| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Malwarebytes findet unerwünschte Programme - 2 Dateien -Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.12.2016, 18:34
| #1 |
 |  Malwarebytes findet unerwünschte Programme - 2 Dateien - Hallo, ich habe gestern Ashampoo Burning Studio 2017 installiert. Danach habe ich vom AdwCleaner einen Suchlauf durchführen lassen, wobei nichts gefunden wurde. Am späteren Nachmittag habe ich dann von Malwarebytes einen benutzerdefinierten Scan durchführen lassen, wobei 2 Dateien (PUP.OPTIONAL.ASHAMPOO...) gefunden wurden. Ich habe die gefundenen Bedrohungen in die Quarantäne verschieben lassen. Heute morgen habe ich die 2 gefundenen Dateien von virustotal überprüfen lassen, wobei nichts gefunden wurde. Heute nachmittag habe ich dann nochmal mit Malwarebytes einen benutzerdefinierten Scan gemacht, wobei wieder die 2 o.g. Dateien gefunden wurden. Zur Sicherheit habe die gefundenen Bedrohungen wieder in die Quarantäne verschieben lassen. In dieser ganzen Zeit habe ich den AdwCleaner mehrmals suchen lassen. Funde wurden nie angezeigt(Logs könnte ich nachreichen). Zweimal habe ich auch das Junkware Removal Tool benutzt, auch hier ohne Funde. Logs habe ich leider gelöscht. Meine Frage: Ist das vielleicht ein Fehlalarm von Malwarebytes? Wie sollte ich weiter vorgehen? Anbei frische Logs von Malwarebytes und FRST. Schonmal im voraus vielen Dank für Eure Mühe. Gruß Clocks [ Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 28.12.16
Scan-Zeit: 14:54
Protokolldatei: mbam.txt
Administrator: Ja
-Softwaredaten-
Version: 3.0.5.1299
Komponentenversion: 1.0.43
Version des Aktualisierungspakets: 1.0.876
Lizenz: Abgelaufen
-Systemdaten-
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-1QKGMBB\haufdemb
-Scan-Übersicht-
Scan-Typ: Benutzerdefinierter Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 419884
Abgelaufene Zeit: 58 Min., 12 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 2
PUP.Optional.AshampooRegistryCleaner, C:\PROGRAMDATA\ASHAMPOO\ICO_ASHAMPOO_MARKETPLACE.ICO, In Quarantäne, [2704], [355157],1.0.876
PUP.Optional.AshampooDriverUpdater, C:\PROGRAMDATA\ASHAMPOO\ICO_ASHAMPOO_DEALS.ICO, In Quarantäne, [2633], [354924],1.0.876
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
durchgeführt von haufdemb (Administrator) auf DESKTOP-1QKGMBB (28-12-2016 17:06:52)
Gestartet von C:\Users\haufdemb\Desktop
Geladene Profile: haufdemb (Verfügbare Profile: haufdemb)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Deutsche Telekom AG) C:\Program Files\Deutsche Telekom AG\Online Manager\NMInfraIS2\OnlineManager_Service.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avpui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dirk Jansen) C:\Program Files (x86)\MailCheck\MailCheck.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
() C:\Program Files (x86)\Portrait Displays\Pivot Software\Floater.exe
(Deutsche Telekom AG) C:\Program Files\Deutsche Telekom AG\Online Manager\Online Manager.exe
(Portrait Displays, Inc) C:\Program Files (x86)\Hewlett-Packard\HP My Display\dthtml.exe
(Portrait Displays Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\HookManager.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosHotKeyService.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\passwordmanagercom.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosBrowserMonitor.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\Notifier.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 17\fredirstarter.exe
() C:\Program Files (x86)\AOMEI Backupper\ABNotify.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe
() C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8801024 2016-04-14] (Realtek Semiconductor)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES/MALWAREBYTES/ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2015-06-22] (CyberLink Corp.)
HKLM-x32\...\Run: [HeimdalAgentLoader] => "C:\Program Files (x86)\Heimdal\Heimdal.AgentLoader.exe" /nogui
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [202280 2015-09-29] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe [694824 2009-03-03] ()
HKLM-x32\...\Run: [DT HPC] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [123688 2013-01-10] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosHotKeyService.exe [104960 2016-07-28] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS17 Chrome Autofill Relay] => C:\Program Files (x86)\Steganos Privacy Suite 17\passwordmanagercom.exe [1330736 2016-07-28] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS17 Browser Monitor] => C:\Program Files (x86)\Steganos Privacy Suite 17\SteganosBrowserMonitor.exe [1001528 2016-07-28] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS17 Notifier] => C:\Program Files (x86)\Steganos Privacy Suite 17\Notifier.exe [3977736 2016-07-28] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS17 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 17\fredirstarter.exe [18432 2016-07-28] (Steganos Software GmbH)
HKLM-x32\...\Run: [ABNotify] => C:\Program Files (x86)\AOMEI Backupper\ABNotify.exe [89968 2016-12-26] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Finanzmanager 2016 Zahlungserinnerung.lnk [2016-05-05]
ShortcutTarget: Finanzmanager 2016 Zahlungserinnerung.lnk -> C:\Windows\Installer\{7429B83A-5AB6-4AEE-A53B-79B9742B9158}\BillMinder.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-01-03]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MailCheck 2.lnk [2016-11-11]
ShortcutTarget: MailCheck 2.lnk -> C:\Program Files (x86)\MailCheck\MailCheck.exe (Dirk Jansen)
Startup: C:\Users\haufdemb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Auto-Master Termin.lnk [2016-02-06]
ShortcutTarget: Auto-Master Termin.lnk -> C:\Program Files (x86)\Auto_Master\AUTOTERM.exe ()
Startup: C:\Users\haufdemb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2016-11-05]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\haufdemb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Online Manager.lnk [2016-10-05]
ShortcutTarget: Online Manager.lnk -> C:\Program Files\Deutsche Telekom AG\Online Manager\Online Manager.exe (Deutsche Telekom AG)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{20c61b50-9b8e-48b0-9b3c-0c5bfd0318ed}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{dcfc8bd8-4c34-4098-bfc0-e10f7363975d}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{dcfc8bd8-4c34-4098-bfc0-e10f7363975d}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-2901048201-2396791686-2562006212-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-2901048201-2396791686-2562006212-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
SearchScopes: HKLM -> {0DEB2757-A545-49FF-95C0-6CA29A1B4DBD} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO: Password Depot 8 -> {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} -> C:\Program Files (x86)\AceBIT\Password Depot 8\pdIEAddOn64.dll [2014-08-19] (AceBIT)
BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: Password Depot 8 -> {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} -> C:\Program Files (x86)\AceBIT\Password Depot 8\pdIEAddOn32.dll [2014-08-19] (AceBIT)
BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 17\SPMIEToolbar64.dll [2016-07-28] (Steganos Software GmbH)
Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 17\SPMIEToolbar.dll [2016-07-28] (Steganos Software GmbH)
FireFox:
========
FF ProfilePath: C:\Users\haufdemb\AppData\Roaming\Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547 [2016-12-28]
FF Homepage: Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547 -> www.google.de
FF Extension: (Personas Plus) - C:\Users\haufdemb\AppData\Roaming\Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547\Extensions\personas@christopher.beard.xpi [2016-12-07]
FF Extension: (Clearly) - C:\Users\haufdemb\AppData\Roaming\Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547\Extensions\readable@evernote.com.xpi [2016-01-10]
FF Extension: (Steganos Password Manager) - C:\Users\haufdemb\AppData\Roaming\Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547\Extensions\{00D0643E-B367-4779-B45D-7046EBA37A89}.xpi [2016-07-28]
FF Extension: (Adblock Plus) - C:\Users\haufdemb\AppData\Roaming\Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]
FF Extension: (BetterPrivacy) - C:\Users\haufdemb\AppData\Roaming\Mozilla\Firefox\Profiles\i386yk9k.default-1452441663547\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-10-31]
FF Extension: (Dangerous Websites Blocker) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com [2016-05-23]
FF Extension: (Safe Money) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com [2016-05-23]
FF Extension: (Virtual Keyboard) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2016-05-23]
FF ProfilePath: C:\Users\haufdemb\AppData\Roaming\Marmiko IT-Solutions GmbH\Browser 7\Profiles\5ygs2f0e.default [2016-01-26]
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 17\spmplugin3 => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE8@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_074028@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking_08806E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_663BE8 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\content_blocker@kaspersky.com [2016-05-23] ()
FF Plugin-x32: @kaspersky.com/online_banking_08806E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\online_banking@kaspersky.com [2016-05-23] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_074028 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2016-05-23] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [mcgmdbhgeplifgopfnmafmhfmoekiekn] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avp.exe [194000 2015-09-29] (Kaspersky Lab ZAO)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122728 2016-12-26] (AOMEI Tech Co., Ltd.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [140072 2013-01-10] (Portrait Displays, Inc.)
