Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Win10 - "There is a Recommended Update for this PC"

Win10 - "There is a Recommended Update for this PC"


Plagegeister aller Art und deren Bekämpfung: Win10 - "There is a Recommended Update for this PC"

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 03.01.2017, 00:16   #1
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Icon27

Win10 - "There is a Recommended Update for this PC"


Guten Abend,
ich habe das gleiche Problem wie ein Kollege (Link in nächster Zeile) und brauche Hilfe diesen Plagegeist zu beseitigen. Es handelt sich um einen neuen Asus ROG GL502VS Laptop
http://www.trojaner-board.de/183723-...r-this-pc.html

Dieses Popup kommt willkürlich, habe es innerhalb von 3 Wochen jetzt ein zweites Mal auf meinem Desktop gesehen:


Habe FRST und Addition an diesen Beitrag angehangen. Als Textdateien waren sie für den Upload leider zu groß?

Vielen Dank für eure Hilfe!

Alt 03.01.2017, 08:16   #2
Deathkid535
/// Malwareteam
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"




Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen.

Bitte beachte, dass es ein paar Regeln gibt:
  • Bitte lies meine Posts komplett durch bevor du sie abarbeitest
  • Wenn ein Problem auftauchen sollte, unterbreche deine Arbeit, poste die entstandenen Logs und schildere dieses so genau wie möglich.
  • Bitte kein Crossposting
  • Installiere oder Deinstalliere keine Software ohne Aufforderung
  • Bitte verwende nur die Tools welche hier im Thread erwähnt werden
  • Antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
  • Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen

Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM!

Posten in CODE-Tags

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.


Bitte die Logs nicht anhängen sondern einfach auf mehrere Posts aufteilen
__________________

__________________
Alt 03.01.2017, 16:15   #3
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Vielen Dank, ich versuche sie in Beiträge zu verteilen soweit möglich

