-86D0-269EF1974B0E}] => D:\Program Files (x86)\Steam\steamapps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{DB270FE0-09B2-400B-821E-2470FC22A600}] => D:\Program Files (x86)\Steam\steamapps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{FD6DF594-23C5-4897-B0CE-A6995C8161F1}] => D:\Program Files (x86)\Steam\steamapps\common\WeHappyFew\GlimpseGame\Binaries\Win64\GlimpseGame.exe
FirewallRules: [{0D546B7B-7A1B-4CB2-80C9-D7DF5F2FB89F}] => D:\Program Files (x86)\Steam\steamapps\common\WeHappyFew\GlimpseGame\Binaries\Win64\GlimpseGame.exe
FirewallRules: [{16098F79-0340-4453-8287-D7A89AA2D3FE}] => D:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{4D3381BB-3273-49FE-8368-E4953E19BAA5}D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe] => D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{AE59C6C9-6B50-4F02-BCD9-C227D9E10E80}D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe] => D:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [{B65A1358-E1FA-4F0A-8E77-D26C5B084407}] => D:\Program Files (x86)\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{13302E5A-CAD8-49D7-8156-110F434CB48C}] => D:\Program Files (x86)\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{5D7A7996-1EDE-4E03-B4E9-1209AB1FA4DF}] => D:\Program Files (x86)\Steam\steamapps\common\Epistory\Epistory.exe
FirewallRules: [{1AFA2954-E787-4996-A7DF-8DAD1149B51F}] => D:\Program Files (x86)\Steam\steamapps\common\Epistory\Epistory.exe
FirewallRules: [{C3AF405D-955B-465C-9641-389D411683F2}] => D:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{D64D36F3-8BB8-4A28-AEEF-4E5E91EBB616}] => D:\Program Files (x86)\Steam\steamapps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{E7EC53A8-ABF7-458A-9610-76424A735C6E}] => D:\Program Files (x86)\Steam\steamapps\common\TheRedSolstice\bin\Game.exe
FirewallRules: [{9BD36761-66DB-40F4-AE01-913C0A1B6906}] => D:\Program Files (x86)\Steam\steamapps\common\TheRedSolstice\bin\Game.exe
FirewallRules: [{8BF70A80-70FF-4893-8D3F-4497366D0899}] => D:\Program Files (x86)\Steam\steamapps\common\Soccer Manager 2017\Soccer Manager 2017.exe
FirewallRules: [{E720CE4C-F98B-4A6D-A91A-97879A169BA2}] => D:\Program Files (x86)\Steam\steamapps\common\Soccer Manager 2017\Soccer Manager 2017.exe
FirewallRules: [{62D00E5D-F94D-4082-9C67-945592F98293}] => D:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{A66C8F90-2F7A-4849-BF2D-53DAD64B21A4}] => D:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{6E1E67C1-EE20-4273-8679-F6C9862DEED6}] => D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{BE8F29FD-BE27-491C-A667-F3CC7EF08852}] => D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{99F5E817-3D4D-48BB-9D4D-319F465131B1}] => D:\Program Files (x86)\Steam\steamapps\common\Slime Rancher\SlimeRancher.exe
FirewallRules: [{EC3847C0-E230-4806-9399-0AE451C12680}] => D:\Program Files (x86)\Steam\steamapps\common\Slime Rancher\SlimeRancher.exe
FirewallRules: [{FD885657-377D-494A-AA36-49E7EF1D8025}] => D:\Program Files (x86)\Steam\steamapps\common\Train Valley\train-valley.exe
FirewallRules: [{F46B8732-94E3-408C-8BCC-A49E6F6A54D2}] => D:\Program Files (x86)\Steam\steamapps\common\Train Valley\train-valley.exe
FirewallRules: [{87696A79-054D-44D9-A061-51A10EFDBBF5}] => D:\Program Files (x86)\Steam\steamapps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{8539F83E-6B26-47FB-9CA8-4D4A71E4AF6B}] => D:\Program Files (x86)\Steam\steamapps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{A57F3F69-AF62-411D-8676-3F66A238FCE4}] => D:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{607D5160-96C8-463F-B300-C42197F7A2C6}] => D:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{6C3A5C30-01B5-41AA-8BEF-7C9B3E7DE084}] => D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{90428648-475B-4957-8634-0474D65EA881}] => D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe
FirewallRules: [{D7BEEB57-46DD-4502-AE3C-47F890872D09}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{9BC4C282-B74C-42D4-BEFA-F304D1EF9397}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{8CD31A09-7E8C-493F-917A-C4C5CB8C9EA1}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{F06A2A80-8E99-4791-AB8D-9E37FE2F65E8}] => D:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{8ED6A658-E837-43E9-86AD-505560751A7D}] => D:\Program Files (x86)\Steam\steamapps\common\Endless Legend\EndlessLegend.exe
FirewallRules: [{2B848C1D-6F5A-4273-9E2E-EEB3577F1AB6}] => D:\Program Files (x86)\Steam\steamapps\common\Endless Legend\EndlessLegend.exe
FirewallRules: [{7A007B86-4F01-4F93-9711-F4ADD4C72BEE}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout.exe
FirewallRules: [{0B9F5851-F729-4FF5-AFFD-432B4CF41A80}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout.exe
FirewallRules: [{BE66E506-64B4-4982-9CFB-EAFEB48D5398}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout32.exe
FirewallRules: [{A93A459F-62B4-4C39-B112-107E79872223}] => D:\Program Files (x86)\Steam\steamapps\common\DreadOut\dreadout32.exe
FirewallRules: [{53F29591-586C-496D-956B-CB17CF541FA1}] => D:\Program Files (x86)\Steam\steamapps\common\True Fear Forsaken Souls\True Fear.exe
FirewallRules: [{20339839-89FF-4101-9267-516F72DD68F9}] => D:\Program Files (x86)\Steam\steamapps\common\True Fear Forsaken Souls\True Fear.exe
FirewallRules: [{6F5D14BC-9A0F-4F4F-88EF-2566E31C7398}] => D:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{C4E8B110-8FC5-4DB1-A4B3-46DBD654A68D}] => D:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{9149A7A8-1D41-4AD2-827A-BAED010A809A}] => D:\Program Files (x86)\Steam\steamapps\common\BioShock Remastered\Build\Final\Bioshock.exe
FirewallRules: [{FBEA1254-BBFC-4D23-8C55-E00520C3DCDA}] => D:\Program Files (x86)\Steam\steamapps\common\BioShock Remastered\Build\Final\Bioshock.exe
FirewallRules: [TCP Query User{82B73BCF-2E8F-438F-90AE-817C4B8F87D6}D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe] => D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe
FirewallRules: [UDP Query User{1D7988F4-CA9D-4A8C-823F-7BB3A47345F6}D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe] => D:\program files (x86)\steam\steamapps\common\styx\binaries\win64\styxgame.exe
FirewallRules: [{3FEDE003-9B80-4533-B0AB-5542FC9F56AE}] => D:\Program Files (x86)\Steam\steamapps\common\Serious Sam HD The First Encounter\Bin\SamHD.exe
FirewallRules: [{302DB4F3-1819-4100-895D-ED30EDA0A333}] => D:\Program Files (x86)\Steam\steamapps\common\Serious Sam HD The First Encounter\Bin\SamHD.exe
FirewallRules: [{97F0DCF0-4E16-49D6-BDED-E45B57C8244F}] => D:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{9141A063-A20A-4D78-9CA6-0841BEC6C175}] => D:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{6AF47B5E-C218-498B-9AAB-B2744958C64E}] => D:\Program Files (x86)\Steam\steamapps\common\WWE2K16\WWE2K16.exe
FirewallRules: [{E729FC27-82F3-4F51-B29D-A7454B84C044}] => D:\Program Files (x86)\Steam\steamapps\common\WWE2K16\WWE2K16.exe
FirewallRules: [{78D7FD07-2013-48A6-A32F-C6382F392FC1}] => D:\Program Files (x86)\Steam\steamapps\common\The Incredible Adventures of Van Helsing Final Cut\VanHelsing.exe
FirewallRules: [{B42B70D2-816D-4392-A326-EBE4700FAF28}] => D:\Program Files (x86)\Steam\steamapps\common\The Incredible Adventures of Van Helsing Final Cut\VanHelsing.exe
FirewallRules: [{7FF73460-A548-4A06-9E41-84D33F2ACB15}] => D:\Program Files (x86)\Steam\steamapps\common\Plantera\Plantera.exe
FirewallRules: [{FD9571A7-B86D-4A5B-A3FA-263BC516BFFC}] => D:\Program Files (x86)\Steam\steamapps\common\Plantera\Plantera.exe
FirewallRules: [{FEB8C6A6-A27D-433B-947C-DB3E685DB179}] => D:\Program Files (x86)\Steam\steamapps\common\GOD EATER RESURRECTION\GER.exe
FirewallRules: [{D513B435-3169-4716-9D8A-200EE97F5BBC}] => D:\Program Files (x86)\Steam\steamapps\common\GOD EATER RESURRECTION\GER.exe
FirewallRules: [{AD84E14C-9975-42B0-929D-BF2B4A3B22C5}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{4BCE6FC8-169E-419B-810E-982E7705A3C2}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{6603D5F7-6259-460A-AF85-6267020FC02E}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{85156740-691C-4BE2-AF3E-26FC52DA5CCC}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{5493FBE9-91AA-4836-8C68-D1A582E11F28}] => D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{BE503761-1E0E-4B8C-B75C-B1DEF1FDB5E2}] => C:\WINDOWS\system32\rundll32.exe
FirewallRules: [{5E097147-EFC9-4B4C-BD91-7CDFC2D2AA12}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D55222D9-4730-4CFB-A229-C0165563E580}] => C:\WINDOWS\System32\rundll32.exe
FirewallRules: [{42034617-0FA5-4DCD-AAB9-4E7CB16BEF65}] => C:\WINDOWS\System32\rundll32.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/08/2016 12:15:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WWE2K16.exe, Version: 1.0.0.0, Zeitstempel: 0x56f02ad5
Name des fehlerhaften Moduls: WWE2K16.exe, Version: 1.0.0.0, Zeitstempel: 0x56f02ad5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000d4ecb1
ID des fehlerhaften Prozesses: 0x12e8
Startzeit der fehlerhaften Anwendung: 0x01d250dfcbb168cd
Pfad der fehlerhaften Anwendung: D:\Program Files (x86)\Steam\steamapps\common\WWE2K16\WWE2K16.exe
Pfad des fehlerhaften Moduls: D:\Program Files (x86)\Steam\steamapps\common\WWE2K16\WWE2K16.exe
Berichtskennung: 7d5b9df3-2644-409a-aee4-0aaf91d32588
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/07/2016 11:57:34 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for D:\Program Files (x86)\Steam\bin\steamwebhelper.exe

