Notebook reagiert verzögert, Ativirus findet nichts

cosinus · 09.12.2016, 17:03

Sehr gut!

1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

querotudo · 09.12.2016, 18:02

Ich habe alles gemäß der Instruktionen durchgeführt. Weder MBAR noch TDSSKILLER scheinen etwas gefunden zu haben. TDSSKILLER hat kein Log erzeugt.

Hier das MBAR-Log

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.12.09.14
  rootkit: v2016.11.20.01

Windows 10 x64 NTFS
Internet Explorer 11.447.14393.0
Norman :: NORMAN-PC [administrator]

09.12.2016 17:08:41
mbar-log-2016-12-09 (17-08-41).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 398040
Time elapsed: 36 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus · 10.12.2016, 13:56

Bitte richtig lesen, tdsskiller erzeugt immer ein Logfile

querotudo · 10.12.2016, 16:41

Hi Cosinus,

natürlich hattest Du wieder Recht. Ich hatte beim ersten Versuch auch die additional Options nicht gesetzt. Der gefundene Threat gehört zu einem medizinischen Blutzuckermessgerät der Firma Abbott mit dem Namen Freestyle Libre.

Hier das Log:

Code:

ATTFilter

16:28:09.0921 0x13b14  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
16:28:20.0738 0x13b14  ============================================================
16:28:20.0738 0x13b14  Current date / time: 2016/12/10 16:28:20.0738
16:28:20.0738 0x13b14  SystemInfo:
16:28:20.0739 0x13b14  
16:28:20.0739 0x13b14  OS Version: 10.0.14393 ServicePack: 0.0
16:28:20.0739 0x13b14  Product type: Workstation
16:28:20.0739 0x13b14  ComputerName: NORMAN-PC
16:28:20.0739 0x13b14  UserName: Norman
16:28:20.0739 0x13b14  Windows directory: C:\WINDOWS
16:28:20.0739 0x13b14  System windows directory: C:\WINDOWS
16:28:20.0739 0x13b14  Running under WOW64
16:28:20.0739 0x13b14  Processor architecture: Intel x64
16:28:20.0739 0x13b14  Number of processors: 8
16:28:20.0739 0x13b14  Page size: 0x1000
16:28:20.0739 0x13b14  Boot type: Normal boot
16:28:20.0739 0x13b14  CodeIntegrityOptions = 0x00000001
16:28:20.0739 0x13b14  ============================================================
16:28:21.0313 0x13b14  KLMD registered as C:\WINDOWS\system32\drivers\63854804.sys
16:28:21.0313 0x13b14  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.447, osProperties = 0x19
16:28:23.0345 0x13b14  System UUID: {06DBFE8A-9413-C582-4869-9E8D551D7782}
16:28:23.0978 0x13b14  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:28:24.0216 0x13b14  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 ( 1863.02 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:28:25.0406 0x13b14  ============================================================
16:28:25.0406 0x13b14  \Device\Harddisk0\DR0:
16:28:25.0415 0x13b14  MBR partitions:
16:28:25.0416 0x13b14  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32FCD, BlocksNum 0x1D4C000
16:28:25.0416 0x13b14  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7EFCD, BlocksNum 0x3245F536
16:28:25.0458 0x13b14  \Device\Harddisk1\DR1:
16:28:25.0458 0x13b14  GPT partitions:
16:28:25.0458 0x13b14  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {57312DE8-56A7-4CAD-B465-E359A89236E2}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
16:28:25.0458 0x13b14  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {CF4B67B6-8BB9-44C4-982B-81375847DC13}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0xE8DC8000
16:28:25.0458 0x13b14  MBR partitions:
16:28:25.0458 0x13b14  ============================================================
16:28:25.0525 0x13b14  C: <-> \Device\Harddisk0\DR0\Partition2
16:28:25.0558 0x13b14  D: <-> \Device\Harddisk1\DR1\Partition2
16:28:25.0558 0x13b14  ============================================================
16:28:25.0558 0x13b14  Initialize success
16:28:25.0558 0x13b14  ============================================================
16:29:39.0302 0x13b20  ============================================================
16:29:39.0302 0x13b20  Scan started
16:29:39.0302 0x13b20  Mode: Manual; SigCheck; TDLFS; 
16:29:39.0302 0x13b20  ============================================================
16:29:39.0302 0x13b20  KSN ping started
16:29:39.0355 0x13b20  KSN ping finished: true
16:29:42.0104 0x13b20  ================ Scan system memory ========================
16:29:42.0104 0x13b20  System memory - ok
16:29:42.0104 0x13b20  ================ Scan services =============================
16:29:42.0356 0x13b20  1394ohci - ok
16:29:42.0356 0x13b20  3ware - ok
16:29:42.0387 0x13b20  ACPI - ok
16:29:42.0403 0x13b20  AcpiDev - ok
16:29:42.0403 0x13b20  acpiex - ok
16:29:42.0403 0x13b20  acpipagr - ok
16:29:42.0425 0x13b20  AcpiPmi - ok
16:29:42.0441 0x13b20  acpitime - ok
16:29:42.0591 0x13b20  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:29:42.0678 0x13b20  AdobeARMservice - ok
16:29:42.0858 0x13b20  [ 9BAF21BA600EC4E5FD9A66AD3E4FF5A6, 5E02E5E80557F6EC870EB7CC2DE95169D4225B87A2FE7E796736205F51C15816 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:29:42.0890 0x13b20  AdobeFlashPlayerUpdateSvc - ok
16:29:42.0905 0x13b20  ADP80XX - ok
16:29:42.0963 0x13b20  [ 8621B8CDE2A07112CD723F37D669C0BF, 36FC0B125A0576296FA1F99EEB64D87C8D77FA54CF7D92907A6F6B48E0859FD5 ] AERTFilters     C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
16:29:43.0009 0x13b20  AERTFilters - ok
16:29:43.0009 0x13b20  AFD - ok
16:29:43.0032 0x13b20  ahcache - ok
16:29:43.0063 0x13b20  AJRouter - ok
16:29:43.0063 0x13b20  ALG - ok
16:29:43.0078 0x13b20  AmdK8 - ok
16:29:43.0078 0x13b20  AmdPPM - ok
16:29:43.0078 0x13b20  amdsata - ok
16:29:43.0078 0x13b20  amdsbs - ok
16:29:43.0078 0x13b20  amdxata - ok
16:29:43.0110 0x13b20  [ 4DE4BE679205B3A712562507AEE75227, 1C40F14A2BFFFB8E9646B57419D9F810A86D0DCD94F9DE9D9851D498F86F343E ] AMPPAL          C:\WINDOWS\System32\drivers\AMPPAL.sys
16:29:43.0163 0x13b20  AMPPAL - ok
16:29:43.0179 0x13b20  AppID - ok
16:29:43.0179 0x13b20  AppIDSvc - ok
16:29:43.0210 0x13b20  Appinfo - ok
16:29:43.0229 0x13b20  applockerfltr - ok
16:29:43.0232 0x13b20  AppMgmt - ok
16:29:43.0248 0x13b20  AppReadiness - ok
16:29:43.0263 0x13b20  AppVClient - ok
16:29:43.0279 0x13b20  AppvStrm - ok
16:29:43.0310 0x13b20  AppvVemgr - ok
16:29:43.0332 0x13b20  AppvVfs - ok
16:29:43.0364 0x13b20  AppXSvc - ok
16:29:43.0379 0x13b20  arcsas - ok
16:29:43.0379 0x13b20  AsyncMac - ok
16:29:43.0395 0x13b20  atapi - ok
16:29:43.0411 0x13b20  AudioEndpointBuilder - ok
16:29:43.0433 0x13b20  Audiosrv - ok
16:29:43.0465 0x13b20  Avira.ServiceHost - ok
16:29:43.0497 0x13b20  AxInstSV - ok
16:29:43.0514 0x13b20  b06bdrv - ok
16:29:43.0537 0x13b20  BasicDisplay - ok
16:29:43.0540 0x13b20  BasicRender - ok
16:29:43.0545 0x13b20  bcmfn - ok
16:29:43.0549 0x13b20  bcmfn2 - ok
16:29:43.0563 0x13b20  BDESVC - ok
16:29:43.0566 0x13b20  Beep - ok
16:29:43.0581 0x13b20  BFE - ok
16:29:43.0594 0x13b20  BITS - ok
16:29:43.0607 0x13b20  bowser - ok
16:29:43.0697 0x13b20  [ 91A907624140CB092E95F157540A74C2, A8562D1C065EEF114E8D2736AB4E6A02D3EB76C9F75A7ACD75AC196A75752AAE ] BrcmSetSecurity C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
16:29:43.0722 0x13b20  BrcmSetSecurity - ok
16:29:43.0742 0x13b20  BrokerInfrastructure - ok
16:29:43.0745 0x13b20  Browser - ok
16:29:43.0751 0x13b20  BthA2DP - ok
16:29:43.0766 0x13b20  BthAvrcpTg - ok
16:29:43.0798 0x13b20  BthEnum - ok
16:29:43.0833 0x13b20  BthHFAud - ok
16:29:43.0849 0x13b20  BthHFEnum - ok
16:29:43.0864 0x13b20  bthhfhid - ok
16:29:43.0880 0x13b20  BthHFSrv - ok
16:29:43.0880 0x13b20  BTHMODEM - ok
16:29:43.0911 0x13b20  BthPan - ok
16:29:43.0932 0x13b20  BTHPORT - ok
16:29:43.0932 0x13b20  bthserv - ok
16:29:43.0964 0x13b20  BTHUSB - ok
16:29:44.0049 0x13b20  [ 7B31A8A9DC95B3634D896FD0F2814F19, 8FD5FBC61968F4BB8C2BAD0D432D5B86DCFED38CCF6F559F9EFB71AADD25474F ] btmhsf          C:\WINDOWS\system32\DRIVERS\btmhsf.sys
16:29:44.0080 0x13b20  btmhsf - ok
16:29:44.0095 0x13b20  buttonconverter - ok
16:29:44.0111 0x13b20  CapImg - ok
16:29:44.0111 0x13b20  cdfs - ok
16:29:44.0133 0x13b20  CDPSvc - ok
16:29:44.0133 0x13b20  CDPUserSvc - ok
16:29:44.0211 0x13b20  cdrom - ok
16:29:44.0229 0x13b20  CertPropSvc - ok
16:29:44.0233 0x13b20  cht4iscsi - ok
16:29:44.0233 0x13b20  cht4vbd - ok
16:29:44.0249 0x13b20  circlass - ok
16:29:44.0249 0x13b20  CLFS - ok
16:29:44.0249 0x13b20  ClipSVC - ok
16:29:44.0265 0x13b20  clreg - ok
16:29:44.0265 0x13b20  CmBatt - ok
16:29:44.0265 0x13b20  CNG - ok
16:29:44.0280 0x13b20  cnghwassist - ok
16:29:44.0333 0x13b20  CompositeBus - ok
16:29:44.0348 0x13b20  COMSysApp - ok
16:29:44.0348 0x13b20  condrv - ok
16:29:44.0380 0x13b20  CoreMessagingRegistrar - ok
16:29:44.0519 0x13b20  [ B18D590BC5220FDB4A747BC16D78ABC7, D46F8B43BAC22E55DE9AFC19CF371B1C4E8D3707163598B2F9884BB31D730C09 ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
16:29:44.0656 0x13b20  cphs - ok
16:29:44.0678 0x13b20  CryptSvc - ok
16:29:44.0682 0x13b20  CSC - ok
16:29:44.0685 0x13b20  CscService - ok
16:29:44.0722 0x13b20  [ FBE228ABEAB2BE13B9C3A3A112D4D8DC, A9FF2DC38CBE00AAD904BB7EC74480953D513E46FDE607A7773FF5A2A25B8C15 ] CtClsFlt        C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys
16:29:44.0813 0x13b20  CtClsFlt - ok
16:29:44.0835 0x13b20  dam - ok
16:29:44.0835 0x13b20  DcomLaunch - ok
16:29:44.0835 0x13b20  DcpSvc - ok
16:29:44.0850 0x13b20  defragsvc - ok
16:29:44.0866 0x13b20  DeviceAssociationService - ok
16:29:44.0882 0x13b20  DeviceInstall - ok
16:29:44.0897 0x13b20  DevQueryBroker - ok
16:29:44.0913 0x13b20  Dfsc - ok
16:29:44.0950 0x13b20  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
16:29:44.0982 0x13b20  dg_ssudbus - ok
16:29:45.0050 0x13b20  Dhcp - ok
16:29:45.0130 0x13b20  diagnosticshub.standardcollector.service - ok
16:29:45.0150 0x13b20  DiagTrack - ok
16:29:45.0181 0x13b20  DIRECTIO - ok
16:29:45.0213 0x13b20  disk - ok
16:29:45.0235 0x13b20  DmEnrollmentSvc - ok
16:29:45.0235 0x13b20  dmvsc - ok
16:29:45.0250 0x13b20  dmwappushservice - ok
16:29:45.0266 0x13b20  Dnscache - ok
16:29:45.0266 0x13b20  dot3svc - ok
16:29:45.0282 0x13b20  DPS - ok
16:29:45.0297 0x13b20  drmkaud - ok
16:29:45.0350 0x13b20  [ 1ED08A6264C5C92099D6D1DAE5E8F530, 4045AE77859B1DBF13972451972EAAF6F3C97BEA423E9E78F1C2F14330CD47CA ] DrvAgent64      C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS
16:29:45.0413 0x13b20  DrvAgent64 - ok
16:29:45.0429 0x13b20  DsmSvc - ok
16:29:45.0433 0x13b20  DsSvc - ok
16:29:45.0435 0x13b20  DXGKrnl - ok
16:29:45.0435 0x13b20  EapHost - ok
16:29:45.0451 0x13b20  ebdrv - ok
16:29:45.0451 0x13b20  EFS - ok
16:29:45.0451 0x13b20  EhStorClass - ok
16:29:45.0467 0x13b20  EhStorTcgDrv - ok
16:29:45.0482 0x13b20  [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
16:29:45.0499 0x13b20  ElbyCDIO - ok
16:29:45.0505 0x13b20  embeddedmode - ok
16:29:45.0523 0x13b20  EntAppSvc - ok
16:29:45.0573 0x13b20  [ D315FF43E23DF424ECEC2F6C930203E4, 68940EDA34DC4945CDD0D8018D96A0DA8F99F16A930946D14E4FECEE033FCB80 ] EpsonScanSvc    C:\WINDOWS\system32\EscSvc64.exe
16:29:45.0587 0x13b20  EpsonScanSvc - ok
16:29:45.0590 0x13b20  ErrDev - ok
16:29:45.0602 0x13b20  EventSystem - ok
16:29:45.0605 0x13b20  exfat - ok
16:29:45.0607 0x13b20  fastfat - ok
16:29:45.0625 0x13b20  Fax - ok
16:29:45.0629 0x13b20  fdc - ok
16:29:45.0633 0x13b20  fdPHost - ok
16:29:45.0636 0x13b20  FDResPub - ok
16:29:45.0647 0x13b20  fhsvc - ok
16:29:45.0664 0x13b20  FileCrypt - ok
16:29:45.0667 0x13b20  FileInfo - ok
16:29:45.0671 0x13b20  Filetrace - ok
16:29:45.0788 0x13b20  [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
16:29:45.0836 0x13b20  FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
16:29:45.0899 0x13b20  Detect skipped due to KSN trusted
16:29:45.0915 0x13b20  FLEXnet Licensing Service - ok
16:29:45.0915 0x13b20  flpydisk - ok
16:29:45.0937 0x13b20  FltMgr - ok
16:29:45.0952 0x13b20  FontCache - ok
16:29:46.0052 0x13b20  FontCache3.0.0.0 - ok
16:29:46.0084 0x13b20  FrameServer - ok
16:29:46.0168 0x13b20  [ 566677EC7238F505557F310691CCEDED, 346E01BC92D9B09560CA4FB769E325A33EA549649FD18D639E7C42F225B37235 ] FreeStyleLibre MAS Server C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe
16:29:46.0268 0x13b20  FreeStyleLibre MAS Server - detected UnsignedFile.Multi.Generic ( 1 )
16:29:46.0415 0x13b20  FreeStyleLibre MAS Server ( UnsignedFile.Multi.Generic ) - warning
16:29:46.0537 0x13b20  FsDepends - ok
16:29:46.0537 0x13b20  Fs_Rec - ok
16:29:46.0537 0x13b20  fvevol - ok
16:29:46.0576 0x13b20  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
16:29:46.0584 0x13b20  GEARAspiWDM - ok
16:29:46.0606 0x13b20  gencounter - ok
16:29:46.0623 0x13b20  genericusbfn - ok
16:29:46.0745 0x13b20  [ F78BC07DCED5EDDD6D477E923620F8EA, ABE28155100A38A5E1B58FFC8099EF416145278B440A67B8DAFD7715FE412624 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
16:29:46.0790 0x13b20  GfExperienceService - ok
16:29:46.0820 0x13b20  [ B93252C4C5A3733ECD5522CAF88DE02D, 382450F0FF238B6077A78F75AC5D4E53AD7D884706B90E7AC4D4DF467C9A2162 ] GigasetGenericUSB_x64 C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys
16:29:46.0900 0x13b20  GigasetGenericUSB_x64 - ok
16:29:46.0938 0x13b20  GPIOClx0101 - ok
16:29:46.0953 0x13b20  gpsvc - ok
16:29:46.0953 0x13b20  GpuEnergyDrv - ok
16:29:47.0038 0x13b20  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:29:47.0069 0x13b20  gupdate - ok
16:29:47.0101 0x13b20  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:29:47.0137 0x13b20  gupdatem - ok
16:29:47.0200 0x13b20  HDAudBus - ok
16:29:47.0200 0x13b20  HidBatt - ok
16:29:47.0238 0x13b20  HidBth - ok
16:29:47.0254 0x13b20  hidi2c - ok
16:29:47.0254 0x13b20  hidinterrupt - ok
16:29:47.0254 0x13b20  HidIr - ok
16:29:47.0285 0x13b20  hidserv - ok
16:29:47.0300 0x13b20  HidUsb - ok
16:29:47.0334 0x13b20  HomeGroupListener - ok
16:29:47.0338 0x13b20  HomeGroupProvider - ok
16:29:47.0353 0x13b20  HpSAMD - ok
16:29:47.0353 0x13b20  HTTP - ok
16:29:47.0385 0x13b20  HvHost - ok
16:29:47.0400 0x13b20  hvservice - ok
16:29:47.0416 0x13b20  hwpolicy - ok
16:29:47.0416 0x13b20  hyperkbd - ok
16:29:47.0453 0x13b20  [ 45E0F744B0887E2701B1C59DC86147EC, 04EB75A07B2949AB994F355BBEE33DE2069F94504D738DC7E66ABB1C9F1C31C8 ] i8042HDR        C:\WINDOWS\system32\DRIVERS\i8042HDR.sys
16:29:47.0485 0x13b20  i8042HDR - ok
16:29:47.0500 0x13b20  i8042prt - ok
16:29:47.0500 0x13b20  iagpio - ok
16:29:47.0500 0x13b20  iai2c - ok
16:29:47.0516 0x13b20  iaLPSS2i_GPIO2 - ok
16:29:47.0516 0x13b20  iaLPSS2i_I2C - ok
16:29:47.0516 0x13b20  iaLPSSi_GPIO - ok
16:29:47.0516 0x13b20  iaLPSSi_I2C - ok
16:29:47.0516 0x13b20  iaStorAV - ok
16:29:47.0534 0x13b20  iaStorV - ok