FRST.txt PART1
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von ****** (Administrator) auf ****** (02-01-2017 23:50:25)
Gestartet von C:\Users\******\Downloads
Geladene Profile: ****** (Verfügbare Profile: ******)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\ViveSetup\PCClient\ViveportService.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(HTC Corporation) C:\Program Files\HTC Account\Htc.Identity.Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncagent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserverui.exe
(App Dynamic ehf) C:\Program Files\App Dynamic\AirServer\AirServer.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
() C:\Program Files\AutoHotkey\AutoHotkey.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AirServer64] => C:\Program Files\App Dynamic\AirServer\AirServer.exe [6125576 2016-11-22] (App Dynamic ehf)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25779624 2016-12-21] (Dropbox, Inc.)
HKLM-x32\...\Run: [HTC Store User Content Helper] => C:\Program Files (x86)\ViveSetup\PCClient\HTCVRMarketplaceUserContextHelper.exe [103760 2016-12-07] ()
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Spotify Web Helper] => C:\Users\******\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-21] (Spotify Ltd)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Spotify] => C:\Users\******\AppData\Roaming\Spotify\Spotify.exe [7153264 2016-12-21] (Spotify Ltd)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [f.lux] => C:\Users\******\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fn Keys.lnk [2016-10-16]
ShortcutTarget: Fn Keys.lnk -> C:\Autohotkey\Fn Keys.ahk ()
GroupPolicy: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll Keine Datei 
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll Keine Datei 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8c3306fe-05a4-4130-9bf9-c70f13325195}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{dd29b1b9-ea4f-4e88-9a7a-0e7c36a64416}: [NameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-ff2033b4
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-ff2033b4
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=xy_ea1e6286&param1=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%3D&param2=NGt9MaRaNqVd&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=xy_ea1e6286&param1=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%3D&param2=NGt9MaRaNqVd&p={searchTerms}
SearchScopes: HKLM -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ff2033b4&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=xy_ea1e6286&param1=ArFaIWJoNqArQGMVHFFoNqAqBbFaITIoQGR7xTVoN9I4y7IsQGR7B7JoN9JbDSk8vFE9GqQANFdcFCk8NVE4IGYYvFRdJCIVvFI3vCIVvFFdJaYUvFQ3vmIVvmk9GqYVNUI3wGYGwVM3vmIXwVU9GqUNNos3wCIYwVA9JmoUwVA3vCITvFI4ICILNFdcJ6k8wV5cGWUSNFRcEqULNopcGWUIvmFbF6IXNVU9J6IXvFM9JqYVvFQ9I6IVNVRdJmk3wVw4JmoVNVA4ICISwVU9JCIYNVQ9I6oUvFNdIGYXwVQ4ICIWvFJdISIVvmo3vGQIwV5cGGUTNFRbDqUDNF5bDGUNNEU3wGQGvFQ4ICk3NVJdJaYTNVVdImISNVJdJCIXvmo9I6oUNVQ3vCoWwVxdJCIXvFM9ISISNVA4Jmk3vFM4J6oUNVRdISoXNVRdICIVNoU9GqYYNVc3wCoUQGR7B6RoN9JcMWV6NGF6NWR9QGR7BHFaISopzU0aCaV7CaFbC78kBrFbMn0aC6AoxrFaIWVdOqZoNqAexbFaIUwkynIew6NoNpRcNXFbJpseyDF%3D&param2=NGt9MaRaNqVd&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=xy_ea1e6286&param1=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%3D&param2=NGt9MaRaNqVd&p={searchTerms}
SearchScopes: HKLM-x32 -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ff2033b4&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: pk0hyrin.default
FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\pk0hyrin.default [2017-01-02]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\pk0hyrin.default -> search.yahoo.com
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\pk0hyrin.default -> search.yahoo.com
FF Homepage: Mozilla\Firefox\Profiles\pk0hyrin.default -> hxxps://de.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=xy_ea1e6286&param1=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%3D%3D&param2=NqZdMGZ8LGJbNd%3D%3D
FF Keyword.URL: Mozilla\Firefox\Profiles\pk0hyrin.default -> user_pref("keyword.URL", true);
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\pk0hyrin.default\searchplugins\search.yahoo.com.xml [2016-12-29]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-01] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] ()
FF Plugin HKU\S-1-5-21-4081720298-658147086-3706344339-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-10-28] ()
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.tagesschau.de/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> google.com_
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default [2017-01-02]
CHR Extension: (Google Drive) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-15]
CHR Extension: (YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-15]
CHR Extension: (AdBlock) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-28]
CHR Extension: (Looper for YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg [2016-10-15]
CHR Extension: (Google Maps) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-10-15]
CHR Extension: (Save to Pocket) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-12-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-15]
CHR Extension: (LockPW) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcddogkbbapgikkkbjaipefkbmlbofio [2016-11-01]
CHR Extension: (Google Mail) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-15]
CHR Extension: (Chrome Media Router) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-20]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-15] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-15] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-12-21] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [229648 2016-10-01] (EasyAntiCheat Ltd)
R2 esifsvc; C:\WINDOWS\SysWoW64\esif_uf.exe [1392792 2015-11-09] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent)
R2 HTC Account Service; C:\Program Files\HTC Account\Htc.Identity.Service.exe [20712 2016-12-15] (HTC Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-04-04] ()
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-01] (NVIDIA Corporation)
S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [49704 2016-06-07] (ASUSTeK COMPUTER INC.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
R2 Viveport; C:\Program Files (x86)\ViveSetup\PCClient\ViveportService.exe [72016 2016-12-07] ()
R2 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [5663824 2016-06-06] (RealVNC Ltd)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-30] (Intel(R) Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3833248 2016-04-04] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [95224 2016-05-19] (ASUS Corporation)
S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [66184 2016-11-30] (Broadcom Corporation.)
S3 CY3014.X64; C:\WINDOWS\system32\DRIVERS\CY3014.X64.SYS [3546928 2016-09-02] ()
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [108608 2016-09-24] (Dokan Project)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [55784 2015-11-09] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [52200 2015-11-09] (Intel Corporation)
S3 ElgatoVAD; C:\WINDOWS\system32\DRIVERS\ElgatoVAD.sys [39208 2016-08-09] (Elgato Systems GmbH)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [260072 2015-11-09] (Intel Corporation)
S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] () [Datei ist nicht signiert]
S3 GeneStor; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [115704 2015-07-15] (GenesysLogic)
R1 gfdriver; C:\WINDOWS\System32\drivers\gfdriver.sys [51904 2015-01-14] (Titan ARC Corp.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [341256 2016-04-20] (Intel Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7139088 2016-05-08] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_e04d68fb0b0ccd77\nvlddmkm.sys [14181304 2016-12-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [898296 2016-01-13] (Realtek                                            )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-02 23:50 - 2017-01-02 23:50 - 00000000 ____D C:\Users\******\Downloads\FRST-OlderVersion
2017-01-02 15:31 - 2017-01-02 15:33 - 00000718 _____ C:\Users\******\Desktop\Neues Textdokument.txt
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sonokinetic Ltd
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Local\Deployment
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Local\Apps\2.0
2017-01-02 14:56 - 2017-01-02 14:56 - 00593368 _____ () C:\Users\******\Downloads\setup.exe
2017-01-01 22:12 - 2017-01-01 22:12 - 00000000 ____D C:\Users\******\AppData\LocalLow\Wolf & Wood Interactive Ltd
2017-01-01 20:58 - 2017-01-01 20:58 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mixed Realms
2017-01-01 20:42 - 2017-01-01 20:42 - 03977168 _____ C:\Users\******\Downloads\AdwCleaner_6.041.exe
2017-01-01 20:41 - 2017-01-01 20:44 - 54199488 _____ (Malwarebytes ) C:\Users\******\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-01 02:34 - 2017-01-01 02:34 - 02103788 _____ C:\Users\******\Downloads\all-rail-gun-maps.zip
2017-01-01 00:52 - 2017-01-01 00:52 - 00000196 _____ C:\Users\******\Desktop\Trojaner.url
2017-01-01 00:49 - 2017-01-02 23:50 - 00026035 _____ C:\Users\******\Downloads\FRST.txt
2017-01-01 00:49 - 2017-01-01 00:50 - 00063816 _____ C:\Users\******\Downloads\Addition.txt
2017-01-01 00:48 - 2017-01-02 23:50 - 00000000 ____D C:\FRST
2017-01-01 00:47 - 2017-01-02 23:50 - 02418176 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2016-12-31 01:26 - 2016-12-31 01:26 - 04482080 _____ C:\Users\******\Downloads\hidtovpad.elf
2016-12-31 01:19 - 2016-12-31 05:20 - 00000000 ____D C:\Users\******\AppData\Roaming\Cronus
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CronusPRO
2016-12-31 01:16 - 2016-12-31 01:17 - 00000000 ____D C:\Program Files (x86)\CronusPRO
2016-12-31 01:02 - 2016-12-31 01:02 - 00063257 _____ C:\Users\******\Downloads\C08ULePW8AEQeiY.jpg
2016-12-31 00:52 - 2016-12-31 01:16 - 13683048 _____ C:\Users\******\Downloads\Cronus_0112_Setup.exe
2016-12-29 17:54 - 2016-12-29 17:54 - 00369948 _____ C:\Users\******\Downloads\AuRa.zip
2016-12-29 17:35 - 2016-12-29 17:35 - 00402907 _____ C:\WINDOWS\Bid For Power Uninstaller.exe
2016-12-29 17:35 - 2016-12-29 17:35 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bid For Power
2016-12-29 16:53 - 2016-12-29 16:54 - 13877245 _____ C:\Users\******\Downloads\spearmint-0.4-windows.zip
2016-12-28 01:27 - 2016-12-28 01:27 - 00000000 ____D C:\Users\Default\AppData\Local\CEF
2016-12-28 01:27 - 2016-12-28 01:27 - 00000000 ____D C:\Users\Default User\AppData\Local\CEF
2016-12-23 04:37 - 2016-12-23 04:37 - 00000000 ____D C:\Users\******\AppData\Local\SummerCamp
2016-12-23 03:38 - 2016-12-23 03:38 - 00000000 ____D C:\Users\******\AppData\Local\RawData
2016-12-22 23:30 - 2016-12-22 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-12-20 05:50 - 2016-12-20 05:50 - 00602646 _____ C:\Users\******\Downloads\PS3PS4toWiiU_FirmwareUpdateGuide_201608.pdf
2016-12-20 04:08 - 2016-12-20 04:08 - 00000000 ____D C:\Users\******\AppData\Local\Apple
2016-12-20 04:08 - 2016-12-20 04:08 - 00000000 ____D C:\ProgramData\Apple
2016-12-20 04:04 - 2016-12-28 00:21 - 00000000 ____D C:\Program Files\Bonjour
2016-12-20 04:04 - 2016-12-28 00:21 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-12-20 04:03 - 2016-12-20 04:03 - 00000000 ____D C:\Users\******\AppData\Local\Downloaded Installations
2016-12-20 04:03 - 2016-12-20 04:03 - 00000000 ____D C:\Users\******\AppData\Local\AirMouse
2016-12-20 04:00 - 2016-12-20 04:03 - 11835888 _____ (RPA Tech, Inc ) C:\Users\******\Downloads\setup3.3.2.exe
2016-12-16 05:27 - 2016-12-16 05:27 - 00000000 ____D C:\Users\******\AppData\Local\CrashReportClient
2016-12-16 02:15 - 2016-12-16 02:15 - 00000000 ____D C:\Program Files\App Dynamic
2016-12-15 17:06 - 2017-01-02 18:18 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mozilla
2016-12-15 17:05 - 2016-12-15 17:12 - 00000000 ____D C:\Users\******\AppData\Local\Mozilla
2016-12-15 17:05 - 2016-12-15 17:06 - 00000000 ____D C:\Users\******\AppData\Roaming\Mozilla
2016-12-15 17:05 - 2016-12-15 17:05 - 00001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-15 17:05 - 2016-12-15 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-15 17:05 - 2016-12-15 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-15 17:02 - 2016-12-15 17:02 - 00243720 _____ C:\Users\******\Downloads\Firefox Setup Stub 50.1.0.exe
2016-12-13 05:54 - 2016-12-13 05:54 - 00000000 ____D C:\Users\******\AppData\Local\Chromium
2016-12-09 06:09 - 2016-12-09 06:09 - 00002183 _____ C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2016-12-09 06:09 - 2016-12-09 06:09 - 00000000 ____D C:\Users\******\AppData\Local\FluxSoftware
2016-12-08 00:50 - 2016-12-01 18:04 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2016-12-08 00:49 - 2016-12-08 00:49 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-08 00:49 - 2016-12-01 21:02 - 00215608 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-12-08 00:49 - 2016-12-01 21:02 - 00203320 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-12-08 00:49 - 2016-12-01 18:33 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2016-12-08 00:49 - 2016-12-01 18:32 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-12-08 00:49 - 2016-11-30 10:34 - 07607057 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-12-08 00:49 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2016-12-08 00:49 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2016-12-08 00:49 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2016-12-08 00:49 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2016-12-08 00:48 - 2016-12-03 11:38 - 00047032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2016-12-08 00:48 - 2016-12-02 21:41 - 01595456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2016-12-08 00:48 - 2016-12-02 21:41 - 00212936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2016-12-08 00:48 - 2016-12-02 21:41 - 00046024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 40125496 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 35222976 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 34711096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 28202040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 10912744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 10803880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 10354984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 09158432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 08913328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 08762072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 03934320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 03474064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 02954808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 02587704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 01951680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437619.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 01586744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437619.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 01037248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00975296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00943552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00897080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00802768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00801560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00683824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00644112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00642576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00617880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00573072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00439864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00394704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00388544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00384448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00348728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00327224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2016-12-08 00:48 - 2016-12-01 21:02 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb
2016-12-08 00:48 - 2016-12-01 21:02 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2016-12-08 00:48 - 2016-12-01 21:02 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
2016-12-08 00:48 - 2016-11-17 14:44 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-12-08 00:48 - 2016-11-17 14:44 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-12-08 00:48 - 2016-11-17 14:44 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-12-05 13:30 - 2016-12-05 13:30 - 00000000 ____D C:\Temp
2016-12-05 12:57 - 2016-12-08 00:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-05 12:57 - 2016-12-05 12:57 - 00004002 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 12:57 - 2016-12-05 12:57 - 00003974 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 12:57 - 2016-12-05 12:57 - 00003912 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 12:57 - 2016-12-05 12:57 - 00003750 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 12:57 - 2016-12-05 12:57 - 00003708 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-12-05 11:46 - 2017-01-02 22:16 - 00019879 ____H C:\Users\******\AppData\Local\IconCache.db
2016-12-05 11:33 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-12-05 11:33 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-12-05 11:33 - 2016-11-02 12:22 - 01570672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-12-05 11:33 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-12-05 11:33 - 2016-11-02 12:20 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-12-05 11:33 - 2016-11-02 12:13 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-12-05 11:33 - 2016-11-02 12:13 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-12-05 11:33 - 2016-11-02 12:13 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-12-05 11:33 - 2016-11-02 12:12 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-12-05 11:33 - 2016-11-02 12:12 - 00376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-12-05 11:33 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-12-05 11:33 - 2016-11-02 12:10 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-12-05 11:33 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-12-05 11:33 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-12-05 11:33 - 2016-11-02 12:08 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-12-05 11:33 - 2016-11-02 12:08 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2016-12-05 11:33 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-12-05 11:33 - 2016-11-02 12:05 - 06657176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-05 11:33 - 2016-11-02 12:05 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-12-05 11:33 - 2016-11-02 12:05 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-12-05 11:33 - 2016-11-02 12:05 - 00951904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-12-05 11:33 - 2016-11-02 12:05 - 00405856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-12-05 11:33 - 2016-11-02 12:04 - 04312248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-12-05 11:33 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2016-12-05 11:33 - 2016-11-02 12:03 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-12-05 11:33 - 2016-11-02 12:03 - 00714592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-12-05 11:33 - 2016-11-02 12:02 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-12-05 11:33 - 2016-11-02 12:02 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2016-12-05 11:33 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2016-12-05 11:33 - 2016-11-02 12:01 - 01415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-12-05 11:33 - 2016-11-02 12:01 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-12-05 11:33 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-12-05 11:33 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-12-05 11:33 - 2016-11-02 12:00 - 22223968 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-12-05 11:33 - 2016-11-02 12:00 - 08156080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-12-05 11:33 - 2016-11-02 12:00 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-12-05 11:33 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-12-05 11:33 - 2016-11-02 11:59 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-12-05 11:33 - 2016-11-02 11:50 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-12-05 11:33 - 2016-11-02 11:49 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-12-05 11:33 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-12-05 11:33 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2016-12-05 11:33 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-05 11:33 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-12-05 11:33 - 2016-11-02 11:44 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-12-05 11:33 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
2016-12-05 11:33 - 2016-11-02 11:43 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-12-05 11:33 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-12-05 11:33 - 2016-11-02 11:42 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2016-12-05 11:33 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2016-12-05 11:33 - 2016-11-02 11:42 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-12-05 11:33 - 2016-11-02 11:42 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-12-05 11:33 - 2016-11-02 11:42 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-12-05 11:33 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2016-12-05 11:33 - 2016-11-02 11:40 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-12-05 11:33 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-12-05 11:33 - 2016-11-02 11:39 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2016-12-05 11:33 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-12-05 11:33 - 2016-11-02 11:38 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-12-05 11:33 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2016-12-05 11:33 - 2016-11-02 11:37 - 19415040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-12-05 11:33 - 2016-11-02 11:36 - 19415552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-12-05 11:33 - 2016-11-02 11:36 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-12-05 11:33 - 2016-11-02 11:34 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-12-05 11:33 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-12-05 11:33 - 2016-11-02 11:33 - 03307520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-12-05 11:33 - 2016-11-02 11:32 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2016-12-05 11:33 - 2016-11-02 11:31 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-12-05 11:33 - 2016-11-02 11:31 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-12-05 11:33 - 2016-11-02 11:31 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2016-12-05 11:33 - 2016-11-02 11:31 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-12-05 11:33 - 2016-11-02 11:31 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2016-12-05 11:33 - 2016-11-02 11:31 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-12-05 11:33 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 12175360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-12-05 11:33 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
2016-12-05 11:33 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 23677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-12-05 11:33 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2016-12-05 11:33 - 2016-11-02 11:27 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2016-12-05 11:33 - 2016-11-02 11:27 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2016-12-05 11:33 - 2016-11-02 11:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-12-05 11:33 - 2016-11-02 11:25 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-12-05 11:33 - 2016-11-02 11:25 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-12-05 11:33 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-12-05 11:33 - 2016-11-02 11:25 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2016-12-05 11:33 - 2016-11-02 11:25 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-12-05 11:33 - 2016-11-02 11:24 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2016-12-05 11:33 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-12-05 11:33 - 2016-11-02 11:23 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-12-05 11:33 - 2016-11-02 11:23 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-12-05 11:33 - 2016-11-02 11:23 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll
2016-12-05 11:33 - 2016-11-02 11:22 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-12-05 11:33 - 2016-11-02 11:22 - 13081600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-12-05 11:33 - 2016-11-02 11:22 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-12-05 11:33 - 2016-11-02 11:22 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2016-12-05 11:33 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-12-05 11:33 - 2016-11-02 11:21 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-12-05 11:33 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-12-05 11:33 - 2016-11-02 11:20 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 08127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
2016-12-05 11:33 - 2016-11-02 11:19 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-12-05 11:33 - 2016-11-02 11:18 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-12-05 11:33 - 2016-11-02 11:18 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-12-05 11:33 - 2016-11-02 11:18 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 00909824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2016-12-05 11:33 - 2016-11-02 11:17 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 03133440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-12-05 11:33 - 2016-11-02 11:15 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2016-12-05 11:33 - 2016-11-02 11:14 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-12-05 11:33 - 2016-11-02 11:13 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-12-05 11:33 - 2016-11-02 11:13 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-12-05 11:33 - 2016-11-02 10:11 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls
2016-12-05 11:33 - 2016-11-02 10:11 - 00788624 _____ C:\WINDOWS\system32\locale.nls