Error: (12/07/2016 09:34:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.10586.672, Zeitstempel: 0x580ef184
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1f20
Startzeit der fehlerhaften Anwendung: 0x01d250c9515a42c6
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 2ea40d64-897a-4e5b-bde4-6aba4a789541
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/07/2016 09:26:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SearchUI.exe, Version: 10.0.10586.672, Zeitstempel: 0x580ee74d
Name des fehlerhaften Moduls: CortanaApi.dll, Version: 0.0.0.0, Zeitstempel: 0x580ee453
Ausnahmecode: 0x80000003
Fehleroffset: 0x00000000000b5c6d
ID des fehlerhaften Prozesses: 0x18dc
Startzeit der fehlerhaften Anwendung: 0x01d250c121f2a406
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Pfad des fehlerhaften Moduls: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
Berichtskennung: e83f0190-c4cc-44df-80f3-5bd4d6c6d2a0
Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: CortanaUI

Error: (12/07/2016 08:41:12 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for D:\Program Files (x86)\Steam\bin\steamwebhelper.exe

Error: (12/07/2016 07:37:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2016 07:37:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2016 07:37:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-6DECSKV)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2016 06:32:55 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to add firewall exception for D:\Program Files (x86)\Steam\bin\steamwebhelper.exe

Error: (12/07/2016 04:52:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: steamwebhelper.exe, Version: 3.65.13.80, Zeitstempel: 0x57fed9f2
Name des fehlerhaften Moduls: steamwebhelper.exe, Version: 3.65.13.80, Zeitstempel: 0x57fed9f2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00037b59
ID des fehlerhaften Prozesses: 0xc58
Startzeit der fehlerhaften Anwendung: 0x01d250a1c523008b
Pfad der fehlerhaften Anwendung: D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
Pfad des fehlerhaften Moduls: D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
Berichtskennung: 08fa221b-d4fb-424f-850a-6eddfa335ef8
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (12/07/2016 11:43:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2016 11:42:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ProductAgentService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/07/2016 11:40:47 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6DECSKV)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "DESKTOP-6DECSKV\Patrik" (SID: S-1-5-21-2204974081-1436653023-283711051-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
 und der APPID 
{CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2}
 im Anwendungscontainer "Microsoft.WindowsStore_11609.1001.28.0_x64__8wekyb3d8bbwe" (SID: S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/07/2016 11:40:31 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Chukoypahward" wurde mit folgendem Fehler beendet: 
Das angegebene Modul wurde nicht gefunden.

Error: (12/07/2016 11:38:41 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{9A4948D9-13FC-4FAC-B60A-FBA6EE0FB11C}
 und der APPID 
{50E1C3FD-EC35-490E-9CCF-C68F9AE91919}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/07/2016 11:38:28 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\WINDOWS\system32\Rtlihvs.dll
Fehlercode: 126

Error: (12/07/2016 11:36:24 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6DECSKV)
Description: Der Server "{4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/07/2016 11:36:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_39225" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2016 11:36:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _39225" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2016 11:36:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_39225" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2016-12-07 23:39:33.677
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 23:39:33.677
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 20:32:27.734
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 20:32:27.733
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 17:59:08.035
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 17:59:08.035
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 16:26:14.227
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-07 16:16:23.642
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-06 23:32:13.874
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-06 21:12:21.595
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7 CPU 930 @ 2.80GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 12278.92 MB
Verfügbarer physikalischer RAM: 9414.02 MB
Summe virtueller Speicher: 14134.92 MB
Verfügbarer virtueller Speicher: 11165.19 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:110.86 GB) (Free:59.83 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Festplatte 1) (Fixed) (Total:1863.01 GB) (Free:539.85 GB) NTFS
Drive e: (Festplatte 2) (Fixed) (Total:1863.01 GB) (Free:1862.7 GB) NTFS
Drive h: (INTENSO) (Fixed) (Total:465.76 GB) (Free:126.88 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0D8CBB29)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0D8CBB28)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 8698802F)
Partition 1: (Active) - (Size=110.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 3 (Size: 465.8 GB) (Disk ID: F5876578)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Alt 08.12.2016, 01:24   #15
FiinxD
 
Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Standard

Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


einmal frst.txt
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Patrik (Administrator) auf DESKTOP-6DECSKV (08-12-2016 01:22:02)
Gestartet von D:\Benutzer\Downloads
Geladene Profile: Patrik (Verfügbare Profile: Patrik)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
() C:\WINDOWS\SysWOW64\PnkBstrA.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe
(Electronic Arts) D:\Program Files (x86)\Origin\OriginWebHelperService.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Vodafone) D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16102.10341.0_x64__8wekyb3d8bbwe\Music.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdwtxag.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\WINDOWS\System32\browser_broker.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-08-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [LWS] => D:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.)
HKLM-x32\...\Run: [VmbNotifier] => D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe [1896960 2014-09-22] (Vodafone)
HKLM-x32\...\Run: [MobileBroadband] => D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [72192 2014-09-22] (Vodafone)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Run: [EADM] => D:\Program Files (x86)\Origin\Origin.exe [3044848 2016-12-07] (Electronic Arts)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [31744 2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Patrik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2015-10-20]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{360a10dc-c481-43ca-8d9a-7dc93f0405ce}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3bb85df0-9a44-4b92-b927-44da1d541d67}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{ca645fee-24dd-4058-9c31-1541fdeccb90}: [DhcpNameServer] 139.7.30.126 139.7.30.125
Tcpip\..\Interfaces\{dbed33e3-3e8a-4946-8739-095f72c72f60}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2204974081-1436653023-283711051-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=620947&OCID=AVRES000
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {1768C80F-FAB6-4579-A217-CF50D7CD8492} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {5AFCA766-656C-4433-B539-7F2CBBBB43B8} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {A261FC78-95EB-4435-8BB3-F080B0CEEA8A} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> {B69EC4E1-86C2-49DF-9AF9-3DD7625B1012} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Bitdefender Wallet  -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2016-10-27] (Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2016-10-27] (Bitdefender)
Toolbar: HKLM - Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2016-10-27] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2016-10-27] (Bitdefender)
Toolbar: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> Bitdefender Wallet  - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2016-10-27] (Bitdefender)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-2204974081-1436653023-283711051-1001 -> hxxp://go.gmx.net/tb/ie_startpage