16:29:47.0537 0x13b20  ibbus - ok
16:29:47.0538 0x13b20  [ 33120C561E918A18DD48DEFEEEC0885D, F9F7E4610717532E25A2FFBFA507E3B7B0608BEC026FEA2EE0B530560F12F538 ] ibtfltcoex      C:\WINDOWS\system32\DRIVERS\ibtfltcoex.sys
16:29:47.0556 0x13b20  ibtfltcoex - ok
16:29:47.0629 0x13b20  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
16:29:47.0650 0x13b20  ICCS - ok
16:29:47.0673 0x13b20  icssvc - ok
16:29:47.0860 0x13b20  [ 79AE3CC82CA1563A4B392207997ACE7C, A1E4A1DA95CA2FA197EF5975657822F0F813F6C33DA38E1FA5A840194034D071 ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
16:29:48.0101 0x13b20  igfx - ok
16:29:48.0138 0x13b20  IKEEXT - ok
16:29:48.0170 0x13b20  [ DD587A55390ED2295BCE6D36AD567DA9, AEB7DCB8EF89BEE8D9649A05FC482B1E4E3F44243D57A2577C862EB69166C48E ] Impcd           C:\WINDOWS\system32\DRIVERS\Impcd.sys
16:29:48.0239 0x13b20  Impcd - ok
16:29:48.0254 0x13b20  IndirectKmd - ok
16:29:48.0301 0x13b20  [ FD2032D2EAE8D7F3381EBA5FA3E7FEEA, 46D1DC6A44E20339AD9195EE7CC719DC9BC99C78F8C74E730B671F0D78B9C683 ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
16:29:48.0301 0x13b20  intaud_WaveExtensible - ok
16:29:48.0454 0x13b20  [ 622868E4BAE8FBCD22CB1A5901A2C824, C1A2264C0984DD16C83B663C9CE43E049E1356E32C5771C3ACE225F285699138 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
16:29:48.0636 0x13b20  IntcAzAudAddService - ok
16:29:48.0700 0x13b20  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud        C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
16:29:48.0765 0x13b20  IntcDAud - ok
16:29:48.0815 0x13b20  [ 441D5FAF24CC2EC115B654A55C52F0AF, 5BF5299DAD9A7076C43D68C70E02AEC8DBFD89C1AFDF7CD6AB95550EE25EEB36 ] Intel(R) Wireless Bluetooth(R) 4.0 Radio Management C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
16:29:48.0828 0x13b20  Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - ok
16:29:48.0837 0x13b20  intelide - ok
16:29:48.0858 0x13b20  intelpep - ok
16:29:48.0875 0x13b20  intelppm - ok
16:29:48.0875 0x13b20  iorate - ok
16:29:48.0875 0x13b20  IpFilterDriver - ok
16:29:48.0891 0x13b20  iphlpsvc - ok
16:29:48.0907 0x13b20  IPMIDRV - ok
16:29:48.0907 0x13b20  IPNAT - ok
16:29:49.0002 0x13b20  [ 4EFFC8FF6D349E971E94B1C670C0C66A, E92DA19CE9725BB4CC34DF94873C6B441AE61679A8C615780E1A1E9404C8FA26 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
16:29:49.0039 0x13b20  iPod Service - ok
16:29:49.0039 0x13b20  irda - ok
16:29:49.0039 0x13b20  IRENUM - ok
16:29:49.0055 0x13b20  irmon - ok
16:29:49.0055 0x13b20  isapnp - ok
16:29:49.0071 0x13b20  iScsiPrt - ok
16:29:49.0102 0x13b20  [ E56417C56B6A7316B6F527C890A1860D, 906F361967E56D8254A264E5005FA9F9251510311C88BD305BF92E66CA2E33B2 ] JMCR            C:\WINDOWS\system32\DRIVERS\jmcr.sys
16:29:49.0155 0x13b20  JMCR - ok
16:29:49.0202 0x13b20  kbdclass - ok
16:29:49.0217 0x13b20  kbdhid - ok
16:29:49.0239 0x13b20  kdnic - ok
16:29:49.0239 0x13b20  KeyIso - ok
16:29:49.0239 0x13b20  KSecDD - ok
16:29:49.0255 0x13b20  KSecPkg - ok
16:29:49.0255 0x13b20  ksthunk - ok
16:29:49.0270 0x13b20  KtmRm - ok
16:29:49.0270 0x13b20  LanmanServer - ok
16:29:49.0286 0x13b20  LanmanWorkstation - ok
16:29:49.0286 0x13b20  lfsvc - ok
16:29:49.0286 0x13b20  LicenseManager - ok
16:29:49.0286 0x13b20  lltdio - ok
16:29:49.0302 0x13b20  lltdsvc - ok
16:29:49.0302 0x13b20  lmhosts - ok
16:29:49.0355 0x13b20  [ 7F32D4C47A50E7223491E8FB9359907D, 6D3F59A8D006BED3234697933D09C8EE8F7A9F4A4196CFA878F8E8A929B24CE5 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
16:29:49.0370 0x13b20  LMS - ok
16:29:49.0386 0x13b20  LSI_SAS - ok
16:29:49.0386 0x13b20  LSI_SAS2i - ok
16:29:49.0386 0x13b20  LSI_SAS3i - ok
16:29:49.0386 0x13b20  LSI_SSS - ok
16:29:49.0401 0x13b20  LSM - ok
16:29:49.0437 0x13b20  luafv - ok
16:29:49.0439 0x13b20  MapsBroker - ok
16:29:49.0455 0x13b20  megasas - ok
16:29:49.0471 0x13b20  megasas2i - ok
16:29:49.0471 0x13b20  megasr - ok
16:29:49.0502 0x13b20  [ E7C9F74D8CAAB1FF7964C27C070FB16C, 76CCD9109E1031A336B7E275368520FFB60D500E24444B04066F205D1ED5BA2B ] MEIx64          C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys
16:29:49.0539 0x13b20  MEIx64 - ok
16:29:49.0570 0x13b20  MessagingService - ok
16:29:49.0667 0x13b20  Microsoft SharePoint Workspace Audit Service - ok
16:29:49.0677 0x13b20  mlx4_bus - ok
16:29:49.0688 0x13b20  MMCSS - ok
16:29:49.0698 0x13b20  Modem - ok
16:29:49.0732 0x13b20  monitor - ok
16:29:49.0746 0x13b20  mouclass - ok
16:29:49.0749 0x13b20  mouhid - ok
16:29:49.0753 0x13b20  mountmgr - ok
16:29:49.0755 0x13b20  mpsdrv - ok
16:29:49.0766 0x13b20  MpsSvc - ok
16:29:49.0808 0x13b20  MRxDAV - ok
16:29:49.0853 0x13b20  mrxsmb - ok
16:29:49.0866 0x13b20  mrxsmb10 - ok
16:29:49.0873 0x13b20  mrxsmb20 - ok
16:29:49.0882 0x13b20  MsBridge - ok
16:29:49.0893 0x13b20  MSDTC - ok
16:29:49.0898 0x13b20  Msfs - ok
16:29:49.0902 0x13b20  msgpiowin32 - ok
16:29:49.0906 0x13b20  mshidkmdf - ok
16:29:49.0908 0x13b20  mshidumdf - ok
16:29:49.0908 0x13b20  msisadrv - ok
16:29:49.0956 0x13b20  MSiSCSI - ok
16:29:49.0956 0x13b20  msiserver - ok
16:29:49.0972 0x13b20  MSKSSRV - ok
16:29:49.0987 0x13b20  MsLldp - ok
16:29:49.0987 0x13b20  MSPCLOCK - ok
16:29:49.0987 0x13b20  MSPQM - ok
16:29:49.0987 0x13b20  MsRPC - ok
16:29:50.0003 0x13b20  MsSecFlt - ok
16:29:50.0003 0x13b20  mssmbios - ok
16:29:50.0003 0x13b20  MSTEE - ok
16:29:50.0003 0x13b20  MTConfig - ok
16:29:50.0019 0x13b20  Mup - ok
16:29:50.0019 0x13b20  mvumis - ok
16:29:50.0118 0x13b20  [ A25648600888D412CCD2637071B08A04, 78FFF7F7F877EC5E4DC84C597E7639EBBCA9AE9F5B2F8C328022CD3E05E5F838 ] MyEpson Portal Service C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe
16:29:50.0203 0x13b20  MyEpson Portal Service - ok
16:29:50.0240 0x13b20  NativeWifiP - ok
16:29:50.0256 0x13b20  NcaSvc - ok
16:29:50.0256 0x13b20  NcbService - ok
16:29:50.0287 0x13b20  NcdAutoSetup - ok
16:29:50.0287 0x13b20  ndfltr - ok
16:29:50.0318 0x13b20  NDIS - ok
16:29:50.0334 0x13b20  NdisCap - ok
16:29:50.0356 0x13b20  NdisImPlatform - ok
16:29:50.0356 0x13b20  NdisTapi - ok
16:29:50.0356 0x13b20  Ndisuio - ok
16:29:50.0356 0x13b20  NdisVirtualBus - ok
16:29:50.0372 0x13b20  NdisWan - ok
16:29:50.0372 0x13b20  ndiswanlegacy - ok
16:29:50.0372 0x13b20  ndproxy - ok
16:29:50.0372 0x13b20  Ndu - ok
16:29:50.0387 0x13b20  NetAdapterCx - ok
16:29:50.0387 0x13b20  NetBIOS - ok
16:29:50.0387 0x13b20  NetBT - ok
16:29:50.0403 0x13b20  Netlogon - ok
16:29:50.0440 0x13b20  Netman - ok
16:29:50.0456 0x13b20  netprofm - ok
16:29:50.0519 0x13b20  NetSetupSvc - ok
16:29:50.0623 0x13b20  NetTcpPortSharing - ok
16:29:51.0004 0x13b20  [ DB8B323B4F2B46B32ECD2BAE7955E4AA, 89BC9F951B08A8566837DF442C95842061B921B79102A8AD2245783717355B34 ] NETwNs64        C:\WINDOWS\System32\drivers\NETwsw00.sys
16:29:51.0542 0x13b20  NETwNs64 - ok
16:29:51.0542 0x13b20  NgcCtnrSvc - ok
16:29:51.0558 0x13b20  NgcSvc - ok
16:29:51.0574 0x13b20  NlaSvc - ok
16:29:51.0574 0x13b20  Npfs - ok
16:29:51.0574 0x13b20  npsvctrig - ok
16:29:51.0589 0x13b20  nsi - ok
16:29:51.0589 0x13b20  nsiproxy - ok
16:29:51.0620 0x13b20  NTFS - ok
16:29:51.0620 0x13b20  Null - ok
16:29:51.0667 0x13b20  [ 708EDBC756B28B77D1F9C8844148125A, BA730BC3A70122CC3AD6CC4B398B747591F34E00ACEC06545C37A3F10FB56F5F ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys
16:29:51.0683 0x13b20  NVHDA - ok
16:29:52.0206 0x13b20  [ 0CD412D41220FEE9DD1166F7CE7B1DAB, 23CAB64C3DB3C90CAF2DE4100E192295B8F603B8347F8AC6FDC36C2C6D2520D2 ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_86f2ae812568c59a\nvlddmkm.sys
16:29:52.0661 0x13b20  nvlddmkm - ok
16:29:52.0854 0x13b20  [ 020F45E362D3B57CCC5735582BB1A6EC, E2D953CEF208528382153D06FED8394BEB52657C547E4D2D2954E537C9A382DC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
16:29:52.0928 0x13b20  NvNetworkService - ok
16:29:52.0944 0x13b20  [ 14632E55F8E76E3CEFFD058EC0A545E6, 563E4EFC171D5BFEC77BA43E0426A38759B13A8BCA9C6E135E9E0356BBE6D897 ] nvpciflt        C:\WINDOWS\system32\DRIVERS\nvpciflt.sys
16:29:52.0953 0x13b20  nvpciflt - ok
16:29:52.0969 0x13b20  nvraid - ok
16:29:52.0969 0x13b20  nvstor - ok
16:29:53.0047 0x13b20  [ F82BCEB9F57B2959F6AAE2A3DDA892A8, 5B02C74BAF0E12B84F239B1449DAA955B28BD5BA7D35D315DB57F45E042E0DB3 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
16:29:53.0062 0x13b20  NvStreamKms - ok
16:29:53.0178 0x13b20  [ 9209D57C1AA24841EF8D5DE6A5B2AAEB, C1A53621F5361DCE9C962A9B9B586D1904901C9EC20EFCA76C40ADCD98BEDF3C ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
16:29:53.0325 0x13b20  NvStreamNetworkSvc - ok
16:29:53.0447 0x13b20  [ 0EDF9504CA5174075BA5902AFC1F57C8, 8E210E71BA91813D3BB6B59E5F6AD0889711336AD12B1B1C67CCC882A6ED3E53 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
16:29:53.0547 0x13b20  NvStreamSvc - ok
16:29:53.0594 0x13b20  [ 9E01B716C8085F7ADB1CDC10103CEEF8, A8ED454B5AEA0D412F561B99D630C16171D99AC1EC67D79CC4126FE8FC97E144 ] NvStUSB         C:\WINDOWS\system32\DRIVERS\nvstusb.sys
16:29:53.0626 0x13b20  NvStUSB - ok
16:29:53.0720 0x13b20  [ BF83A0A7BF998693691349175CF8AC7D, 743DB4DED1372DEB48ACD741CCC4DC01A9755A6D3CDF4F3CB8F68AB1F69D2BFF ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
16:29:53.0781 0x13b20  nvsvc - ok
16:29:53.0816 0x13b20  [ 38175904276F86EA4704EC13B77FB4B0, 4965BCF17E3D9EE4CE2E4DC158C5E7179C3ABBAE9D640FBCFFBCA973F21DDDF6 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
16:29:53.0834 0x13b20  nvvad_WaveExtensible - ok
16:29:53.0864 0x13b20  OneSyncSvc - ok
16:29:53.0943 0x13b20  [ 4965B005492CBA7719E82B71E3245495, 52AD72C05FACC1E0E416A1FA25F34FDD3CB274FAB973BEAAE911A2FACA42B650 ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:29:53.0986 0x13b20  ose64 - ok
16:29:54.0179 0x13b20  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
16:29:54.0364 0x13b20  osppsvc - ok
16:29:54.0395 0x13b20  p2pimsvc - ok
16:29:54.0395 0x13b20  p2psvc - ok
16:29:54.0426 0x13b20  Parport - ok
16:29:54.0445 0x13b20  partmgr - ok
16:29:54.0448 0x13b20  PcaSvc - ok
16:29:54.0464 0x13b20  pci - ok
16:29:54.0495 0x13b20  pciide - ok
16:29:54.0495 0x13b20  pcmcia - ok
16:29:54.0511 0x13b20  pcw - ok
16:29:54.0543 0x13b20  pdc - ok
16:29:54.0549 0x13b20  PEAUTH - ok
16:29:54.0549 0x13b20  PeerDistSvc - ok
16:29:54.0564 0x13b20  percsas2i - ok
16:29:54.0580 0x13b20  percsas3i - ok
16:29:54.0649 0x13b20  PerfHost - ok
16:29:54.0703 0x13b20  PhoneSvc - ok
16:29:54.0727 0x13b20  PimIndexMaintenanceSvc - ok
16:29:54.0732 0x13b20  pla - ok
16:29:54.0740 0x13b20  PlugPlay - ok
16:29:54.0743 0x13b20  PNRPAutoReg - ok
16:29:54.0746 0x13b20  PNRPsvc - ok
16:29:54.0755 0x13b20  PolicyAgent - ok
16:29:54.0759 0x13b20  Power - ok
16:29:54.0763 0x13b20  PptpMiniport - ok
16:29:54.0940 0x13b20  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
16:29:55.0266 0x13b20  PrintNotify - ok
16:29:55.0281 0x13b20  Processor - ok
16:29:55.0297 0x13b20  ProfSvc - ok
16:29:55.0297 0x13b20  Psched - ok
16:29:55.0313 0x13b20  [ 87B04878A6D59D6C79251DC960C674C1, 3EB8DB0624E646F0A65D0381408D35CF9FDC5ABFC30DF6431F4070A8EB68447C ] PxHlpa64        C:\WINDOWS\system32\Drivers\PxHlpa64.sys
16:29:55.0328 0x13b20  PxHlpa64 - ok
16:29:55.0350 0x13b20  [ 0928BD20273625622722FE1DE5BBDE57, 5313C222F8810D3A62CCE64482B5E50E58BBE2A2C298A23C84A454C34324AC52 ] qicflt          C:\WINDOWS\system32\DRIVERS\qicflt.sys
16:29:55.0382 0x13b20  qicflt - ok
16:29:55.0397 0x13b20  QWAVE - ok
16:29:55.0397 0x13b20  QWAVEdrv - ok
16:29:55.0413 0x13b20  RasAcd - ok
16:29:55.0429 0x13b20  RasAgileVpn - ok
16:29:55.0450 0x13b20  RasAuto - ok
16:29:55.0450 0x13b20  Rasl2tp - ok
16:29:55.0466 0x13b20  RasMan - ok
16:29:55.0466 0x13b20  RasPppoe - ok
16:29:55.0466 0x13b20  RasSstp - ok
16:29:55.0482 0x13b20  rdbss - ok
16:29:55.0497 0x13b20  rdpbus - ok
16:29:55.0497 0x13b20  RDPDR - ok
16:29:55.0529 0x13b20  RdpVideoMiniport - ok
16:29:55.0529 0x13b20  rdyboost - ok
16:29:55.0550 0x13b20  ReFSv1 - ok
16:29:55.0582 0x13b20  RemoteAccess - ok
16:29:55.0582 0x13b20  RemoteRegistry - ok
16:29:55.0613 0x13b20  RetailDemo - ok
16:29:55.0613 0x13b20  RFCOMM - ok
16:29:55.0629 0x13b20  RmSvc - ok
16:29:55.0645 0x13b20  RpcEptMapper - ok
16:29:55.0666 0x13b20  RpcLocator - ok
16:29:55.0682 0x13b20  RpcSs - ok
16:29:55.0698 0x13b20  rspndr - ok
16:29:55.0716 0x13b20  rt640x64 - ok
16:29:55.0806 0x13b20  [ 347E3CE270009E4C71B26E71ACF98106, E20ACC50C2B4B3FDB28A8FA144EBA02E835873123315FDB5A2C87CBAD95218F6 ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
16:29:55.0833 0x13b20  RtkAudioService - ok
16:29:55.0856 0x13b20  s3cap - ok
16:29:55.0870 0x13b20  SamSs - ok
16:29:55.0883 0x13b20  sbp2port - ok
16:29:55.0895 0x13b20  SCardSvr - ok
16:29:55.0907 0x13b20  ScDeviceEnum - ok
16:29:55.0909 0x13b20  scfilter - ok
16:29:55.0913 0x13b20  Schedule - ok
16:29:55.0917 0x13b20  scmbus - ok
16:29:55.0921 0x13b20  scmdisk0101 - ok
16:29:55.0928 0x13b20  SCPolicySvc - ok
16:29:56.0014 0x13b20  [ B60E9769655DDEE8368E3ABB6668E076, EECA05B36C6F837FA6DB2EDD78E17E9EA5F0D793B869CB99A08C61AB485A1E67 ] ScrybeUpdater   C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe
16:29:56.0098 0x13b20  ScrybeUpdater - ok
16:29:56.0114 0x13b20  sdbus - ok
16:29:56.0114 0x13b20  SDRSVC - ok
16:29:56.0114 0x13b20  sdstor - ok
16:29:56.0129 0x13b20  seclogon - ok
16:29:56.0145 0x13b20  SENS - ok
16:29:56.0148 0x13b20  Sense - ok
16:29:56.0151 0x13b20  SensorDataService - ok
16:29:56.0151 0x13b20  SensorService - ok
16:29:56.0151 0x13b20  SensrSvc - ok
16:29:56.0167 0x13b20  SerCx - ok
16:29:56.0167 0x13b20  SerCx2 - ok
16:29:56.0167 0x13b20  Serenum - ok
16:29:56.0167 0x13b20  Serial - ok
16:29:56.0167 0x13b20  sermouse - ok
16:29:56.0182 0x13b20  SessionEnv - ok
16:29:56.0182 0x13b20  sfloppy - ok
16:29:56.0229 0x13b20  SharedAccess - ok
16:29:56.0267 0x13b20  ShellHWDetection - ok
16:29:56.0282 0x13b20  shpamsvc - ok
16:29:56.0298 0x13b20  SiSRaid2 - ok
16:29:56.0298 0x13b20  SiSRaid4 - ok
16:29:56.0329 0x13b20  [ FB9F964FFD265262EE8E98E0ED1FB44E, B02B8BCDF91B9FFCA7E2F8F6CAC310E6EEC4BCF8F8C848DCF9EDE33D8940056D ] SmbDrvI         C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys
16:29:56.0349 0x13b20  SmbDrvI - ok
16:29:56.0367 0x13b20  smphost - ok
16:29:56.0398 0x13b20  SmsRouter - ok
16:29:56.0414 0x13b20  SNMPTRAP - ok
16:29:56.0482 0x13b20  [ 3BB48F7E33C2B76184DDF233000C09CD, D1AAE5B0425047CA0C2D376D3E59324D35A90DF9074CD442DFD0ED6E434D3C84 ] Sony SCSI Helper Service C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe
16:29:56.0548 0x13b20  Sony SCSI Helper Service - detected UnsignedFile.Multi.Generic ( 1 )
16:29:56.0651 0x13b20  Detect skipped due to KSN trusted
16:29:56.0651 0x13b20  Sony SCSI Helper Service - ok