2016-12-05 11:33 - 2016-11-02 09:20 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-12-05 11:33 - 2016-10-15 05:51 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-12-05 11:33 - 2016-10-15 05:51 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-12-05 11:33 - 2016-10-15 05:48 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2016-12-05 11:33 - 2016-10-15 05:43 - 01356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-12-05 11:33 - 2016-10-15 05:41 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-12-05 11:33 - 2016-10-15 05:38 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2016-12-05 11:33 - 2016-10-15 05:37 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-12-05 11:33 - 2016-10-15 05:34 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-12-05 11:33 - 2016-10-15 05:31 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-12-05 11:33 - 2016-10-15 05:31 - 00658272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-12-05 11:33 - 2016-10-15 05:31 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-12-05 11:33 - 2016-10-15 05:30 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-12-05 11:33 - 2016-10-15 05:30 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-12-05 11:33 - 2016-10-15 05:29 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2016-12-05 11:33 - 2016-10-15 05:29 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2016-12-05 11:33 - 2016-10-15 05:26 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-12-05 11:33 - 2016-10-15 05:26 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-12-05 11:33 - 2016-10-15 05:26 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-12-05 11:33 - 2016-10-15 05:25 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-12-05 11:33 - 2016-10-15 05:25 - 00742704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-12-05 11:33 - 2016-10-15 05:21 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-12-05 11:33 - 2016-10-15 05:21 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2016-12-05 11:33 - 2016-10-15 05:20 - 02276736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-12-05 11:33 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-12-05 11:33 - 2016-10-15 05:18 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-12-05 11:33 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-12-05 11:33 - 2016-10-15 05:18 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-12-05 11:33 - 2016-10-15 05:15 - 01853776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-12-05 11:33 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-12-05 11:33 - 2016-10-15 05:15 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-12-05 11:33 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-12-05 11:33 - 2016-10-15 05:11 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-12-05 11:33 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2016-12-05 11:33 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-12-05 11:33 - 2016-10-15 05:05 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-12-05 11:33 - 2016-10-15 05:01 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-12-05 11:33 - 2016-10-15 05:00 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-12-05 11:33 - 2016-10-15 05:00 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2016-12-05 11:33 - 2016-10-15 05:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-12-05 11:33 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2016-12-05 11:33 - 2016-10-15 04:59 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-12-05 11:33 - 2016-10-15 04:59 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2016-12-05 11:33 - 2016-10-15 04:59 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2016-12-05 11:33 - 2016-10-15 04:58 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-12-05 11:33 - 2016-10-15 04:57 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2016-12-05 11:33 - 2016-10-15 04:57 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-12-05 11:33 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2016-12-05 11:33 - 2016-10-15 04:57 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2016-12-05 11:33 - 2016-10-15 04:56 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2016-12-05 11:33 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2016-12-05 11:33 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
2016-12-05 11:33 - 2016-10-15 04:56 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-12-05 11:33 - 2016-10-15 04:56 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2016-12-05 11:33 - 2016-10-15 04:56 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-12-05 11:33 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-12-05 11:33 - 2016-10-15 04:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2016-12-05 11:33 - 2016-10-15 04:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-12-05 11:33 - 2016-10-15 04:55 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2016-12-05 11:33 - 2016-10-15 04:55 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-12-05 11:33 - 2016-10-15 04:55 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-12-05 11:33 - 2016-10-15 04:55 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-12-05 11:33 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-12-05 11:33 - 2016-10-15 04:55 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2016-12-05 11:33 - 2016-10-15 04:54 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
2016-12-05 11:33 - 2016-10-15 04:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2016-12-05 11:33 - 2016-10-15 04:54 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll
2016-12-05 11:33 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
2016-12-05 11:33 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2016-12-05 11:33 - 2016-10-15 04:54 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-12-05 11:33 - 2016-10-15 04:53 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-12-05 11:33 - 2016-10-15 04:52 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-12-05 11:33 - 2016-10-15 04:52 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-12-05 11:33 - 2016-10-15 04:52 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-12-05 11:33 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2016-12-05 11:33 - 2016-10-15 04:52 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
2016-12-05 11:33 - 2016-10-15 04:51 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-12-05 11:33 - 2016-10-15 04:51 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2016-12-05 11:33 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2016-12-05 11:33 - 2016-10-15 04:50 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-12-05 11:33 - 2016-10-15 04:50 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-12-05 11:33 - 2016-10-15 04:50 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-12-05 11:33 - 2016-10-15 04:50 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-12-05 11:33 - 2016-10-15 04:50 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-12-05 11:33 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-12-05 11:33 - 2016-10-15 04:49 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-12-05 11:33 - 2016-10-15 04:49 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-12-05 11:33 - 2016-10-15 04:49 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-12-05 11:33 - 2016-10-15 04:49 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-12-05 11:33 - 2016-10-15 04:48 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-12-05 11:33 - 2016-10-15 04:48 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-12-05 11:33 - 2016-10-15 04:47 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-12-05 11:33 - 2016-10-15 04:47 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-12-05 11:33 - 2016-10-15 04:47 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-12-05 11:33 - 2016-10-15 04:46 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-12-05 11:33 - 2016-10-15 04:46 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-05 11:33 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-12-05 11:33 - 2016-10-15 04:45 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-12-05 11:33 - 2016-10-15 04:45 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-12-05 11:33 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-12-05 11:33 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-12-05 11:33 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-12-05 11:33 - 2016-10-15 04:44 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2016-12-05 11:33 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-12-05 11:33 - 2016-10-15 04:43 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-12-05 11:33 - 2016-10-15 04:43 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2016-12-05 11:33 - 2016-10-15 04:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2016-12-05 11:33 - 2016-10-15 04:42 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-12-05 11:33 - 2016-10-15 04:42 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2016-12-05 11:33 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-12-05 11:33 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe
2016-12-05 11:33 - 2016-10-15 04:41 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-12-05 11:33 - 2016-10-15 04:41 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-12-05 11:33 - 2016-10-15 04:41 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2016-12-05 11:33 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2016-12-05 11:33 - 2016-10-15 04:39 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-12-05 11:33 - 2016-10-15 04:39 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-12-05 11:33 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-12-05 11:33 - 2016-10-15 04:39 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2016-12-05 11:33 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2016-12-05 11:33 - 2016-10-15 04:38 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-12-05 11:33 - 2016-10-15 04:38 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-12-05 11:33 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-12-05 11:33 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-12-05 11:33 - 2016-10-15 04:37 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-12-05 11:33 - 2016-10-15 04:37 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-12-05 11:33 - 2016-10-15 04:37 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-12-05 11:33 - 2016-10-15 04:37 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll
2016-12-05 11:33 - 2016-10-15 04:36 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-12-05 11:33 - 2016-10-15 04:36 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-12-05 11:33 - 2016-10-15 04:36 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-12-05 11:33 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-12-05 11:33 - 2016-10-15 04:36 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2016-12-05 11:33 - 2016-10-15 04:36 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2016-12-05 11:33 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-12-05 11:33 - 2016-10-15 04:35 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-12-05 11:33 - 2016-10-15 04:34 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-12-05 11:33 - 2016-10-15 04:34 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-12-05 11:33 - 2016-10-15 04:32 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-12-05 11:33 - 2016-10-05 11:35 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-12-05 11:33 - 2016-10-05 11:31 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-12-05 11:33 - 2016-10-05 11:17 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2016-12-05 11:33 - 2016-10-05 11:16 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-12-05 11:33 - 2016-10-05 11:13 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-12-05 11:33 - 2016-10-05 11:12 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-12-05 11:33 - 2016-10-05 11:12 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-12-05 11:33 - 2016-10-05 11:08 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-12-05 11:33 - 2016-10-05 11:03 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-12-05 11:33 - 2016-10-05 10:51 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-12-05 11:33 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-12-05 11:33 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-12-05 11:33 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-12-05 11:33 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-12-05 11:33 - 2016-10-05 10:38 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-12-05 11:33 - 2016-10-05 10:36 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2016-12-05 11:33 - 2016-10-05 10:35 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2016-12-05 11:33 - 2016-10-05 10:35 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-12-05 11:33 - 2016-10-05 10:35 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-12-05 11:33 - 2016-10-05 10:34 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-12-05 11:33 - 2016-10-05 10:33 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-12-05 11:33 - 2016-10-05 10:33 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-12-05 11:33 - 2016-10-05 10:33 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-12-05 11:33 - 2016-10-05 10:32 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-12-05 11:33 - 2016-10-05 10:32 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-12-05 11:33 - 2016-10-05 10:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-12-05 11:33 - 2016-10-05 10:31 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-12-05 11:33 - 2016-10-05 10:31 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-12-05 11:33 - 2016-10-05 10:31 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-12-05 11:33 - 2016-10-05 10:31 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2016-12-05 11:33 - 2016-10-05 10:31 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-12-05 11:33 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-12-05 11:33 - 2016-10-05 10:30 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2016-12-05 11:33 - 2016-10-05 10:29 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-12-05 11:33 - 2016-10-05 10:29 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2016-12-05 11:33 - 2016-10-05 10:28 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-12-05 11:33 - 2016-10-05 10:28 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-12-05 11:33 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-12-05 11:33 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2016-12-05 11:33 - 2016-10-05 10:27 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-12-05 11:33 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-05 11:33 - 2016-10-05 10:26 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-12-05 11:33 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2016-12-05 11:33 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-12-05 11:33 - 2016-10-05 10:25 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-12-05 11:33 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2016-12-05 11:33 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-12-05 11:33 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-12-05 11:33 - 2016-10-05 10:24 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-12-05 11:33 - 2016-10-05 10:24 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-12-05 11:33 - 2016-10-05 10:23 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-12-05 11:33 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-12-05 11:33 - 2016-10-05 10:23 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-12-05 11:33 - 2016-10-05 10:23 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2016-12-05 11:33 - 2016-10-05 10:23 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-12-05 11:33 - 2016-10-05 10:22 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-12-05 11:33 - 2016-10-05 10:21 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-12-05 11:33 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-12-05 11:33 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-12-05 11:33 - 2016-10-05 10:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-12-05 11:33 - 2016-10-05 10:19 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2016-12-05 11:33 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-12-05 11:33 - 2016-10-05 10:18 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-12-05 11:33 - 2016-10-05 10:17 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-12-05 11:33 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-12-05 11:33 - 2016-10-05 10:16 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-12-05 11:33 - 2016-10-05 10:16 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-12-05 11:33 - 2016-10-05 10:16 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-12-05 11:33 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-12-05 11:33 - 2016-10-05 10:15 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-12-05 11:33 - 2016-10-05 10:15 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-12-05 11:33 - 2016-10-05 10:15 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-12-05 11:33 - 2016-10-05 10:15 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-12-05 11:33 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2016-12-05 11:33 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-12-05 11:33 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-12-05 11:33 - 2016-10-05 10:14 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-12-05 11:33 - 2016-10-05 10:13 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-12-05 11:33 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-12-05 11:33 - 2016-10-05 10:12 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-12-05 11:33 - 2016-10-05 10:12 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2016-12-05 11:33 - 2016-10-05 10:12 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-12-05 11:33 - 2016-10-05 10:10 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-12-05 11:33 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-12-05 11:33 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-12-05 11:33 - 2016-10-05 10:08 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-12-05 11:33 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-12-05 11:33 - 2016-10-05 10:07 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-12-05 11:33 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-12-05 11:33 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-12-05 11:33 - 2016-10-05 10:07 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-12-05 11:33 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-12-05 11:33 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-12-05 11:33 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-12-05 11:33 - 2016-09-15 18:40 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2016-12-05 11:33 - 2016-09-15 18:37 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-12-05 11:33 - 2016-09-15 18:37 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-12-05 11:33 - 2016-09-15 18:32 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-12-05 11:33 - 2016-09-15 18:30 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-12-05 11:33 - 2016-09-15 18:30 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-12-05 11:33 - 2016-09-15 18:29 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2016-12-05 11:33 - 2016-09-15 18:29 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-12-05 11:33 - 2016-09-15 18:29 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2016-12-05 11:33 - 2016-09-15 18:29 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-12-05 11:33 - 2016-09-15 18:29 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-12-05 11:33 - 2016-09-15 18:29 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2016-12-05 11:33 - 2016-09-15 18:27 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-12-05 11:33 - 2016-09-15 18:26 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2016-12-05 11:33 - 2016-09-15 18:25 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-12-05 11:33 - 2016-09-15 18:24 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-12-05 11:33 - 2016-09-15 18:23 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-12-05 11:33 - 2016-09-15 18:23 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-12-05 11:33 - 2016-09-15 18:22 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-12-05 11:33 - 2016-09-15 18:22 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-12-05 11:33 - 2016-09-15 18:22 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-12-05 11:33 - 2016-09-15 18:22 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-12-05 11:33 - 2016-09-15 18:21 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-12-05 11:33 - 2016-09-15 18:18 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-12-05 11:33 - 2016-09-15 18:18 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-12-05 11:33 - 2016-09-15 18:16 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-12-05 11:33 - 2016-09-15 18:16 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-05 11:33 - 2016-09-15 18:16 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-12-05 11:33 - 2016-09-15 18:16 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-12-05 11:33 - 2016-09-15 18:16 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-12-05 11:33 - 2016-09-15 18:15 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-12-05 11:33 - 2016-09-15 18:15 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-12-05 11:33 - 2016-09-15 18:15 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-12-05 11:33 - 2016-09-15 18:15 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2016-12-05 11:33 - 2016-09-15 18:14 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-12-05 11:33 - 2016-09-15 18:14 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-12-05 11:33 - 2016-09-15 18:14 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-12-05 11:33 - 2016-09-15 18:14 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-12-05 11:33 - 2016-09-15 18:14 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-12-05 11:33 - 2016-09-15 18:14 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2016-12-05 11:33 - 2016-09-15 18:13 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2016-12-05 11:33 - 2016-09-15 18:06 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-12-05 11:33 - 2016-09-15 18:06 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-12-05 11:33 - 2016-09-15 18:06 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-12-05 11:33 - 2016-09-15 18:03 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-12-05 11:33 - 2016-09-15 18:03 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2016-12-05 11:33 - 2016-09-15 18:03 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-12-05 11:33 - 2016-09-15 18:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2016-12-05 11:33 - 2016-09-15 18:01 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2016-12-05 11:33 - 2016-09-15 18:00 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2016-12-05 11:33 - 2016-09-15 18:00 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-12-05 11:33 - 2016-09-15 18:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-12-05 11:33 - 2016-09-15 17:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-12-05 11:33 - 2016-09-15 17:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2016-12-05 11:33 - 2016-09-15 17:59 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2016-12-05 11:33 - 2016-09-15 17:58 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2016-12-05 11:33 - 2016-09-15 17:58 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2016-12-05 11:33 - 2016-09-15 17:58 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-12-05 11:33 - 2016-09-15 17:58 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2016-12-05 11:33 - 2016-09-15 17:58 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-05 11:33 - 2016-09-15 17:58 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2016-12-05 11:33 - 2016-09-15 17:57 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2016-12-05 11:33 - 2016-09-15 17:57 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2016-12-05 11:33 - 2016-09-15 17:57 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-12-05 11:33 - 2016-09-15 17:57 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2016-12-05 11:33 - 2016-09-15 17:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-12-05 11:33 - 2016-09-15 17:55 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2016-12-05 11:33 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2016-12-05 11:33 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-12-05 11:33 - 2016-09-15 17:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2016-12-05 11:33 - 2016-09-15 17:54 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-12-05 11:33 - 2016-09-15 17:54 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-12-05 11:33 - 2016-09-15 17:54 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2016-12-05 11:33 - 2016-09-15 17:53 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-12-05 11:33 - 2016-09-15 17:53 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-12-05 11:33 - 2016-09-15 17:53 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2016-12-05 11:33 - 2016-09-15 17:53 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2016-12-05 11:33 - 2016-09-15 17:52 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-12-05 11:33 - 2016-09-15 17:52 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2016-12-05 11:33 - 2016-09-15 17:52 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2016-12-05 11:33 - 2016-09-15 17:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-12-05 11:33 - 2016-09-15 17:51 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-12-05 11:33 - 2016-09-15 17:51 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2016-12-05 11:33 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-12-05 11:33 - 2016-09-15 17:49 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-12-05 11:33 - 2016-09-15 17:49 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-12-05 11:33 - 2016-09-15 17:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-12-05 11:33 - 2016-09-15 17:48 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-12-05 11:33 - 2016-09-15 17:47 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-12-05 11:33 - 2016-09-15 17:47 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2016-12-05 11:33 - 2016-09-15 17:47 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2016-12-05 11:33 - 2016-09-15 17:46 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-12-05 11:33 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-12-05 11:33 - 2016-09-15 17:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-12-05 11:33 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2016-12-05 11:33 - 2016-09-15 17:44 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-12-05 11:33 - 2016-09-15 17:44 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2016-12-05 11:33 - 2016-09-15 17:44 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-12-05 11:33 - 2016-09-15 17:43 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2016-12-05 11:33 - 2016-09-15 17:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-12-05 11:33 - 2016-09-15 17:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2016-12-05 11:33 - 2016-09-15 17:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-12-05 11:33 - 2016-09-15 17:42 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-12-05 11:33 - 2016-09-15 17:42 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2016-12-05 11:33 - 2016-09-15 17:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-12-05 11:33 - 2016-09-15 17:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2016-12-05 11:33 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2016-12-05 11:33 - 2016-09-15 17:41 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-12-05 11:33 - 2016-09-15 17:41 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2016-12-05 11:33 - 2016-09-15 17:41 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2016-12-05 11:33 - 2016-09-15 17:41 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2016-12-05 11:33 - 2016-09-15 17:41 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-12-05 11:33 - 2016-09-15 17:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-12-05 11:33 - 2016-09-15 17:40 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys
2016-12-05 11:33 - 2016-09-15 17:40 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-12-05 11:33 - 2016-09-15 17:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
__________________
Alt 03.01.2017, 16:16   #4
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