FireFox:
========
FF DefaultProfile: oge08t4r.default
FF ProfilePath: C:\Users\Patrik\AppData\Roaming\TomTom\HOME\Profiles\lehz977e.default [2016-12-06]
FF Extension: (Kein Name) - D:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nicht gefunden]
FF ProfilePath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default [2016-12-07]
FF NewTab: Mozilla\Firefox\Profiles\oge08t4r.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\oge08t4r.default -> Search Provided by Yahoo
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\oge08t4r.default -> Search Provided by Yahoo
FF Homepage: Mozilla\Firefox\Profiles\oge08t4r.default -> hxxps://www.malwarebytes.org/restorebrowser/_colrom_16_15&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0B0A0D0B0F0FtD0CtB0DtA0DyB0BtN0D0Tzu0StCyDyCzztN1L2XzutAtFtBtCtFtDtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyC0DyCyDyBzz0FzztGtA0FyEtAtGyE0EtDzztGyEyByD0BtG0AzyyE0EyC0EzytAyE0Czz0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0F0ByDyByByDyEtG0Azz0CtBtGyEyEzz0AtGzz0ByB0FtGtC0DtDtD0E0CzyyCtD0E0EyC2QtN0A0LzuyE%26cr%3D2140871707%26a%3Dwncy_colrom_16_15%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
FF Extension: (Kein Name) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default\Extensions\abs@avira.com [2016-12-06]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default\Extensions\ich@maltegoetz.de.xpi [2015-09-20]
FF Extension: (Adblock Plus) - C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\oge08t4r.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff [2016-11-29]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2016-11-29] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] ()
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2204974081-1436653023-283711051-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Patrik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)