16:29:56.0698 0x13b20  spaceport - ok
16:29:56.0698 0x13b20  SpbCx - ok
16:29:56.0729 0x13b20  Spooler - ok
16:29:56.0747 0x13b20  sppsvc - ok
16:29:56.0799 0x13b20  [ 893C6AEC077665F438C1B570E82655EC, 0417BF6045FCD548003CC227FA176348277386132FC7CED02C0A0E6DBBC26803 ] SRS_HDAL_Service C:\WINDOWS\system32\drivers\SRS_HDAL_amd64.sys
16:29:56.0829 0x13b20  SRS_HDAL_Service - ok
16:29:56.0845 0x13b20  srv - ok
16:29:56.0859 0x13b20  srv2 - ok
16:29:56.0875 0x13b20  srvnet - ok
16:29:56.0890 0x13b20  SSDPSRV - ok
16:29:56.0901 0x13b20  SstpSvc - ok
16:29:56.0932 0x13b20  [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
16:29:56.0945 0x13b20  ssudmdm - ok
16:29:56.0969 0x13b20  StateRepository - ok
16:29:56.0990 0x13b20  [ 92E7F6666633D2DD91D527503DAA7BE0, E97C7FFCAF2C7A83B270B6C797A91C2731FEA26874FE1E59B4CB55D5D98744BB ] stdcfltn        C:\WINDOWS\system32\DRIVERS\stdcfltn.sys
16:29:57.0008 0x13b20  stdcfltn - ok
16:29:57.0114 0x13b20  [ 1C11C1E4578CDC4363CB2E911D53E7E2, BD7D453B8F981A717F56D26DFCB54CA1B666672E03B0AAAF1A39D8330BB1638C ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
16:29:57.0152 0x13b20  Stereo Service - ok
16:29:57.0183 0x13b20  stexstor - ok
16:29:57.0214 0x13b20  stisvc - ok
16:29:57.0214 0x13b20  storahci - ok
16:29:57.0230 0x13b20  storflt - ok
16:29:57.0230 0x13b20  stornvme - ok
16:29:57.0230 0x13b20  storqosflt - ok
16:29:57.0250 0x13b20  StorSvc - ok
16:29:57.0252 0x13b20  storufs - ok
16:29:57.0252 0x13b20  storvsc - ok
16:29:57.0252 0x13b20  svsvc - ok
16:29:57.0252 0x13b20  swenum - ok
16:29:57.0252 0x13b20  swprv - ok
16:29:57.0267 0x13b20  Synth3dVsc - ok
16:29:57.0299 0x13b20  [ 8607DA59550BCEC0CEBC7260AF7359C4, E5FBB4E47586426B24B1706E08D9553598A744463A1EAD5122AF08291412C896 ] SynTP           C:\WINDOWS\system32\DRIVERS\SynTP.sys
16:29:57.0352 0x13b20  SynTP - ok
16:29:57.0414 0x13b20  [ DFAF068A21F415187F6096DD005A4ECC, 3BE1249166889684534F8C9F230E8456E0A09AF81A9F568AC04D52D3E5A2D797 ] SynTPEnhService C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
16:29:57.0448 0x13b20  SynTPEnhService - ok
16:29:57.0468 0x13b20  SysMain - ok
16:29:57.0468 0x13b20  SystemEventsBroker - ok
16:29:57.0484 0x13b20  TabletInputService - ok
16:29:57.0484 0x13b20  TapiSrv - ok
16:29:57.0515 0x13b20  [ D877BA7EAEC246FD5AFCF912A46B2B2D, CCA0E0C6E4FDFE5A707B71CD08C93B84002F5E15B2C4654AE9D90949D8DE35B0 ] tapstrong       C:\WINDOWS\system32\DRIVERS\tapstrong.sys
16:29:57.0531 0x13b20  tapstrong - ok
16:29:57.0552 0x13b20  Tcpip - ok
16:29:57.0568 0x13b20  Tcpip6 - ok
16:29:57.0568 0x13b20  tcpipreg - ok
16:29:57.0568 0x13b20  tdx - ok
16:29:57.0584 0x13b20  terminpt - ok
16:29:57.0599 0x13b20  TermService - ok
16:29:57.0631 0x13b20  Themes - ok
16:29:57.0647 0x13b20  TieringEngineService - ok
16:29:57.0653 0x13b20  tiledatamodelsvc - ok
16:29:57.0668 0x13b20  TimeBrokerSvc - ok
16:29:57.0668 0x13b20  TPM - ok
16:29:57.0668 0x13b20  TrkWks - ok
16:29:57.0715 0x13b20  TrustedInstaller - ok
16:29:57.0731 0x13b20  tsusbflt - ok
16:29:57.0753 0x13b20  TsUsbGD - ok
16:29:57.0753 0x13b20  tsusbhub - ok
16:29:57.0772 0x13b20  tunnel - ok
16:29:57.0799 0x13b20  [ FD24F98D2898BE093FE926604BE7DB99, F9851C57A2ED838AC76BB19FE2F62BB81C57DBBE2A2555F738B5D6725D39AD61 ] TurboB          C:\WINDOWS\system32\DRIVERS\TurboB.sys
16:29:57.0826 0x13b20  TurboB - ok
16:29:57.0886 0x13b20  [ 600B406A04D90F577FEA8A88D7379F08, 77CC8E8AFB6F571A42D916C0B2FEFFD3A7A32A455C78228B407C6C9B6DED8CAD ] TurboBoost      C:\Program Files\Intel\TurboBoost\TurboBoost.exe
16:29:57.0911 0x13b20  TurboBoost - ok
16:29:57.0928 0x13b20  tzautoupdate - ok
16:29:57.0938 0x13b20  UASPStor - ok
16:29:57.0941 0x13b20  UcmCx0101 - ok
16:29:57.0945 0x13b20  UcmTcpciCx0101 - ok
16:29:57.0948 0x13b20  UcmUcsi - ok
16:29:57.0952 0x13b20  Ucx01000 - ok
16:29:57.0955 0x13b20  UdeCx - ok
16:29:57.0958 0x13b20  udfs - ok
16:29:57.0963 0x13b20  UEFI - ok
16:29:57.0966 0x13b20  UevAgentDriver - ok
16:29:57.0978 0x13b20  UevAgentService - ok
16:29:57.0982 0x13b20  Ufx01000 - ok
16:29:57.0998 0x13b20  UfxChipidea - ok
16:29:58.0002 0x13b20  ufxsynopsys - ok
16:29:58.0009 0x13b20  UI0Detect - ok
16:29:58.0013 0x13b20  umbus - ok
16:29:58.0016 0x13b20  UmPass - ok
16:29:58.0020 0x13b20  UmRdpService - ok
16:29:58.0023 0x13b20  UnistoreSvc - ok
16:29:58.0169 0x13b20  [ 2C16648A12999AE69A9EBF41974B0BA2, 06008F61B6EC36CD34CB8C4BA983371DB7A9F4BEE15E5329F5E90FEEE300D258 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
16:29:58.0285 0x13b20  UNS - ok
16:29:58.0285 0x13b20  upnphost - ok
16:29:58.0285 0x13b20  UrsChipidea - ok
16:29:58.0285 0x13b20  UrsCx01000 - ok
16:29:58.0301 0x13b20  UrsSynopsys - ok
16:29:58.0317 0x13b20  usbaudio - ok
16:29:58.0317 0x13b20  usbccgp - ok
16:29:58.0317 0x13b20  usbcir - ok
16:29:58.0317 0x13b20  usbehci - ok
16:29:58.0317 0x13b20  usbhub - ok
16:29:58.0332 0x13b20  USBHUB3 - ok
16:29:58.0332 0x13b20  usbohci - ok
16:29:58.0332 0x13b20  usbprint - ok
16:29:58.0332 0x13b20  usbser - ok
16:29:58.0351 0x13b20  USBSTOR - ok
16:29:58.0354 0x13b20  usbuhci - ok
16:29:58.0354 0x13b20  usbvideo - ok
16:29:58.0354 0x13b20  USBXHCI - ok
16:29:58.0370 0x13b20  UserDataSvc - ok
16:29:58.0385 0x13b20  UserManager - ok
16:29:58.0385 0x13b20  UsoSvc - ok
16:29:58.0401 0x13b20  VaultSvc - ok
16:29:58.0401 0x13b20  vdrvroot - ok
16:29:58.0417 0x13b20  vds - ok
16:29:58.0417 0x13b20  VerifierExt - ok
16:29:58.0454 0x13b20  vhdmp - ok
16:29:58.0454 0x13b20  vhf - ok
16:29:58.0470 0x13b20  vmbus - ok
16:29:58.0470 0x13b20  VMBusHID - ok
16:29:58.0470 0x13b20  vmgid - ok
16:29:58.0486 0x13b20  vmicguestinterface - ok
16:29:58.0486 0x13b20  vmicheartbeat - ok
16:29:58.0486 0x13b20  vmickvpexchange - ok
16:29:58.0517 0x13b20  vmicrdv - ok
16:29:58.0533 0x13b20  vmicshutdown - ok
16:29:58.0533 0x13b20  vmictimesync - ok
16:29:58.0552 0x13b20  vmicvmsession - ok
16:29:58.0554 0x13b20  vmicvss - ok
16:29:58.0554 0x13b20  volmgr - ok
16:29:58.0554 0x13b20  volmgrx - ok
16:29:58.0554 0x13b20  volsnap - ok
16:29:58.0570 0x13b20  volume - ok
16:29:58.0570 0x13b20  vpci - ok
16:29:58.0586 0x13b20  vsmraid - ok
16:29:58.0586 0x13b20  VSS - ok
16:29:58.0586 0x13b20  VSTXRAID - ok
16:29:58.0586 0x13b20  vwifibus - ok
16:29:58.0586 0x13b20  vwififlt - ok
16:29:58.0601 0x13b20  vwifimp - ok
16:29:58.0601 0x13b20  W32Time - ok
16:29:58.0601 0x13b20  WacomPen - ok
16:29:58.0617 0x13b20  WalletService - ok
16:29:58.0617 0x13b20  wanarp - ok
16:29:58.0617 0x13b20  wanarpv6 - ok
16:29:58.0617 0x13b20  wbengine - ok
16:29:58.0651 0x13b20  WbioSrvc - ok
16:29:58.0655 0x13b20  wcifs - ok
16:29:58.0655 0x13b20  Wcmsvc - ok
16:29:58.0670 0x13b20  wcncsvc - ok
16:29:58.0686 0x13b20  wcnfs - ok
16:29:58.0686 0x13b20  WdBoot - ok
16:29:58.0686 0x13b20  Wdf01000 - ok
16:29:58.0686 0x13b20  WdFilter - ok
16:29:58.0701 0x13b20  WdiServiceHost - ok
16:29:58.0701 0x13b20  WdiSystemHost - ok
16:29:58.0701 0x13b20  wdiwifi - ok
16:29:58.0701 0x13b20  WdNisDrv - ok
16:29:58.0733 0x13b20  WdNisSvc - ok
16:29:58.0733 0x13b20  WebClient - ok
16:29:58.0755 0x13b20  Wecsvc - ok
16:29:58.0782 0x13b20  WEPHOSTSVC - ok
16:29:58.0783 0x13b20  wercplsupport - ok
16:29:58.0783 0x13b20  WerSvc - ok
16:29:58.0801 0x13b20  WFPLWFS - ok
16:29:58.0808 0x13b20  WiaRpc - ok
16:29:58.0837 0x13b20  [ B14EF15BD757FA488F9C970EEE9C0D35, F27DF2D47E7076786AE7C396583D7A1C56B93E766711066C900964FC7313E794 ] WimFltr         C:\WINDOWS\system32\DRIVERS\wimfltr.sys
16:29:58.0851 0x13b20  WimFltr - ok
16:29:58.0855 0x13b20  WIMMount - ok
16:29:58.0857 0x13b20  WinDefend - ok
16:29:58.0884 0x13b20  WindowsTrustedRT - ok
16:29:58.0887 0x13b20  WindowsTrustedRTProxy - ok
16:29:58.0896 0x13b20  WinHttpAutoProxySvc - ok
16:29:58.0904 0x13b20  WinMad - ok
16:29:58.0950 0x13b20  Winmgmt - ok
16:29:58.0982 0x13b20  WinRM - ok
16:29:59.0008 0x13b20  WINUSB - ok
16:29:59.0013 0x13b20  WinVerbs - ok
16:29:59.0041 0x13b20  wisvc - ok
16:29:59.0074 0x13b20  WlanSvc - ok
16:29:59.0098 0x13b20  wlidsvc - ok
16:29:59.0114 0x13b20  WmiAcpi - ok
16:29:59.0114 0x13b20  wmiApSrv - ok
16:29:59.0151 0x13b20  WMPNetworkSvc - ok
16:29:59.0171 0x13b20  Wof - ok
16:29:59.0186 0x13b20  workfolderssvc - ok
16:29:59.0202 0x13b20  WPDBusEnum - ok
16:29:59.0218 0x13b20  WpdUpFltr - ok
16:29:59.0233 0x13b20  WpnService - ok
16:29:59.0233 0x13b20  WpnUserService - ok
16:29:59.0271 0x13b20  ws2ifsl - ok
16:29:59.0287 0x13b20  wscsvc - ok
16:29:59.0302 0x13b20  WSDPrintDevice - ok
16:29:59.0318 0x13b20  WSDScan - ok
16:29:59.0318 0x13b20  WSearch - ok
16:29:59.0334 0x13b20  wuauserv - ok
16:29:59.0350 0x13b20  WudfPf - ok
16:29:59.0354 0x13b20  WUDFRd - ok
16:29:59.0355 0x13b20  wudfsvc - ok
16:29:59.0355 0x13b20  WUDFWpdFs - ok
16:29:59.0371 0x13b20  WwanSvc - ok
16:29:59.0387 0x13b20  XblAuthManager - ok
16:29:59.0402 0x13b20  XblGameSave - ok
16:29:59.0402 0x13b20  xboxgip - ok
16:29:59.0418 0x13b20  XboxNetApiSvc - ok
16:29:59.0434 0x13b20  xinputhid - ok
16:29:59.0434 0x13b20  ================ Scan global ===============================
16:29:59.0550 0x13b20  [ Global ] - ok
16:29:59.0553 0x13b20  ================ Scan MBR ==================================
16:29:59.0572 0x13b20  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
16:30:00.0224 0x13b20  \Device\Harddisk0\DR0 - ok
16:30:00.0239 0x13b20  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
16:30:00.0524 0x13b20  \Device\Harddisk1\DR1 - ok
16:30:00.0524 0x13b20  ================ Scan VBR ==================================
16:30:00.0524 0x13b20  [ 7E69289E67491D6266DF173447C3A02E ] \Device\Harddisk0\DR0\Partition1
16:30:00.0524 0x13b20  \Device\Harddisk0\DR0\Partition1 - ok
16:30:00.0540 0x13b20  [ C1C24B9A439B870F18A02948E0F18B68 ] \Device\Harddisk0\DR0\Partition2
16:30:00.0540 0x13b20  \Device\Harddisk0\DR0\Partition2 - ok
16:30:00.0540 0x13b20  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1
16:30:00.0540 0x13b20  \Device\Harddisk1\DR1\Partition1 - ok
16:30:00.0559 0x13b20  [ EACD3E72CEF5E2A4F545E98520155EC6 ] \Device\Harddisk1\DR1\Partition2
16:30:00.0560 0x13b20  \Device\Harddisk1\DR1\Partition2 - ok
16:30:00.0560 0x13b20  ================ Scan generic autorun ======================
16:30:00.0593 0x13b20  [ 0C3154D0620F974AD5C4E8D87626C8CF, 4E6B751F9C0D5D4833A12166BC5142E0A7402E98D00F570926ED9CA0936A8007 ] C:\WINDOWS\system32\igfxtray.exe
16:30:00.0662 0x13b20  IgfxTray - ok
16:30:00.0938 0x13b20  [ 22EBD5AE3B3220D713E544D1D3AB3FEE, 9EF058B096DAA5C6242FBEB3DF509108180B1EB1EA252E63C437CF6C1B743BE0 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
16:30:01.0105 0x13b20  RTHDVCPL - ok
16:30:01.0162 0x13b20  [ 31821EC63BDEDE18E64C11F7248B32AB, 6982AE866F8EC7943FDB3E4B77B03542A2E3E07F080B8D806C4ED903DE3368CE ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
16:30:01.0194 0x13b20  RtHDVBg - ok
16:30:01.0263 0x13b20  [ 39CF316EB5842AE27CC0D3CC4E2840DE, BC4D4ED926F988B7B70CC87B7EC92D148DA6BC39C5C514751F1B0CA69D0F9081 ] C:\Program Files\Microsoft Office\Office14\BCSSync.exe
16:30:01.0263 0x13b20  BCSSync - ok
16:30:01.0441 0x13b20  [ E7B32C61E8AA6CD40DF6557FEDD2EB77, A062E7C30CE435A47615D8DB6612AAB45DD6DDDCBC0665BBB52FFC9D8670B218 ] C:\Program Files\Dell\QuickSet\QuickSet.exe
16:30:01.0642 0x13b20  QuickSet - detected UnsignedFile.Multi.Generic ( 1 )
16:30:01.0711 0x13b20  Detect skipped due to KSN trusted
16:30:01.0711 0x13b20  QuickSet - ok
16:30:01.0711 0x13b20  SynTPEnh - ok
16:30:01.0711 0x13b20  WindowsDefender - ok
16:30:01.0727 0x13b20  Avira SystrayStartTrigger - ok
16:30:01.0812 0x13b20  [ F17FFAF69E1AF3D0A010FD4749148981, 7486A1EFE378BFCEE30D169BD0189CABD6935EBEE556BF0328330B120975EA03 ] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
16:30:01.0896 0x13b20  EEventManager - ok
16:30:02.0034 0x13b20  [ 8F9B9F6623F888AF8A9FD922985FECE0, C9C9E6DD0525F176D0EAF5D855C724586E2718D9F90EB4AFF8AD1D0A7109D63F ] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
16:30:02.0062 0x13b20  Reader Application Helper - ok
16:30:02.0136 0x13b20  [ B7A00AB53A21C92E61191AF026944D52, 3C09EC115C32ABC75F8CFA5DAFB5511161D61B399686D15027E20C9ED09BEAAB ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
16:30:02.0165 0x13b20  SunJavaUpdateSched - ok
16:30:02.0228 0x13b20  [ 138FA0EBAA0204749C496FA92A39D4D5, D57D3465C2ABE6F82FA8E644F3550D21168D01BEDA9F48B589175BBE35A1D31C ] C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe
16:30:02.0312 0x13b20  FreeStyleLibreautorunexe - detected UnsignedFile.Multi.Generic ( 1 )
16:30:02.0365 0x13b20  FreeStyleLibreautorunexe ( UnsignedFile.Multi.Generic ) - warning
16:30:02.0565 0x13b20  OneDriveSetup - ok
16:30:02.0565 0x13b20  OneDriveSetup - ok
16:30:02.0761 0x13b20  [ 11B4662A4DD118132E2648837920AF86, 7643E9CF00C0393ED4A1D294DABA84DCEB6BE696E5B520D413284BAB16CE1CD5 ] C:\Users\Norman\AppData\Roaming\Spotify\SpotifyWebHelper.exe
16:30:03.0168 0x13b20  Spotify Web Helper - ok
16:30:03.0400 0x13b20  [ 6F8EDF5A5D23AD1F4FC168047C80ECE4, CAA605301395B70E724688515936A6C84F90D18EFFBF21CEDD336268AACA8D02 ] C:\Users\Norman\AppData\Roaming\Spotify\Spotify.exe
16:30:03.0616 0x13b20  Spotify - ok
16:30:03.0701 0x13b20  [ 527CF721F78B2DF6A1570F93899A0AA8, 1F08074DA90593E7EDC63C072B784BE438C5EC94FE992433053D6B75CDEE78EB ] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
16:30:03.0716 0x13b20  OfficeSyncProcess - ok
16:30:03.0938 0x13b20  [ 5451E20D9EFBDC89991C1B86A6306894, E41CD89C1313C8729F53C91250AAD9C5E7A3F612D75F53751F31F790FF991879 ] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMSE.EXE
16:30:03.0953 0x13b20  EPLTarget\P0000000000000000 - ok
16:30:03.0956 0x13b20  OneDriveSetup - ok
16:30:04.0017 0x13b20  WAB Migrate - ok
16:30:04.0019 0x13b20  Waiting for KSN requests completion. In queue: 72
16:30:05.0051 0x13b20  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )
16:30:05.0054 0x13b20  Win FW state via NFP2: enabled ( trusted )
16:30:05.0125 0x13b20  ============================================================
16:30:05.0125 0x13b20  Scan finished
16:30:05.0125 0x13b20  ============================================================
16:30:05.0152 0x13b1c  Detected object count: 2
16:30:05.0152 0x13b1c  Actual detected object count: 2
16:32:31.0802 0x13b1c  FreeStyleLibre MAS Server ( UnsignedFile.Multi.Generic ) - skipped by user
16:32:31.0802 0x13b1c  FreeStyleLibre MAS Server ( UnsignedFile.Multi.Generic ) - User select action: Skip 
16:32:31.0802 0x13b1c  FreeStyleLibreautorunexe ( UnsignedFile.Multi.Generic ) - skipped by user
16:32:31.0802 0x13b1c  FreeStyleLibreautorunexe ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus · 10.12.2016, 17:52