FRST.txt PART2
Code:
ATTFilter
2016-12-05 11:33 - 2016-09-15 17:39 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-12-05 11:33 - 2016-09-15 17:39 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-12-05 11:33 - 2016-09-15 17:38 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2016-12-05 11:33 - 2016-09-15 17:38 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-12-05 11:33 - 2016-09-15 17:38 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-12-05 11:33 - 2016-09-15 17:37 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2016-12-05 11:33 - 2016-09-15 17:36 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2016-12-05 11:33 - 2016-09-15 17:36 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2016-12-05 11:33 - 2016-09-15 17:36 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-12-05 11:33 - 2016-09-15 17:35 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2016-12-05 11:33 - 2016-09-15 17:35 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-12-05 11:33 - 2016-09-15 17:34 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-12-05 11:33 - 2016-09-15 17:34 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-12-05 11:33 - 2016-09-15 17:34 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-12-05 11:33 - 2016-09-15 17:34 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-12-05 11:33 - 2016-09-15 17:33 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2016-12-05 11:33 - 2016-09-15 17:33 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-12-05 11:33 - 2016-09-15 17:33 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2016-12-05 11:33 - 2016-09-15 17:33 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-12-05 11:33 - 2016-09-15 17:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2016-12-05 11:33 - 2016-09-15 17:32 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2016-12-05 11:33 - 2016-09-15 17:32 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-12-05 11:33 - 2016-09-15 17:30 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-12-05 11:33 - 2016-09-15 17:30 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-12-05 11:33 - 2016-09-15 17:30 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-12-05 11:33 - 2016-09-15 17:30 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2016-12-05 11:33 - 2016-09-15 17:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-12-05 11:33 - 2016-09-15 17:30 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2016-12-05 11:33 - 2016-09-15 17:29 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-12-05 11:33 - 2016-09-15 17:29 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-12-05 11:33 - 2016-09-15 17:29 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-12-05 11:33 - 2016-09-15 17:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2016-12-05 11:33 - 2016-09-15 17:28 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2016-12-05 11:33 - 2016-09-15 17:28 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-12-05 11:33 - 2016-09-15 17:28 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2016-12-05 11:33 - 2016-09-15 17:27 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2016-12-05 11:33 - 2016-09-15 17:27 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2016-12-05 11:33 - 2016-09-15 17:27 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2016-12-05 11:33 - 2016-09-15 17:27 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2016-12-05 11:33 - 2016-09-15 17:26 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2016-12-05 11:33 - 2016-09-15 17:26 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-12-05 11:33 - 2016-09-15 17:26 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-12-05 11:33 - 2016-09-15 17:26 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-12-05 11:33 - 2016-09-15 17:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2016-12-05 11:33 - 2016-09-15 17:25 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2016-12-05 11:33 - 2016-09-15 17:25 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-12-05 11:33 - 2016-09-15 17:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-12-05 11:33 - 2016-09-15 17:25 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2016-12-05 11:33 - 2016-09-15 17:25 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-12-05 11:33 - 2016-09-15 17:24 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-12-05 11:33 - 2016-09-15 17:24 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-12-05 11:33 - 2016-09-15 17:24 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-12-05 11:33 - 2016-09-15 17:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-12-05 11:33 - 2016-09-15 17:23 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-12-05 11:33 - 2016-09-15 17:22 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-12-05 11:33 - 2016-09-15 17:22 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-12-05 11:33 - 2016-09-15 17:22 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-12-05 11:33 - 2016-09-15 17:22 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-12-05 11:33 - 2016-09-15 17:21 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-12-05 11:33 - 2016-09-15 17:21 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-12-05 11:33 - 2016-09-15 17:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-12-05 11:33 - 2016-09-15 17:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-12-05 11:33 - 2016-09-15 17:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-12-05 11:33 - 2016-09-15 17:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-12-05 11:33 - 2016-09-15 17:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-12-05 11:33 - 2016-09-15 17:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-12-05 11:33 - 2016-09-15 17:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-12-05 11:33 - 2016-09-15 17:19 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-12-05 11:33 - 2016-09-15 17:19 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-12-05 11:33 - 2016-09-15 17:19 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-12-05 11:33 - 2016-09-15 17:19 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-12-05 11:33 - 2016-09-15 17:19 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-12-05 11:33 - 2016-09-15 17:18 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-12-05 11:33 - 2016-09-15 17:16 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-12-05 11:33 - 2016-09-15 17:16 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-12-05 11:33 - 2016-09-15 17:16 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-12-05 11:33 - 2016-09-15 17:16 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2016-12-05 11:33 - 2016-09-07 06:53 - 02481768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2016-12-05 11:33 - 2016-09-07 06:48 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2016-12-05 11:33 - 2016-09-07 06:34 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-12-05 11:33 - 2016-09-07 06:34 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-12-05 11:33 - 2016-09-07 06:34 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-12-05 11:33 - 2016-09-07 06:34 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-12-05 11:33 - 2016-09-07 06:33 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-12-05 11:33 - 2016-09-07 06:33 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-12-05 11:33 - 2016-09-07 06:32 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2016-12-05 11:33 - 2016-09-07 06:29 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-12-05 11:33 - 2016-09-07 06:29 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2016-12-05 11:33 - 2016-09-07 06:29 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-12-05 11:33 - 2016-09-07 06:29 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
2016-12-05 11:33 - 2016-09-07 06:17 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-12-05 11:33 - 2016-09-07 06:17 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-12-05 11:33 - 2016-09-07 06:13 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-12-05 11:33 - 2016-09-07 06:12 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-12-05 11:33 - 2016-09-07 06:07 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-12-05 11:33 - 2016-09-07 06:04 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-12-05 11:33 - 2016-09-07 06:03 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-12-05 11:33 - 2016-09-07 06:03 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-12-05 11:33 - 2016-09-07 06:03 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-12-05 11:33 - 2016-09-07 06:03 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-12-05 11:33 - 2016-09-07 06:02 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-12-05 11:33 - 2016-09-07 06:02 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-12-05 11:33 - 2016-09-07 06:02 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-12-05 11:33 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2016-12-05 11:33 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-12-05 11:33 - 2016-09-07 06:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-12-05 11:33 - 2016-09-07 05:59 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-12-05 11:33 - 2016-09-07 05:59 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-12-05 11:33 - 2016-09-07 05:59 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-12-05 11:33 - 2016-09-07 05:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
2016-12-05 11:33 - 2016-09-07 05:58 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2016-12-05 11:33 - 2016-09-07 05:57 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
2016-12-05 11:33 - 2016-09-07 05:55 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-12-05 11:33 - 2016-09-07 05:55 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-12-05 11:33 - 2016-09-07 05:55 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-12-05 11:33 - 2016-09-07 05:55 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-12-05 11:33 - 2016-09-07 05:55 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2016-12-05 11:33 - 2016-09-07 05:55 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2016-12-05 11:33 - 2016-09-07 05:54 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-12-05 11:33 - 2016-09-07 05:53 - 02083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-12-05 11:33 - 2016-09-07 05:53 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-12-05 11:33 - 2016-09-07 05:53 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2016-12-05 11:33 - 2016-09-07 05:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-12-05 11:33 - 2016-09-07 05:53 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2016-12-05 11:33 - 2016-09-07 05:52 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2016-12-05 11:33 - 2016-09-07 05:52 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-12-05 11:33 - 2016-09-07 05:50 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2016-12-05 11:33 - 2016-09-07 05:50 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-12-05 11:33 - 2016-09-07 05:50 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-12-05 11:33 - 2016-09-07 05:50 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2016-12-05 11:33 - 2016-09-07 05:49 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-12-05 11:33 - 2016-09-07 05:49 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2016-12-05 11:33 - 2016-09-07 05:47 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2016-12-05 11:33 - 2016-09-07 05:46 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-12-05 11:33 - 2016-09-07 05:46 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2016-12-05 11:33 - 2016-09-07 05:45 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-12-05 11:33 - 2016-09-07 05:43 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-12-05 11:33 - 2016-09-07 05:41 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-12-05 11:33 - 2016-09-07 05:41 - 03435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2016-12-05 11:33 - 2016-09-07 05:41 - 02947072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2016-12-05 11:33 - 2016-09-07 05:41 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-12-05 11:33 - 2016-09-07 05:41 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-12-05 11:33 - 2016-09-07 05:40 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-05 11:33 - 2016-09-07 05:40 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2016-12-05 11:33 - 2016-09-07 05:39 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2016-12-05 11:33 - 2016-09-07 05:39 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-12-05 11:33 - 2016-09-07 05:39 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2016-12-05 11:33 - 2016-09-07 05:38 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-12-05 11:33 - 2016-09-07 05:37 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-12-05 11:33 - 2016-09-07 05:37 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-12-05 11:33 - 2016-09-07 05:36 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-12-05 11:33 - 2016-09-07 05:35 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
2016-12-05 11:33 - 2016-09-07 05:34 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-12-05 11:33 - 2016-09-07 05:34 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-12-05 11:33 - 2016-09-07 05:34 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-12-05 11:33 - 2016-09-07 05:33 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2016-12-05 11:33 - 2016-09-07 05:31 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
2016-12-05 11:33 - 2016-08-27 05:58 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-12-05 11:33 - 2016-08-27 05:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-12-05 11:33 - 2016-08-20 06:34 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-12-05 11:33 - 2016-08-20 06:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-12-05 11:33 - 2016-08-20 06:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-12-05 11:33 - 2016-08-20 06:21 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-12-05 11:33 - 2016-08-20 06:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-12-05 11:33 - 2016-08-20 06:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-12-05 11:33 - 2016-08-20 06:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-12-05 11:33 - 2016-08-20 06:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-12-05 11:33 - 2016-08-20 06:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-12-05 11:33 - 2016-08-20 06:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-12-05 11:33 - 2016-08-20 06:19 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-12-05 11:33 - 2016-08-20 06:19 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-12-05 11:33 - 2016-08-20 06:18 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-12-05 11:33 - 2016-08-20 06:18 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-12-05 11:33 - 2016-08-20 06:18 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-12-05 11:33 - 2016-08-20 06:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-12-05 11:33 - 2016-08-20 06:15 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-12-05 11:33 - 2016-08-20 06:15 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-12-05 11:33 - 2016-08-20 06:14 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-12-05 11:33 - 2016-08-20 06:14 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-12-05 11:33 - 2016-08-20 06:14 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-12-05 11:33 - 2016-08-20 06:14 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-12-05 11:33 - 2016-08-20 06:12 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-12-05 11:33 - 2016-08-20 06:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-12-05 11:33 - 2016-08-20 06:06 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-12-05 11:33 - 2016-08-20 06:04 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-12-05 11:33 - 2016-08-20 05:58 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-12-05 11:33 - 2016-08-20 05:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-12-05 11:33 - 2016-08-19 02:33 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-12-05 11:33 - 2016-08-06 05:31 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-12-05 11:33 - 2016-08-06 05:29 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-12-05 11:33 - 2016-08-06 05:17 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-12-05 11:33 - 2016-08-06 05:16 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-12-05 11:33 - 2016-08-06 05:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-12-05 11:33 - 2016-08-06 05:16 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-12-05 11:33 - 2016-08-06 05:15 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-12-05 11:33 - 2016-08-06 05:08 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-12-05 11:33 - 2016-08-06 05:03 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-12-05 11:33 - 2016-08-06 05:03 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-12-05 11:33 - 2016-08-06 04:48 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-12-05 11:33 - 2016-08-06 04:48 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-12-05 11:33 - 2016-08-06 04:48 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-12-05 11:33 - 2016-08-06 04:48 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-12-05 11:33 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-12-05 11:33 - 2016-08-06 04:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-12-05 11:33 - 2016-08-06 04:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-12-05 11:33 - 2016-08-06 04:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-12-05 11:33 - 2016-08-06 04:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-12-05 11:33 - 2016-08-06 04:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-12-05 11:33 - 2016-08-06 04:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-12-05 11:33 - 2016-08-06 04:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-12-05 11:33 - 2016-08-06 04:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-12-05 11:33 - 2016-08-06 04:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-12-05 11:33 - 2016-08-06 04:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-12-05 11:33 - 2016-08-06 04:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-12-05 11:33 - 2016-08-06 04:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-12-05 11:33 - 2016-08-06 04:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-12-05 11:33 - 2016-08-06 04:43 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-12-05 11:33 - 2016-08-06 04:43 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-12-05 11:33 - 2016-08-06 04:41 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-12-05 11:33 - 2016-08-06 04:40 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-12-05 11:33 - 2016-08-06 04:40 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-12-05 11:33 - 2016-08-06 04:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-12-05 11:33 - 2016-08-06 04:39 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-12-05 11:33 - 2016-08-06 04:37 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-05 11:33 - 2016-08-06 04:36 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-12-05 11:33 - 2016-08-06 04:34 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-12-05 11:33 - 2016-08-06 04:33 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-12-05 11:33 - 2016-08-06 04:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-12-05 11:33 - 2016-08-06 04:31 