Chrome: 
=======
CHR Profile: C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default [2016-12-07]
CHR Extension: (Docs) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-07]
CHR Extension: (Bitdefender Wallet) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2016-12-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-07]
CHR Extension: (Chrome Media Router) - C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-07]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-06-21] (Futuremark)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5893272 2016-07-19] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-07] (Electronic Arts)
R2 Origin Web Helper Service; D:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-07] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2016-07-31] ()
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [216880 2016-10-05] (Bitdefender)
R2 VmbService; D:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2014-09-22] (Vodafone) [Datei ist nicht signiert]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1307344 2016-11-08] (Bitdefender)
R2 vsservp; C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe [524872 2016-08-25] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)
S2 Chukoypahward; C:\Program Files (x86)\Grupuse\ReentykoertionUpdate.dll [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1605376 2016-09-20] (BitDefender)
R3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-09-20] (BitDefender)
R3 AWOPFilterDriver; C:\Windows\system32\drivers\AWOPFilterDriver.sys [19464 2015-08-18] ()
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23672 2016-03-14] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-24] (BitDefender LLC)
S4 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
S3 CMUSBDAC; C:\WINDOWS\system32\DRIVERS\CMUSBDAC.sys [3778592 2015-11-25] (C-MEDIA)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2015-08-19] (Disc Soft Ltd)
S3 EagleX64; C:\Windows\system32\drivers\EagleX64.sys [140600 2015-08-30] (AhnLab, Inc.)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-10-29] (BitDefender LLC)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [3870464 2015-10-01] (Realtek Semiconductor Corporation                           )
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [40568 2015-10-02] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [51400 2016-05-27] (SteelSeries ApS)
S3 tap0901_openvpn_accl; C:\WINDOWS\System32\drivers\tap0901_openvpn_accl.sys [37912 2016-03-15] (The OpenVPN Project)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-03-10] (BitDefender S.R.L.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-07 23:58 - 2016-12-07 23:58 - 00000000 ____D C:\Users\Patrik\AppData\Local\Orlando
2016-12-07 23:53 - 2016-12-07 23:53 - 00028189 _____ C:\ProgramData\agent.1481151228.bdinstall.bin
2016-12-07 23:11 - 2016-12-07 23:32 - 00080820 _____ C:\TDSSKiller.3.1.0.12_07.12.2016_23.11.09_log.txt
2016-12-07 23:00 - 2016-12-07 23:08 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-12-07 22:38 - 2016-12-08 01:22 - 00000000 ____D C:\FRST
2016-12-07 20:23 - 2016-12-07 20:23 - 00000000 ___HD C:\$SysReset
2016-12-07 17:47 - 2016-12-07 17:47 - 00300840 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2016-12-07 17:21 - 2016-12-07 23:36 - 00000000 ____D C:\AdwCleaner
2016-12-07 16:25 - 2016-12-07 16:25 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-06 23:16 - 2016-12-06 23:16 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2016-12-06 22:50 - 2016-12-06 22:50 - 00000000 ____D C:\Users\Patrik\AppData\Local\AviraSpeedup
2016-12-06 22:50 - 2016-12-06 22:50 - 00000000 ____D C:\Users\Patrik\AppData\Local\Avira
2016-12-06 22:36 - 2016-12-06 22:36 - 00000000 ____D C:\Users\Patrik\AppData\Temp
2016-12-06 22:34 - 2016-12-07 23:36 - 00003924 _____ C:\bdlog.txt
2016-12-06 22:33 - 2016-12-07 23:53 - 00000000 ____D C:\ProgramData\BDLogging
2016-12-06 22:33 - 2016-12-07 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2017
2016-12-06 22:33 - 2016-12-06 22:34 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Bitdefender
2016-12-06 22:33 - 2016-12-06 22:33 - 00349001 _____ C:\ProgramData\cl.1481059961.bdinstall.bin
2016-12-06 22:33 - 2016-12-06 22:33 - 00000684 ____H C:\bdr-cf01
2016-12-06 22:33 - 2016-12-06 22:33 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2016-12-06 22:33 - 2016-09-20 04:17 - 01605376 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2016-12-06 22:33 - 2016-09-20 04:16 - 00878072 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys
2016-12-06 22:33 - 2016-03-14 22:04 - 00023672 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2016-12-06 22:33 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2016-12-06 22:33 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2016-12-06 22:32 - 2016-12-06 22:32 - 00028796 _____ C:\ProgramData\agent.1481059946.bdinstall.bin
2016-12-06 22:27 - 2016-12-06 22:27 - 00028520 _____ C:\ProgramData\agent.1481059619.bdinstall.bin
2016-12-06 22:19 - 2016-12-06 22:33 - 00253404 ____H C:\bdr-ld01
2016-12-06 22:19 - 2016-12-06 22:33 - 00009216 ____H C:\bdr-ld01.mbr
2016-12-06 22:19 - 2016-10-18 11:51 - 49758588 ____H C:\bdr-im01.gz
2016-12-06 22:19 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01
2016-12-06 22:16 - 2016-12-07 17:49 - 00000000 ____D C:\ProgramData\Bitdefender
2016-12-06 22:16 - 2016-12-06 22:16 - 00000000 ____D C:\Program Files\Bitdefender
2016-12-06 22:16 - 2016-10-29 08:54 - 00182944 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2016-12-06 22:16 - 2016-03-10 06:41 - 00520032 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2016-12-06 22:15 - 2016-12-06 22:16 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-12-06 22:15 - 2016-12-06 22:15 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\QuickScan
2016-12-06 21:35 - 2016-12-06 21:35 - 00003794 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2016-12-06 21:33 - 2016-12-08 00:53 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-12-06 21:33 - 2016-12-06 21:33 - 00046885 _____ C:\ProgramData\agent.1481056395.bdinstall.bin
2016-12-06 21:33 - 2016-12-06 21:33 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-12-06 21:11 - 2016-12-07 23:36 - 00000008 __RSH C:\Users\Patrik\ntuser.pol
2016-12-06 21:04 - 2016-12-06 21:04 - 00003506 _____ C:\WINDOWS\System32\Tasks\SRT
2016-12-06 21:04 - 2016-12-06 21:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sstmp
2016-12-06 21:04 - 2016-12-06 21:04 - 00000000 ____D C:\WINDOWS\system32\sstmp
2016-12-06 21:00 - 2016-12-06 21:22 - 00000000 ____D C:\Program Files\HBIGY1OL8V
2016-12-06 20:59 - 2016-12-06 20:59 - 00016838 _____ C:\WINDOWS\System32\Tasks\919z23577t565
2016-12-06 20:59 - 2016-12-06 20:59 - 00000000 ___HD C:\ProgramData\919z23577t565
2016-12-06 20:59 - 2016-12-06 20:59 - 00000000 ____D C:\ProgramData\dbg
2016-12-06 20:57 - 2016-12-06 21:22 - 00000000 ____D C:\Program Files\VUK9J5T6IB
2016-12-06 20:56 - 2016-12-06 23:30 - 00000000 ____D C:\ProgramData\Avira
2016-12-06 20:56 - 2016-12-06 21:22 - 00000000 ____D C:\Program Files (x86)\Grupuse
2016-12-06 20:56 - 2016-12-06 21:11 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Rafage
2016-12-06 20:56 - 2016-12-06 20:56 - 00003654 _____ C:\WINDOWS\System32\Tasks\f6a63bbfe553147895993c7e8697a131
2016-12-06 20:56 - 2016-12-06 20:56 - 00000000 ____D C:\Users\Patrik\AppData\Local\Graserph
2016-12-06 20:56 - 2016-12-06 20:56 - 00000000 ____D C:\ProgramData\Avg
2016-12-06 20:56 - 2016-12-06 20:56 - 00000000 ____D C:\ProgramData\AVAST Software
2016-12-06 20:54 - 2016-12-06 20:54 - 00016830 _____ C:\WINDOWS\System32\Tasks\74159a2475b32161
2016-12-06 18:49 - 2016-12-07 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-12-06 18:49 - 2016-12-06 18:49 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-12-06 18:23 - 2016-10-25 08:30 - 02938920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-12-06 18:23 - 2016-10-25 06:48 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2016-12-06 18:23 - 2016-10-25 06:45 - 00564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2016-12-06 18:23 - 2016-10-25 06:23 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-12-06 18:23 - 2016-10-25 06:00 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-12-06 18:23 - 2016-10-25 05:54 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-12-06 18:23 - 2016-10-25 05:43 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-12-06 18:22 - 2016-12-06 21:08 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-12-06 18:22 - 2016-11-02 16:12 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-12-06 18:22 - 2016-11-02 16:08 - 00636296 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-12-06 18:22 - 2016-11-02 15:25 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-12-06 18:22 - 2016-11-02 14:32 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-12-06 18:22 - 2016-11-02 14:31 - 00546968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-12-06 18:22 - 2016-11-02 13:51 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-12-06 18:22 - 2016-10-25 10:44 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-12-06 18:22 - 2016-10-25 10:44 - 00875480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 07468384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-12-06 18:22 - 2016-10-25 10:42 - 01142560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-12-06 18:22 - 2016-10-25 10:42 - 01098648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2016-12-06 18:22 - 2016-10-25 10:42 - 00125280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2016-12-06 18:22 - 2016-10-25 10:42 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2016-12-06 18:22 - 2016-10-25 10:41 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-12-06 18:22 - 2016-10-25 10:40 - 00384864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-12-06 18:22 - 2016-10-25 10:39 - 01238584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2016-12-06 18:22 - 2016-10-25 10:39 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-12-06 18:22 - 2016-10-25 10:34 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2016-12-06 18:22 - 2016-10-25 10:26 - 00528736 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2016-12-06 18:22 - 2016-10-25 10:25 - 01637216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-12-06 18:22 - 2016-10-25 10:24 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-12-06 18:22 - 2016-10-25 10:19 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-12-06 18:22 - 2016-10-25 10:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-12-06 18:22 - 2016-10-25 09:51 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-12-06 18:22 - 2016-10-25 09:50 - 00439136 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2016-12-06 18:22 - 2016-10-25 09:49 - 00588328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmdev.dll
2016-12-06 18:22 - 2016-10-25 09:49 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01554152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01552104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 01017024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 09:48 - 00847648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-12-06 18:22 - 2016-10-25 09:42 - 02607336 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-12-06 18:22 - 2016-10-25 09:42 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-12-06 18:22 - 2016-10-25 09:42 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-12-06 18:22 - 2016-10-25 09:41 - 03694088 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-12-06 18:22 - 2016-10-25 09:39 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-12-06 18:22 - 2016-10-25 09:39 - 00730352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-12-06 18:22 - 2016-10-25 09:39 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-12-06 18:22 - 2016-10-25 09:38 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-12-06 18:22 - 2016-10-25 09:38 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-12-06 18:22 - 2016-10-25 09:38 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-12-06 18:22 - 2016-10-25 09:37 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-12-06 18:22 - 2016-10-25 09:37 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-12-06 18:22 - 2016-10-25 09:37 - 01603224 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2016-12-06 18:22 - 2016-10-25 09:37 - 01040792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-12-06 18:22 - 2016-10-25 09:37 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-12-06 18:22 - 2016-10-25 09:36 - 01540216 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-12-06 18:22 - 2016-10-25 09:36 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-12-06 18:22 - 2016-10-25 09:35 - 06536248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-12-06 18:22 - 2016-10-25 09:34 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-12-06 18:22 - 2016-10-25 09:34 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-12-06 18:22 - 2016-10-25 09:34 - 00106928 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2016-12-06 18:22 - 2016-10-25 09:33 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 01862000 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 00845568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2016-12-06 18:22 - 2016-10-25 09:32 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2016-12-06 18:22 - 2016-10-25 09:30 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-12-06 18:22 - 2016-10-25 09:30 - 00360288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-12-06 18:22 - 2016-10-25 09:28 - 01083648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2016-12-06 18:22 - 2016-10-25 09:05 - 00712032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-12-06 18:22 - 2016-10-25 09:03 - 02549456 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-12-06 18:22 - 2016-10-25 09:03 - 01988440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-12-06 18:22 - 2016-10-25 09:02 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-12-06 18:22 - 2016-10-25 09:02 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-12-06 18:22 - 2016-10-25 09:01 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-06 18:22 - 2016-10-25 09:01 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-12-06 18:22 - 2016-10-25 09:01 - 00324448 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-12-06 18:22 - 2016-10-25 08:47 - 28851216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2016-12-06 18:22 - 2016-10-25 08:47 - 02641928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2016-12-06 18:22 - 2016-10-25 08:47 - 00305808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2016-12-06 18:22 - 2016-10-25 08:46 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-12-06 18:22 - 2016-10-25 08:46 - 00376528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-12-06 18:22 - 2016-10-25 08:45 - 00503600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2016-12-06 18:22 - 2016-10-25 08:45 - 00032096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2016-12-06 18:22 - 2016-10-25 08:40 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-12-06 18:22 - 2016-10-25 08:40 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-12-06 18:22 - 2016-10-25 08:39 - 00306840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 01349632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-12-06 18:22 - 2016-10-25 08:37 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-12-06 18:22 - 2016-10-25 08:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-12-06 18:22 - 2016-10-25 08:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\genericusbfn.sys
2016-12-06 18:22 - 2016-10-25 08:32 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-12-06 18:22 - 2016-10-25 08:32 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 01824272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2016-12-06 18:22 - 2016-10-25 08:31 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-12-06 18:22 - 2016-10-25 08:30 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-12-06 18:22 - 2016-10-25 08:30 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2016-12-06 18:22 - 2016-10-25 08:30 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-12-06 18:22 - 2016-10-25 08:29 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-12-06 18:22 - 2016-10-25 08:27 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-12-06 18:22 - 2016-10-25 08:27 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-12-06 18:22 - 2016-10-25 08:27 - 00256704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-12-06 18:22 - 2016-10-25 08:26 - 05240952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-12-06 18:22 - 2016-10-25 08:26 - 01355344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 00836752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 00569752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-12-06 18:22 - 2016-10-25 08:26 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-12-06 18:22 - 2016-10-25 08:24 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-12-06 18:22 - 2016-10-25 08:23 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-12-06 18:22 - 2016-10-25 08:22 - 00268040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-12-06 18:22 - 2016-10-25 08:22 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2016-12-06 18:22 - 2016-10-25 08:21 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-12-06 18:22 - 2016-10-25 08:21 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-12-06 18:22 - 2016-10-25 08:20 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-12-06 18:22 - 2016-10-25 08:19 - 00295776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-12-06 18:22 - 2016-10-25 08:19 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2016-12-06 18:22 - 2016-10-25 08:18 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-12-06 18:22 - 2016-10-25 08:18 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-12-06 18:22 - 2016-10-25 08:16 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-12-06 18:22 - 2016-10-25 08:14 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-12-06 18:22 - 2016-10-25 08:13 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2016-12-06 18:22 - 2016-10-25 08:13 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-12-06 18:22 - 2016-10-25 08:13 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2016-12-06 18:22 - 2016-10-25 08:12 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSMDesktopProvider.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-12-06 18:22 - 2016-10-25 08:12 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2016-12-06 18:22 - 2016-10-25 08:10 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-12-06 18:22 - 2016-10-25 08:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2016-12-06 18:22 - 2016-10-25 08:10 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2016-12-06 18:22 - 2016-10-25 08:10 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2016-12-06 18:22 - 2016-10-25 08:09 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2016-12-06 18:22 - 2016-10-25 08:08 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
2016-12-06 18:22 - 2016-10-25 08:06 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-12-06 18:22 - 2016-10-25 08:06 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceConnectApi.dll
2016-12-06 18:22 - 2016-10-25 08:05 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-12-06 18:22 - 2016-10-25 08:05 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FingerprintEnrollment.dll
2016-12-06 18:22 - 2016-10-25 08:04 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe
2016-12-06 18:22 - 2016-10-25 08:02 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-12-06 18:22 - 2016-10-25 08:02 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-12-06 18:22 - 2016-10-25 08:02 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-12-06 18:22 - 2016-10-25 08:00 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-12-06 18:22 - 2016-10-25 07:59 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll
2016-12-06 18:22 - 2016-10-25 07:59 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2016-12-06 18:22 - 2016-10-25 07:58 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2016-12-06 18:22 - 2016-10-25 07:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-06 18:22 - 2016-10-25 07:58 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2016-12-06 18:22 - 2016-10-25 07:57 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-12-06 18:22 - 2016-10-25 07:57 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 02195640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3ui.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00317952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-12-06 18:22 - 2016-10-25 07:56 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe
2016-12-06 18:22 - 2016-10-25 07:56 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2016-12-06 18:22 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2016-12-06 18:22 - 2016-10-25 07:55 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 01522160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 00752128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 00273760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-12-06 18:22 - 2016-10-25 07:54 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-12-06 18:22 - 2016-10-25 07:53 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00577536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack_win.dll
2016-12-06 18:22 - 2016-10-25 07:52 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe
2016-12-06 18:22 - 2016-10-25 07:51 - 00715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-12-06 18:22 - 2016-10-25 07:51 - 00469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanui.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-12-06 18:22 - 2016-10-25 07:51 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneOm.dll
2016-12-06 18:22 - 2016-10-25 07:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-12-06 18:22 - 2016-10-25 07:49 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-12-06 18:22 - 2016-10-25 07:49 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2016-12-06 18:22 - 2016-10-25 07:49 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2016-12-06 18:22 - 2016-10-25 07:48 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll