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

querotudo · 10.12.2016, 21:46

AdwCleaner Log:

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v6.040 - Bericht erstellt am 10/12/2016 um 21:20:55
# Aktualisiert am 02/12/2016 von Malwarebytes
# Datenbank : 2016-12-09.3 [Server]
# Betriebssystem : Windows 10 Pro  (X64)
# Benutzername : Norman - NORMAN-PC
# Gestartet von : C:\Users\Norman\Desktop\AdwCleaner_6.040.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\Admin\AppData\Roaming\EuroTrade A.L. Ltd
[-] Ordner gelöscht: C:\Program Files (x86)\AskPartnerNetwork


***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
[-] Schlüssel gelöscht: HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Reimage
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Reimage
[-] Schlüssel gelöscht: HKLM\SOFTWARE\AskPartnerNetwork
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Reimage
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\AskPartnerNetwork
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh


***** [ Browser ] *****

[-] Firefox Einstellungen bereinigt: "browser.newtab.url" -  "hxxp://istart.webssearches.com/newtab/?type=nt&ts=1412099607&from=cov&uid=ST9500420AS_5VJB93R1XXXX5VJB93R1"


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [19993 Bytes] - [31/10/2016 22:36:17]
C:\AdwCleaner\AdwCleaner[C2].txt - [1186 Bytes] - [31/10/2016 22:54:30]
C:\AdwCleaner\AdwCleaner[C3].txt - [3361 Bytes] - [10/12/2016 21:20:55]
C:\AdwCleaner\AdwCleaner[S0].txt - [20526 Bytes] - [31/10/2016 22:31:58]
C:\AdwCleaner\AdwCleaner[S1].txt - [1494 Bytes] - [31/10/2016 22:52:23]
C:\AdwCleaner\AdwCleaner[S2].txt - [1640 Bytes] - [31/10/2016 23:00:42]
C:\AdwCleaner\AdwCleaner[S3].txt - [3722 Bytes] - [10/12/2016 21:16:29]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [3727 Bytes] ##########

--- --- ---

[/CODE]

JRT Log:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Pro x64 
Ran by Norman (Administrator) on 10.12.2016 at 21:41:25,31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 1 

Successfully deleted: C:\Users\Norman\AppData\Roaming\wyupdate au (Folder) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.12.2016 at 21:43:06,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 10.12.2016, 21:48

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

querotudo · 10.12.2016, 22:18

FRST Log:

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Norman (Administrator) auf NORMAN-PC (10-12-2016 22:10:12)
Gestartet von C:\Users\Norman\Downloads
Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Synaptics, Inc.) C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Intel Corporation) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe
(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMC\Aggregation.exe
(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4146848 2012-08-16] (Dell Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945672 2015-07-16] (Synaptics Incorporated)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-21] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Reader Application Helper] => C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-06-25] (Sony Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598040 2016-06-22] (Oracle Corporation)
HKLM-x32\...\Run: [FreeStyleLibreautorunexe] => C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe [81408 2016-01-19] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify Web Helper] => C:\Users\Norman\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-12-08] (Spotify Ltd)
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify] => C:\Users\Norman\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-12-08] (Spotify Ltd)
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation)
HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMSE.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION)
ShellIconOverlayIdentifiers: [     HiDriveOverlayIconCheck] -> {d36d0796-4913-3dde-9159-1c7b348e59d2} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [     HiDriveOverlayIconError] -> {e4f57fbd-4e00-317c-9f90-d4e427981873} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [     HiDriveOverlayIconSync] -> {f1fc1212-b289-31bc-ae4d-56f707c68259} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2011-04-09]
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Scrybe.lnk [2012-10-04]
ShortcutTarget: Scrybe.lnk -> C:\Windows\Installer\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}\NewShortcut11_8ACB210B42E44145A8C31F8E3DD765A3.exe (Acresso Software Inc.)
Startup: C:\Users\Norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk [2016-12-09]
ShortcutTarget: HiDrive.lnk -> C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe ()
Startup: C:\Users\Norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2011-04-09]
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{265e45c3-1e8f-4edc-a3d0-688e3ac43142}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2e9792a9-ff47-43c3-8e9c-09fa2f58c42b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{56280e52-12c5-47a2-b502-fc59803f99c9}: [NameServer] 0.0.0.0
Tcpip\..\Interfaces\{bfb34b69-9053-433d-8225-c2dee194a17b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ff8b3f00-7008-4310-a736-92ad7f7d0007}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> DefaultScope {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" => Keine Datei
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-09-25] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" Keine Datei
DPF: HKLM-x32 {2D20E99C-1FD7-48EC-9FDF-CF3555B273D4} hxxp://192.168.1.129/VDControl.CAB?2,0,0,89
DPF: HKLM-x32 {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} hxxp://192.168.1.137/codebase/DVM_IPCam2.ocx

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> hxxp://google.de/

FireFox:
========
FF ProfilePath: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default [2016-12-10]
FF Homepage: Mozilla\Firefox\Profiles\jy1jlaly.default -> google.de
FF Extension: (AdBlocker Ultimate) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\adblockultimate@adblockultimate.net.xpi [2016-12-08]
FF Extension: (Image Zoom) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2016-04-28]
FF Extension: (Adblock Plus) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]
FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]
FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden
FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-19] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-19] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2010-03-26] (GARMIN Corp.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @t-immersion.com/DFusionHomeWebPlugIn -> C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll [2011-06-30] (Total Immersion)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-12-09]
CHR Extension: (Google Drive) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-20]
CHR Extension: (Image Zoom) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bdmfgepgnaffojoiojoeadeofipcfndh [2014-11-26]
CHR Extension: (YouTube) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]
CHR Extension: (Amazon) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-04-01]
CHR Extension: (Adblock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-12]
CHR Extension: (Replace New Tab Page) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnkhddihkmmiiclaipbaaelfojkmlkja [2014-11-27]
CHR Extension: (Google-Suche) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-20]
CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]
CHR Extension: (Google Docs Offline) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-23]
CHR Extension: (AdBlock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kfcfceejhleedfbabanmaamfiagjhncj [2014-11-26]
CHR Extension: (Caipirinha) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lllaffajmaihmacifgegebccnnhddemj [2015-09-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-23]
CHR Extension: (Google Mail) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-29]
CHR Extension: (Chrome Media Router) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-12]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Admin\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-09-30]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngnjhfpfhadncgafgbneeljaginimmmk] - <kein Path/update_url>