S3 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
R2 IRMTService; c:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe [181520 2015-07-14] (Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-09-04] (Intel Corporation)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [66088 2016-03-03] (Haufe-Lexware GmbH & Co. KG)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-08-04] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
R2 Online Manager Service; C:\Program Files\Deutsche Telekom AG\Online Manager\NMInfraIS2\OnlineManager_Service.exe [3076096 2016-09-21] (Deutsche Telekom AG) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-15] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312576 2016-04-14] (Realtek Semiconductor)
R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-08-04] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-22] ()
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-22] ()
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2016-12-22] ()
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-09-29] (Kaspersky Lab UK Ltd)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [249616 2016-10-19] (Intel Corporation)
R3 IntelReadyModeDriver; C:\Windows\System32\drivers\IntelReadyModeDriver.sys [33512 2015-07-14] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2016-03-03] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [64368 2016-05-26] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [159960 2015-09-29] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-23] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [834992 2016-05-23] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-09-21] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [49008 2016-03-03] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [48504 2016-03-03] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-09-29] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [77680 2016-03-14] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [89272 2016-03-03] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [190648 2016-01-30] (Kaspersky Lab ZAO)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [250816 2016-12-28] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [91584 2016-12-28] (Malwarebytes)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 Netwtw02; C:\Windows\System32\drivers\Netwtw02.sys [6731520 2016-01-19] (Intel Corporation)
R3 Netwtw04; C:\Windows\System32\drivers\Netwtw04.sys [7317264 2016-10-10] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6635f9e64d11744\nvlddmkm.sys [14200880 2016-12-12] (NVIDIA Corporation)
S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2016-03-31] ()
R1 RrNetCapFilterDriver; C:\Windows\system32\DRIVERS\RrNetCapFilterDriver.sys [24744 2014-11-07] (Audials AG)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [896752 2015-12-31] (Realtek )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
R1 SLEE_19_DRIVER; C:\Windows\Sleen1964.sys [117848 2016-07-28] (Softwareentwicklung Remus - ArchiCrypt - )
S3 TelekomNM6; C:\Program Files\Deutsche Telekom AG\Online Manager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102576 2015-08-26] ()
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25904 2015-08-26] ()
R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [701232 2015-08-26] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-28 17:06 - 2016-12-28 17:07 - 00025802 _____ C:\Users\haufdemb\Desktop\FRST.txt
2016-12-28 17:06 - 2016-12-28 17:06 - 00000000 ____D C:\FRST
2016-12-28 17:05 - 2016-12-28 17:06 - 02420736 _____ (Farbar) C:\Users\haufdemb\Desktop\FRST64.exe
2016-12-28 16:03 - 2016-12-28 16:03 - 00001408 _____ C:\Users\haufdemb\Desktop\mbam.txt
2016-12-28 16:00 - 2016-12-28 16:00 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2016-12-28 16:00 - 2016-12-28 16:00 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2016-12-28 16:00 - 2016-12-28 16:00 - 00091584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2016-12-28 16:00 - 2016-12-28 16:00 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-28 14:53 - 2016-12-28 16:00 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-28 14:53 - 2016-12-28 14:53 - 00001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-28 14:53 - 2016-12-28 14:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-28 14:53 - 2016-12-28 14:53 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-27 13:21 - 2016-12-28 16:00 - 00000000 ____D C:\Program Files (x86)\AOMEI Backupper
2016-12-27 13:21 - 2016-12-27 13:21 - 00001141 _____ C:\Users\Public\Desktop\AOMEI Backupper Standard.lnk
2016-12-27 13:21 - 2016-12-27 13:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2016-12-27 13:08 - 2016-12-27 13:08 - 00001407 _____ C:\Users\haufdemb\Desktop\Ashampoo Burning Studio 2017.lnk
2016-12-27 13:08 - 2016-12-27 13:08 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-12-27 13:08 - 2016-12-27 13:08 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2016-12-24 17:14 - 2016-12-24 17:14 - 00001217 _____ C:\Users\Public\Desktop\Privacy Suite Hauptmenü.lnk
2016-12-24 17:14 - 2016-12-24 17:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steganos Privacy Suite 17
2016-12-24 17:14 - 2016-12-24 17:14 - 00000000 ____D C:\Program Files (x86)\Steganos Privacy Suite 17
2016-12-24 16:18 - 2016-12-24 16:18 - 00000000 ____D C:\Users\haufdemb\Desktop\sumo
2016-12-21 22:02 - 2016-12-21 22:02 - 00002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bang & Olufsen.lnk
2016-12-21 21:59 - 2016-12-21 21:59 - 00010752 _____ C:\Windows\SetupAfterRebootService.exe
2016-12-20 12:30 - 2016-12-20 13:19 - 00003552 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2016-12-20 12:30 - 2016-12-20 12:30 - 00000000 ____D C:\Users\haufdemb\AppData\Local\Chromium
2016-12-20 12:01 - 2016-12-20 12:01 - 00000000 ____D C:\Program Files (x86)\Portrait Displays
2016-12-20 12:01 - 2007-04-04 09:30 - 00007432 _____ C:\Windows\SysWOW64\Machnm32.sys
2016-12-20 12:00 - 2009-07-12 00:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\mfcm80.dll
2016-12-20 12:00 - 2009-07-12 00:55 - 00632656 _____ (Microsoft Corporation) C:\Windows\msvcr80.dll
2016-12-20 12:00 - 2009-07-12 00:55 - 00554832 _____ (Microsoft Corporation) C:\Windows\msvcp80.dll
2016-12-20 12:00 - 2009-07-12 00:55 - 00479232 _____ (Microsoft Corporation) C:\Windows\msvcm80.dll
2016-12-20 12:00 - 2009-07-12 00:55 - 00057856 _____ (Microsoft Corporation) C:\Windows\mfcm80u.dll
2016-12-20 12:00 - 2009-07-11 19:46 - 01105920 _____ (Microsoft Corporation) C:\Windows\mfc80.dll
2016-12-20 12:00 - 2009-07-11 19:46 - 01093120 _____ (Microsoft Corporation) C:\Windows\mfc80u.dll
2016-12-20 12:00 - 2009-07-11 19:46 - 00002372 _____ C:\Windows\Microsoft.VC80.MFC.manifest
2016-12-20 12:00 - 2009-07-11 18:10 - 00097280 _____ (Microsoft Corporation) C:\Windows\atl80.dll
2016-12-20 12:00 - 2009-07-11 18:10 - 00001870 _____ C:\Windows\Microsoft.VC80.CRT.manifest
2016-12-20 12:00 - 2009-07-11 18:10 - 00000466 _____ C:\Windows\Microsoft.VC80.ATL.manifest
2016-12-20 12:00 - 2002-01-05 04:48 - 00974848 _____ (Microsoft Corporation) C:\Windows\mfc70.dll
2016-12-20 12:00 - 2001-06-01 08:26 - 00372736 _____ (Intel Corporation) C:\Windows\ijl15.dll
2016-12-20 10:49 - 2016-12-20 12:30 - 00004008 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-20 10:49 - 2016-12-20 12:30 - 00003980 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-20 10:49 - 2016-12-20 12:30 - 00003972 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-20 10:49 - 2016-12-20 12:30 - 00003810 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-20 10:49 - 2016-12-20 12:30 - 00003768 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-20 10:48 - 2016-12-20 10:48 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-20 10:48 - 2016-12-11 19:23 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-12-20 10:48 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-12-20 10:48 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-12-20 10:48 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-12-20 10:48 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-12-20 10:46 - 2016-12-12 04:03 - 40125496 _____ C:\Windows\system32\nvcompiler.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 35222976 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 34710584 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 28201408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 10912744 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 10803880 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 10353960 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 09158616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 08913328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 08761560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 02950200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 02587704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437633.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437633.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 01038392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00974784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00942528 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00894400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00801560 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00643928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00642392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00617696 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00394888 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00386104 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00347072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00327408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-12-20 10:46 - 2016-12-12 04:03 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-12-20 10:46 - 2016-12-12 04:03 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-12-20 10:45 - 2016-12-20 10:45 - 00000000 ____D C:\NVIDIA
2016-12-20 09:21 - 2016-12-20 09:22 - 00000000 ____D C:\Users\haufdemb\Downloads\HP Downloads
2016-12-20 08:38 - 2016-12-20 08:38 - 00003298 _____ C:\Windows\System32\Tasks\{81E81A63-D362-4BBA-8FDD-9329CE7FC522}
2016-12-20 08:36 - 2016-12-20 08:36 - 00000000 ____D C:\Users\haufdemb\AppData\Local\Portrait_Displays
2016-12-20 08:36 - 2016-12-20 08:36 - 00000000 ____D C:\Users\haufdemb\AppData\Local\IsolatedStorage
2016-12-20 08:36 - 2016-12-20 08:36 - 00000000 ____D C:\ProgramData\IsolatedStorage
2016-12-20 08:35 - 2016-12-20 08:59 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-12-20 08:09 - 2016-12-20 08:09 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\Portrait Displays
2016-12-19 23:17 - 2016-12-19 23:21 - 00002584 _____ C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK
2016-12-19 23:17 - 2016-12-19 23:17 - 00001246 _____ C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.6.lnk