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-12-05 11:33 - 2016-08-06 04:29 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-12-05 11:33 - 2016-08-06 04:23 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-12-05 11:33 - 2016-08-05 10:14 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-12-05 11:33 - 2016-08-05 10:10 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-12-05 11:33 - 2016-08-05 10:05 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-12-05 11:33 - 2016-08-05 09:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-12-05 11:33 - 2016-08-05 09:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-12-05 11:33 - 2016-08-05 09:23 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-12-05 11:33 - 2016-08-05 09:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-12-05 11:33 - 2016-08-05 09:18 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-12-05 11:33 - 2016-08-05 09:08 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-12-05 11:33 - 2016-08-02 09:15 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-12-05 11:33 - 2016-08-02 09:14 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-12-05 11:33 - 2016-08-02 05:47 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-12-05 11:33 - 2016-07-22 02:25 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-12-05 11:32 - 2016-11-02 12:20 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-12-05 11:32 - 2016-11-02 12:15 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-12-05 11:32 - 2016-11-02 12:15 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-12-05 11:32 - 2016-11-02 12:14 - 07816544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-12-05 11:32 - 2016-11-02 12:13 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-12-05 11:32 - 2016-11-02 12:13 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-12-05 11:32 - 2016-11-02 12:05 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-12-05 11:32 - 2016-11-02 12:04 - 02678056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-12-05 11:32 - 2016-11-02 12:02 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-12-05 11:32 - 2016-11-02 12:02 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-12-05 11:32 - 2016-11-02 12:01 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-12-05 11:32 - 2016-11-02 12:00 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-12-05 11:32 - 2016-11-02 12:00 - 01061968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-12-05 11:32 - 2016-11-02 11:56 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2016-12-05 11:32 - 2016-11-02 11:56 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-12-05 11:32 - 2016-11-02 11:56 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-12-05 11:32 - 2016-11-02 11:56 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-12-05 11:32 - 2016-11-02 11:56 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-12-05 11:32 - 2016-11-02 11:55 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2016-12-05 11:32 - 2016-11-02 11:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-12-05 11:32 - 2016-11-02 11:48 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2016-12-05 11:32 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-12-05 11:32 - 2016-11-02 11:47 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-12-05 11:32 - 2016-11-02 11:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-12-05 11:32 - 2016-11-02 11:45 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-12-05 11:32 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-12-05 11:32 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-12-05 11:32 - 2016-11-02 11:44 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-05 11:32 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2016-12-05 11:32 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-12-05 11:32 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-12-05 11:32 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-12-05 11:32 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-12-05 11:32 - 2016-11-02 11:41 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-12-05 11:32 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2016-12-05 11:32 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll
2016-12-05 11:32 - 2016-11-02 11:35 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2016-12-05 11:32 - 2016-11-02 11:34 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-12-05 11:32 - 2016-11-02 11:33 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-12-05 11:32 - 2016-11-02 11:32 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-12-05 11:32 - 2016-11-02 11:31 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2016-12-05 11:32 - 2016-11-02 11:31 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-12-05 11:32 - 2016-11-02 11:31 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-12-05 11:32 - 2016-11-02 11:30 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2016-12-05 11:32 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2016-12-05 11:32 - 2016-11-02 11:29 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-12-05 11:32 - 2016-11-02 11:29 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-12-05 11:32 - 2016-11-02 11:29 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-12-05 11:32 - 2016-11-02 11:29 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-12-05 11:32 - 2016-11-02 11:28 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-12-05 11:32 - 2016-11-02 11:28 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-12-05 11:32 - 2016-11-02 11:28 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-12-05 11:32 - 2016-11-02 11:28 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-12-05 11:32 - 2016-11-02 11:26 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-12-05 11:32 - 2016-11-02 11:26 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-12-05 11:32 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-12-05 11:32 - 2016-11-02 11:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-12-05 11:32 - 2016-11-02 11:25 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-12-05 11:32 - 2016-11-02 11:25 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-12-05 11:32 - 2016-11-02 11:25 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-12-05 11:32 - 2016-11-02 11:24 - 03778560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-12-05 11:32 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-12-05 11:32 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2016-12-05 11:32 - 2016-11-02 11:20 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2016-12-05 11:32 - 2016-11-02 11:18 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2016-12-05 11:32 - 2016-11-02 11:16 - 04148736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-12-05 11:32 - 2016-11-02 11:16 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-12-05 11:32 - 2016-11-02 11:16 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-12-05 11:32 - 2016-11-02 11:15 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-12-05 11:32 - 2016-11-02 11:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2016-12-05 11:32 - 2016-10-15 05:51 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-12-05 11:32 - 2016-10-15 05:38 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-12-05 11:32 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2016-12-05 11:32 - 2016-10-15 05:31 - 02827864 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-12-05 11:32 - 2016-10-15 05:30 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-12-05 11:32 - 2016-10-15 05:30 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-12-05 11:32 - 2016-10-15 05:29 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-12-05 11:32 - 2016-10-15 05:29 - 01267504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-12-05 11:32 - 2016-10-15 05:29 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-12-05 11:32 - 2016-10-15 05:26 - 01990648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-12-05 11:32 - 2016-10-15 05:26 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-12-05 11:32 - 2016-10-15 05:26 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-12-05 11:32 - 2016-10-15 05:26 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-12-05 11:32 - 2016-10-15 05:22 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-12-05 11:32 - 2016-10-15 05:21 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-12-05 11:32 - 2016-10-15 05:21 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-12-05 11:32 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2016-12-05 11:32 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-12-05 11:32 - 2016-10-15 04:56 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-12-05 11:32 - 2016-10-15 04:56 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2016-12-05 11:32 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-12-05 11:32 - 2016-10-15 04:54 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-12-05 11:32 - 2016-10-15 04:53 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-12-05 11:32 - 2016-10-15 04:52 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-12-05 11:32 - 2016-10-15 04:50 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-12-05 11:32 - 2016-10-15 04:50 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-12-05 11:32 - 2016-10-15 04:50 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-12-05 11:32 - 2016-10-15 04:49 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-12-05 11:32 - 2016-10-15 04:49 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-12-05 11:32 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-12-05 11:32 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-12-05 11:32 - 2016-10-15 04:47 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2016-12-05 11:32 - 2016-10-15 04:45 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-12-05 11:32 - 2016-10-15 04:42 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-12-05 11:32 - 2016-10-15 04:41 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-12-05 11:32 - 2016-10-15 04:39 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-12-05 11:32 - 2016-10-15 04:39 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-12-05 11:32 - 2016-10-15 04:39 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-12-05 11:32 - 2016-10-15 04:37 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-12-05 11:32 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-12-05 11:32 - 2016-10-15 04:36 - 02290176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-12-05 11:32 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-12-05 11:32 - 2016-10-15 04:35 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-12-05 11:32 - 2016-10-15 04:34 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-12-05 11:32 - 2016-10-15 04:31 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2016-12-05 11:32 - 2016-10-05 11:33 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-12-05 11:32 - 2016-10-05 11:22 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-12-05 11:32 - 2016-10-05 11:13 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-12-05 11:32 - 2016-10-05 11:09 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-12-05 11:32 - 2016-10-05 11:09 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2016-12-05 11:32 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-12-05 11:32 - 2016-10-05 10:38 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-12-05 11:32 - 2016-10-05 10:36 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-12-05 11:32 - 2016-10-05 10:36 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-12-05 11:32 - 2016-10-05 10:35 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-12-05 11:32 - 2016-10-05 10:32 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-12-05 11:32 - 2016-10-05 10:31 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2016-12-05 11:32 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-12-05 11:32 - 2016-10-05 10:27 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-12-05 11:32 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-12-05 11:32 - 2016-10-05 10:23 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-12-05 11:32 - 2016-10-05 10:20 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-12-05 11:32 - 2016-10-05 10:18 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-12-05 11:32 - 2016-10-05 10:18 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-12-05 11:32 - 2016-10-05 10:17 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-12-05 11:32 - 2016-10-05 10:11 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-12-05 11:32 - 2016-10-05 10:09 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-12-05 11:32 - 2016-09-15 18:33 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-12-05 11:32 - 2016-09-15 18:29 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-12-05 11:32 - 2016-09-15 18:29 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-12-05 11:32 - 2016-09-15 18:29 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2016-12-05 11:32 - 2016-09-15 18:27 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-12-05 11:32 - 2016-09-15 18:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2016-12-05 11:32 - 2016-09-15 18:19 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-12-05 11:32 - 2016-09-15 18:18 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-12-05 11:32 - 2016-09-15 18:16 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-12-05 11:32 - 2016-09-15 18:11 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-12-05 11:32 - 2016-09-15 18:11 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-12-05 11:32 - 2016-09-15 18:11 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2016-12-05 11:32 - 2016-09-15 18:07 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2016-12-05 11:32 - 2016-09-15 17:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2016-12-05 11:32 - 2016-09-15 17:55 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-12-05 11:32 - 2016-09-15 17:55 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-12-05 11:32 - 2016-09-15 17:55 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2016-12-05 11:32 - 2016-09-15 17:55 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-12-05 11:32 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-12-05 11:32 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2016-12-05 11:32 - 2016-09-15 17:52 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-12-05 11:32 - 2016-09-15 17:52 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2016-12-05 11:32 - 2016-09-15 17:52 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-12-05 11:32 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2016-12-05 11:32 - 2016-09-15 17:49 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-12-05 11:32 - 2016-09-15 17:47 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-12-05 11:32 - 2016-09-15 17:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2016-12-05 11:32 - 2016-09-15 17:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2016-12-05 11:32 - 2016-09-15 17:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2016-12-05 11:32 - 2016-09-15 17:43 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-12-05 11:32 - 2016-09-15 17:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2016-12-05 11:32 - 2016-09-15 17:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2016-12-05 11:32 - 2016-09-15 17:42 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2016-12-05 11:32 - 2016-09-15 17:42 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-12-05 11:32 - 2016-09-15 17:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-12-05 11:32 - 2016-09-15 17:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-12-05 11:32 - 2016-09-15 17:40 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-12-05 11:32 - 2016-09-15 17:39 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-12-05 11:32 - 2016-09-15 17:39 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-12-05 11:32 - 2016-09-15 17:39 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-12-05 11:32 - 2016-09-15 17:38 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-12-05 11:32 - 2016-09-15 17:37 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2016-12-05 11:32 - 2016-09-15 17:36 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-12-05 11:32 - 2016-09-15 17:36 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-12-05 11:32 - 2016-09-15 17:36 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-12-05 11:32 - 2016-09-15 17:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-12-05 11:32 - 2016-09-15 17:36 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-12-05 11:32 - 2016-09-15 17:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2016-12-05 11:32 - 2016-09-15 17:34 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-12-05 11:32 - 2016-09-15 17:34 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-12-05 11:32 - 2016-09-15 17:34 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2016-12-05 11:32 - 2016-09-15 17:33 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-12-05 11:32 - 2016-09-15 17:33 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-12-05 11:32 - 2016-09-15 17:32 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-12-05 11:32 - 2016-09-15 17:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2016-12-05 11:32 - 2016-09-15 17:30 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-12-05 11:32 - 2016-09-15 17:30 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-12-05 11:32 - 2016-09-15 17:29 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-12-05 11:32 - 2016-09-15 17:27 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-12-05 11:32 - 2016-09-15 17:25 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-12-05 11:32 - 2016-09-15 17:25 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-12-05 11:32 - 2016-09-15 17:24 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-12-05 11:32 - 2016-09-15 17:23 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-12-05 11:32 - 2016-09-15 17:22 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-12-05 11:32 - 2016-09-15 17:21 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-12-05 11:32 - 2016-09-15 17:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-12-05 11:32 - 2016-09-15 17:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-12-05 11:32 - 2016-09-15 17:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-12-05 11:32 - 2016-09-15 17:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-12-05 11:32 - 2016-09-15 17:19 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-12-05 11:32 - 2016-09-15 17:18 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-12-05 11:32 - 2016-09-15 17:17 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-12-05 11:32 - 2016-09-15 17:17 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-12-05 11:32 - 2016-09-15 17:16 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-12-05 11:32 - 2016-09-10 14:21 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-12-05 11:32 - 2016-09-07 06:54 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2016-12-05 11:32 - 2016-09-07 06:44 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2016-12-05 11:32 - 2016-09-07 06:41 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2016-12-05 11:32 - 2016-09-07 06:29 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-12-05 11:32 - 2016-09-07 06:27 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