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [283296 2014-04-07] (Intel Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2011-04-22] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe [285184 2016-01-19] () [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
R2 ScrybeUpdater; C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [Datei ist nicht signiert]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-16] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2016-01-12] (Siemens Home and Office Communication Devices GmbH & Co. KG)
R3 i8042HDR; C:\WINDOWS\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_86f2ae812568c59a\nvlddmkm.sys [14242872 2016-09-20] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
S3 NvStUSB; C:\WINDOWS\system32\DRIVERS\nvstusb.sys [121960 2010-12-12] ()
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56376 2016-08-04] (NVIDIA Corporation)
U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [92344 2016-12-04] (Sysinternals - www.sysinternals.com)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-16] (Synaptics Incorporated)
S3 SRS_HDAL_Service; C:\WINDOWS\System32\drivers\SRS_HDAL_amd64.sys [533280 2010-11-15] ()
S3 tapstrong; C:\WINDOWS\system32\DRIVERS\tapstrong.sys [38760 2013-11-16] (The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [X]
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-10 22:10 - 2016-12-10 22:11 - 00025638 _____ C:\Users\Norman\Downloads\FRST.txt
2016-12-10 21:51 - 2016-12-10 21:51 - 00000000 __SHD C:\Users\Norman\AppData\Roaming\wyUpdate AU
2016-12-10 21:38 - 2016-12-10 21:41 - 01631928 _____ (Malwarebytes) C:\Users\Norman\Desktop\JRT.exe
2016-12-10 20:53 - 2016-12-10 20:53 - 00016962 _____ C:\Users\Norman\Documents\20161210 TV Programme.xlsx
2016-12-10 20:29 - 2016-12-10 21:11 - 03968464 _____ C:\Users\Norman\Desktop\AdwCleaner_6.040.exe
2016-12-10 16:28 - 2016-12-10 16:34 - 00091546 _____ C:\TDSSKiller.3.1.0.12_10.12.2016_16.28.09_log.txt
2016-12-09 18:02 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-12-09 18:02 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-12-09 18:02 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-12-09 18:02 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-12-09 18:02 - 2016-11-11 11:01 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-12-09 18:02 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-12-09 18:02 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-12-09 18:02 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-12-09 18:02 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-12-09 18:02 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-12-09 18:02 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-12-09 18:02 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-12-09 18:02 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-12-09 18:02 - 2016-11-11 10:17 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-12-09 18:02 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2016-12-09 18:02 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-12-09 18:02 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-12-09 18:02 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-12-09 18:02 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-12-09 18:02 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-12-09 18:02 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-12-09 18:02 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-12-09 18:02 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-12-09 18:02 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-12-09 18:01 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-12-09 18:01 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2016-12-09 18:01 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2016-12-09 18:01 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2016-12-09 18:01 - 2016-11-11 11:13 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-12-09 18:01 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-12-09 18:01 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-12-09 18:01 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-12-09 18:01 - 2016-11-11 11:10 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-09 18:01 - 2016-11-11 11:09 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-12-09 18:01 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2016-12-09 18:01 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-12-09 18:01 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-12-09 18:01 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-12-09 18:01 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-12-09 18:01 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-12-09 18:01 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-12-09 18:01 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-12-09 18:01 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-12-09 18:01 - 2016-11-11 10:59 - 02913136 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-12-09 18:01 - 2016-11-11 10:59 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-12-09 18:01 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-12-09 18:01 - 2016-11-11 10:57 - 08170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-12-09 18:01 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-12-09 18:01 - 2016-11-11 10:57 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-12-09 18:01 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-12-09 18:01 - 2016-11-11 10:56 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-12-09 18:01 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-12-09 18:01 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-12-09 18:01 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-12-09 18:01 - 2016-11-11 10:56 - 00241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-12-09 18:01 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2016-12-09 18:01 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-12-09 18:01 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-12-09 18:01 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-12-09 18:01 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-12-09 18:01 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-12-09 18:01 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-12-09 18:01 - 2016-11-11 10:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-12-09 18:01 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2016-12-09 18:01 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-12-09 18:01 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-09 18:01 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2016-12-09 18:01 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2016-12-09 18:01 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2016-12-09 18:01 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-12-09 18:01 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-12-09 18:01 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2016-12-09 18:01 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-12-09 18:01 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-12-09 18:01 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-12-09 18:01 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-12-09 18:01 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-12-09 18:01 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 18:01 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-12-09 18:01 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-12-09 18:01 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-12-09 18:01 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2016-12-09 18:01 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2016-12-09 18:01 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-12-09 18:01 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-12-09 18:01 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-12-09 18:01 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-12-09 18:01 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-12-09 18:01 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-12-09 18:01 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-12-09 18:01 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-12-09 18:01 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-12-09 18:01 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-12-09 18:01 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2016-12-09 18:01 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 18:01 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-12-09 18:01 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-12-09 18:01 - 2016-11-11 10:18 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-12-09 18:01 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-12-09 18:01 - 2016-11-11 10:18 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-12-09 18:01 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2016-12-09 18:01 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2016-12-09 18:01 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-12-09 18:01 - 2016-11-11 10:17 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-12-09 18:01 - 2016-11-11 10:17 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-12-09 18:01 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2016-12-09 18:01 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-12-09 18:01 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-12-09 18:01 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2016-12-09 18:01 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2016-12-09 18:01 - 2016-11-11 10:14 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-12-09 18:01 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-12-09 18:01 - 2016-11-11 10:14 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-12-09 18:01 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-12-09 18:01 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-12-09 18:01 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2016-12-09 18:01 - 2016-11-11 10:10 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-12-09 18:01 - 2016-11-11 10:09 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-12-09 18:01 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-12-09 18:01 - 2016-11-11 10:08 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-09 18:01 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-12-09 18:01 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-12-09 18:01 - 2016-11-11 10:07 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-12-09 18:01 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-12-09 18:01 - 2016-11-11 10:06 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-12-09 18:01 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-12-09 18:01 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-12-09 18:01 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-09 18:01 - 2016-11-11 10:05 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-12-09 18:01 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-12-09 18:01 - 2016-11-11 10:04 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-12-09 18:01 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-12-09 18:01 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-12-09 18:01 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-12-09 18:01 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-12-09 18:01 - 2016-11-11 10:04 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-12-09 18:01 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-12-09 18:01 - 2016-11-11 10:03 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-12-09 18:01 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-12-09 18:01 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-12-09 18:01 - 2016-11-11 10:03 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-12-09 18:01 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-12-09 18:01 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-12-09 18:01 - 2016-11-11 10:03 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-12-09 18:01 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-12-09 18:01 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-12-09 18:01 - 2016-11-11 10:01 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-12-09 18:01 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-12-09 18:01 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-12-09 18:01 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-12-09 18:01 - 2016-11-11 08:56 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-12-09 18:01 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2016-12-09 18:01 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-12-09 18:01 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-12-09 18:01 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-12-09 18:01 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-12-09 18:01 - 2016-11-11 08:47 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-12-09 18:01 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-12-09 18:01 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-12-09 18:01 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 06668032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2016-12-09 18:01 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2016-12-09 18:01 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-12-09 18:01 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2016-12-09 18:01 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-12-09 18:01 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-12-09 18:01 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-12-09 18:01 - 2016-11-11 08:26 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-12-09 18:01 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-12-09 18:01 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-12-09 18:01 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-12-09 18:01 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-12-09 18:01 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-12-09 18:01 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-09 18:01 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-12-09 18:01 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-12-09 18:01 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-12-09 18:01 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2016-12-09 18:01 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-12-09 18:01 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-12-09 18:01 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-12-09 18:01 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-12-09 18:01 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2016-12-09 18:01 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-12-09 18:01 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2016-12-09 18:01 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2016-12-09 18:01 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-12-09 18:01 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-12-09 18:01 - 2016-11-11 08:15 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-12-09 18:01 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-12-09 18:01 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-12-09 18:01 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2016-12-09 18:01 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-12-09 18:01 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-12-09 18:01 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-12-09 18:01 - 2016-11-11 08:13 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-12-09 18:01 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-12-09 18:01 - 2016-11-11 08:10 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-12-09 18:01 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-12-09 18:01 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2016-12-09 18:01 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-12-09 18:01 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-12-09 18:01 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2016-12-09 18:01 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-12-09 18:01 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2016-12-09 18:01 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2016-12-09 18:01 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-12-09 18:01 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-12-09 18:01 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2016-12-09 18:01 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-12-09 18:01 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-12-09 18:01 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-12-09 18:01 - 2016-11-11 08:04 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-12-09 18:01 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-12-09 18:01 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-12-09 18:01 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-12-09 18:01 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2016-12-09 18:01 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-12-09 18:01 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-12-09 18:01 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-12-09 18:01 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-12-09 18:01 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-12-09 18:01 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-12-09 18:01 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-12-09 18:01 - 2016-11-11 08:01 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-12-09 18:01 - 2016-11-11 07:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-12-09 18:00 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2016-12-09 18:00 - 2016-11-11 11:01 - 02189152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-12-09 18:00 - 2016-11-11 11:01 - 01738048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-09 18:00 - 2016-11-11 11:01 - 00658264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-12-09 18:00 - 2016-11-11 11:01 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-12-09 18:00 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-12-09 18:00 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-12-09 18:00 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-12-09 18:00 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2016-12-09 18:00 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2016-12-09 18:00 - 2016-11-11 10:51 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-12-09 18:00 - 2016-11-11 10:31 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-12-09 18:00 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-12-09 18:00 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2016-12-09 18:00 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-12-09 18:00 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2016-12-09 18:00 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-12-09 18:00 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-12-09 18:00 - 2016-11-11 10:24 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-12-09 18:00 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2016-12-09 18:00 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-12-09 18:00 - 2016-11-11 10:23 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-12-09 18:00 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-12-09 18:00 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-12-09 18:00 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-12-09 18:00 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-12-09 18:00 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-12-09 18:00 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-12-09 18:00 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-12-09 18:00 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-12-09 18:00 - 2016-11-11 10:20 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-12-09 18:00 - 2016-11-11 10:20 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-12-09 18:00 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-12-09 18:00 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-12-09 18:00 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-12-09 18:00 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-12-09 18:00 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-12-09 18:00 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2016-12-09 18:00 - 2016-11-11 10:19 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-12-09 18:00 - 2016-11-11 10:18 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-12-09 18:00 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2016-12-09 18:00 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-12-09 18:00 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2016-12-09 18:00 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-12-09 18:00 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-12-09 18:00 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-12-09 18:00 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2016-12-09 18:00 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-12-09 18:00 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2016-12-09 18:00 - 2016-11-11 10:11 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-12-09 18:00 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-12-09 18:00 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2016-12-09 18:00 - 2016-11-11 10:10 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-12-09 18:00 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-12-09 18:00 - 2016-11-11 10:08 - 08127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-12-09 18:00 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2016-12-09 18:00 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2016-12-09 18:00 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-12-09 18:00 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-12-09 18:00 - 2016-11-11 10:07 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2016-12-09 18:00 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-12-09 18:00 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-12-09 18:00 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-12-09 18:00 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-12-09 18:00 - 2016-11-11 10:04 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-12-09 18:00 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-12-09 18:00 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-12-09 18:00 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-12-09 18:00 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2016-12-09 18:00 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-12-09 18:00 - 2016-11-11 10:03 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-12-09 18:00 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-12-09 18:00 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-12-09 18:00 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-12-09 18:00 - 2016-11-11 10:02 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-12-09 18:00 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2016-12-09 18:00 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-12-09 18:00 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2016-12-09 18:00 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2016-12-09 18:00 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-12-09 18:00 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-12-09 18:00 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-12-09 18:00 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-12-09 18:00 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-12-09 18:00 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2016-12-09 18:00 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2016-12-09 18:00 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-12-09 18:00 - 2016-11-11 08:20 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-12-09 18:00 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-12-09 18:00 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-12-09 18:00 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-12-09 18:00 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-12-09 18:00 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-12-09 18:00 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-12-09 18:00 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2016-12-09 18:00 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2016-12-09 18:00 - 2016-11-11 08:17 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-12-09 18:00 - 2016-11-11 08:16 - 19415552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-12-09 18:00 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 18:00 - 2016-11-11 08:16 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-12-09 18:00 - 2016-11-11 08:14 - 19415552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-12-09 18:00 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2016-12-09 18:00 - 2016-11-11 08:09 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-12-09 18:00 - 2016-11-11 08:06 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-12-09 18:00 - 2016-11-11 08:06 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-12-09 18:00 - 2016-11-11 08:05 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-12-09 18:00 - 2016-11-11 08:04 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-12-09 18:00 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-12-09 18:00 - 2016-11-11 08:03 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-12-09 17:51 - 2016-12-09 17:55 - 00087750 _____ C:\TDSSKiller.3.1.0.12_09.12.2016_17.51.29_log.txt