2016-12-19 23:17 - 2016-12-19 23:17 - 00000000 ____D C:\Windows\System32\Tasks\Intel
2016-12-19 23:17 - 2016-12-19 23:17 - 00000000 ____D C:\Users\haufdemb\AppData\Local\Intel
2016-12-19 23:17 - 2016-12-19 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2016-12-19 23:17 - 2016-12-19 23:17 - 00000000 ____D C:\Program Files\Intel Driver Update Utility
2016-12-19 23:17 - 2016-12-19 23:17 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility
2016-12-19 23:17 - 2016-10-18 17:14 - 00021984 _____ C:\Windows\system32\Drivers\semav6msr64.sys
2016-12-19 23:00 - 2016-12-19 23:00 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-12-19 23:00 - 2016-12-19 23:00 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-12-19 22:51 - 2016-12-21 22:02 - 00000000 ____D C:\Windows\LastGood
2016-12-19 22:50 - 2016-11-17 20:40 - 00222664 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-12-19 22:50 - 2016-11-17 20:40 - 00210368 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-12-19 22:44 - 2016-12-19 22:50 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-12-19 20:35 - 2016-12-19 20:38 - 00000000 ____D C:\Windows\System32\Tasks\Abelssoft
2016-12-19 20:23 - 2016-12-19 20:23 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\KC Softwares
2016-12-15 22:30 - 2016-12-15 22:30 - 03977168 _____ C:\Users\haufdemb\Desktop\adwcleaner_6.041.exe
2016-12-15 21:07 - 2016-12-15 21:07 - 00003296 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2016-12-14 18:37 - 2016-12-14 18:37 - 00001287 _____ C:\Users\haufdemb\Desktop\Password Depot 8.lnk
2016-12-13 19:37 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-13 19:37 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-13 19:37 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-13 19:37 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-13 19:37 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-13 19:37 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-13 19:37 - 2016-12-09 11:32 - 07816032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-13 19:37 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-13 19:37 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-13 19:37 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-13 19:37 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-13 19:37 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-13 19:37 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2016-12-13 19:37 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-13 19:37 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-13 19:37 - 2016-12-09 11:15 - 01988560 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-13 19:37 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-13 19:37 - 2016-12-09 11:14 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-13 19:37 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-13 19:37 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-13 19:37 - 2016-12-09 11:09 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2016-12-13 19:37 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-12-13 19:37 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-12-13 19:37 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-12-13 19:37 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-12-13 19:37 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-12-13 19:37 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-12-13 19:37 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-13 19:37 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-12-13 19:37 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-12-13 19:37 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-12-13 19:37 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2016-12-13 19:37 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-12-13 19:37 - 2016-12-09 10:47 - 22563328 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-13 19:37 - 2016-12-09 10:45 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-13 19:37 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-13 19:37 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
2016-12-13 19:37 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-12-13 19:37 - 2016-12-09 10:38 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-13 19:37 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-12-13 19:37 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-12-13 19:37 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-13 19:37 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-13 19:37 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 23677952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-12-13 19:37 - 2016-12-09 10:29 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-13 19:37 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-12-13 19:37 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-13 19:37 - 2016-12-09 10:26 - 08129536 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-13 19:37 - 2016-12-09 10:26 - 01692672 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-13 19:37 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-13 19:37 - 2016-12-09 10:24 - 02275840 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-13 19:37 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-13 19:37 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-13 19:37 - 2016-12-09 10:21 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-13 19:37 - 2016-12-09 10:21 - 01512960 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-13 19:37 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-13 19:37 - 2016-12-09 10:19 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-12-13 19:37 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2016-12-13 19:37 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2016-12-13 19:37 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-12-13 19:37 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-12-13 19:37 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
2016-12-13 19:37 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-12-13 19:37 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-12-13 19:37 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-13 19:37 - 2016-09-15 17:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-13 15:53 - 2016-12-13 15:55 - 00681536 _____ (O&O Software GmbH) C:\Users\haufdemb\Desktop\OOSU10.exe
2016-12-09 18:07 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-09 18:07 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-09 18:07 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-09 18:07 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-09 18:07 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-09 18:07 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-09 18:07 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-09 18:07 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-09 18:07 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-09 18:07 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-09 18:07 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-09 18:07 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-09 18:07 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-09 18:07 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-09 18:07 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-09 18:07 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-09 18:07 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-09 18:07 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-09 18:07 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-09 18:07 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-09 18:07 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-09 18:07 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-09 18:07 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-09 18:07 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-09 18:07 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-09 18:07 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-09 18:07 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-09 18:07 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-09 18:07 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-12-09 18:07 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-12-09 18:07 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-09 18:07 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2016-12-09 18:07 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-09 18:07 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-09 18:07 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-09 18:07 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-09 18:07 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-09 18:07 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-09 18:07 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-09 18:07 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-09 18:07 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-09 18:07 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-09 18:07 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-09 18:07 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-09 18:07 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-09 18:07 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-09 18:07 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-09 18:07 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-09 18:07 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-09 18:07 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-09 18:07 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-09 18:07 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-09 18:07 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-09 18:07 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-09 18:07 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-09 18:07 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-09 18:07 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-09 18:07 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-09 18:07 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-09 18:07 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-09 18:07 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-09 18:07 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-09 18:07 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-09 18:07 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-09 18:07 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-09 18:07 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-09 18:07 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-09 18:07 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-09 18:07 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-09 18:07 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-09 18:07 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-09 18:07 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-12-09 18:07 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-12-09 18:07 