2016-12-05 11:32 - 2016-09-07 06:24 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2016-12-05 11:32 - 2016-09-07 06:13 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-12-05 11:32 - 2016-09-07 06:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
2016-12-05 11:32 - 2016-09-07 06:02 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-12-05 11:32 - 2016-09-07 06:02 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-12-05 11:32 - 2016-09-07 06:02 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-12-05 11:32 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2016-12-05 11:32 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
2016-12-05 11:32 - 2016-09-07 06:02 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2016-12-05 11:32 - 2016-09-07 06:01 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-12-05 11:32 - 2016-09-07 06:01 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
2016-12-05 11:32 - 2016-09-07 06:01 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-12-05 11:32 - 2016-09-07 06:00 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-12-05 11:32 - 2016-09-07 06:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-12-05 11:32 - 2016-09-07 06:00 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
2016-12-05 11:32 - 2016-09-07 05:59 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-12-05 11:32 - 2016-09-07 05:58 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-12-05 11:32 - 2016-09-07 05:58 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-12-05 11:32 - 2016-09-07 05:58 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-12-05 11:32 - 2016-09-07 05:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-12-05 11:32 - 2016-09-07 05:57 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2016-12-05 11:32 - 2016-09-07 05:56 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-12-05 11:32 - 2016-09-07 05:56 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-12-05 11:32 - 2016-09-07 05:56 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-12-05 11:32 - 2016-09-07 05:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2016-12-05 11:32 - 2016-09-07 05:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-12-05 11:32 - 2016-09-07 05:54 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2016-12-05 11:32 - 2016-09-07 05:52 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-12-05 11:32 - 2016-09-07 05:52 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-12-05 11:32 - 2016-09-07 05:52 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-12-05 11:32 - 2016-09-07 05:46 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2016-12-05 11:32 - 2016-09-07 05:46 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-12-05 11:32 - 2016-09-07 05:45 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-12-05 11:32 - 2016-09-07 05:41 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-12-05 11:32 - 2016-09-07 05:38 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-12-05 11:32 - 2016-09-07 05:37 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-12-05 11:32 - 2016-09-07 05:37 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-12-05 11:32 - 2016-09-07 05:36 - 02360832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2016-12-05 11:32 - 2016-09-07 05:35 - 02107392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2016-12-05 11:32 - 2016-09-07 05:31 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-12-05 11:32 - 2016-08-27 06:12 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-12-05 11:32 - 2016-08-27 05:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-12-05 11:32 - 2016-08-20 07:06 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-12-05 11:32 - 2016-08-20 06:17 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-12-05 11:32 - 2016-08-20 06:16 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-12-05 11:32 - 2016-08-20 06:11 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-12-05 11:32 - 2016-08-20 06:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-12-05 11:32 - 2016-08-20 06:07 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-12-05 11:32 - 2016-08-20 06:07 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-12-05 11:32 - 2016-08-20 06:04 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-12-05 11:32 - 2016-08-20 06:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-12-05 11:32 - 2016-08-06 05:26 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-12-05 11:32 - 2016-08-06 05:23 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-12-05 11:32 - 2016-08-06 05:18 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-12-05 11:32 - 2016-08-06 05:17 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-12-05 11:32 - 2016-08-06 05:13 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-12-05 11:32 - 2016-08-06 05:13 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-12-05 11:32 - 2016-08-06 05:13 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-12-05 11:32 - 2016-08-06 04:50 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-12-05 11:32 - 2016-08-06 04:48 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-12-05 11:32 - 2016-08-06 04:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-12-05 11:32 - 2016-08-06 04:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-12-05 11:32 - 2016-08-06 04:47 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-12-05 11:32 - 2016-08-06 04:47 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-12-05 11:32 - 2016-08-06 04:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-12-05 11:32 - 2016-08-06 04:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-12-05 11:32 - 2016-08-06 04:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-12-05 11:32 - 2016-08-06 04:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-12-05 11:32 - 2016-08-06 04:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-12-05 11:32 - 2016-08-06 04:45 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-12-05 11:32 - 2016-08-06 04:44 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2016-12-05 11:32 - 2016-08-06 04:44 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-12-05 11:32 - 2016-08-06 04:44 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-12-05 11:32 - 2016-08-06 04:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-12-05 11:32 - 2016-08-06 04:41 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-12-05 11:32 - 2016-08-06 04:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-12-05 11:32 - 2016-08-06 04:41 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-12-05 11:32 - 2016-08-06 04:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-12-05 11:32 - 2016-08-06 04:39 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-12-05 11:32 - 2016-08-06 04:39 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-12-05 11:32 - 2016-08-06 04:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-05 11:32 - 2016-08-06 04:35 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-12-05 11:32 - 2016-08-06 04:29 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-12-05 11:32 - 2016-08-06 04:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-12-05 11:32 - 2016-08-06 04:21 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-12-05 11:32 - 2016-08-06 04:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-12-05 11:32 - 2016-08-05 09:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-12-05 11:32 - 2016-08-05 09:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-12-05 11:32 - 2016-08-02 09:44 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-12-05 11:32 - 2016-08-02 09:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-12-05 11:32 - 2016-08-02 09:13 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-12-05 11:32 - 2016-08-02 05:37 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-12-05 11:32 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-12-05 11:32 - 2016-07-22 02:18 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-12-05 11:09 - 2016-12-05 11:09 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-05 11:08 - 2016-12-05 11:50 - 00000000 ____D C:\Users\******\AppData\Local\ConnectedDevicesPlatform
2016-12-05 11:08 - 2016-12-05 11:49 - 00000174 ___SH C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-05 11:08 - 2016-12-05 11:08 - 00000020 ___SH C:\Users\******\ntuser.ini
2016-12-05 11:08 - 2016-12-05 11:08 - 00000000 ____D C:\ProgramData\USOShared
2016-12-05 11:07 - 2016-12-05 11:07 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2016-12-05 11:07 - 2016-12-05 11:07 - 00007623 _____ C:\WINDOWS\diagerr.xml
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\SendTo
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Recent
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Cookies
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Temporary Internet Files
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Temporary Internet Files
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Programme
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\ProgramData\Desktop
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-12-05 11:07 - 2016-12-05 11:07 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-12-05 11:06 - 2017-01-02 14:54 - 00003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2016-12-05 11:06 - 2017-01-02 14:54 - 00003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2016-12-05 11:06 - 2016-12-28 00:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-05 11:06 - 2016-12-19 22:29 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-05 11:06 - 2016-12-19 22:29 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-05 11:06 - 2016-12-05 11:06 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-12-05 11:06 - 2016-12-05 11:06 - 00003758 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-12-05 11:06 - 2016-12-05 11:06 - 00003534 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-12-05 11:06 - 2016-12-05 11:06 - 00003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2016-12-05 11:06 - 2016-12-05 11:06 - 00002968 _____ C:\WINDOWS\System32\Tasks\Update Checker
2016-12-05 11:06 - 2016-12-05 11:06 - 00002924 _____ C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3
2016-12-05 11:06 - 2016-12-05 11:06 - 00002712 _____ C:\WINDOWS\System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}
2016-12-05 11:06 - 2016-12-05 11:06 - 00002516 _____ C:\WINDOWS\System32\Tasks\ROG Gaming Center
2016-12-05 11:06 - 2016-12-05 11:06 - 00002346 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ListenToDevice
2016-12-05 11:06 - 2016-12-05 11:06 - 00002344 _____ C:\WINDOWS\System32\Tasks\{8C0B2CF8-35E8-41BF-BFA2-693F6B61456B}
2016-12-05 11:06 - 2016-12-05 11:06 - 00002340 _____ C:\WINDOWS\System32\Tasks\ASUS USB Charger Plus
2016-12-05 11:06 - 2016-12-05 11:06 - 00002282 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2016-12-05 11:06 - 2016-12-05 11:06 - 00002214 _____ C:\WINDOWS\System32\Tasks\ATK Package A22126881260
2016-12-05 11:06 - 2016-12-05 11:06 - 00002214 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
2016-12-05 11:06 - 2016-12-05 11:06 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2016-12-05 11:06 - 2016-12-05 11:06 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS
2016-12-05 11:05 - 2017-01-02 23:25 - 2550091776 ___SH C:\hiberfil.sys
2016-12-05 11:05 - 2016-12-28 00:21 - 00015948 _____ C:\WINDOWS\PFRO.log
2016-12-05 11:05 - 2016-12-05 11:07 - 00008164 _____ C:\WINDOWS\comsetup.log
2016-12-05 11:04 - 2016-12-05 11:04 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-12-05 11:04 - 2016-12-05 11:04 - 00000000 ____D C:\Users\Default\Roaming
2016-12-05 11:04 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-12-05 11:03 - 2017-01-02 23:50 - 00000000 ____D C:\Users\******\AppData\Local\Temp
2016-12-05 11:03 - 2017-01-02 23:25 - 00000000 ____D C:\Users\******\AppData\Local
2016-12-05 11:03 - 2017-01-02 22:16 - 03670016 ____H C:\Users\******\NTUSER.DAT
2016-12-05 11:03 - 2017-01-02 15:34 - 00000000 ____D C:\Users\******
2016-12-05 11:03 - 2017-01-02 14:57 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-05 11:03 - 2017-01-02 06:21 - 00524288 ___SH C:\Users\******\NTUSER.DAT{d755ac25-bad1-11e6-afef-dc096c74822e}.TMContainer00000000000000000002.regtrans-ms
2016-12-05 11:03 - 2017-01-02 06:21 - 00065536 ___SH C:\Users\******\NTUSER.DAT{d755ac25-bad1-11e6-afef-dc096c74822e}.TM.blf
2016-12-05 11:03 - 2016-12-31 01:19 - 00000000 ____D C:\Users\******\AppData\Roaming
2016-12-05 11:03 - 2016-12-13 17:37 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-05 11:03 - 2016-12-13 17:37 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-05 11:03 - 2016-12-13 17:37 - 00065536 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-05 11:03 - 2016-12-09 23:43 - 00000000 ____D C:\Users\******\AppData\Local\Microsoft
2016-12-05 11:03 - 2016-12-05 12:05 - 00524288 ___SH C:\Users\******\NTUSER.DAT{d755ac25-bad1-11e6-afef-dc096c74822e}.TMContainer00000000000000000001.regtrans-ms
2016-12-05 11:03 - 2016-12-05 11:08 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-05 11:03 - 2016-12-05 11:05 - 00524288 ___SH C:\WINDOWS\system32\config\ELAM{1cc41df8-4b1b-11e6-80cc-e41d2d1026d0}.TMContainer00000000000000000002.regtrans-ms
2016-12-05 11:03 - 2016-12-05 11:05 - 00524288 ___SH C:\WINDOWS\system32\config\ELAM{1cc41df8-4b1b-11e6-80cc-e41d2d1026d0}.TMContainer00000000000000000001.regtrans-ms
2016-12-05 11:03 - 2016-12-05 11:05 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM{1cc41df8-4b1b-11e6-80cc-e41d2d1026d0}.TM.blf
2016-12-05 11:03 - 2016-12-05 11:05 - 00000000 ___SD C:\Users\******\AppData\Roaming\Microsoft
2016-12-05 11:03 - 2016-12-05 11:05 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-12-05 11:03 - 2016-12-05 11:03 - 00967680 ___SH C:\Users\******\ntuser.dat.LOG1
2016-12-05 11:03 - 2016-12-05 11:03 - 00851968 ___SH C:\Users\******\ntuser.dat.LOG2
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Vorlagen
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Startmenü
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\SendTo
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Recent
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Netzwerkumgebung
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Lokale Einstellungen
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Eigene Dateien
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Druckumgebung
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Documents\Eigene Videos
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Documents\Eigene Musik
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Documents\Eigene Bilder
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Cookies
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\AppData\Local\Verlauf
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\AppData\Local\Temporary Internet Files
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\AppData\Local\Anwendungsdaten
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 _SHDL C:\Users\******\Anwendungsdaten
2016-12-05 11:03 - 2016-12-05 11:03 - 00000000 ___HD C:\Users\******\AppData
2016-12-05 11:03 - 2016-07-16 12:48 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-05 11:03 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2016-12-05 11:03 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2016-12-05 11:03 - 2016-07-16 12:47 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-05 11:02 - 2017-01-02 23:25 - 00067584 ____S C:\WINDOWS\bootstat.dat
2016-12-05 11:02 - 2017-01-02 22:16 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-12-05 11:02 - 2017-01-02 22:16 - 00000000 ____D C:\WINDOWS\Prefetch
2016-12-05 11:02 - 2017-01-02 04:28 - 00124445 _____ C:\WINDOWS\setupact.log
2016-12-05 11:02 - 2016-12-28 00:21 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-05 11:02 - 2016-12-08 00:50 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-05 11:02 - 2016-12-05 11:03 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-05 11:02 - 2016-12-05 11:02 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{d755ac25-bad1-11e6-afef-dc096c74822e}.TMContainer00000000000000000002.regtrans-ms
2016-12-05 11:02 - 2016-12-05 11:02 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{d755ac25-bad1-11e6-afef-dc096c74822e}.TMContainer00000000000000000001.regtrans-ms
2016-12-05 11:02 - 2016-12-05 11:02 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{d755ac25-bad1-11e6-afef-dc096c74822e}.TM.blf
2016-12-05 11:02 - 2016-12-05 11:02 - 00034095 _____ C:\WINDOWS\system32\NetSetupMig.log
2016-12-05 11:02 - 2016-12-05 11:02 - 00000156 _____ C:\WINDOWS\setuperr.log
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ___HD C:\Program Files (x86)\Uninstall Information
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_esif_umdf2_02_00_00.Wdf
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-12-05 11:02 - 2016-12-05 11:02 - 00000000 ____D C:\Program Files\Realtek
2016-12-05 11:01 - 2016-12-05 11:48 - 00524288 ___SH C:\WINDOWS\system32\config\DRIVERS{f8d8b5e8-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-05 11:01 - 2016-12-05 11:48 - 00337736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-12-05 11:01 - 2016-12-05 11:48 - 00065536 ___SH C:\WINDOWS\system32\config\DRIVERS{f8d8b5e8-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-05 11:01 - 2016-12-05 11:08 - 00000000 ___DC C:\WINDOWS\Panther
2016-12-05 11:01 - 2016-12-05 11:05 - 00524288 ___SH C:\WINDOWS\system32\config\DRIVERS{f8d8b5e8-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-05 11:01 - 2016-12-05 11:01 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-05 11:01 - 2016-12-05 11:01 - 00524288 ___SH C:\Users\Default\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-05 11:01 - 2016-12-05 11:01 - 00065536 ___SH C:\Users\Default\NTUSER.DAT{f8d8b5f1-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-05 11:01 - 2016-07-16 23:49 - 00048862 _____ C:\WINDOWS\SysWOW64\license.rtf
2016-12-05 11:01 - 2016-07-16 23:49 - 00048862 _____ C:\WINDOWS\system32\license.rtf
2016-12-05 11:00 - 2016-12-05 11:00 - 00008192 ___SH C:\WINDOWS\system32\config\userdiff.LOG1
2016-12-05 11:00 - 2016-12-05 11:00 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-12-05 11:00 - 2016-12-05 11:00 - 00000000 ___SH C:\WINDOWS\system32\config\userdiff.LOG2
2016-12-05 11:00 - 2016-12-05 11:00 - 00000000 ____D C:\WINDOWS\system32\Microsoft
2016-12-05 10:59 - 2016-12-05 10:59 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-12-05 10:59 - 2016-12-05 10:59 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-12-05 10:59 - 2016-12-05 10:59 - 00000000 ____D C:\Program Files\MSBuild
2016-12-05 10:59 - 2016-12-05 10:59 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-12-05 10:59 - 2016-12-05 10:59 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-05 10:59 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-12-05 10:59 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-12-05 10:59 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-12-05 10:59 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-12-05 10:59 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-12-05 10:59 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-12-05 05:55 - 2016-12-05 11:04 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-12-05 05:55 - 2016-12-05 11:03 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-12-05 01:47 - 2016-12-05 01:47 - 00000000 ____D C:\NVIDIA
2016-12-05 00:44 - 2016-12-05 00:44 - 00000000 ____D C:\Users\******\AppData\LocalLow\Halfbrick
2016-12-05 00:37 - 2017-01-01 19:15 - 00000000 ____D C:\Users\******\AppData\Roaming\matzman666