2016-12-06 18:22 - 2016-10-25 07:48 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2016-12-06 18:22 - 2016-10-25 07:47 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2016-12-06 18:22 - 2016-10-25 07:46 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2016-12-06 18:22 - 2016-10-25 07:46 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-12-06 18:22 - 2016-10-25 07:46 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-12-06 18:22 - 2016-10-25 07:45 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-12-06 18:22 - 2016-10-25 07:44 - 01479168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2016-12-06 18:22 - 2016-10-25 07:44 - 00602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2016-12-06 18:22 - 2016-10-25 07:43 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-12-06 18:22 - 2016-10-25 07:43 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-12-06 18:22 - 2016-10-25 07:43 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe
2016-12-06 18:22 - 2016-10-25 07:43 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-06 18:22 - 2016-10-25 07:42 - 01813504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-12-06 18:22 - 2016-10-25 07:42 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2016-12-06 18:22 - 2016-10-25 07:42 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-12-06 18:22 - 2016-10-25 07:42 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-12-06 18:22 - 2016-10-25 07:41 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 02331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2016-12-06 18:22 - 2016-10-25 07:40 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-12-06 18:22 - 2016-10-25 07:40 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WLanConn.dll
2016-12-06 18:22 - 2016-10-25 07:39 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 02088960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-12-06 18:22 - 2016-10-25 07:38 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-12-06 18:22 - 2016-10-25 07:37 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2016-12-06 18:22 - 2016-10-25 07:36 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-12-06 18:22 - 2016-10-25 07:36 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-12-06 18:22 - 2016-10-25 07:36 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 01434112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 01132544 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-12-06 18:22 - 2016-10-25 07:35 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 07:34 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-12-06 18:22 - 2016-10-25 07:34 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-12-06 18:22 - 2016-10-25 07:34 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-12-06 18:22 - 2016-10-25 07:33 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-12-06 18:22 - 2016-10-25 07:33 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-12-06 18:22 - 2016-10-25 07:33 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2016-12-06 18:22 - 2016-10-25 07:33 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2016-12-06 18:22 - 2016-10-25 07:32 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-12-06 18:22 - 2016-10-25 07:32 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 01037824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-12-06 18:22 - 2016-10-25 07:32 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll
2016-12-06 18:22 - 2016-10-25 07:30 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-12-06 18:22 - 2016-10-25 07:30 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-12-06 18:22 - 2016-10-25 07:29 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-12-06 18:22 - 2016-10-25 07:29 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-12-06 18:22 - 2016-10-25 07:29 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-12-06 18:22 - 2016-10-25 07:29 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-12-06 18:22 - 2016-10-25 07:28 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-12-06 18:22 - 2016-10-25 07:28 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 02731008 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 01466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Pimstore.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2016-12-06 18:22 - 2016-10-25 07:27 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-12-06 18:22 - 2016-10-25 07:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-12-06 18:22 - 2016-10-25 07:26 - 02103296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-12-06 18:22 - 2016-10-25 07:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-12-06 18:22 - 2016-10-25 07:25 - 01872896 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2016-12-06 18:22 - 2016-10-25 07:25 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-12-06 18:22 - 2016-10-25 07:25 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2016-12-06 18:22 - 2016-10-25 07:24 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-12-06 18:22 - 2016-10-25 07:24 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-12-06 18:22 - 2016-10-25 07:24 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2016-12-06 18:22 - 2016-10-25 07:23 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-12-06 18:22 - 2016-10-25 07:23 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 07:22 - 01424384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2016-12-06 18:22 - 2016-10-25 07:22 - 00638976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-12-06 18:22 - 2016-10-25 07:22 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2016-12-06 18:22 - 2016-10-25 07:21 - 02054144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-12-06 18:22 - 2016-10-25 07:21 - 01570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2016-12-06 18:22 - 2016-10-25 07:21 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2016-12-06 18:22 - 2016-10-25 07:21 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-12-06 18:22 - 2016-10-25 07:21 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-12-06 18:22 - 2016-10-25 07:20 - 03549696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-12-06 18:22 - 2016-10-25 07:19 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-12-06 18:22 - 2016-10-25 07:18 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-12-06 18:22 - 2016-10-25 07:17 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-12-06 18:22 - 2016-10-25 07:16 - 03415040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-12-06 18:22 - 2016-10-25 07:16 - 01965568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2016-12-06 18:22 - 2016-10-25 07:16 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-12-06 18:22 - 2016-10-25 07:12 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-12-06 18:22 - 2016-10-25 07:11 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2016-12-06 18:22 - 2016-10-25 07:09 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-12-06 18:22 - 2016-10-25 07:09 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-12-06 18:22 - 2016-10-25 07:08 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-12-06 18:22 - 2016-10-25 07:07 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-06 18:22 - 2016-10-25 07:06 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-12-06 18:22 - 2016-10-25 07:05 - 03587584 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-12-06 18:22 - 2016-10-25 07:05 - 02610176 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-12-06 18:22 - 2016-10-25 07:05 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2016-12-06 18:22 - 2016-10-25 07:05 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\StikyNot.exe
2016-12-06 18:22 - 2016-10-25 07:05 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 06675968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-12-06 18:22 - 2016-10-25 07:03 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SCardDlg.dll
2016-12-06 18:22 - 2016-10-25 07:03 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 01755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 01121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-12-06 18:22 - 2016-10-25 07:01 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSMDesktopProvider.dll
2016-12-06 18:22 - 2016-10-25 07:00 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-12-06 18:22 - 2016-10-25 07:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceClassExtension.dll
2016-12-06 18:22 - 2016-10-25 07:00 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2016-12-06 18:22 - 2016-10-25 06:59 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-12-06 18:22 - 2016-10-25 06:59 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2016-12-06 18:22 - 2016-10-25 06:57 - 02285568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2016-12-06 18:22 - 2016-10-25 06:56 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceConnectApi.dll
2016-12-06 18:22 - 2016-10-25 06:55 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-12-06 18:22 - 2016-10-25 06:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2016-12-06 18:22 - 2016-10-25 06:53 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-12-06 18:22 - 2016-10-25 06:53 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-12-06 18:22 - 2016-10-25 06:52 - 04170240 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2016-12-06 18:22 - 2016-10-25 06:52 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-12-06 18:22 - 2016-10-25 06:52 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-12-06 18:22 - 2016-10-25 06:51 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-12-06 18:22 - 2016-10-25 06:51 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 02874880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2016-12-06 18:22 - 2016-10-25 06:50 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-12-06 18:22 - 2016-10-25 06:50 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 03081216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 01997312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 06:49 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3ui.dll
2016-12-06 18:22 - 2016-10-25 06:48 - 04826624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-12-06 18:22 - 2016-10-25 06:48 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-12-06 18:22 - 2016-10-25 06:47 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-12-06 18:22 - 2016-10-25 06:46 - 02055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2016-12-06 18:22 - 2016-10-25 06:46 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnfldr.dll
2016-12-06 18:22 - 2016-10-25 06:46 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-12-06 18:22 - 2016-10-25 06:45 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-12-06 18:22 - 2016-10-25 06:45 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-12-06 18:22 - 2016-10-25 06:45 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-12-06 18:22 - 2016-10-25 06:45 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneOm.dll
2016-12-06 18:22 - 2016-10-25 06:44 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-12-06 18:22 - 2016-10-25 06:43 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-12-06 18:22 - 2016-10-25 06:43 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PortableDeviceApi.dll
2016-12-06 18:22 - 2016-10-25 06:43 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\filemgmt.dll
2016-12-06 18:22 - 2016-10-25 06:42 - 02876928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2016-12-06 18:22 - 2016-10-25 06:42 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2016-12-06 18:22 - 2016-10-25 06:41 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-12-06 18:22 - 2016-10-25 06:41 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-12-06 18:22 - 2016-10-25 06:41 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-12-06 18:22 - 2016-10-25 06:40 - 01336832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2016-12-06 18:22 - 2016-10-25 06:40 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-12-06 18:22 - 2016-10-25 06:39 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-12-06 18:22 - 2016-10-25 06:39 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-12-06 18:22 - 2016-10-25 06:39 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe
2016-12-06 18:22 - 2016-10-25 06:39 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-06 18:22 - 2016-10-25 06:38 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 04143104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-12-06 18:22 - 2016-10-25 06:37 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 04646400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-12-06 18:22 - 2016-10-25 06:36 - 00879616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WLanConn.dll
2016-12-06 18:22 - 2016-10-25 06:36 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 02902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmdrmsdk.dll
2016-12-06 18:22 - 2016-10-25 06:35 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 06:34 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-12-06 18:22 - 2016-10-25 06:33 - 01063936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-12-06 18:22 - 2016-10-25 06:33 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-12-06 18:22 - 2016-10-25 06:32 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-12-06 18:22 - 2016-10-25 06:32 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-12-06 18:22 - 2016-10-25 06:32 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2016-12-06 18:22 - 2016-10-25 06:32 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2016-12-06 18:22 - 2016-10-25 06:32 - 00645632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2016-12-06 18:22 - 2016-10-25 06:31 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-12-06 18:22 - 2016-10-25 06:30 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-12-06 18:22 - 2016-10-25 06:30 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-12-06 18:22 - 2016-10-25 06:29 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-12-06 18:22 - 2016-10-25 06:29 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-12-06 18:22 - 2016-10-25 06:29 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 02578432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 01186816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00885248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-12-06 18:22 - 2016-10-25 06:28 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-12-06 18:22 - 2016-10-25 06:27 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-12-06 18:22 - 2016-10-25 06:27 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-12-06 18:22 - 2016-10-25 06:26 - 02563584 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-12-06 18:22 - 2016-10-25 06:26 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 06:25 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-12-06 18:22 - 2016-10-25 06:24 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-12-06 18:22 - 2016-10-25 06:24 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2016-12-06 18:22 - 2016-10-25 06:23 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-12-06 18:22 - 2016-10-25 06:23 - 00964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-12-06 18:22 - 2016-10-25 06:22 - 01562624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2016-12-06 18:22 - 2016-10-25 06:21 - 03577344 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-12-06 18:22 - 2016-10-25 06:21 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-12-06 18:22 - 2016-10-25 06:20 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-12-06 18:22 - 2016-10-25 06:19 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-12-06 18:22 - 2016-10-25 06:17 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-12-06 18:22 - 2016-10-25 06:17 - 00581632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2016-12-06 18:22 - 2016-10-25 06:14 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-12-06 18:22 - 2016-10-25 06:14 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-12-06 18:22 - 2016-10-25 06:14 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2016-12-06 18:22 - 2016-10-25 06:13 - 22375936 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-12-06 18:22 - 2016-10-25 06:13 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-12-06 18:22 - 2016-10-25 06:12 - 11544576 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-12-06 18:22 - 2016-10-25 06:11 - 06471168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-12-06 18:22 - 2016-10-25 06:11 - 04078592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-12-06 18:22 - 2016-10-25 06:11 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-12-06 18:22 - 2016-10-25 06:10 - 01568256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-12-06 18:22 - 2016-10-25 06:10 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2016-12-06 18:22 - 2016-10-25 06:09 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2016-12-06 18:22 - 2016-10-25 06:09 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-12-06 18:22 - 2016-10-25 06:07 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-12-06 18:22 - 2016-10-25 06:05 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-12-06 18:22 - 2016-10-25 06:04 - 00835072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2016-12-06 18:22 - 2016-10-25 06:03 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-12-06 18:22 - 2016-10-25 06:03 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 24610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 06976512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-12-06 18:22 - 2016-10-25 06:02 - 03459584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2016-12-06 18:22 - 2016-10-25 06:01 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-12-06 18:22 - 2016-10-25 06:01 - 02361856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 02555904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-12-06 18:22 - 2016-10-25 06:00 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-12-06 18:22 - 2016-10-25 05:59 - 14258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-12-06 18:22 - 2016-10-25 05:59 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-12-06 18:22 - 2016-10-25 05:59 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2016-12-06 18:22 - 2016-10-25 05:58 - 09920512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-12-06 18:22 - 2016-10-25 05:58 - 07536128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-12-06 18:22 - 2016-10-25 05:57 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-12-06 18:22 - 2016-10-25 05:56 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 02217984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-12-06 18:22 - 2016-10-25 05:55 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnfldr.dll
2016-12-06 18:22 - 2016-10-25 05:53 - 03294208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-12-06 18:22 - 2016-10-25 05:53 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-12-06 18:22 - 2016-10-25 05:53 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2016-12-06 18:22 - 2016-10-25 05:52 - 03555840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-12-06 18:22 - 2016-10-25 05:52 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-12-06 18:22 - 2016-10-25 05:51 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2016-12-06 18:22 - 2016-10-25 05:50 - 01487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-12-06 18:22 - 2016-10-25 05:48 - 07838208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-12-06 18:22 - 2016-10-25 05:48 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-12-06 18:22 - 2016-10-25 05:47 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-12-06 18:22 - 2016-10-25 05:46 - 02771968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-12-06 18:22 - 2016-10-25 05:45 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-12-06 18:22 - 2016-10-25 05:45 - 02679808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 19348480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 12134400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-12-06 18:22 - 2016-10-25 05:44 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-12-06 18:22 - 2016-10-25 05:43 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-12-06 18:22 - 2016-10-25 05:43 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2016-12-06 18:22 - 2016-10-25 05:41 - 02519552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-12-06 18:22 - 2016-10-25 05:40 - 05325824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-12-06 18:22 - 2016-10-25 05:38 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-12-06 18:22 - 2016-10-25 05:37 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-12-06 18:22 - 2016-10-25 05:36 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-12-06 18:22 - 2016-10-25 05:35 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-12-06 18:22 - 2016-10-25 05:35 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2016-12-06 18:22 - 2016-10-25 05:34 - 02062336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-12-06 18:22 - 2016-10-25 05:34 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-12-06 18:22 - 2016-10-25 05:34 - 01228800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-12-06 18:22 - 2016-10-25 05:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-12-06 18:22 - 2016-10-25 05:32 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-12-06 18:22 - 2016-10-25 05:32 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2016-12-06 18:22 - 2016-10-25 05:32 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-12-06 18:22 - 2016-10-25 05:30 - 12590080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-12-06 18:22 - 2016-10-25 05:29 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2016-12-06 18:22 - 2016-10-25 05:27 - 03065344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-12-06 18:22 - 2016-10-25 05:26 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-12-06 18:22 - 2016-10-25 05:23 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-12-06 18:22 - 2016-10-25 05:21 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2016-12-06 18:22 - 2016-10-25 05:07 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-12-06 18:22 - 2016-10-25 03:19 - 00775336 _____ C:\WINDOWS\SysWOW64\locale.nls
2016-12-06 18:22 - 2016-10-25 03:19 - 00775336 _____ C:\WINDOWS\system32\locale.nls
2016-12-06 18:22 - 2016-10-25 02:47 - 00445873 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-12-06 18:22 - 2016-09-07 06:22 - 00604920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-12-05 18:11 - 2016-11-17 14:45 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-12-05 18:11 - 2016-11-17 14:45 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-12-04 21:09 - 2016-12-04 21:09 - 00007102 _____ C:\Users\Patrik\AppData\Local\recently-used.xbel
2016-11-20 12:14 - 2016-11-20 12:14 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Frontier Developments
2016-11-20 12:14 - 2016-11-20 12:14 - 00000000 ____D C:\Users\Patrik\AppData\Local\Frontier Developments