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-09 18:07 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-12-09 18:07 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-09 18:07 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-09 18:07 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-09 18:07 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-09 18:07 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-09 18:07 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-09 18:07 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-09 18:07 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-09 18:07 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-09 18:07 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-09 18:07 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-09 18:07 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-09 18:07 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-09 18:07 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-09 18:07 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-09 18:07 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-09 18:07 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-09 18:07 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-09 18:07 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-09 18:07 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-09 18:07 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-09 18:07 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-09 18:07 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-09 18:07 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-09 18:07 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-09 18:07 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-09 18:07 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-09 18:07 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-12-09 18:07 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-09 18:07 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-09 18:07 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-09 18:07 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-09 18:07 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-09 18:07 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-09 18:07 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-09 18:07 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-09 18:07 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-09 18:07 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-09 18:07 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-09 18:07 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-12-09 18:07 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-09 18:07 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-09 18:07 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-12-09 18:07 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-12-09 18:07 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2016-12-09 18:07 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-12-09 18:07 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-12-09 18:07 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2016-12-09 18:07 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-12-09 18:07 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2016-12-09 18:07 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-12-09 18:07 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-12-09 18:07 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-12-09 18:07 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-12-09 18:07 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
2016-12-09 18:07 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll
2016-12-09 18:07 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-12-09 18:07 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2016-12-09 18:07 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-12-09 18:07 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-12-09 18:07 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-12-09 18:07 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-12-09 18:07 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-12-09 18:07 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2016-12-09 18:07 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-12-09 18:07 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2016-12-09 18:07 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-09 18:07 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2016-12-09 18:07 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2016-12-09 18:07 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-12-09 18:07 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2016-12-09 18:07 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-12-09 18:07 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-12-09 18:07 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 18:07 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-12-09 18:07 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-12-09 18:07 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-12-09 18:07 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-12-09 18:07 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2016-12-09 18:07 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-12-09 18:07 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2016-12-09 18:07 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2016-12-09 18:07 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2016-12-09 18:07 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-12-09 18:07 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2016-12-09 18:07 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2016-12-09 18:07 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-12-09 18:07 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2016-12-09 18:07 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-12-09 18:07 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-12-09 18:07 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-12-09 18:07 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-12-09 18:07 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-12-09 18:07 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-12-09 18:07 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2016-12-09 18:07 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-12-09 18:07 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2016-12-09 18:07 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-12-09 18:07 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2016-12-09 18:07 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-12-09 18:07 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2016-12-09 18:07 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2016-12-09 18:07 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2016-12-09 18:07 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2016-12-09 18:07 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2016-12-09 18:07 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-12-09 18:07 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-12-09 18:07 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
2016-12-09 18:07 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-12-09 18:07 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2016-12-09 18:07 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2016-12-09 18:07 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-12-09 18:07 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-12-09 18:07 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-12-09 18:07 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-12-09 18:07 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-12-09 18:07 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-12-09 18:07 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-12-09 18:06 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-09 18:06 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-09 18:06 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-09 18:06 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-09 18:06 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-09 18:06 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-09 18:06 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-09 18:06 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-09 18:06 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-09 18:06 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-09 18:06 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-09 18:06 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-09 18:06 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-12-09 18:06 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe
2016-12-09 18:06 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-12-09 18:06 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-12-09 18:06 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2016-12-09 18:06 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2016-12-09 18:06 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2016-12-09 18:06 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 17:17 - 2016-12-09 17:17 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\3EFB63E0.sys
2016-12-09 17:09 - 2016-12-14 12:55 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2016-12-08 13:49 - 2016-12-08 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MailStore Home
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-28 16:58 - 2016-11-15 12:00 - 00000000 ____D C:\Users\haufdemb\AppData\LocalLow\Mozilla
2016-12-28 16:58 - 2016-11-13 22:01 - 00000000 ____D C:\AdwCleaner
2016-12-28 16:55 - 2016-01-29 21:38 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-12-28 16:05 - 2016-09-21 09:18 - 03661156 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-28 16:05 - 2016-07-16 23:51 - 01641274 _____ C:\Windows\system32\perfh007.dat
2016-12-28 16:05 - 2016-07-16 23:51 - 00429088 _____ C:\Windows\system32\perfc007.dat
2016-12-28 16:00 - 2016-09-21 09:24 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-28 16:00 - 2016-09-21 09:17 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-28 16:00 - 2016-01-28 16:47 - 00000082 _____ C:\Windows\SysWOW64\winsevr.dat
2016-12-28 15:59 - 2016-07-16 07:04 - 00524288 _____ C:\Windows\system32\config\BBI
2016-12-28 15:59 - 2016-01-09 22:10 - 00000000 ____D C:\ProgramData\Ashampoo
2016-12-28 15:23 - 2016-09-21 09:16 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-12-28 14:53 - 2015-12-31 15:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-28 14:51 - 2016-09-21 09:18 - 00000000 ____D C:\Users\haufdemb
2016-12-28 14:32 - 2016-02-22 08:44 - 00000376 _____ C:\Windows\Tasks\HPCeeScheduleForhaufdemb.job
2016-12-28 13:05 - 2016-01-28 16:47 - 00001024 ____H C:\SYSTAG.BIN
2016-12-28 09:22 - 2016-09-21 09:24 - 00003280 _____ C:\Windows\System32\Tasks\HPCeeScheduleForhaufdemb