2016-12-09 17:47 - 2016-12-09 17:51 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Norman\Desktop\tdsskiller.exe
2016-12-09 17:08 - 2016-12-09 17:46 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-12-09 17:08 - 2016-12-09 17:08 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-09 17:06 - 2016-12-09 17:49 - 00000000 ____D C:\Users\Norman\Desktop\mbar
2016-12-09 17:06 - 2016-12-09 17:06 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-12-09 17:04 - 2016-12-09 17:05 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Norman\Desktop\mbar-1.09.3.1001.exe
2016-12-09 16:09 - 2016-12-09 16:15 - 00067912 _____ C:\Users\Norman\Downloads\Addition2.txt
2016-12-09 10:41 - 2016-12-09 10:41 - 00000000 ____D C:\Users\Norman\Downloads\FRST-OlderVersion
2016-12-08 17:58 - 2016-12-08 17:59 - 38791360 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (3).zip
2016-12-08 17:56 - 2016-12-08 17:57 - 27175600 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (2).zip
2016-12-08 17:29 - 2016-12-08 17:29 - 32849489 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2.zip
2016-12-08 17:29 - 2016-12-08 17:29 - 16045741 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (1).zip
2016-12-05 21:34 - 2016-12-09 10:50 - 00065745 _____ C:\Users\Norman\Downloads\Addition1.txt
2016-12-05 21:31 - 2016-12-10 22:10 - 00000000 ____D C:\FRST
2016-12-05 21:31 - 2016-12-09 16:15 - 00056734 _____ C:\Users\Norman\Downloads\FRST2.txt
2016-12-05 21:31 - 2016-12-09 10:50 - 00056760 _____ C:\Users\Norman\Downloads\FRST1.txt
2016-12-05 21:29 - 2016-12-09 10:41 - 02420224 _____ (Farbar) C:\Users\Norman\Downloads\FRST64.exe
2016-12-04 23:17 - 2016-12-05 20:46 - 00011172 _____ C:\Users\Norman\Desktop\focal anschliessen.xlsx
2016-12-04 01:37 - 2016-12-10 21:43 - 00000624 _____ C:\Users\Norman\Desktop\JRT.txt
2016-12-04 01:31 - 2016-12-04 01:31 - 01631928 _____ (Malwarebytes) C:\Users\Norman\Downloads\JRT.exe
2016-11-27 22:30 - 2016-11-27 22:30 - 00014743 _____ C:\Users\Norman\Desktop\Unitymedia Retourenmarke.pdf
2016-11-17 20:08 - 2016-12-10 22:07 - 00000000 ____D C:\Users\Norman\AppData\LocalLow\Mozilla
2016-11-13 00:19 - 2016-11-13 00:19 - 04756984 _____ (Softperfect ) C:\Users\Norman\Downloads\networx_setup.exe
2016-11-12 23:40 - 2016-11-13 00:09 - 07353936 _____ (Lucom GmbH) C:\Users\Norman\Downloads\FFWFiller3.4.1_build106_Setup.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-10 22:00 - 2016-09-21 21:48 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-12-10 21:54 - 2016-05-04 19:43 - 00000000 ____D C:\Users\Norman\AppData\Local\CrashDumps
2016-12-10 21:49 - 2016-09-21 22:49 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-10 21:49 - 2016-09-21 21:59 - 00000000 ____D C:\Users\Norman
2016-12-10 21:49 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-10 21:48 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2016-12-10 21:32 - 2016-07-16 23:51 - 00754454 _____ C:\WINDOWS\system32\perfh007.dat
2016-12-10 21:32 - 2016-07-16 23:51 - 00160218 _____ C:\WINDOWS\system32\perfc007.dat
2016-12-10 21:32 - 2015-07-30 21:49 - 01939258 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-10 21:27 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2016-12-10 21:27 - 2013-01-27 22:59 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-10 21:25 - 2016-09-21 21:48 - 05003872 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2016-12-10 21:20 - 2016-10-31 22:30 - 00000000 ____D C:\AdwCleaner
2016-12-10 21:20 - 2015-07-31 02:00 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-10 16:27 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-09 18:15 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-09 16:55 - 2013-08-10 11:39 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-09 16:50 - 2012-10-17 12:46 - 00000000 ____D C:\ProgramData\Avira
2016-12-09 16:47 - 2011-09-22 22:25 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-12-09 16:35 - 2012-10-17 12:53 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Avira
2016-12-09 16:24 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-12-09 16:05 - 2016-10-28 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-09 15:57 - 2011-04-09 19:49 - 00000000 ____D C:\ProgramData\Adobe
2016-12-09 15:56 - 2011-04-13 17:55 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Adobe
2016-12-09 15:55 - 2011-04-09 19:49 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-12-09 15:53 - 2011-04-13 22:06 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-12-09 15:53 - 2011-04-13 21:35 - 00000000 ____D C:\Users\Norman\AppData\Local\Adobe
2016-12-09 13:42 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-08 17:13 - 2016-05-16 16:00 - 00000000 ____D C:\Users\Norman\AppData\Local\Spotify
2016-12-08 17:13 - 2016-05-16 15:59 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Spotify
2016-12-05 21:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-12-05 21:01 - 2016-10-31 22:26 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2016-12-04 23:18 - 2016-09-21 22:46 - 00000000 ___DC C:\WINDOWS\Panther
2016-12-04 22:08 - 2016-11-02 19:56 - 00092344 ____H (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCMON23.SYS
2016-12-04 01:34 - 2013-02-03 15:37 - 00000000 ____D C:\ProgramData\IObit
2016-12-04 01:08 - 2016-10-24 18:53 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-11-30 23:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-11-22 22:35 - 2016-09-24 09:51 - 00018915 _____ C:\WINDOWS\SysWOW64\Defrag.debuglog
2016-11-22 22:34 - 2016-09-25 19:26 - 00008026 _____ C:\WINDOWS\SysWOW64\MyDefrag.dat
2016-11-22 22:31 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-11-22 22:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2016-11-22 22:31 - 2014-12-29 00:00 - 00000000 ____D C:\NVIDIA
2016-11-22 22:31 - 2014-12-28 13:17 - 00000000 ____D C:\Log
2016-11-22 22:31 - 2013-11-08 01:23 - 00000000 ____D C:\Intel
2016-11-22 22:31 - 2011-10-17 19:33 - 00000000 ____D C:\Users\Norman\AppData\Local\Rohos
2016-11-22 22:31 - 2011-04-09 21:58 - 00000000 ____D C:\dell
2016-11-22 00:39 - 2016-09-10 00:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2016-11-20 19:30 - 2014-11-25 23:33 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-11-17 01:43 - 2016-10-28 11:41 - 01368548 _____ C:\WINDOWS\SysWOW64\winapp2_disk.csv
2016-11-13 00:11 - 2011-06-26 10:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lucom
2016-11-12 14:49 - 2011-04-17 14:51 - 00000000 ____D C:\Users\Norman\AppData\Local\Google
2016-11-12 01:29 - 2014-11-02 17:01 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2011-05-01 12:25 - 2011-05-01 12:25 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe BMP Format CS5 Prefs
2011-05-01 12:28 - 2011-05-01 12:28 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe PNG Format CS5 Prefs
2013-05-20 16:50 - 2013-05-20 16:50 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\BCT-TTL.DAT
2012-01-26 20:38 - 2012-01-26 20:38 - 0076070 _____ () C:\Users\Norman\AppData\Roaming\Photo.jpg
2013-07-27 12:51 - 2013-07-31 10:51 - 0000076 _____ () C:\Users\Norman\AppData\Roaming\WB.CFG
2013-06-16 23:51 - 2013-08-09 23:51 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\WBPU-TTL.DAT
2015-03-21 11:41 - 2015-03-21 11:41 - 0000038 ___SH () C:\Users\Norman\AppData\Local\69ff07055291669bb2b218.72821112
2012-12-16 00:38 - 2012-12-16 11:07 - 0001456 _____ () C:\Users\Norman\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2011-08-27 10:36 - 2011-08-27 10:36 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110827.113609.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110930.213107.txt
2011-08-26 23:58 - 2011-08-26 23:59 - 0024474 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.005843.txt
2011-08-27 10:37 - 2011-08-27 10:37 - 0002220 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113710.txt
2011-08-27 10:37 - 2011-08-27 10:38 - 0025436 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113735.txt
2011-09-30 20:31 - 2011-09-30 20:32 - 0002408 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213154.txt
2011-09-30 20:32 - 2011-09-30 20:32 - 0026418 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213219.txt
2012-02-11 20:08 - 2012-02-11 20:08 - 0002532 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20120211.200800.txt
2011-04-25 15:31 - 2011-04-25 15:31 - 0001500 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163125.txt
2011-04-25 15:32 - 2011-04-25 15:32 - 0001522 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163232.txt
2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163236.txt
2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163258.txt
2011-08-26 23:51 - 2011-08-26 23:51 - 0001567 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005113.txt
2011-08-26 23:57 - 2011-08-26 23:57 - 0001587 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005706.txt
2011-08-26 23:57 - 2011-08-26 23:57 - 0000631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005729.txt
2011-08-26 23:58 - 2011-08-26 23:58 - 0000673 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005804.txt
2011-08-26 23:58 - 2011-08-26 23:58 - 0001565 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005806.txt
2011-08-26 23:58 - 2011-08-26 23:58 - 0001283 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005814.txt
2011-08-26 23:58 - 2011-08-26 23:58 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005831.txt
2011-08-26 23:59 - 2011-08-26 23:59 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005905.txt
2011-08-27 10:25 - 2011-08-27 10:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.112544.txt
2011-08-27 10:33 - 2011-08-27 10:33 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113354.txt
2011-08-27 10:36 - 2011-08-27 10:36 - 0001559 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113615.txt
2011-08-27 10:36 - 2011-08-27 10:36 - 0000844 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113630.txt
2011-08-27 10:36 - 2011-08-27 10:36 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113657.txt
2011-08-27 10:37 - 2011-08-27 10:37 - 0001556 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113701.txt
2011-08-27 10:37 - 2011-08-27 10:37 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113707.txt
2011-08-27 10:37 - 2011-08-27 10:37 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113709.txt
2011-08-27 10:37 - 2011-08-27 10:37 - 0001227 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113728.txt
2011-08-27 10:38 - 2011-08-27 10:38 - 0001247 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113802.txt
2011-08-27 10:41 - 2011-08-27 10:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.114142.txt
2011-08-27 13:28 - 2011-08-27 13:28 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.142850.txt
2011-08-27 13:32 - 2011-08-27 13:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143221.txt
2011-08-27 13:33 - 2011-08-27 13:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143328.txt
2011-08-27 13:35 - 2011-08-27 13:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143504.txt
2011-08-27 13:36 - 2011-08-27 13:36 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143643.txt
2011-08-27 13:41 - 2011-08-27 13:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144114.txt
2011-08-27 13:41 - 2011-08-27 13:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144131.txt
2011-08-27 13:44 - 2011-08-27 13:44 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144447.txt
2011-08-27 13:54 - 2011-08-27 13:54 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.145439.txt
2011-08-27 21:23 - 2011-08-27 21:23 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.222325.txt
2011-08-27 21:35 - 2011-08-27 21:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.223514.txt
2011-08-27 21:49 - 2011-08-27 21:49 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.224955.txt
2011-08-28 08:25 - 2011-08-28 08:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.092549.txt
2011-08-28 22:42 - 2011-08-28 22:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.234241.txt
2011-08-30 22:28 - 2011-08-30 22:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.232851.txt
2011-08-30 22:36 - 2011-08-30 22:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.233651.txt
2011-08-31 18:45 - 2011-08-31 18:45 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110831.194523.txt
2011-09-04 19:48 - 2011-09-04 19:48 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.204837.txt
2011-09-04 19:51 - 2011-09-04 19:51 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.205152.txt
2011-09-04 23:45 - 2011-09-04 23:45 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110905.004523.txt
2011-09-06 20:46 - 2011-09-06 20:46 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.214631.txt
2011-09-06 21:02 - 2011-09-06 21:02 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.220235.txt
2011-09-07 18:55 - 2011-09-07 18:55 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110907.195552.txt
2011-09-08 17:57 - 2011-09-08 17:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110908.185702.txt
2011-09-09 19:07 - 2011-09-09 19:07 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.200710.txt
2011-09-09 19:11 - 2011-09-09 19:11 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.201118.txt
2011-09-10 18:22 - 2011-09-10 18:22 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110910.192247.txt
2011-09-12 18:38 - 2011-09-12 18:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.193859.txt
2011-09-12 19:33 - 2011-09-12 19:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203313.txt
2011-09-12 19:36 - 2011-09-12 19:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203611.txt
2011-09-12 19:42 - 2011-09-12 19:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.204240.txt
2011-09-12 20:00 - 2011-09-12 20:00 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.210050.txt
2011-09-12 20:10 - 2011-09-12 20:10 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.211009.txt
2011-09-13 18:41 - 2011-09-13 18:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110913.194154.txt
2011-09-16 13:19 - 2011-09-16 13:19 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.141913.txt
2011-09-16 13:31 - 2011-09-16 13:31 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.143126.txt
2011-09-16 18:06 - 2011-09-16 18:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.190621.txt
2011-09-19 19:06 - 2011-09-19 19:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200637.txt
2011-09-19 19:08 - 2011-09-19 19:08 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200812.txt
2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195304.txt
2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195316.txt
2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195347.txt
2011-09-22 19:57 - 2011-09-22 19:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205748.txt
2011-09-22 19:59 - 2011-09-22 19:59 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205918.txt
2011-09-22 20:02 - 2011-09-22 20:02 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.210246.txt
2011-09-22 22:32 - 2011-09-22 22:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.233237.txt
2011-09-23 19:30 - 2011-09-23 19:30 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203026.txt
2011-09-23 19:38 - 2011-09-23 19:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203858.txt
2011-09-25 16:30 - 2011-09-25 16:30 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173029.txt
2011-09-25 16:32 - 2011-09-25 16:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173257.txt
2011-09-30 20:20 - 2011-09-30 20:20 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212009.txt
2011-09-30 20:28 - 2011-09-30 20:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212829.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0001691 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213116.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0000775 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213137.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213144.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0001663 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213146.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213149.txt
2011-09-30 20:31 - 2011-09-30 20:31 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213154.txt
2011-09-30 20:32 - 2011-09-30 20:32 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213211.txt
2011-09-30 20:32 - 2011-09-30 20:32 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213248.txt
2011-09-30 20:35 - 2011-09-30 20:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213545.txt
2011-09-30 20:37 - 2011-09-30 20:37 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213751.txt
2011-10-03 23:40 - 2011-10-03 23:40 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111004.004009.txt
2011-10-16 17:12 - 2011-10-16 17:12 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.181247.txt
2011-10-16 17:31 - 2011-10-16 17:31 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.183111.txt
2011-10-21 21:09 - 2011-10-21 21:09 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111021.220926.txt
2011-10-24 19:03 - 2011-10-24 19:03 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200357.txt
2011-10-24 19:05 - 2011-10-24 19:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200500.txt
2011-10-24 23:43 - 2011-10-24 23:43 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111025.004352.txt
2011-10-30 12:45 - 2011-10-30 12:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124516.txt
2011-10-30 12:46 - 2011-10-30 12:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124632.txt
2011-10-30 17:34 - 2011-10-30 17:34 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.173449.txt
2011-10-30 19:45 - 2011-10-30 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.194515.txt
2011-11-01 20:21 - 2011-11-01 20:22 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202157.txt
2011-11-01 20:29 - 2011-11-01 20:29 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202932.txt
2011-11-04 20:38 - 2011-11-04 20:38 - 0001654 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.203817.txt
2011-11-04 20:41 - 2011-11-04 20:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.204113.txt
2011-11-05 22:43 - 2011-11-05 22:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111105.224326.txt
2011-11-06 17:39 - 2011-11-06 17:39 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.173943.txt
2011-11-06 19:45 - 2011-11-06 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.194515.txt
2011-11-06 23:10 - 2011-11-06 23:10 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231034.txt
2011-11-06 23:11 - 2011-11-06 23:11 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231132.txt
2011-11-09 23:16 - 2011-11-09 23:16 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111109.231646.txt
2011-11-11 20:48 - 2011-11-11 20:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.204845.txt
2011-11-11 20:51 - 2011-11-11 20:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.205142.txt
2011-11-13 21:45 - 2011-11-13 21:45 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214545.txt
2011-11-13 21:46 - 2011-11-13 21:46 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214631.txt
2011-11-13 21:49 - 2011-11-13 21:49 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214912.txt
2011-11-13 22:09 - 2011-11-13 22:09 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.220915.txt
2011-11-15 21:44 - 2011-11-15 21:44 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.214441.txt
2011-11-15 22:05 - 2011-11-15 22:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.220500.txt
2011-11-20 18:14 - 2011-11-20 18:14 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181429.txt
2011-11-20 18:15 - 2011-11-20 18:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181514.txt
2011-11-26 08:35 - 2011-11-26 08:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111126.083554.txt
2011-11-27 17:15 - 2011-11-27 17:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171555.txt
2011-11-27 17:16 - 2011-11-27 17:16 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171657.txt
2011-11-27 17:20 - 2011-11-27 17:20 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.172036.txt
2011-11-28 20:48 - 2011-11-28 20:48 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111128.204808.txt
2011-12-04 18:39 - 2011-12-04 18:39 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.183910.txt
2011-12-04 18:49 - 2011-12-04 18:49 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.184903.txt
2011-12-06 09:46 - 2011-12-06 09:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094601.txt
2011-12-06 09:47 - 2011-12-06 09:47 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094714.txt
2011-12-06 17:00 - 2011-12-06 17:00 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170007.txt
2011-12-06 17:00 - 2011-12-06 17:00 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170054.txt
2011-12-07 19:43 - 2011-12-07 19:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194355.txt
2011-12-07 19:46 - 2011-12-07 19:46 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194638.txt
2011-12-18 19:24 - 2011-12-18 19:24 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192455.txt
2011-12-18 19:27 - 2011-12-18 19:27 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192711.txt
2011-12-23 21:02 - 2011-12-23 21:02 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210230.txt
2011-12-23 21:03 - 2011-12-23 21:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210359.txt
2011-12-26 21:48 - 2011-12-26 21:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.214850.txt
2011-12-26 21:52 - 2011-12-26 21:52 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215206.txt
2011-12-26 21:53 - 2011-12-26 21:53 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215304.txt
2011-12-26 21:57 - 2011-12-26 21:57 - 0001656 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215720.txt
2011-12-26 21:58 - 2011-12-26 21:58 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215853.txt
2011-12-27 10:41 - 2011-12-27 10:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104144.txt
2011-12-27 10:42 - 2011-12-27 10:42 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104218.txt
2011-12-30 21:43 - 2011-12-30 21:43 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214320.txt
2011-12-30 21:45 - 2011-12-30 21:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214521.txt
2012-01-01 20:51 - 2012-01-01 20:51 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120101.205109.txt
2012-01-02 22:21 - 2012-01-02 22:21 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120102.222141.txt
2012-01-07 21:55 - 2012-01-07 21:55 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215502.txt
2012-01-07 21:55 - 2012-01-07 21:55 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215551.txt
2012-01-07 21:59 - 2012-01-07 22:00 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215959.txt
2012-01-07 22:02 - 2012-01-07 22:02 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220201.txt
2012-01-07 22:04 - 2012-01-07 22:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220434.txt
2012-01-09 21:54 - 2012-01-09 21:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215418.txt
2012-01-09 21:57 - 2012-01-09 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215758.txt
2012-01-20 20:53 - 2012-01-20 20:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120120.205322.txt
2012-01-21 21:58 - 2012-01-21 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120121.215816.txt
2012-02-11 19:51 - 2012-02-11 19:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195109.txt
2012-02-11 19:53 - 2012-02-11 19:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195320.txt
2012-02-11 19:54 - 2012-02-11 19:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195456.txt
2011-08-14 14:00 - 2016-10-31 21:54 - 0007615 _____ () C:\Users\Norman\AppData\Local\Resmon.ResmonCfg
2012-09-03 19:04 - 2012-09-03 19:04 - 0000437 _____ () C:\Users\Norman\AppData\Local\WiDiLog.20120903.200455.txt
2012-02-11 20:06 - 2012-02-11 20:08 - 0035304 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120211.200659.txt
2012-07-14 19:32 - 2012-07-14 19:34 - 0036810 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120714.203253.txt
2012-08-01 20:11 - 2012-08-01 20:11 - 0004356 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211142.txt
2012-08-01 20:15 - 2012-08-01 20:15 - 0004300 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211509.txt
2012-08-10 19:13 - 2012-08-10 19:13 - 0004254 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120810.201324.txt
2012-09-03 19:02 - 2012-09-03 19:05 - 0068266 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120903.200248.txt
2011-07-27 23:59 - 2011-07-27 23:59 - 0000000 _____ () C:\Users\Norman\AppData\Local\{5ED86D1B-2D7E-4120-BB20-3AEC8A26F554}
2011-07-30 04:45 - 2011-07-30 04:45 - 0000000 _____ () C:\Users\Norman\AppData\Local\{60B26B5E-87FD-42A4-83DC-4530F1960E8F}
2011-05-02 18:10 - 2011-05-02 18:10 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A1F6FEE-5E6C-4272-9022-CB830817BA15}
2011-07-23 08:52 - 2011-07-23 08:52 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A6B9F28-8DC5-4030-ABD2-70F4FD63FFE4}
2011-07-25 18:17 - 2011-07-25 18:17 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8EFAA6EA-5166-4E13-99E4-CB1B5DF8D35F}
2011-07-29 17:46 - 2011-07-29 17:46 - 0000000 _____ () C:\Users\Norman\AppData\Local\{C8C88F15-814A-4E08-8403-ACDF6E87EDC0}
2011-08-20 10:15 - 2014-03-26 19:34 - 0000125 ___SH () C:\ProgramData\.zreglib