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-08 01:15 - 2015-11-03 22:44 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-08 00:38 - 2016-04-15 11:15 - 00000306 _____ C:\WINDOWS\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685}.job
2016-12-08 00:15 - 2015-12-23 18:00 - 00000000 ____D C:\Users\Patrik\AppData\Local\CrashDumps
2016-12-07 23:45 - 2015-10-30 19:35 - 00775524 _____ C:\WINDOWS\system32\perfh007.dat
2016-12-07 23:45 - 2015-10-30 19:35 - 00155338 _____ C:\WINDOWS\system32\perfc007.dat
2016-12-07 23:45 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-12-07 23:45 - 2015-08-18 17:27 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-07 23:43 - 2016-01-30 18:30 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-07 23:38 - 2016-01-30 18:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-07 23:38 - 2016-01-30 18:30 - 00000000 ____D C:\Users\Patrik
2016-12-07 23:38 - 2015-11-03 22:44 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-07 23:36 - 2016-04-15 11:15 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-07 23:36 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-12-07 23:35 - 2015-11-05 14:59 - 00000000 ____D C:\ProgramData\Origin
2016-12-07 23:32 - 2015-11-05 15:33 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Origin
2016-12-07 23:00 - 2016-05-05 17:15 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-07 22:58 - 2016-05-05 17:15 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-12-07 20:34 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-12-07 20:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-07 20:30 - 2016-07-17 00:55 - 00000000 ___HD C:\$WINDOWS.~BT
2016-12-07 20:26 - 2016-10-19 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2016-12-07 20:26 - 2016-10-16 04:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PVZ Garden Warfare
2016-12-07 20:26 - 2016-09-22 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-12-07 20:26 - 2016-09-22 11:10 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-12-07 20:26 - 2016-09-20 16:07 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
2016-12-07 20:26 - 2016-09-18 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2
2016-12-07 20:26 - 2016-09-18 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2016-12-07 20:26 - 2016-08-09 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™
2016-12-07 20:26 - 2016-06-21 19:17 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2016-12-07 20:26 - 2016-05-05 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-12-07 20:26 - 2016-05-05 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-07 20:26 - 2016-05-01 23:44 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium
2016-12-07 20:26 - 2016-04-17 07:25 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyVPN
2016-12-07 20:26 - 2016-04-12 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\skate's Thumbnail Tool
2016-12-07 20:26 - 2016-03-24 23:07 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maniac Mansion Deluxe
2016-12-07 20:26 - 2016-01-30 18:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-07 20:26 - 2016-01-30 18:29 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-07 20:26 - 2016-01-30 18:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-07 20:26 - 2015-11-16 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2016-12-07 20:26 - 2015-11-05 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 16
2016-12-07 20:26 - 2015-11-05 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-12-07 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-12-07 20:26 - 2015-10-22 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4
2016-12-07 20:26 - 2015-09-27 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-12-07 20:26 - 2015-09-08 23:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vodafone
2016-12-07 20:26 - 2015-08-20 11:40 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-07 20:26 - 2015-08-20 11:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-07 20:26 - 2015-08-19 19:25 - 00000000 ____D C:\WINDOWS\SysWOW64\xlive
2016-12-07 20:26 - 2015-08-19 19:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2016-12-07 20:26 - 2015-08-19 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-12-07 20:26 - 2015-08-18 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-12-07 20:26 - 2015-08-18 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-12-07 20:26 - 2015-08-18 17:22 - 00000000 ____D C:\Users\Patrik\AppData\Local\TileDataLayer
2016-12-07 20:21 - 2015-08-18 17:24 - 00002386 _____ C:\Users\Patrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-07 20:21 - 2015-08-18 17:24 - 00000000 ___RD C:\Users\Patrik\OneDrive
2016-12-07 19:59 - 2016-01-30 18:34 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-12-07 19:42 - 2016-01-30 18:28 - 00000000 ___DC C:\WINDOWS\Panther
2016-12-07 19:42 - 2015-08-18 18:13 - 00008192 __RSH C:\BOOTSECT.BAK
2016-12-07 19:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-12-07 19:39 - 2016-01-30 18:19 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2016-12-07 19:39 - 2016-01-30 18:19 - 00011433 _____ C:\WINDOWS\diagerr.xml
2016-12-07 19:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-07 19:22 - 2016-10-19 16:38 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\obs-studio
2016-12-07 17:30 - 2016-01-30 18:29 - 00203456 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-12-07 16:25 - 2015-11-03 22:44 - 00000000 ____D C:\Users\Patrik\AppData\Local\Google
2016-12-07 16:25 - 2015-11-03 22:44 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-06 23:37 - 2015-08-19 18:58 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\DAEMON Tools Lite
2016-12-06 23:28 - 2015-08-23 18:36 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-06 22:56 - 2016-02-28 17:51 - 00000000 ____D C:\Users\Patrik\AppData\Local\Warframe
2016-12-06 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-12-06 21:22 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DesktopTileResources
2016-12-06 21:20 - 2016-03-13 21:08 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-06 21:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Web
2016-12-06 21:01 - 2016-09-16 19:34 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-12-06 20:56 - 2016-09-20 10:59 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2016-12-06 20:56 - 2016-07-16 22:00 - 00000000 ____D C:\Program Files (x86)\Futuremark
2016-12-06 20:56 - 2016-06-21 19:17 - 00000000 ____D C:\Program Files (x86)\GPU-Z
2016-12-06 20:56 - 2016-04-15 17:09 - 00000000 ____D C:\Program Files (x86)\TomTom International B.V
2016-12-06 20:56 - 2016-04-12 16:45 - 00000000 ____D C:\Program Files (x86)\skate's Thumbnail Tool
2016-12-06 20:56 - 2016-03-29 19:35 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2016-12-06 20:56 - 2016-03-24 23:06 - 00000000 ____D C:\Program Files (x86)\LucasFan Games
2016-12-06 20:56 - 2016-03-20 12:06 - 00000000 ____D C:\Program Files (x86)\OpenAL
2016-12-06 20:56 - 2016-01-30 18:25 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-12-06 20:56 - 2016-01-30 18:25 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-06 20:56 - 2016-01-28 20:20 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-06 20:56 - 2015-12-22 20:25 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-12-06 20:56 - 2015-11-21 12:13 - 00000000 ____D C:\Program Files (x86)\OBS
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-12-06 20:56 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-12-06 20:56 - 2015-09-10 19:33 - 00000000 ____D C:\Program Files (x86)\AMD
2016-12-06 20:56 - 2015-09-10 19:21 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-12-06 20:56 - 2015-08-23 18:36 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-12-06 20:56 - 2015-08-19 19:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2016-12-06 20:56 - 2015-08-18 20:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-06 20:56 - 2015-08-18 20:16 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-12-06 20:56 - 2015-08-18 18:32 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-06 20:17 - 2015-08-18 17:22 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender
2016-12-06 18:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-06 18:29 - 2015-08-26 11:04 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-12-06 18:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-12-06 18:26 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-06 18:26 - 2015-08-26 11:04 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-12-05 22:35 - 2016-01-30 18:54 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-12-05 18:12 - 2016-10-15 18:25 - 00003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00004004 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003976 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003914 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003752 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 18:11 - 2016-10-15 18:25 - 00003710 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-04 23:18 - 2015-08-23 18:36 - 00000000 ____D C:\Users\Patrik\AppData\Local\Ubisoft Game Launcher
2016-12-04 21:09 - 2016-10-04 17:47 - 00000000 ____D C:\Users\Patrik\AppData\Local\gtk-2.0
2016-12-04 21:09 - 2016-10-04 16:51 - 00000000 ____D C:\Users\Patrik\.gimp-2.8
2016-11-29 13:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\ELAMBKUP
2016-11-28 11:19 - 2016-08-31 18:17 - 00000000 ____D C:\Users\Patrik\AppData\Local\BANDAI NAMCO Games
2016-11-27 21:58 - 2015-11-16 23:53 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\TS3Client
2016-11-17 14:45 - 2016-10-15 18:25 - 01854400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 01452480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-11-17 14:45 - 2016-10-15 18:25 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-11-17 14:45 - 2015-09-22 21:46 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-11-16 17:42 - 2016-10-15 18:25 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2016-11-08 20:08 - 2015-12-22 20:25 - 00000000 ____D C:\Users\Patrik\AppData\Roaming\Audacity