2016-12-27 20:09 - 2016-05-18 10:35 - 00000000 ____D C:\Users\haufdemb\AppData\Local\CrashDumps
2016-12-27 13:26 - 2016-01-09 13:54 - 00000000 ____D C:\Users\haufdemb\Documents\Password Depot
2016-12-27 13:08 - 2016-01-09 22:11 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\Ashampoo
2016-12-27 13:08 - 2016-01-09 22:11 - 00000000 ____D C:\Users\haufdemb\AppData\Local\ashampoo
2016-12-27 10:59 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports
2016-12-25 12:14 - 2016-02-06 20:56 - 00000000 ____D C:\Program Files (x86)\Auto_Master
2016-12-25 11:48 - 2016-01-09 19:39 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\Steganos
2016-12-25 08:58 - 2016-01-09 17:16 - 00000000 ____D C:\ProgramData\Lexware
2016-12-24 17:11 - 2016-01-09 19:39 - 00000000 ____D C:\Program Files (x86)\Steganos Privacy Suite 16
2016-12-24 16:06 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness
2016-12-23 10:45 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-22 16:24 - 2016-01-28 16:47 - 00171952 _____ C:\Windows\system32\ammntdrv.sys
2016-12-22 16:24 - 2016-01-28 16:47 - 00051120 _____ C:\Windows\system32\ambakdrv.sys
2016-12-22 16:24 - 2016-01-28 16:47 - 00038320 _____ C:\Windows\system32\amwrtdrv.sys
2016-12-21 22:02 - 2016-09-21 09:17 - 00007873 _____ C:\Windows\system32\Drivers\rtkhdasetting.zip
2016-12-21 22:02 - 2016-09-21 09:17 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-12-21 22:02 - 2016-09-21 09:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2016-12-21 22:02 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF
2016-12-21 22:02 - 2015-10-21 23:22 - 00000000 ____D C:\ProgramData\SoundResearch
2016-12-21 21:59 - 2015-10-21 23:29 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-12-20 15:01 - 2016-09-21 09:17 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-20 15:01 - 2016-09-21 09:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-20 15:01 - 2016-09-21 09:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-20 15:01 - 2015-12-30 18:57 - 00000000 ____D C:\Users\haufdemb\AppData\Local\NVIDIA Corporation
2016-12-20 12:03 - 2016-01-09 22:33 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\DisplayTune
2016-12-20 12:01 - 2016-01-03 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-12-20 12:01 - 2015-10-21 23:26 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-20 09:26 - 2015-10-21 23:31 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2016-12-20 09:22 - 2015-07-16 17:03 - 00000000 ____D C:\SWSETUP
2016-12-20 09:08 - 2016-09-21 09:58 - 00000000 ____D C:\Users\haufdemb\AppData\Local\HP
2016-12-20 08:09 - 2016-01-09 22:33 - 00000000 ____D C:\Users\haufdemb\AppData\Local\DisplayTune
2016-12-19 23:17 - 2015-10-21 23:27 - 00000000 ____D C:\ProgramData\Intel
2016-12-19 23:17 - 2015-10-21 23:27 - 00000000 ____D C:\Program Files\Intel
2016-12-19 23:17 - 2015-07-16 15:01 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-19 23:00 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated
2016-12-19 23:00 - 2015-10-21 23:27 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-19 20:35 - 2016-01-09 19:56 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\Abelssoft
2016-12-19 20:35 - 2016-01-09 19:56 - 00000000 ____D C:\Users\haufdemb\AppData\Local\Abelssoft
2016-12-19 20:08 - 2016-10-21 08:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-19 20:08 - 2016-09-21 09:24 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\Nui
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\F12
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\dsc
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\inetsrv
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\setup
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\migwiz
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\lv-LV
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\lt-LT
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\et-EE
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\es-MX
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\en-GB
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\DDFs
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\appraiser
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\rescache
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-19 20:08 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-19 20:08 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-12-19 20:08 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-19 20:08 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism
2016-12-19 20:08 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing
2016-12-19 20:08 - 2016-01-28 16:47 - 00000000 ____D C:\ProgramData\AomeiBR
2016-12-19 20:08 - 2016-01-09 13:53 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AceBIT
2016-12-19 20:08 - 2015-12-31 08:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-19 20:08 - 2015-10-21 23:29 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2016-12-19 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\registration
2016-12-16 22:25 - 2016-09-21 09:24 - 00003628 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-16 22:25 - 2016-09-21 09:24 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-16 20:21 - 2016-02-06 20:59 - 00005152 _____ C:\Windows\ouwininit.exe
2016-12-15 21:07 - 2015-12-30 18:58 - 00002403 _____ C:\Users\haufdemb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-15 21:07 - 2015-12-30 18:58 - 00000000 ___RD C:\Users\haufdemb\OneDrive
2016-12-13 19:48 - 2016-11-11 17:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-13 19:48 - 2016-09-21 09:16 - 00250136 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-13 19:42 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp
2016-12-13 19:39 - 2015-12-30 22:35 - 00000000 ____D C:\Windows\system32\MRT
2016-12-13 19:38 - 2015-12-30 22:35 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-13 15:49 - 2016-11-11 17:34 - 00003870 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-12-13 15:49 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-12-13 15:49 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-13 15:49 - 2015-12-31 16:43 - 00000000 ____D C:\Users\haufdemb\AppData\Local\Adobe
2016-12-12 22:26 - 2016-11-17 20:33 - 14200880 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-12-12 22:01 - 2016-01-29 22:23 - 00001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-12 22:01 - 2016-01-29 22:23 - 00001000 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-12 04:03 - 2016-11-17 20:29 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-12-12 04:03 - 2016-11-17 20:28 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-12-12 04:03 - 2016-08-26 23:29 - 03934504 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-12-12 04:03 - 2016-08-26 23:29 - 03474392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-12-12 04:03 - 2016-08-02 23:08 - 00042286 _____ C:\Windows\system32\nvinfo.pb
2016-12-12 00:56 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-11 21:42 - 2015-12-30 18:57 - 00000000 ____D C:\Users\haufdemb\AppData\Local\Packages
2016-12-11 19:47 - 2016-09-21 09:17 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-12-11 19:47 - 2016-09-21 09:17 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-12-11 19:47 - 2016-09-21 09:17 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-12-11 19:47 - 2016-09-21 09:17 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-12-11 19:47 - 2016-09-21 09:17 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-12-11 19:47 - 2016-09-21 09:17 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-12-11 19:47 - 2016-09-21 09:17 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-12-10 21:35 - 2015-07-16 15:00 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-10 21:34 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr
2016-12-09 17:48 - 2016-01-09 19:34 - 00000000 ____D C:\Users\haufdemb\Documents\MailStore Home
2016-12-09 17:48 - 2015-12-31 19:38 - 00000000 ____D C:\ProgramData\firebird
2016-12-09 17:46 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-12-09 09:52 - 2016-09-21 09:17 - 07639617 _____ C:\Windows\system32\nvcoproc.bin
2016-12-08 19:52 - 2016-11-20 20:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-12-08 13:49 - 2016-08-02 10:16 - 00001303 _____ C:\Users\Public\Desktop\MailStore Home.lnk
2016-12-06 15:34 - 2016-06-06 22:01 - 00000000 ____D C:\Users\haufdemb\AppData\Roaming\vlc
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-01-03 11:49 - 2016-09-21 10:02 - 0001338 _____ () C:\ProgramData\hpzinstall.log
2016-12-20 12:30 - 2016-12-20 15:01 - 0005307 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-20 12:30 - 2016-12-20 13:19 - 0003552 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
Einige Dateien in TEMP:
====================
C:\Users\haufdemb\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\haufdemb\AppData\Local\Temp\nvStInst.exe
C:\Users\haufdemb\AppData\Local\Temp\NvTelemetry.dll
C:\Users\haufdemb\AppData\Local\Temp\NvTelemetryAPI32.dll
C:\Users\haufdemb\AppData\Local\Temp\NvTelemetryAPI64.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-12-27 18:55
==================== Ende von FRST.txt ============================
|
|
28.12.2016, 18:35
| #2 |
| | Malwarebytes findet unerwünschte Programme - 2 Dateien -Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21-12-2016
durchgeführt von haufdemb (28-12-2016 17:07:21)
Gestartet von C:\Users\haufdemb\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-21 08:25:10)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2901048201-2396791686-2562006212-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2901048201-2396791686-2562006212-503 - Limited - Disabled)
Gast (S-1-5-21-2901048201-2396791686-2562006212-501 - Limited - Disabled)
haufdemb (S-1-5-21-2901048201-2396791686-2562006212-1001 - Administrator - Enabled) => C:\Users\haufdemb
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Total Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Kaspersky Total Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Total Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
. . . (Version: 2.1.28.3 - Intel) Hidden
. . . (x32 Version: 2.6.2.4 - Intel) Hidden
5.000 Office Vorlagen 2.0 Professional (HKLM-x32\...\{ACF92C33-2867-4C7B-AF07-1A8170CA70AE}_is1) (Version: - )
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)
Ansel (Version: 376.33 - NVIDIA Corporation) Hidden
AntiBrowserSpy (HKLM-x32\...\{F78B5B4F-075A-4C81-AA27-E707861EB5B7}_is1) (Version: 172 - Abelssoft)
AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version: - AOMEI Technology Co., Ltd.)
Ashampoo Burning Studio 2017 (HKLM-x32\...\{91B33C97-C878-6579-69BA-23E5405C7AAB}_is1) (Version: 18.0.0 - Ashampoo GmbH & Co. KG)
Audials (HKLM-x32\...\{69626CD9-18D4-4DA7-BB50-D452A93B3D68}) (Version: 12.0.54100.0 - Audials AG)
Auto-Master 11.67 (HKLM-x32\...\Auto-Master) (Version: 11.67 - EWS <> Eberhard Werner Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6618 - CyberLink Corp.)