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-02 23:30 - 2016-09-30 12:47 - 00000000 ____D C:\Program Files (x86)\Steam
2017-01-02 23:28 - 2016-10-15 13:16 - 00000000 ____D C:\Users\******\AppData\Roaming\Spotify
2017-01-02 23:25 - 2016-10-15 15:40 - 00000000 ___RD C:\Dropbox
2017-01-02 23:25 - 2016-10-15 13:18 - 00000000 ____D C:\Users\******\AppData\Local\Spotify
2017-01-02 23:25 - 2016-09-30 12:19 - 00000182 _____ C:\Users\******\AppData\Roaming\sp_data.sys
2017-01-02 06:21 - 2016-11-29 21:32 - 00000000 ____D C:\Users\******\AppData\Local\HTC_Neo
2017-01-01 23:47 - 2016-07-16 23:51 - 00891340 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-01 23:47 - 2016-07-16 23:51 - 00199484 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-01 23:47 - 2016-03-24 12:50 - 02217662 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-01 00:33 - 2016-12-01 01:04 - 00000200 _____ C:\Users\******\AppData\Roaming\WB.CFG
2016-12-31 06:51 - 2016-11-27 02:53 - 00000000 ____D C:\Users\******\AppData\Roaming\vlc
2016-12-31 01:17 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64
2016-12-31 01:17 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\Logs
2016-12-31 01:16 - 2016-07-16 07:04 - 00000000 ___RD C:\Program Files (x86)
2016-12-29 17:59 - 2016-09-30 13:10 - 00000000 ____D C:\Games
2016-12-29 16:32 - 2016-11-29 12:46 - 00000000 ____D C:\Users\******\AppData\Local\ElevatedDiagnostics
2016-12-29 16:32 - 2016-11-29 12:45 - 00000000 ____D C:\Users\******\AppData\Local\Diagnostics
2016-12-29 16:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\config\RegBack
2016-12-29 00:33 - 2016-11-30 04:32 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-12-29 00:33 - 2016-07-16 12:47 - 00000000 ___HD C:\ProgramData
2016-12-28 20:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-12-28 01:27 - 2016-11-29 14:53 - 00000000 ____D C:\Program Files\HTC Account
2016-12-28 01:27 - 2016-11-29 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIVE Software
2016-12-28 01:27 - 2016-09-11 10:08 - 00062956 _____ C:\WINDOWS\DPINST.LOG
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 __SHD C:\WINDOWS\Installer
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-28 00:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2016-12-28 00:21 - 2016-09-11 09:57 - 2550136832 ___SH C:\pagefile.sys
2016-12-28 00:21 - 2016-09-11 09:57 - 16777216 ___SH C:\swapfile.sys
2016-12-28 00:21 - 2016-07-16 07:04 - 75235328 _____ C:\WINDOWS\system32\config\SOFTWARE
2016-12-28 00:21 - 2016-07-16 07:04 - 17563648 _____ C:\WINDOWS\system32\config\SYSTEM
2016-12-28 00:21 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT
2016-12-28 00:21 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2016-12-28 00:21 - 2016-07-16 07:04 - 00049152 _____ C:\WINDOWS\system32\config\SECURITY
2016-12-27 03:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\drivers
2016-12-22 23:30 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs
2016-12-22 23:30 - 2016-03-24 13:06 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-12-21 23:23 - 2016-10-15 14:30 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-21 20:41 - 2016-10-01 01:41 - 00537848 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2016-12-21 17:42 - 2016-09-30 15:16 - 00000000 ____D C:\Users\******\AppData\Local\CrashDumps
2016-12-20 04:29 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-20 04:04 - 2016-07-16 07:04 - 00000000 ___RD C:\Program Files
2016-12-20 00:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\config
2016-12-20 00:16 - 2016-10-15 12:43 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-19 22:29 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Tasks
2016-12-17 21:30 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Drivers\UMDF
2016-12-16 05:18 - 2016-10-01 01:41 - 00000000 ____D C:\Users\******\AppData\Local\UnrealEngine
2016-12-16 02:15 - 2016-10-27 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirServer Universal (x64)
2016-12-16 02:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\config\systemprofile
2016-12-15 22:00 - 2016-11-30 04:33 - 00000000 ____D C:\Users\******\AppData\Local\JDownloader v2.0
2016-12-15 22:00 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Desktop
2016-12-13 17:37 - 2016-07-16 07:04 - 42991616 _____ C:\WINDOWS\system32\config\COMPONENTS
2016-12-13 17:34 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\catroot2
2016-12-13 16:58 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\WinSxS
2016-12-13 16:58 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\DriverStore
2016-12-12 18:16 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-12 05:30 - 2016-03-24 13:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-10 21:01 - 2016-09-30 12:20 - 00000000 ____D C:\Users\******\AppData\Local\NVIDIA Corporation
2016-12-09 23:38 - 2016-07-16 12:47 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-09 05:39 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2016-12-08 00:52 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\CatRoot
2016-12-08 00:50 - 2016-09-11 10:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-08 00:50 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2016-12-08 00:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2016-12-07 18:37 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\assembly
2016-12-07 00:07 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-06 23:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-12-06 23:58 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WDI
2016-12-05 14:13 - 2016-03-24 12:52 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2016-12-05 13:50 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-05 13:42 - 2016-09-30 12:19 - 00000000 ____D C:\Users\******\AppData\Local\Packages
2016-12-05 13:32 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Videos
2016-12-05 11:49 - 2016-09-30 12:20 - 00000402 ___SH C:\Users\******\Documents\desktop.ini
2016-12-05 11:49 - 2016-09-30 12:20 - 00000282 ___SH C:\Users\******\Downloads\desktop.ini
2016-12-05 11:49 - 2016-09-30 12:20 - 00000282 ___SH C:\Users\******\Desktop\desktop.ini
2016-12-05 11:49 - 2016-09-30 12:20 - 00000174 ___SH C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-05 11:49 - 2016-09-30 12:20 - 00000000 ___RD C:\Users\******\Searches
2016-12-05 11:49 - 2016-09-30 12:20 - 00000000 ___RD C:\Users\******\Contacts
2016-12-05 11:49 - 2016-09-30 12:20 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-05 11:49 - 2016-09-30 12:20 - 00000000 ___RD C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-05 11:49 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Saved Games
2016-12-05 11:49 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Pictures
2016-12-05 11:49 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Music
2016-12-05 11:49 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Links
2016-12-05 11:49 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Favorites
2016-12-05 11:49 - 2016-09-30 12:19 - 00000000 ___RD C:\Users\******\Documents
2016-12-05 11:49 - 2016-09-11 09:59 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-05 11:49 - 2016-07-16 07:04 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-05 11:47 - 2016-07-16 23:50 - 00000000 ____D C:\WINDOWS\system32\Drivers\de-DE
2016-12-05 11:47 - 2016-07-16 12:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-12-05 11:47 - 2016-07-16 12:47 - 00000796 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Fonts
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\wbem
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-CS
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\migration
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-US
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\de-DE
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\zh-TW
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\zh-CN
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\wbem
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\th-TH
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\sv-SE
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\setup
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\ru-RU
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\pt-PT
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\pt-BR
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\pl-PL
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\nl-NL
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\nb-NO
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migration
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\ko-KR
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\ja-jp
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\it-IT
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\hu-HU
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\he-IL
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\fr-FR
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\fr-CA
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\fi-FI
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-ES
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-US
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\el-GR
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\de-DE
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\da-DK
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\cs-CZ
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Boot
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppPatch
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Media Player
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Mail
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Media Player
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Mail
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-05 11:47 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-05 11:47 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-12-05 11:47 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-12-05 11:47 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-12-05 11:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\restore
2016-12-05 11:09 - 2016-09-30 12:21 - 00002400 _____ C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-05 11:09 - 2016-09-30 12:21 - 00000000 ___RD C:\Users\******\OneDrive
2016-12-05 11:08 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-12-05 11:07 - 2016-09-11 09:59 - 00000000 ____D C:\WINDOWS\SoftwareDistribution
2016-12-05 11:07 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Default\Documents
2016-12-05 11:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-12-05 11:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\debug
2016-12-05 11:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2016-12-05 11:07 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-12-05 11:07 - 2016-07-16 07:04 - 00000000 __RHD C:\Users\Default
2016-12-05 11:07 - 2015-10-30 08:24 - 00000000 ___RD C:\Users\Public\Documents
2016-12-05 11:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-12-05 11:06 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-12-05 11:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System32\Tasks\Microsoft
2016-12-05 11:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\LogFiles
2016-12-05 11:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Drivers\etc
2016-12-05 11:06 - 2015-10-30 08:24 - 00000000 ___RD C:\Users\Public\Pictures
2016-12-05 11:05 - 2016-12-01 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinCDEmu
2016-12-05 11:05 - 2016-12-01 02:40 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Leap
2016-12-05 11:05 - 2016-11-30 04:36 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2016-12-05 11:05 - 2016-11-29 12:30 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-05 11:05 - 2016-11-29 12:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-05 11:05 - 2016-10-26 23:46 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension
2016-12-05 11:05 - 2016-10-19 01:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project64 2.3
2016-12-05 11:05 - 2016-10-16 02:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
2016-12-05 11:05 - 2016-10-15 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealVNC
2016-12-05 11:05 - 2016-10-01 03:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blur(TM)
2016-12-05 11:05 - 2016-10-01 02:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolphin
2016-12-05 11:05 - 2016-09-30 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2016-12-05 11:05 - 2016-09-30 12:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-12-05 11:05 - 2016-09-11 10:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameFirst IV
2016-12-05 11:05 - 2016-09-11 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2016-12-05 11:05 - 2016-07-16 12:49 - 00004176 _____ C:\WINDOWS\DtcInstall.log
2016-12-05 11:05 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Public
2016-12-05 11:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\drivers
2016-12-05 11:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\CodeIntegrity
2016-12-05 11:05 - 2016-03-24 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2016-12-05 11:04 - 2016-11-29 15:08 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE
2016-12-05 11:04 - 2016-09-11 10:08 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2016-12-05 11:04 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-05 11:04 - 2016-07-16 12:47 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2016-12-05 11:04 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-12-05 11:04 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-12-05 11:04 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-05 11:04 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-05 11:04 - 2015-10-30 08:24 - 00000000 ____D C:\Users\Default.migrated\AppData\Local\Microsoft
2016-12-05 11:04 - 2015-10-30 08:24 - 00000000 ____D C:\Users\Default.migrated\AppData\Local
2016-12-05 11:04 - 2015-10-30 08:24 - 00000000 ____D C:\Users\Default.migrated\AppData
2016-12-05 11:04 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated
2016-12-05 11:03 - 2016-10-19 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elgato
2016-12-05 11:03 - 2016-10-18 17:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connect
2016-12-05 11:03 - 2016-10-16 02:19 - 00000000 ____D C:\WINDOWS\ShellNew
2016-12-05 11:03 - 2016-09-11 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICEpower
2016-12-05 11:03 - 2016-07-16 23:52 - 00000000 ____D C:\WINDOWS\OCR
2016-12-05 11:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Recovery
2016-12-05 11:03 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-12-05 11:03 - 2016-07-16 07:04 - 00000000 ___RD C:\Users
2016-12-05 11:03 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files\Common Files
2016-12-05 11:03 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-05 11:03 - 2016-03-24 13:05 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-05 11:03 - 2016-03-24 12:42 - 00000000 __SHD C:\Recovery
2016-12-05 11:03 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-12-05 11:02 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-12-05 11:02 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-12-05 11:01 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-12-05 11:00 - 2016-07-16 07:04 - 00057344 _____ C:\WINDOWS\system32\config\SAM
2016-12-05 10:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-12-05 10:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-12-05 10:56 - 2016-10-15 15:21 - 00001244 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-12-05 10:33 - 2016-11-30 04:33 - 00000306 _____ C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job
2016-12-05 10:25 - 2016-10-15 15:21 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-12-05 02:35 - 2016-10-15 13:47 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-12-05 02:33 - 2016-10-15 13:47 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-11-30 04:33 - 2016-11-30 04:33 - 0020189 _____ () C:\Users\******\AppData\Roaming\Loboponidaka
2016-09-30 17:34 - 2016-10-28 21:11 - 0002733 _____ () C:\Users\******\AppData\Roaming\SpeedRunnersLog.txt
2016-09-30 12:19 - 2017-01-02 23:25 - 0000182 _____ () C:\Users\******\AppData\Roaming\sp_data.sys
2016-12-01 01:04 - 2017-01-01 00:33 - 0000200 _____ () C:\Users\******\AppData\Roaming\WB.CFG
2016-12-05 11:02 - 2016-12-05 11:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job