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Public\AlexaNSISPlugin.8636.dll


Einige Dateien in TEMP:
====================
C:\Users\Norman\AppData\Local\Temp\libeay32.dll
C:\Users\Norman\AppData\Local\Temp\msvcr120.dll
C:\Users\Norman\AppData\Local\Temp\sqlite3.dll


Einige mit null Byte Größe Dateien/Ordner:
==========================
C:\Windows\System32\Drivers\iqvw64e.sys

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-04 23:03

==================== Ende von FRST.txt ============================

--- --- ---

querotudo · 10.12.2016, 22:19

Addition.txt

Code:

ATTFilter

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgefÃ¼hrt von Norman (10-12-2016 22:12:20)
Gestartet von C:\Users\Norman\Downloads
Windows 10 Pro Version 1607 (X64) (2016-09-21 21:54:50)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Admin (S-1-5-21-143339661-846541388-530592055-1004 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-143339661-846541388-530592055-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-143339661-846541388-530592055-503 - Limited - Disabled)
Gast (S-1-5-21-143339661-846541388-530592055-501 - Limited - Disabled)
Norman (S-1-5-21-143339661-846541388-530592055-1002 - Administrator - Enabled) => C:\Users\Norman

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.7 64-bit (HKLM\...\{1B77B02E-17E4-4B6D-B8A1-74B29AF3D8DD}) (Version: 5.7.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 7.0 (HKLM-x32\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Ansel (Version: 372.90 - NVIDIA Corporation) Hidden
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Application Verifier (x64) (HKLM\...\{361A49FA-59B3-49FB-8C3E-08AF3EA5791A}) (Version: 4.0.917 - Microsoft Corporation)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data) (Version:  - )
Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data) (Version:  - )
Canon Easy-PhotoPrint Pro (HKLM-x32\...\Easy-PhotoPrint Pro) (Version:  - )
Canon MG6200 series On-screen Manual (HKLM-x32\...\Canon MG6200 series On-screen Manual) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell System Detect - 1  (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\73f463568823ebbe) (Version: 6.6.0.2 - Dell)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.1.1303 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.1.1.1303 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)
EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
Epson Easy Photo Print 2 (HKLM-x32\...\{07AA1C7F-E8CA-4FDC-B975-BC9EBC22B6DE}) (Version: 2.7.0.0 - SEIKO EPSON CORPORATION)
EPSON ET-4550 Series Printer Uninstall (HKLM\...\EPSON ET-4550 Series) (Version:  - SEIKO EPSON Corporation)
Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)
FormsForWebÂ® Filler 3.4.1 (HKLM-x32\...\{3C4DE3A5-B120-4A36-9B61-477D59333BA7}) (Version: 3.4.1 - Lucom GmbH)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)
FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care)
Garmin City Navigator Europe NT 2011.10 (HKLM-x32\...\{74D21920-3B72-494F-9042-8C26E1E99FDC}) (Version: 14.10.0.0 - Garmin Ltd or its subsidiaries)
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
Gigaset QuickSync (HKLM\...\{aef81617-c1c0-495e-83ae-91c94ecc562b}) (Version: 8.5.0874.3 - Gigaset Communications GmbH)
GmapTool 0.8.11 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version:  - AP)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Chrome (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Google Chrome) (Version: 13.0.782.215 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
GTS  (HKLM-x32\...\{2E6AA783-D4A9-4AD3-9994-B64D923738D7}) (Version: 1.00.17 - vwd AG)
HiDrive (HKLM-x32\...\{88D57A8B-DF01-4C4D-8EF4-289C08BD2F96}) (Version: 4.2.1.0 - STRATO AG)
Image Data Converter (HKLM-x32\...\{87998E4E-6D9C-411B-AAE9-B8523FFE357D}) (Version: 4.2.02.10112 - Sony Corporation)
Intel Driver Update Utility (HKLM-x32\...\{ca4bc3a8-b99c-4416-90d8-351a8ceab458}) (Version: 2.2.0.2 - Intel)
Intel WiDi Media Share (x32 Version: 1.1.0.0 - Intel Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.2 (x32 Version: 2.2.0.1 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{83A1A885-9BE7-4B1A-A3F9-88E81890173F}) (Version: 4.3.4.0 - Intel Corporation)
IntelÂ® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
IntelÂ® WiDi Media Share (HKLM-x32\...\{32d14b1d-18fa-48e7-867d-93b7a72c816a}) (Version: 1.1.0.0 - Intel Corporation)
IntelÂ® WiDi Remote (HKLM-x32\...\{f329f83b-c06f-48ce-99eb-f324e2f94b01}) (Version: 1.0.0.0 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.55.0 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
MapTk (MapToolKit) (HKLM-x32\...\{0236FF14-34AF-4D37-BA6C-17567B7A8685}_is1) (Version:  - )
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Outlook Hotmail Connector 64-Bit (HKLM\...\{95140000-007A-0407-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (HKLM\...\{95140000-007D-0409-1000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (HKLM\...\{965DF723-5688-359E-84D2-417CAFE644B5}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (HKLM-x32\...\{44D9A2CB-0692-3180-B5E2-26F4E807D067}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)
Mozilla Firefox 50.0 (x64 de) (HKLM\...\Mozilla Firefox 50.0 (x64 de)) (Version: 50.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)
MyEpson Portal (x32 Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden
NirSoft WirelessNetView (HKLM-x32\...\NirSoft WirelessNetView) (Version:  - )
NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Paragon Backup and Recoveryâ„¢ 2014 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.24 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.2.1405.1601 - LG Electronics Inc.)
Spotify (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (HKLM-x32\...\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}) (Version: 1.6.5.17120 - Synaptics Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.15.2 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)
Total Immersion D'Fusion @Home Web Plug-In (HKLM-x32\...\D'Fusion @Home Web Plug-In) (Version:  - Total Immersion)
TRC-Brasil 11.05 2011-05-22 (HKLM-x32\...\Tracksource RoteÃ¡vel Completo - TRC-Brasil_is1) (Version: 11.05 2011-05-22 - Projeto Tracksource Brasil)
Ãœberwachungstool fÃ¼r die IntelÂ® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {035A9A4F-B696-49DC-9565-6A36C0EBEF1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)
Task: {0D78C388-7509-4FE6-A5FB-098175E1545E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {11788F8E-6BA1-45C8-B13A-FA9F2681E4BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)
Task: {133555AB-2B60-4BA9-BDAA-F01F3AE03402} - System32\Tasks\{877A3688-B368-4D99-B519-DB656244B393} => pcalua.exe -a "C:\Program Files (x86)\Canon\IJ Manual\Canon MG6200 series\uninstall.exe"
Task: {1A438826-8381-44D6-A6B9-8F489490F86D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1BE75B25-9E44-4F82-95D6-D79F60FF3247} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1DE85612-34FA-429A-9D31-5CDBC2650323} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1F9A0589-84B5-42BA-AFDE-228B26EA0EC2} - System32\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)
Task: {28AF8722-4067-428D-8BE0-E65205185B0B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {31158C7A-66C9-4F5A-93B2-4EFD47974767} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-11-08] (Microsoft Corporation)
Task: {321BC64F-22B4-4376-A69F-320A591125C3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {3EEB8463-7733-4D40-8E4F-CBABDC0ACE94} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG
Task: {4484C003-4F32-4384-8030-E4C4851E3F59} - System32\Tasks\{8AC66CE9-0E07-4269-869C-86FDAA1E2C04} => pcalua.exe -a C:\Users\Norman\AppData\Local\Apps\2.0\WPX0DM2N.492\KAANJB92.8H0\dell..tion_e30b47f5d4a30e9e_0006.0006_e3e278ac9f13d461\Uninstaller.exe -c uninstall
Task: {44E5FC0B-7C72-45E2-9C56-43CC558E11E3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {527B5428-05E5-403D-B2D7-755ED2A1DEFB} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {5499FFD0-826B-4096-8C27-30A24297365B} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {54D09165-62A4-46D6-AB2D-84F926E6A64D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {56F78C49-02AC-472B-9AF3-557B49123E26} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22] (Oracle Corporation)
Task: {582170F0-FF9B-400D-AE49-75009B2E6767} - System32\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)
Task: {593DE477-5325-4914-BF7E-3448537E41F9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {5D79A697-EFF9-4FD8-B420-18AC0D375505} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {632484DB-1288-42DB-B76E-83BEC2218227} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {63A85D7B-C95F-4087-8A09-8082F37632EA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {70F31CE2-B841-4129-99F4-B4823E566B60} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {7C94D902-6042-4C63-9E48-BB6585BFA4E8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7FFB4346-F6CE-46BD-B04C-70751983D698} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {81AA9449-0338-4196-AB82-C8EB4802916D} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8E6552C0-1141-45A4-8D28-92FC52F385F1} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {9AE661AD-32D1-4A04-99D0-D58B7CDB48F3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9C3C6ACD-5255-4E03-BD26-7092C6EF74C2} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {A85F96BF-E61D-4F05-9957-2F739826DBA2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {B499892F-1E79-4D05-BAFD-4E7C12930048} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [2014-03-13] (LG Electronics Inc.)
Task: {B98F5A2E-3D00-42ED-A557-E79AF9B0BF6C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG
Task: {BEE9CE76-88FB-41FB-B94E-36A4B7A35958} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D2E516C1-237E-465F-8481-60E17010A5DD} - System32\Tasks\{0EE9F46A-89CF-4603-BE10-7B3B15B52B1F} => pcalua.exe -a "C:\Program Files (x86)\test und FINANZtest Archiv CD-Rom 2012\Uninst.exe"
Task: {D5EAEB49-5195-4869-99F4-B092EA0AA9C9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D7213CF8-8470-44E2-91BF-02A9FF5BFF4C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-19] (Adobe Systems Incorporated)
Task: {DE52E1A7-88F9-4E76-9F05-434F048511DD} - System32\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)
Task: {E518C07C-FA41-4267-BD27-7BCE1EE2293D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EB590BBD-5E1D-4B11-AF1E-DFAFD0B000B3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {EFBE991D-2AB8-42F8-BA1D-C936AD834C64} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F6520BE3-B270-482E-B856-0538FBB0FCFC} - System32\Tasks\Moo0 System Monitor 1.76 => C:\Program Files (x86)\Moo0\SystemMonitor 1.76\SystemMonitor.exe
Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {FA00DFF2-F119-4681-A5D5-04C5DDB86DA1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {FABBEB4E-6065-4957-8BFD-1BA469C1CCA8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{8F854212-531C-4F83-90B2-997F22F7FA1F} /F:UpdateWORKGROUP\NORMAN-PC$
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{F58BC06F-9519-4B48-B3D9-392DEEA747B9} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== VerknÃ¼pfungen =============================

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-09 18:01 - 2016-11-11 11:10 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-21 21:52 - 2016-09-16 23:54 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2006-12-04 00:26 - 2006-12-04 00:26 - 00022016 _____ () C:\WINDOWS\System32\sugo3l6.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-12-09 18:01 - 2016-11-11 11:10 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-21 23:30 - 2016-09-21 23:30 - 00959168 _____ () C:\Users\Norman\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64\ClientTelemetry.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-09-21 22:41 - 2016-09-21 22:41 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-09 18:00 - 2016-11-11 10:23 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-08 22:58 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-08 22:59 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-08 22:58 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-08 22:58 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-08 22:58 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-08 22:58 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-17 20:12 - 2016-11-17 20:12 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-11-17 20:12 - 2016-11-17 20:12 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-11-17 20:12 - 2016-11-17 20:12 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-10-13 15:31 - 2016-10-13 15:31 - 06673568 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe
2010-11-29 21:04 - 2010-11-29 21:04 - 00403968 _____ () C:\Program Files\Intel\TurboBoost\de\SignalIslandUi.resources.dll
2016-02-28 13:56 - 2016-01-19 08:16 - 00081408 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe
2016-02-28 13:56 - 2016-01-19 08:16 - 00285184 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe
2016-10-05 22:21 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-10-05 22:21 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-05-04 19:34 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-13 15:31 - 2016-10-13 15:31 - 01035936 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\CefSharp.Core.dll
2016-10-13 15:31 - 2016-10-13 15:31 - 48943768 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\libcef.dll
2015-03-19 19:47 - 2013-12-06 22:06 - 00642016 _____ () C:\Program Files (x86)\LG Software\LG Smart Share\DMS\sqlite3.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 [104]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)


==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-143339661-846541388-530592055-1002\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)

2016-12-09 15:17 - 2016-12-09 15:19 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Norman\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\irfanview_wallpaper.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AERTFilters => 2
MSCONFIG\Services: chip1click => 2
MSCONFIG\Services: SDScannerService => 2
MSCONFIG\Services: SDUpdateService => 2
MSCONFIG\Services: SDWSCService => 2
MSCONFIG\startupreg: "C: => 
MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
HKLM\...\StartupApproved\StartupFolder: => "Scrybe.lnk"
HKLM\...\StartupApproved\Run: => "CanonMyPrinter"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "BrowserChoice"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Reader Application Helper"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "IDMan"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Nero MediaHome 4"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SandboxieControl"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "AnyDVD"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Amazon Cloud Player"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "DellSystemDetect"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [UDP Query User{DF082938-94F6-47D7-8944-92EE30ACBA5E}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe
FirewallRules: [TCP Query User{9AEFE5FF-34BA-4323-B353-0E5B75FEC22F}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe
FirewallRules: [{8F3E64EF-0E2B-4316-8E1B-F4EFAA1F95ED}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{16EC4BD1-ECC9-410D-BE22-D6157E21151C}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [UDP Query User{AF4C3C75-E7AA-4848-B62B-7B4E6F72E80D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{BD5F3226-231D-47F8-AD8B-E2C7084BAE5D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{6C97E9F9-0FF6-4A0E-8F23-6BF57E6443FE}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{F71890F2-2919-40C3-9B58-A07A12032A60}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe
FirewallRules: [{672399EC-8C2A-49C0-AAEA-4514CB17CFE8}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe
FirewallRules: [{2487166A-C3D3-4F08-ABA6-C40A238041A3}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe
FirewallRules: [{88711F82-1A87-41EE-894E-F029647E8C2E}] => C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{079B6616-12F1-42B0-8E3E-8AE9E1B20D57}] => C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{3F5EC342-383C-41BB-B930-81473B993008}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C8B259E6-A396-4F3B-B90B-EB77D296FB1E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F9B30D0D-9CEB-415B-A06F-00250C2EE94B}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1A89FDA3-7922-4BCF-90A9-D54022FF612D}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FF0815FF-32AB-4992-B9D3-32C511DE8361}] => C:\Program Files\Andy\andy.exe
FirewallRules: [{625FE1AB-FC14-44E8-BEFD-A77EE0F2E25B}] => C:\Program Files\Andy\andy.exe
FirewallRules: [{714C8173-6057-424A-BA3C-58170EE21B1D}] => C:\Users\Norman\Downloads\DCS-5222L_REVB_SETUPWIZARD_1.04.10_WIN\wizard\autorun.exe
FirewallRules: [{FF9AD526-0C85-4EAE-AFE1-245EEDFBF129}] => C:\Users\Norman\Downloads\dlink\wizard\autorun.exe
FirewallRules: [UDP Query User{4841AF52-F27F-45C4-A420-522FC883F89C}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe
FirewallRules: [TCP Query User{A4E6880C-6074-45B3-84B2-16A98A2B5FC2}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe
FirewallRules: [UDP Query User{BE4021CE-4781-4EF4-A5EC-1A4AC9456762}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe
FirewallRules: [TCP Query User{B7E1B6E7-D51D-4F43-A603-2D026566B640}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe
FirewallRules: [{AD697AB1-1F75-4C42-BA0B-CFFC7E9272B9}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe
FirewallRules: [{1398A097-CCAD-43B2-947F-C8909095796B}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe
FirewallRules: [UDP Query User{F40E9912-4765-460F-BF5B-CFA167C4EB6A}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe
FirewallRules: [TCP Query User{42A1759D-B976-4DAC-88AA-191EF1837A48}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe
FirewallRules: [UDP Query User{DF8247B3-6D53-48B8-A220-7EB20C63FA82}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe
FirewallRules: [TCP Query User{0DE45B44-2632-4D4F-961B-C49D9D41EC2E}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe
FirewallRules: [UDP Query User{2608149C-6A8F-4DE1-96B1-1C3EB0AF0BE1}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{4C849D8A-2F79-461C-8969-936DA8E94B50}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{E38E860E-9E63-43F9-8E58-E8F16F540C55}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BCBC1985-1AD8-48DE-A39E-1BC56B26ABF1}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0A3B5422-5970-4320-AC7D-029CF7018AA8}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{65E8BFFF-D4F0-4C38-9BEB-CC718C1D23A4}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [UDP Query User{43F34969-359C-43DF-8298-279FC511286B}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe
FirewallRules: [TCP Query User{BFE8205E-BD23-433A-830A-9ACFD6F9D1EA}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe
FirewallRules: [{D58390AF-C6F3-479A-94CF-CBB13E74CF65}] => C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{4DAFCAE7-B2DE-4F1D-B3A3-4559A83C27BC}] => C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{7163A2CA-DC51-4C73-83DD-9884AEE20CBE}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{321CD3A1-A232-4126-A715-538AB644DC13}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{3149A794-517A-4F57-9CF2-723164FDDAB2}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe
FirewallRules: [TCP Query User{FF94542E-68A5-4DAE-8011-0259C4D61344}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe
FirewallRules: [UDP Query User{E5746F8B-D5C0-4354-B434-F34C8A6C2F9C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe
FirewallRules: [TCP Query User{1D3940C3-1304-49F7-AE14-74D4DE38ED2C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe
FirewallRules: [{7B47768D-0201-4978-813C-55CE7CCD2DE5}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{4EB9D924-2B5C-4515-8DCB-73093E3969FB}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{430199CD-23D4-4060-A869-234507B433C9}] => c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe
FirewallRules: [{2A5E8176-D9F5-406B-83AA-17B3FB8B0A78}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{467F2E48-9B8A-441E-B34F-8354E20470B7}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{8C8135CF-40B2-488E-B1CC-BB13C0155914}] => C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{6CDD6428-3209-4BC2-8441-00DFE1ED5F18}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{6D96BFEA-C893-4A9D-A409-BC6148B5FA11}] => LPort=2869
FirewallRules: [{F38F5CFF-F70D-4E99-BA64-06BC83E4228B}] => LPort=1900
FirewallRules: [{62B4C63A-7436-45C5-8F81-D436A3FC4DFF}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{85F03B60-5720-41F5-A23D-79C856C4A2F3}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
FirewallRules: [{B504C53B-4CE5-4F3E-BBC4-B03E3C573E67}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
FirewallRules: [{0F1E28A3-8336-4271-9449-38A6442CC981}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{57747E09-46BC-4DED-82ED-012BAA3E51BA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9C905D26-63DC-4FE2-A8E2-D34B36830001}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CBFE21B9-D98C-470E-B0E6-6C553A237F05}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{919D4C7B-FCDE-4EA2-A840-08A223618767}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5CBAE31B-A73A-4BD4-8689-DC805E449A3F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{69976F95-3638-43EB-BF63-CEFFDDE14669}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{E099848A-6CB2-4C3D-9AA0-6D2B0BA3EE11}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{29940111-2D72-455D-ABE5-B85F083DCC9D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{633FE991-A1C7-4938-B071-CB2B9919CFBD}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe
FirewallRules: [{EEA2650F-77E9-4C7B-90E1-0EE2B5967E4E}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe
FirewallRules: [{5ED2F3A2-25F3-4811-A0DB-1BAA639F652B}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