Cyberlink PhotoDirector (Version: 5.0.5.6618 - CyberLink Corp.) Hidden
CyberLink PhotoDirector 6 (HKLM-x32\...\{6B684CDB-7255-4e46-9AB1-1D2F2D5540B3}) (Version: 6.0.7619.0 - CyberLink Corp.)
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.1.5418 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4.4225 - CyberLink Corp.)
CyberLink PowerDirector 12 (Version: 12.0.4.4225 - CyberLink Corp.) Hidden
D1500 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DDBAC (HKLM-x32\...\{79B95C3D-7DD0-4D4B-A449-49FF0E5E141C}) (Version: 5.3.46.0 - DataDesign)
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_SF_03_D1500_Software_Min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
Dropbox 25 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 1.0.8.2 - Dropbox, Inc.)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote v. 6.4.2 (HKLM-x32\...\{E74F0DCA-9FC8-11E6-9D98-005056950253}) (Version: 6.4.2.3788 - Evernote Corp.)
Finanzmanager 2016 (x32 Version: 23.39.00.0197 - Haufe-Lexware GmbH & Co.KG) Hidden
Finanzmanager Import Export Server 2016 (x32 Version: 23.37.00.0125 - Haufe-Lexware GmbH & Co.KG) Hidden
Google Earth (HKLM-x32\...\{A0C18B96-AB79-46BD-8321-6FA83E6D25B9}) (Version: 7.1.7.2606 - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GoogleClean (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1) (Version: 132 - Abelssoft)
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet D1500 Printer Driver Software 14.0 Rel. 6 (HKLM\...\{8750F936-3F72-4222-A6DE-86EB8924004C}) (Version: 14.0 - HP)
HP Documentation (HKLM\...\HP_Documentation) (Version: - HP)
HP ESU for Microsoft Windows 10 (HKLM-x32\...\{2CDA0D13-ED4D-4E66-B920-9AE696F9992E}) (Version: 1.1.1 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP My Display (HKLM-x32\...\{15733AD1-1CEF-459A-9245-0924FC63BDD5}) (Version: 2.01.006 - Portrait Displays, Inc.)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8305.5282 - Hewlett-Packard)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.3.50.9 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{76272057-98E0-4DC4-AAC3-10C546C47195}) (Version: 14.00.0000 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{A38E954F-9043-42BD-9DE9-246ED183791D}) (Version: 12.5.32.203 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - Hewlett-Packard Company)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Intel(R) Chipset Device Software (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1167 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.6.0.1029 - Intel Corporation)
Intel(R) Ready Mode Technology (HKLM\...\{9F82AA39-BB14-4BD3-98EF-D4E9E3526B7D}) (Version: 1.1.70.514 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{71095B37-F2D5-44A9-82D4-7E4E95DB3C43}) (Version: 17.1.1530.1676 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{66307462-7d19-4f1a-af82-aa04b6017f05}) (Version: 2.6.2.4 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{544ecb18-5d76-44bb-ac33-8d06719e39e7}) (Version: 19.20.0 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{02FECEE0-16B2-43DB-BC3B-C844477FC142}) (Version: 15.0.2.396 - Kaspersky Lab)
Kaspersky Total Security (x32 Version: 15.0.2.361 - Kaspersky Lab) Hidden
Lexware Finanzmanager 2016 (HKLM-x32\...\{c1e70aab-69d5-45c3-aed1-998a2720748d}) (Version: 23.37.0.128 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (HKLM-x32\...\{1C3F4B46-9004-4830-BD7D-1137A615FBF0}) (Version: 16.00.00.0040 - Haufe-Lexware GmbH & Co.KG)
Lexware Installations Dienst (HKLM-x32\...\{6FF55A3A-4E59-4CF8-9248-2EE747168B3E}) (Version: 5.01.00.0040 - Haufe-Lexware GmbH & Co.KG)
Lexware online banking (x32 Version: 22.02.00.0040 - Haufe-Lexware GmbH & Co.KG) Hidden
MailCheck 2 Version 2.95 (Build 444) (HKLM-x32\...\MailCheck_is1) (Version: 2.95 (Build 444) - Dirk Jansen)
MailStore Home 10.0.1.12148 (HKLM-x32\...\MailStore Home_universal1) (Version: 10.0.1.12148 - MailStore Software GmbH)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4693.1005 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2901048201-2396791686-2562006212-1001\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 50.1.0 (x64 de) (HKLM\...\Mozilla Firefox 50.1.0 (x64 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla)
Mozilla Thunderbird 45.5.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.5.1 (x86 de)) (Version: 45.5.1 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.33 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Online Manager (HKLM-x32\...\Online Manager) (Version: 2.02 - Deutsche Telekom AG)
Online Manager (Version: 2.02 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Password Depot 8 (HKLM-x32\...\{56EC7B3B-D127-48FC-8EC1-FE93FEA64828}_is1) (Version: 8.2.2 - AceBIT GmbH)
Pivot Software (x32 Version: 9.03.004 - Portrait Displays, Inc.) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.31214 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7796 - Realtek Semiconductor Corp.)
SanDisk SSD Dashboard (HKLM-x32\...\SanDisk SSD Dashboard) (Version: 1.4.4.4 - Western Digital Corporation or its affiliates)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
SDK (x32 Version: 2.33.005 - Portrait Displays, Inc.) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SoftMaker Office Standard 2012 (HKLM-x32\...\{8EBB8452-274B-465D-8324-00B0832FBB02}) (Version: 12.0.3513 - SoftMaker Software GmbH)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steganos Privacy Suite 17 (HKLM-x32\...\{7381E9AB-68A4-418F-8130-88666557C6F4}) (Version: 17.1.3 - Steganos Software GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0AD31A1D-0142-4638-B2DC-442664628DDB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-09] (Google Inc.)
Task: {0DEEAD9D-E3F1-42D3-A1CB-0B722E4DB4A1} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\haufdemb\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {1311E740-BB64-4C3D-92FE-D67B64C71E29} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13] (Adobe Systems Incorporated)
Task: {26CFD5C4-D110-45C4-946B-A622F3F9B893} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-12-13] (Microsoft Corporation)
Task: {2FCBEDEF-F936-42B3-A2D3-0FE3B48A152E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-13] (NVIDIA Corporation)
Task: {3683E41C-BA77-41FB-80B0-8ECE9F90ABBD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-09] (Google Inc.)
Task: {3EAF75B0-E8DB-42D2-A29F-4A4151B05B2D} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
Task: {4105D434-9E53-4060-BF1C-0B7DDA681DF5} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-13] (NVIDIA Corporation)
Task: {474E2364-C8D4-457A-AA85-F38F04047853} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {4DF75A9E-8C3C-49DD-A561-F83FF0110D69} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-13] (NVIDIA Corporation)
Task: {51CFFCD8-4FAE-4F87-B080-8D0A00D74F6E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {525228B4-7BAE-4B78-B4CE-6CD6F2A6024C} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK
Task: {6BD7F568-B118-467B-A2DD-1DC6F4BDA33A} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {73C73D52-4E78-494D-A373-9BBF98CA53CC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2016-12-15] (HP Inc.)
Task: {78F23E83-1A96-4C92-AD11-4E45F6345036} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.)
Task: {7BE7FB6F-F3CB-459E-A55D-DD5393C9F4AD} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-13] (NVIDIA Corporation)
Task: {7D271E8F-7D97-4ABB-9FEA-7DAC8D37A5B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.)