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-04-15 12:15 - 2016-06-17 17:40 - 0000235 _____ () C:\Users\Patrik\AppData\Roaming\WB.CFG
2016-12-04 21:09 - 2016-12-04 21:09 - 0007102 _____ () C:\Users\Patrik\AppData\Local\recently-used.xbel
2015-10-11 18:55 - 2016-08-12 17:10 - 0007597 _____ () C:\Users\Patrik\AppData\Local\Resmon.ResmonCfg
2015-12-04 17:09 - 2015-12-04 17:09 - 0000000 _____ () C:\Users\Patrik\AppData\Local\{803477A5-35DF-4B63-A7CB-4A0E432D54B0}
2015-12-09 15:23 - 2015-12-09 15:23 - 0000000 _____ () C:\Users\Patrik\AppData\Local\{F947399A-B867-4A87-9355-08F125A047EE}
2016-12-06 21:33 - 2016-12-06 21:33 - 0046885 _____ () C:\ProgramData\agent.1481056395.bdinstall.bin
2016-12-06 22:27 - 2016-12-06 22:27 - 0028520 _____ () C:\ProgramData\agent.1481059619.bdinstall.bin
2016-12-06 22:32 - 2016-12-06 22:32 - 0028796 _____ () C:\ProgramData\agent.1481059946.bdinstall.bin
2016-12-07 23:53 - 2016-12-07 23:53 - 0028189 _____ () C:\ProgramData\agent.1481151228.bdinstall.bin
2016-12-06 22:33 - 2016-12-06 22:33 - 0349001 _____ () C:\ProgramData\cl.1481059961.bdinstall.bin