04-12-2016 01:32:16 JRT Pre-Junkware Removal
05-12-2016 21:46:47 chip 1-click download service wurde entfernt.
09-12-2016 18:07:41 Windows Update
10-12-2016 21:41:27 JRT Pre-Junkware Removal

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/10/2016 09:54:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.479, Zeitstempel: 0x58256d37
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000da832
ID des fehlerhaften Prozesses: 0x2048
Startzeit der fehlerhaften Anwendung: 0x01d25327821235ee
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: bc1c0abc-9d5a-41ed-b5d2-b87804bac5cf
VollstÃ¤ndiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/10/2016 09:50:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamUserAgent.exe, Version: 7.1.2084.9592, Zeitstempel: 0x57605c64
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000030bdd
ID des fehlerhaften Prozesses: 0x124c
Startzeit der fehlerhaften Anwendung: 0x01d25326f464e9c6
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: ad0fe28a-7c42-4794-a24e-6877ba7ee041
VollstÃ¤ndiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/10/2016 09:41:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/09/2016 06:08:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/09/2016 05:02:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000da6f2
ID des fehlerhaften Prozesses: 0x2770
Startzeit der fehlerhaften Anwendung: 0x01d252359e897627
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: b2ba5cd3-9208-4020-9532-164ddb3e44ad
VollstÃ¤ndiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/09/2016 04:06:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000da6f2
ID des fehlerhaften Prozesses: 0x2b1c
Startzeit der fehlerhaften Anwendung: 0x01d2522dc3da8c0e
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: 98390a81-bff4-4c8e-bb01-6304f212cc17
VollstÃ¤ndiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/08/2016 09:11:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)
Description: Bei der Aktivierung der App â€žMicrosoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideoâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.

Error: (12/08/2016 06:18:08 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (12/08/2016 06:17:48 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur fÃ¼r den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten fÃ¼r diesen Dienst sind nicht verfÃ¼gbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/08/2016 06:14:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MicrosoftEdge.exe, Version 11.0.14393.447 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: c638

Startzeit: 01d251721014c28c

Beendigungszeit: 4294967295

Anwendungspfad: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

Berichts-ID: c713be12-bd69-11e6-8027-88532e0c320c

VollstÃ¤ndiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe

Auf das fehlerhafte Paket bezogene Anwendungs-ID: MicrosoftEdge


Systemfehler:
=============
Error: (12/10/2016 10:00:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)
Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)
Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)
Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)
Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)
Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.

Error: (12/10/2016 09:41:42 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)
Description: Der Server "{DABF28BE-F6B4-4E40-8F40-C4FB26F3116C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/10/2016 09:27:17 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)
Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.

Error: (12/10/2016 09:21:31 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/10/2016 09:20:58 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" KorrekturmaÃŸnahmen (Neustart des Diensts) durchzufÃ¼hren, ist fehlgeschlagen. Fehler: 
Es wird bereits eine Instanz des Dienstes ausgefÃ¼hrt.

Error: (12/10/2016 09:20:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Office Software Protection Platform" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-12-10 21:21:23.213
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:23.211
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:23.209
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:22.816
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:22.812
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:22.803
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:20.632
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:20.631
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:20.628
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-10 21:21:09.046
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-2720QM CPU @ 2.20GHz
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 8086.16 MB
Verfügbarer physikalischer RAM: 5828.42 MB
Summe virtueller Speicher: 9366.16 MB
Verfügbarer virtueller Speicher: 7118.2 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:402.19 GB) (Free:285.36 GB) NTFS
Drive d: (Data) (Fixed) (Total:1862.89 GB) (Free:1495.17 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=402.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=48.8 GB) - (Type=05)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus · 11.12.2016, 14:26

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" => Keine Datei
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" Keine Datei
FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]
FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden
FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden
CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]
S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]
C:\Program Files (x86)\Avira
C:\Program Files (x86)\AskPartnerNetwork
ProgramData\Package Cache
C:\ProgramData\Avira
C:\ProgramData\IObit
C:\Users\Norman\AppData\Roaming\Avira
C:\Users\Public\AlexaNSISPlugin.8636.dll
Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG
Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG
Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG
Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

querotudo · 11.12.2016, 14:55

Fixlog.txt

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Norman (11-12-2016 14:44:20) Run:1
Gestartet von C:\Users\Norman\Downloads
Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" => Keine Datei
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" Keine Datei
FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]
FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden
FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden
CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]
S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]
C:\Program Files (x86)\Avira
C:\Program Files (x86)\AskPartnerNetwork
ProgramData\Package Cache
C:\ProgramData\Avira
C:\ProgramData\IObit
C:\Users\Norman\AppData\Roaming\Avira
C:\Users\Public\AlexaNSISPlugin.8636.dll
Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG
Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG
Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG
Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
emptytemp:
         
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Avira SystrayStartTrigger => Wert erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}" => Schlüssel erfolgreich entfernt
"HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Wert erfolgreich entfernt
HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Schlüssel nicht gefunden. 
C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml => erfolgreich verschoben
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\@greatdealz => Wert erfolgreich entfernt
HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com => Wert erfolgreich entfernt
C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => erfolgreich verschoben
Avira.ServiceHost => Dienst erfolgreich entfernt
"C:\Program Files (x86)\Avira" => nicht gefunden.
"C:\Program Files (x86)\AskPartnerNetwork" => nicht gefunden.
ProgramData\Package Cache => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
C:\ProgramData\Avira => erfolgreich verschoben
C:\ProgramData\IObit => erfolgreich verschoben
C:\Users\Norman\AppData\Roaming\Avira => erfolgreich verschoben
C:\Users\Public\AlexaNSISPlugin.8636.dll => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3517BCB2-F82F-43FF-92CD-65B00301C15E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3517BCB2-F82F-43FF-92CD-65B00301C15E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDoctorBackgroundMonitorTask" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D88E051-66CE-4CFC-9371-5E60E0A371C5}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D88E051-66CE-4CFC-9371-5E60E0A371C5}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4324C4A4-5416-4DA7-9F0B-FDF41833D324}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4324C4A4-5416-4DA7-9F0B-FDF41833D324}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SystemToolsDailyTest" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{97CDDA5E-013E-4420-A8E9-75A1ECA04D5C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97CDDA5E-013E-4420-A8E9-75A1ECA04D5C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{996AC3FA-FE8C-4877-8FDA-8528B5969542}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{996AC3FA-FE8C-4877-8FDA-8528B5969542}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BD585239-8EB9-4933-A8E8-B0FA3A35010E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD585239-8EB9-4933-A8E8-B0FA3A35010E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDEventLauncherTask" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F6AEB890-1D27-4C31-8B90-99C7563D5E1B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6AEB890-1D27-4C31-8B90-99C7563D5E1B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => Schlüssel erfolgreich entfernt

=========== EmptyTemp: ==========

BITS transfer queue => 1933348 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 21765761 B
Java, Flash, Steam htmlcache => 2551 B
Windows/system/drivers => 15578444 B
Edge => 13840814 B
Chrome => 215985892 B
Firefox => 394912736 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 1025036 B
NetworkService => -638 B
Norman => 250675134 B
Admin => 161932 B

RecycleBin => 111891 B
EmptyTemp: => 873.6 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 14:48:12 ====

cosinus · 11.12.2016, 15:44

Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:

1. Schritt: MBAM

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

3. Schritt: SecurityCheck

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

querotudo · 11.12.2016, 19:28

Hi Cosinus,

hier kommt Teil1, der mbam.txt:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 11.12.2016
Suchlaufzeit: 16:09
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.12.11.05
Rootkit-Datenbank: v2016.11.20.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Norman

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 377739
Abgelaufene Zeit: 18 Min., 31 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Hi Cosinus,

Eset hat eine Menge gefunden. Hier das Log:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f8bba1ff8c07cc48b8110cab2b6a48e5
# end=init
# utc_time=2016-12-11 03:39:17
# local_time=2016-12-11 04:39:17 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=37126
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Finalize
Updated modules version: 31699
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 31699
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f8bba1ff8c07cc48b8110cab2b6a48e5
# end=updated
# utc_time=2016-12-11 04:03:21
# local_time=2016-12-11 05:03:21 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f8bba1ff8c07cc48b8110cab2b6a48e5
# engine=31699
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-12-11 06:09:49
# local_time=2016-12-11 07:09:49 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 15182 12810405 0 0
# scanned=307481
# found=17
# cleaned=0
# scan_time=7587
sh=52CD9F9936429922D533777F7B51D667B0E8FEC6 ft=1 fh=f44718903cb82894 vn="Variante von MSIL/Rebrand.LittleRegClean.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\Registry Dr-\Helper.dll"
sh=28F886EA3CD593DBF426C8548DAB28A567E8D887 ft=1 fh=b1ec1d0abfe685c7 vn="Variante von MSIL/Rebrand.LittleRegClean.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\Registry Dr-\RegistryDr.exe"
sh=08296125FC58E7F1D16A4504A0CEA82F064C096C ft=1 fh=274dcf932a1d4ccf vn="Variante von MSIL/Rebrand.LittleRegClean.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\Registry Dr-\Uninst000.CA.dll"
sh=44E9D78B1E26D31B37206A735CB06B836A072339 ft=1 fh=cac44e7cf3433e75 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe"
sh=1FA2801776006BFD78666CFBC35E3C6D3F685967 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NVU Trojaner" ac=I fn="C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3c109712-11aa0e4e"
sh=B17B081B37281BD27F7DC7228DB366A9BE607B0B ft=1 fh=b43ba431bab46a9e vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe"
sh=D591C934DD6553612002FC49CC29CE31B044854B ft=1 fh=9527e1bd7de09c2a vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe"
sh=233300DB6B4BBA613657907668D6D16A24E52EB9 ft=1 fh=d794993a2b90ad03 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe"
sh=7099DC6FF90CBAA5CA8CF76A862DEF490F9D5361 ft=1 fh=b982c04c4d051cca vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=2AB20B5FB718DC8D006F0F8A11C250FA44EED984 ft=1 fh=17b2900a6c3a46de vn="Win32/InstallMonetizer.AQ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe"
sh=2F873E114B2B262BEF867A12F4906B9DD1ADC583 ft=1 fh=a397bd1f1271229b vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe"
sh=443BBC0D682A7C4CDD5446F1C9B566DB2619E8BC ft=1 fh=88cc9143ef8da7a4 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe"
sh=D36DBCE8D95465F7DD6DBBD9A87DF23044E9189D ft=1 fh=d672c4b7f2540ede vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe"
sh=2F7C632EF16EE5D75DE29894B9810CC0D5CB5C58 ft=1 fh=dd21750e073812c5 vn="Variante von Win32/SoftonicDownloader.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe"
sh=5B72F67E8B77AA560630F4FBC42F8DA1863C9818 ft=1 fh=3818e331b3a31bed vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe"
sh=A70EFAB5F2D2D83AD2B7E0304169C73F6D0EC700 ft=1 fh=011924ad9c4ebdbf vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
sh=E51C1F496CCC0388B868BFA70AD8235F07CBB48E ft=0 fh=0000000000000000 vn="Variante von Generik.FLVLYZN Trojaner" ac=I fn="D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip"

cosinus · 11.12.2016, 19:33

Zitat:

C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe
C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe
C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe
C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

Keine Downloads mehr von CHIP.de!!!

Die verarschen ihre Kunden aus reiner Profitgier. Siehe auch http://www.trojaner-board.de/168364-...mpfehlung.html und CHIP-Installer - was ist das? - Anleitungen

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Program Files (x86)\Registry Dr-
C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe
C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache
C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe
C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe
C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe
C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe
C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe
C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe
C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe
C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe
C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw
D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

querotudo · 11.12.2016, 19:50

Security Check Log:

Code:

ATTFilter

 Results of screen317's Security Check version 1.009  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Java version 32-bit out of Date! 
 Adobe Flash Player 	23.0.0.207  
 Mozilla Firefox (48.0.2) 
 Google Chrome (54.0.2840.71) 
 Google Chrome (54.0.2840.99) 
 Google Chrome (SetupMetrics...) 
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSMpEng.exe 
 Windows Defender MSASCuiL.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

und hier noch das FRST Fixlog:

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Norman (11-12-2016 19:43:10) Run:2
Gestartet von C:\Users\Norman\Downloads
Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Program Files (x86)\Registry Dr-
C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe
C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache
C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe
C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe
C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe
C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe
C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe
C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe
C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe
C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe
C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw
D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip
emptytemp:
         
*****************

C:\Program Files (x86)\Registry Dr- => erfolgreich verschoben
C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe => erfolgreich verschoben
C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache => erfolgreich verschoben
C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe => erfolgreich verschoben
C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe => erfolgreich verschoben
C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw => erfolgreich verschoben
D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip => erfolgreich verschoben

=========== EmptyTemp: ==========

BITS transfer queue => 583648 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 254129 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 13642 B
Edge => 0 B
Chrome => 0 B
Firefox => 12480542 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1708 B
Norman => 1031396 B
Admin => 0 B

RecycleBin => 0 B
EmptyTemp: => 13.7 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 19:43:27 ====

10.12.2016, 13:56	#18
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Notebook reagiert verzögert, Ativirus findet nichts Bitte richtig lesen, tdsskiller erzeugt immer ein Logfile __________________ __________________

10.12.2016, 21:48	#22
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Notebook reagiert verzögert, Ativirus findet nichts Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken __________________ Logfiles bitte immer in CODE-Tags posten

Notebook reagiert verzögert, Ativirus findet nichts

Plagegeister aller Art und deren Bekämpfung: Notebook reagiert verzögert, Ativirus findet nichts