Task: {855C9CC7-4C97-41BA-8420-733CE625F68A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {856D809B-BA49-4C94-A247-1A031C37471E} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2015-06-19] ()
Task: {944545A2-C8F0-4FF6-BA7B-2FFD63EDFC75} - System32\Tasks\{81E81A63-D362-4BBA-8FDD-9329CE7FC522} => pcalua.exe -a C:\Users\haufdemb\Desktop\sp69034.exe -d C:\Users\haufdemb\Desktop
Task: {B0E8DD9E-6F20-47CD-81A6-39A175398C87} - System32\Tasks\{0355242E-5D36-4872-9236-A66C7EFB9706} => pcalua.exe -a "C:\Program Files (x86)\OkayFreedom\setuptool.exe" -d "C:\Program Files (x86)\OkayFreedom"
Task: {B56ED2E8-54BE-490F-8A5F-D012C1C89A59} - System32\Tasks\HPCeeScheduleForhaufdemb => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {B78A8168-D453-4C80-841A-0D1CDD54B0F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-12-12] (HP Inc.)
Task: {E08862E4-FF73-4FD1-AD31-031B5F189426} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {E4E2947E-3139-4270-8425-5EEEADBC0A7C} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {E9DBBEB4-4968-4829-93FF-159CC3EAB1C9} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-13] (NVIDIA Corporation)
Task: {F757B966-C841-44E9-8C75-9D812E9A0365} - System32\Tasks\{1EDCB29B-0FC6-466F-BDDF-870BD71A51CB} => pcalua.exe -a C:\Users\haufdemb\Desktop\Antibot-3.7.exe -d C:\Users\haufdemb\Desktop
Task: {FDE1A52C-3E3D-4F36-BD01-89EBF2C7AD52} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-12-12] (HP Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleForhaufdemb.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-12-20 12:01 - 2013-01-10 15:26 - 00091944 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\msgHook64.dll
2016-09-21 09:17 - 2016-12-11 19:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-10-19 08:31 - 2010-10-19 08:31 - 00205312 _____ () C:\Program Files\Deutsche Telekom AG\Online Manager\NMInfraIS2\driver64\SoftplugLib.DLL
2015-10-21 23:37 - 2014-04-15 02:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2016-11-17 22:05 - 2016-11-17 22:05 - 00156928 _____ () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
2016-12-28 14:53 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-28 14:53 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-12-28 14:53 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-12-15 21:06 - 2016-12-15 21:06 - 01678560 _____ () C:\Users\haufdemb\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2016-12-20 12:00 - 2013-01-10 15:26 - 00275752 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dthook.dll
2016-07-28 10:53 - 2016-07-28 10:53 - 00226656 _____ () C:\Program Files (x86)\Steganos Privacy Suite 17\ShellExtension.dll
2016-09-21 10:13 - 2016-09-21 10:13 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-10 07:41 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-10 07:41 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-10 07:41 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-10 07:41 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-10 07:41 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-20 12:01 - 2009-03-03 11:42 - 00694824 _____ () C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe
2016-12-20 12:01 - 2009-03-03 11:42 - 00694824 _____ () C:\Program Files (x86)\Portrait Displays\Pivot Software\floater.exe
2016-12-27 13:21 - 2016-12-26 11:29 - 00089968 _____ () C:\Program Files (x86)\AOMEI Backupper\ABNotify.exe
2016-12-20 12:01 - 2013-01-10 15:26 - 00164648 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe
2016-12-20 12:01 - 2013-01-10 15:26 - 00198440 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper64.exe
2016-12-14 17:57 - 2016-12-14 17:58 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 17:57 - 2016-12-14 17:58 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 17:57 - 2016-12-14 17:58 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 17:57 - 2016-12-14 17:58 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00937832 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00253800 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00327528 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00135016 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00360304 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00089960 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00073584 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00298864 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00978800 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00294768 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00126824 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00167784 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00495472 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00724840 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00040816 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00081768 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00114536 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00114544 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00266088 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll
2016-12-27 13:21 - 2016-12-26 11:29 - 00188272 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll
2016-12-27 13:21 - 2015-05-20 22:32 - 02403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll
2016-12-20 12:01 - 2009-03-03 11:40 - 00245760 _____ () C:\Program Files (x86)\Portrait Displays\Pivot Software\winphook.dll
2016-12-20 12:01 - 2013-01-10 15:26 - 00086824 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\msgHook.dll
2016-12-15 21:06 - 2016-12-15 21:06 - 01244376 _____ () C:\Users\haufdemb\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
2016-10-31 17:45 - 2016-10-31 17:45 - 00321208 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2016-12-20 12:00 - 2013-01-10 15:26 - 00189224 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Shared\PresetsCOM.dll
2016-12-20 12:00 - 2013-01-10 15:25 - 00123688 _____ () C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\CC\gui.dll
2015-09-04 19:34 - 2015-09-04 19:34 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2901048201-2396791686-2562006212-1001\...\secunia.com -> hxxps://psi3.secunia.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-07-10 12:04 - 2015-07-10 12:02 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2901048201-2396791686-2562006212-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\haufdemb\Pictures\Saved Pictures\Ahorn.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "HeimdalAgentLoader"
HKLM\...\StartupApproved\Run32: => "LexwareInfoService"
HKU\S-1-5-21-2901048201-2396791686-2562006212-1001\...\StartupApproved\StartupFolder: => "Auto-Master Termin.lnk"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{D0E99D12-4655-4185-B842-7AD486F5C931}] => C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{27E6926A-6BBA-47C5-A544-AD6B7EAE7B8E}] => C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{E6DEB462-A582-4EFB-95F0-1A39522E17A8}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{00298258-2107-45A5-9EF6-93513125B527}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{330B637E-36C6-4A79-B30C-EC574A614D37}] => E:\fsetup.exe
FirewallRules: [{B3B78D3F-1207-4703-8E91-552D648AA4A9}] => E:\fsetup.exe
FirewallRules: [{B2487D2A-62AF-44D0-9BA4-CACD752EF3AC}] => LPort=31931
FirewallRules: [{C0E4D822-A0A2-4DB5-BC60-DAFB3ABFECA0}] => LPort=14714
FirewallRules: [{C4C41874-A9ED-4B84-8E97-06BD69B41DF7}] => LPort=12972
FirewallRules: [{97F2D2F8-EA0E-45C0-8131-D0DC4C29F55D}] => C:\Program Files (x86)\Audials\Audials 12\Audials.exe
FirewallRules: [{1DB7F242-DC7C-431D-B3A2-50BABB743075}] => %systemroot%\system32\alg.exe
FirewallRules: [{08C5B75A-C14A-462D-BE3A-233C9825D699}] => C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{0A4CD070-1749-488A-96E8-545512FB728C}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{8D1D7CD3-F1C9-4B99-AE39-494D84A24C6D}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{2F70B2A4-886C-4812-B4C4-612BA0BBC23D}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{E1C5CA2C-7C69-4309-8B2A-3FF8A1AD7617}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{EFD2853F-EC40-45C1-8D41-1965DF1FAA8E}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{C35E1D6A-9A43-435B-8F07-41E593389D19}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{D4CBFE8D-A613-4C43-BB3D-F515F1A4F454}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{994E6933-9135-4F42-9BFE-167AD389F930}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{29100DAC-3059-4DF4-B1AB-EB05D8BE33F4}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{A80E3D75-868F-45EC-91D5-9F9C3F2D764B}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{3244035C-7252-474F-AEA7-9A1101455392}] => C:\Users\haufdemb\AppData\Local\Temp\7zS5283\hppiw.exe
FirewallRules: [{8F1453CC-764C-42EF-BD59-FDED48B84CEC}] => C:\Users\haufdemb\AppData\Local\Temp\7zS5283\hppiw.exe
FirewallRules: [{196B9CA5-E42B-4A9A-B945-5ACB967D18E7}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BE360E22-4FCD-48E0-A79D-AF239E60D994}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3AD80FCD-77F5-4254-B9AC-395B6169F024}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9FFC5F5A-8497-4329-B901-D10705B50F78}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A71BCF5E-E27E-422F-9980-E777D499CBC7}] => c:\Program Files\CyberLink\PowerDirector12\PDR10.EXE
FirewallRules: [{75136B29-1791-4015-9D32-90E2BD9D52D0}] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe
FirewallRules: [{B35F7DED-0086-4134-AD85-DF3199ADD46C}] => C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe
FirewallRules: [{3D218F8F-60C7-48F7-8EF6-10542497E1C2}] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe
FirewallRules: [{743D8228-46AC-4452-8642-331EDBE38B14}] => C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe
FirewallRules: [{445897FF-027B-4DAE-B93B-91B6C23FA533}] => C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{AD0EDB15-2377-44F7-8F6D-6A34E3BCBA9F}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
==================== Wiederherstellungspunkte =========================
24-12-2016 17:14:06 Installed Steganos Privacy Suite 17
27-12-2016 20:08:34 JRT Pre-Junkware Removal
27-12-2016 20:09:57 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/28/2016 05:00:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-1QKGMBB)
Description: Bei der Aktivierung der App „Weather.TheWeatherChannelforHP_t3yemqpq4kp7p!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/28/2016 04:56:59 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.