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{0F0CB321-015A-9951-ACC1-409D224FB685}.job


Einige Dateien in TEMP:
====================
C:\Users\Patrik\AppData\Local\Temp\libeay32.dll
C:\Users\Patrik\AppData\Local\Temp\msvcr120.dll
C:\Users\Patrik\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-03 18:59

==================== Ende von FRST.txt ============================

Antwort
Seite 1 von 3 1 23

Themen zu Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten
bitdefender, datei, defender, desktop, dienste, direkt, geblockt, gen, google, installiert, kleines, malware, malwarebytes, neustarten, nicht mehr, problem, programme, seite, starten, startseite, suchmaschine, systemsteuerung, virus, windows, öffnen


« Firefox.exe 2x im tastkmanager offen | Virus eingefangen? »


Ähnliche Themen: Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten


  1. Windows 10: Trotux.com Virus leite Firefox Webseite auf Werbung um
    Log-Analyse und Auswertung - 15.08.2016 (7)
  2. Windows Defender lässt sich nicht starten
    Antiviren-, Firewall- und andere Schutzprogramme - 25.03.2016 (11)
  3. Windows 7: Spiele starten nicht mehr und PC starten funktioniert manchmal nicht
    Plagegeister aller Art und deren Bekämpfung - 08.05.2015 (17)
  4. Windows 7: Nach BKA Trojaner Fehlermeldung beim Starten, Windows Sicherheitscenter kann nicht gestartet werden
    Log-Analyse und Auswertung - 18.11.2014 (9)
  5. Windows 7 - Kann nichts mehr starten!
    Plagegeister aller Art und deren Bekämpfung - 11.04.2014 (1)
  6. Windows 7: Windows-Sicherheitscenter und Windows Defender funktionieren nicht mehr, Services.exe verseucht?
    Log-Analyse und Auswertung - 07.01.2014 (8)
  7. Windows-Sicherheitscenter war deaktiviert - nun kann ich Windows-Defender nicht mehr starten
    Log-Analyse und Auswertung - 20.12.2013 (13)
  8. Windows 7 Meldung Win32/Small-CA Virus entfernen, AntiVir findet nichts, Windows Update und Defender funktionieren nicht mehr
    Log-Analyse und Auswertung - 20.11.2013 (15)
  9. gvu virus - kann window nicht mehr aus dem gesicherten modus starten
    Plagegeister aller Art und deren Bekämpfung - 24.08.2013 (1)
  10. kann Windows-Firewall nicht mehr starten ...
    Antiviren-, Firewall- und andere Schutzprogramme - 15.01.2013 (19)
  11. Firewall und Defender lassen sich nicht mehr starten nach 0.Access Virus.
    Plagegeister aller Art und deren Bekämpfung - 03.09.2012 (4)
  12. Windows-Sicherheitscenterdienst wird nicht angezeigt, Windows Defender lässt sich nicht starten
    Log-Analyse und Auswertung - 10.04.2012 (5)
  13. Windows wurde aus Sicherheitsgründen blockiert, ich kann den Laptop nicht mehr normal starten
    Plagegeister aller Art und deren Bekämpfung - 20.12.2011 (20)
  14. Komischer Virus ? Kann Programme nicht mehr starten.
    Plagegeister aller Art und deren Bekämpfung - 23.05.2009 (17)
  15. Kann Windows nicht mehr richtig starten
    Mülltonne - 22.01.2007 (1)
  16. Kann Windows nicht mehr richtig starten
    Plagegeister aller Art und deren Bekämpfung - 22.01.2007 (3)
  17. Kann pc ,wegen virus nicht mehr starten
    Plagegeister aller Art und deren Bekämpfung - 25.11.2006 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten - Hallo liebe Forumer ^^ Und zwar habe ich ein kleines Problem mit einen Virus / Malware weiß ich leider nicht ^^ Also ich jetzt was vorgefallen ist. Ich habe was - Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten...
Archiv
Du betrachtest: Trotux Virus bei Windows 10 Windows Defender kann man nicht mehr starten auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19