Error: (12/28/2016 04:45:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-1QKGMBB)
Description: Bei der Aktivierung der App „Weather.TheWeatherChannelforHP_t3yemqpq4kp7p!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/28/2016 04:30:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-1QKGMBB)
Description: Bei der Aktivierung der App „Weather.TheWeatherChannelforHP_t3yemqpq4kp7p!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/28/2016 04:15:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-1QKGMBB)
Description: Bei der Aktivierung der App „Weather.TheWeatherChannelforHP_t3yemqpq4kp7p!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/28/2016 04:05:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\cyberlink\photodirector\kernel\ces\CES_AudioCacheAgent.exe.Manifest".
Die abhängige Assemblierung "PDR.X,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/28/2016 04:05:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\cyberlink\photodirector\kernel\ces\CES_CacheAgent.exe.Manifest".
Die abhängige Assemblierung "PDR.X,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/28/2016 04:04:59 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\cyberlink\photodirector6\kernel\ces\CES_CacheAgent.exe.Manifest".
Die abhängige Assemblierung "PDR.X,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/28/2016 04:04:59 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\cyberlink\photodirector6\kernel\ces\CES_AudioCacheAgent.exe.Manifest".
Die abhängige Assemblierung "PDR.X,type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/28/2016 04:04:58 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.
Systemfehler:
=============
Error: (12/28/2016 04:04:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/28/2016 04:04:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\haufdemb\AppData\Local\Temp\ehdrv.sys
Error: (12/28/2016 04:04:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/28/2016 04:04:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\haufdemb\AppData\Local\Temp\ehdrv.sys
Error: (12/28/2016 04:04:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/28/2016 04:04:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\haufdemb\AppData\Local\Temp\ehdrv.sys
Error: (12/28/2016 04:04:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/28/2016 04:04:19 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\haufdemb\AppData\Local\Temp\ehdrv.sys
Error: (12/28/2016 04:04:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (12/28/2016 04:04:18 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\haufdemb\AppData\Local\Temp\ehdrv.sys
CodeIntegrity:
===================================
Date: 2016-12-20 18:38:12.790
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-s..ty-aadcloudapplugin_31bf3856ad364e35_10.0.14393.206_none_5cb4c2e6a89a844b\aadcloudap.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:38:12.785
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-s..ty-aadcloudapplugin_31bf3856ad364e35_10.0.14393.206_none_5cb4c2e6a89a844b\aadcloudap.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:38:12.782
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-s..ty-aadcloudapplugin_31bf3856ad364e35_10.0.14393.206_none_5cb4c2e6a89a844b\aadcloudap.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:38:12.777
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-s..ty-aadcloudapplugin_31bf3856ad364e35_10.0.14393.206_none_5cb4c2e6a89a844b\aadcloudap.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:38:12.772
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-s..ty-aadcloudapplugin_31bf3856ad364e35_10.0.14393.206_none_5cb4c2e6a89a844b\aadcloudap.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:38:12.768
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-s..ty-aadcloudapplugin_31bf3856ad364e35_10.0.14393.206_none_5cb4c2e6a89a844b\aadcloudap.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:37:54.050
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-a..ncredentialprovider_31bf3856ad364e35_10.0.14393.479_none_a4b6f988c0e0ffd0\facecredentialprovider.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:37:54.044
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-a..ncredentialprovider_31bf3856ad364e35_10.0.14393.479_none_a4b6f988c0e0ffd0\facecredentialprovider.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:37:54.040
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-a..ncredentialprovider_31bf3856ad364e35_10.0.14393.479_none_a4b6f988c0e0ffd0\facecredentialprovider.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-20 18:37:54.035
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\System Volume Information\SystemRestore\FRStaging\Windows\WinSxS\amd64_microsoft-windows-a..ncredentialprovider_31bf3856ad364e35_10.0.14393.479_none_a4b6f988c0e0ffd0\facecredentialprovider.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-6400 CPU @ 2.70GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 8131.87 MB
Verfügbarer physikalischer RAM: 5287.03 MB
Summe virtueller Speicher: 9411.87 MB
Verfügbarer virtueller Speicher: 6518.8 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:117.94 GB) (Free:57.33 GB) NTFS
Drive d: (DATADRIVE1) (Fixed) (Total:931.39 GB) (Free:922.51 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 01F03A86)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 76CBE4C9)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
31.01.2017, 13:19
| #3 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Malwarebytes findet unerwünschte Programme - 2 Dateien - Dein Thema wurde übersehen weil du dir selbst geantwortet hast. Brauchst du noch Hilfe?
__________________
__________________ |
|
31.01.2017, 18:29
| #4 |
| | Malwarebytes findet unerwünschte Programme - 2 Dateien - Hallo Cosinus, danke für Deine Rückmeldung. Ich habe die von Malwarebytes angemeckerten Dateien einfach gelöscht. Es waren 2 Icondateien(Dateiendung .ico), die ich nicht benötige. Ashampoo Burning Studio 2017 funktioniert einwandfrei, das habe ich mehrmals getestet. Suchläufe, die ich nachdem Löschen der beiden Dateien, mit den Programmen Malwarebytes, AdwCleaner, Eset Online Scanner und Eset Smart Security 9 durchgeführt habe, haben jeweils keine Funde mehr angezeigt. Ich habe die Installationsdatei von Burning Studio vorher mit virustotal überprüft. Sie wurde als harmlos angezeigt. Ich wüsste also nicht, wie ich das Problem hätte verhindern können. Vielleicht sollte ich in Zukunft statt Ashampoo den CDBurnerXP installieren. Ansonsten habe ich im Moment keinerlei Schädlingsbefall zu verzeichnen. Mein Rechner funktioniert einwandfrei. Gruß Clocks Geändert von Clocks (31.01.2017 um 18:34 Uhr) Grund: verbessert |
|
| Themen zu Malwarebytes findet unerwünschte Programme - 2 Dateien - |
| angezeigt, dateien, fehlalarm, frage, gefundenen, gen, gestern, heute, kaspersky total security, malwarebytes, morgen, nichts, programme, quarantäne, removal, scan, sicherheit, spätere, suche, tool, unerwünschte, verschieben, virus, virustotal, vorgehen, windowsapps, überprüfen |
Linear-Darstellung