Einige Dateien in TEMP:
====================
C:\Users\******\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\******\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\******\AppData\Local\Temp\nvStInst.exe
C:\Users\******\AppData\Local\Temp\vcredist_x86.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-29 16:32

==================== Ende von FRST.txt ============================

Alt 03.01.2017, 16:17   #5
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Addition.txt
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von ********** (02-01-2017 23:50:51)
Gestartet von C:\Users\**********\Downloads
Windows 10 Home Version 1607 (X64) (2016-12-05 10:08:03)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4081720298-658147086-3706344339-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4081720298-658147086-3706344339-503 - Limited - Disabled)
Gast (S-1-5-21-4081720298-658147086-3706344339-501 - Limited - Disabled)
********** (S-1-5-21-4081720298-658147086-3706344339-1001 - Administrator - Enabled) => C:\Users\**********

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

A Chair in a Room: Greenwater (HKLM\...\Steam App 427760) (Version:  - Wolf &amp; Wood Interactive Ltd)
Accounting (HKLM\...\Steam App 518580) (Version:  - Crows Crows Crows)
Activision(R) (x32 Version: 1.00.0000 - Activision) Hidden
AirServer Universal (x64) (HKLM\...\{A61F995D-62E3-4B4A-9365-ABB9DBFA388D}) (Version: 5.1.2 - App Dynamic)
Ansel (Version: 376.19 - NVIDIA Corporation) Hidden
Arizona Sunshine (HKLM\...\Steam App 342180) (Version:  - Vertigo Games)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.10 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.16.0002 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS)
Asus Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.32 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0048 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.1.19 - ICEpower a/s)
AutoHotkey 1.1.24.02 (HKLM\...\AutoHotkey) (Version: 1.1.24.02 - Lexikos)
Bid For Power (HKLM-x32\...\Bid For Power) (Version: 1.2 - DigitalZone)
BingProvidedSearch (HKLM-x32\...\{8FBF677F-DF3F-B6FF-6EBF-C67FBE3F15FF}) (Version:  - )
Blur(TM) (HKLM-x32\...\InstallShield_{589A63D3-89E1-4D9B-8DBC-6039BB27289E}) (Version: 1.00.0000 - Activision)
Budget Cuts Demo (HKLM\...\Steam App 459860) (Version:  - Neat Corporation)
Carmageddon: Max Damage (HKLM\...\Steam App 505170) (Version:  - Stainless Games Ltd)
ClusterPuck 99 (HKLM\...\Steam App 337960) (Version:  - PHL Collective)
Connect version 3.2.4 (HKLM-x32\...\{D8B98D6D-FEF3-4245-8BF5-598F28C28517}_is1) (Version: 3.2.4 - Continuata Ltd)
Cronus PRO 1.12 (HKLM-x32\...\Cronus PRO) (Version: 1.12 - CronusMAX Team)
Dead by Daylight (HKLM\...\Steam App 381210) (Version:  - Behaviour Digital Inc.)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.3 - ASUSTek Computer Inc.)
Dokan Driver (x64) (Version: 1.1.0.2 - HTC Corp.) Hidden
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
Dropbox (HKLM-x32\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
EARTH DEFENSE FORCE 4.1  The Shadow of New Despair (HKLM\...\Steam App 410320) (Version:  - SANDLOT)
Eleven: Table Tennis VR (HKLM\...\Steam App 488310) (Version:  - For Fun Labs)
Elgato Game Capture HD (HKLM\...\{ED82792C-D579-412E-B2BB-CD612498A3B7}) (Version: 3.50.88.2088 - Elgato Systems GmbH)
f.lux (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Flux) (Version:  - )
Friday the 13th: The Game BETA (HKLM\...\Steam App 569300) (Version:  - )
Fruit Ninja VR (HKLM\...\Steam App 486780) (Version:  - Halfbrick Studios Pty Ltd)
Game Capture HD60 S v1.1.0.167 (HKLM-x32\...\Software_Elgato_Game Capture HD60 S) (Version: 1.1.0.167 - Elgato Systems)
GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.23) (Version: 1.5.23 - ASUS)
GameFirst IV (x32 Version: 1.5.23 - ASUS) Hidden
Gang Beasts (HKLM\...\Steam App 285900) (Version:  - Boneloaf)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Earth VR (HKLM\...\Steam App 348250) (Version:  - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version:  - Rockstar North)
HTC Account (Version: 1.1.2.6 - HTC Corporation) Hidden
Intel(R) Chipset Device Software (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{A984B01A-6823-4C0F-8E83-BE08B3256209}) (Version: 18.1.1612.3253 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{498e3edb-cc7c-42dc-832e-11fdfed6d76e}) (Version: 18.40.3 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Knight Squad (HKLM\...\Steam App 294000) (Version:  - Chainsawesome Games)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.6.8 - Hermann Schinagl)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mount Your Friends (HKLM\...\Steam App 296470) (Version:  - Stegersaurus Software Inc.)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla)
NewRetroArcade: Neon (HKLM\...\Steam App 465780) (Version:  - Digital Cybercherries)
NVIDIA 3D Vision Treiber 376.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.19 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.19 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.16.2 - OBS Project)
Painkiller Hell & Damnation (HKLM\...\Steam App 214870) (Version:  - The Farm 51)
Pinball FX2 VR (HKLM\...\Steam App 547590) (Version:  - Zen Studios)
PixelMaster Video HDR (HKLM\...\{65302154-AAF6-4020-A070-76CAA9CEC8D3}) (Version: 1.1.37 - ASUS)
Pool Nation VR  (HKLM\...\Steam App 269170) (Version:  - Cherry Pop Games)
Project64 version 2.3.0.210 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.0.210 - )
Quake III Arena (HKLM\...\Steam App 2200) (Version:  - id Software)
Quiplash (HKLM\...\Steam App 351510) (Version:  - Jackbox Games, Inc.)
Raw Data (HKLM\...\Steam App 436320) (Version:  - Survios)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7818 - Realtek Semiconductor Corp.)
Rec Room (HKLM\...\Steam App 471710) (Version:  - Against Gravity)
Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.5 - Rockstar Games)
ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 1.0.12 - ASUS)
Sairento VR (HKLM\...\Steam App 555880) (Version:  - Mixed Realms Pte Ltd)
Serious Sam 3: BFE (HKLM\...\Steam App 41070) (Version:  - Croteam)
Serious Sam VR: The First Encounter (HKLM\...\Steam App 552450) (Version:  - Croteam VR)
Serious Sam VR: The Last Hope (HKLM\...\Steam App 465240) (Version:  - Croteam VR)
Sonokinetic Content Manager (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\3a0c6f576a92e147) (Version: 1.2.2.7 - Sonokinetic Ltd)
Space Pirate Trainer (HKLM\...\Steam App 418650) (Version:  - I-Illusions)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamVR (HKLM\...\Steam App 250820) (Version:  - )
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
The Brookhaven Experiment (HKLM\...\Steam App 440630) (Version:  - Phosphor Games)
The Jackbox Party Pack 3 (HKLM\...\Steam App 434170) (Version:  - Jackbox Games, Inc.)
The Lab (HKLM\...\Steam App 450390) (Version:  - Valve)
theBlu (HKLM\...\Steam App 451520) (Version:  - Wevr, Inc.)
Toastify (HKLM-x32\...\Toastify) (Version: 1.6 - Jesper Palm)
Trials Evolution Gold Edition (HKLM\...\Steam App 220160) (Version:  - Redlynx Ltd)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vanishing Realms (HKLM\...\Steam App 322770) (Version:  - Indimo Labs LLC)
Vive (x32 Version: 1.0.8889.966 - HTC Corp.) Hidden
Vive Diagnosis (HKLM-x32\...\{3a2fbb45-ffeb-4ade-96e1-d1eea735e0f1}) (Version: 1.0.1.13 - HTC Corp.)
Vive DirectX 9.0 (HKLM-x32\...\{ac723cbb-bf65-46e5-ac2e-58d5a959e196}) (Version: 1.0.1.2 - HTC Corp.)
VIVE Software (HKLM-x32\...\VIVE Software) (Version: 1.0.1.105 - HTC)
ViveDiag (x32 Version: 1.0.1.13 - HTC Corp.) Hidden
ViveDriver (HKLM-x32\...\{8ff389b7-122a-494c-9d04-cb3165b8738d}) (Version: 1.1.0.8 - HTC Corp.)
ViveDummy (x32 Version: 0.9.0.4 - HTC) Hidden
ViveDX9 (x32 Version: 1.0.1.2 - HTC Corp.) Hidden
VivePhoneServices (x32 Version: 1.1.0.4 - HTC Corp.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VNC Server 5.3.2 (HKLM\...\{BD3BF59A-3CD6-49B3-A166-E57BF55FF959}) (Version: 5.3.2.19179 - RealVNC Ltd)
VNC Viewer 5.3.2 (HKLM\...\{F10020E5-D194-469E-B494-DDCE5D76A3A0}) (Version: 5.3.2.19179 - RealVNC Ltd)
VR The Diner Duo (HKLM\...\Steam App 530120) (Version:  - Whirlybird Games)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vuze Leap 2.6 (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\{a9a27088-7578-499d-ad2b-67ba95a4def4}) (Version: 2.6 - Azureus Software, Inc.)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.1.1.8 - WildTangent)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
Windows Driver Package - ASUS (AsusPTPDrv) HIDClass  (04/28/2016 11.0.0.10) (HKLM\...\2E5C3DB999A508D7469B1F0294BCAF149A6B7ABB) (Version: 04/28/2016 11.0.0.10 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.1.0 - ASUS)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Worms Ultimate Mayhem (HKLM\...\Steam App 70600) (Version:  - Team17 Digital Ltd)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {11DB12DC-2B24-4EFF-83EB-AFE815BB0A05} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {17D73A19-6F14-41DA-9E25-D56AECD6B9EC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-02-23] (ASUSTek Computer Inc.)
Task: {180A57A1-CCB1-4373-AE34-3E9AC290D311} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
Task: {1A813745-5C62-4FA9-A5FE-C76088F8D729} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)
Task: {1ED94F8B-6C7E-4D6B-812D-7B2784C70938} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {1EF3E5B8-37AE-4546-BE3F-98825C662409} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-15] (Google Inc.)
Task: {2095B846-10FC-406B-897F-561EB4DBE5CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-15] (Google Inc.)
Task: {2E3B106D-56A0-4D3C-8A31-83F06385F045} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {47922D6D-E96B-4367-A4E1-1430F28C7396} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {588C6DEF-86CD-4F7F-827E-F21319582C84} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {5D88BF17-7C7D-4B94-A7B8-832B555F8C19} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-05-24] (ASUS)
Task: {619E0C02-4C51-46BF-AF91-3FDD42D66727} - System32\Tasks\{8C0B2CF8-35E8-41BF-BFA2-693F6B61456B} => pcalua.exe -a "C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe" -d "C:\Program Files (x86)\Activision\Blur(TM)"
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-01-19] (ASUSTek Computer Inc.)
Task: {716CCBE3-8654-413D-AB11-C8F1B28DFFFA} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-10-15] (Dropbox, Inc.)
Task: {721F5C3B-58BC-4D27-A034-272F29F4F74C} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-05-13] (Realtek Semiconductor)
Task: {7D670C6A-14EF-49EF-AFA9-1CE5A71A5C49} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)
Task: {853F616A-D44C-4DDC-AEAB-46322997361B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-05-13] (Realtek Semiconductor)
Task: {A7F50025-B640-46F8-9F88-38E969D7C6B9} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {C530860D-8341-46DB-AFBB-C00396C7BB2D} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [2016-06-07] (ASUSTek Computer Inc.)
Task: {D993944C-79F9-486E-9BD8-08F05031CE7C} - System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => C:\Users\**********\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403\UpdTask.exe [2013-05-07] ()
Task: {EC2D6CA5-E86D-486C-8562-F91034A2F6A0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-10-15] (Dropbox, Inc.)
Task: {F26B0020-CC22-42A3-AB59-6722D299C575} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
Task: {FB5E02FC-CC24-4B52-BAC6-D390D12F9875} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Search Provided by Bing nanir.job => Wscript.exe  C:\ProgramData\{78E4BD87-F2A6-3741-7460-A903EE2222CD}\tala.txt <==== ACHTUNG
Task: C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\**********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension\Donate.lnk -> hxxp://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.htm

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-12-07 15:11 - 2016-12-07 15:11 - 00072016 _____ () C:\Program Files (x86)\ViveSetup\PCClient\ViveportService.exe
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-12-08 00:49 - 2016-12-01 18:32 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-05 11:09 - 2016-12-05 11:09 - 00959168 _____ () C:\Users\**********\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll
2004-09-30 19:15 - 2004-09-30 19:15 - 00192000 _____ () C:\Program Files\LinkShellExtension\RockallDLL.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-12-05 11:33 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-05 11:32 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 03014664 _____ () C:\Program Files\App Dynamic\AirServer\avcodec-56.dll
2016-11-10 15:40 - 2016-11-10 15:40 - 00039424 _____ () C:\Program Files\App Dynamic\AirServer\avdevice-56.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00388616 _____ () C:\Program Files\App Dynamic\AirServer\avformat-56.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00423944 _____ () C:\Program Files\App Dynamic\AirServer\avutil-54.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00632328 _____ () C:\Program Files\App Dynamic\AirServer\swscale-3.dll
2016-11-10 15:40 - 2016-11-10 15:40 - 00186368 _____ () C:\Program Files\App Dynamic\AirServer\avfilter-5.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00428552 _____ () C:\Program Files\App Dynamic\AirServer\qp.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00172552 _____ () C:\Program Files\App Dynamic\AirServer\swresample-1.dll
2016-10-16 02:19 - 2016-10-13 10:07 - 01208832 _____ () C:\Program Files\AutoHotkey\AutoHotkey.exe
2016-12-20 00:16 - 2016-12-08 09:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-20 00:16 - 2016-12-08 09:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-05-25 22:52 - 2016-05-25 22:52 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-12-07 15:08 - 2016-12-07 15:08 - 00483664 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_update_requester_api.dll
2016-12-07 15:08 - 2016-12-07 15:08 - 00402432 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_service_api.dll
2016-12-07 15:08 - 2016-12-07 15:08 - 01912832 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_store_api.dll
2016-12-07 15:08 - 2016-12-07 15:08 - 01639936 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_wkstore_api.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00027648 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 51777648 _____ () C:\Users\**********\AppData\Roaming\Spotify\libcef.dll
2016-10-27 00:02 - 2016-12-21 20:36 - 00110192 _____ () C:\Users\**********\AppData\Roaming\Spotify\SpotifyWinRT.dll
2016-09-30 12:58 - 2016-12-08 16:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-09-30 12:58 - 2016-12-20 03:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-09-30 12:58 - 2016-12-20 03:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-09-30 12:58 - 2016-07-04 23:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 01803888 _____ () C:\Users\**********\AppData\Roaming\Spotify\libglesv2.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 00086128 _____ () C:\Users\**********\AppData\Roaming\Spotify\libegl.dll
2016-10-15 15:26 - 2016-11-11 21:36 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-12-22 23:30 - 2016-11-11 21:37 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-10-15 15:26 - 2016-11-11 21:38 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-12-22 23:30 - 2016-11-11 21:38 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-12-22 23:30 - 2016-11-11 21:35 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2016-12-22 23:30 - 2016-12-03 09:13 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-12-22 23:30 - 2016-12-21 19:26 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-12-22 23:30 - 2016-11-11 21:42 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-12-22 23:30 - 2016-11-11 21:42 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00171320 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-12-13 05:54 - 2016-12-05 17:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-09-30 12:58 - 2016-12-20 03:25 - 00388384 _____ () C:\Program Files (x86)\Steam\steam.dll
2016-09-30 12:58 - 2015-09-25 00:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2015-10-30 08:21 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\**********\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{5e2884bd-4546-4c7b-8ca3-083fe0944360}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "Elgato Sound Capture"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "HTC Store User Content Helper"
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\StartupApproved\Run: => "f.lux"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{FC65AEF7-CE44-4758-B638-088B0AC3238C}] => C:\Program Files (x86)\Steam\steamapps\common\FruitNinjaVR\FruitNinjaVR.exe
FirewallRules: [{71D08EF4-192F-4E94-A4A0-E14063635E93}] => C:\Program Files (x86)\Steam\steamapps\common\FruitNinjaVR\FruitNinjaVR.exe
FirewallRules: [{E2E2861F-F452-4565-972D-9AD4115A3379}] => C:\Users\**********\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{D8B40F12-03DA-4369-9C8A-2C4926D2D1CD}] => C:\Users\**********\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{726FF98F-2F62-469B-A13D-29DB82B52B59}] => C:\Program Files (x86)\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{7AD13187-4703-46BE-85EC-461036845460}] => C:\Program Files (x86)\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{F1ACD154-6B2B-4CC7-B72F-873C9AB1816A}] => C:\Program Files (x86)\Steam\steamapps\common\Pinball FX2 VR\Pinball FX2.exe
FirewallRules: [{5EE27B4A-FAE2-4CEA-9507-CD671C5F84B7}] => C:\Program Files (x86)\Steam\steamapps\common\Pinball FX2 VR\Pinball FX2.exe
FirewallRules: [{D6070B8C-D8BF-4D3D-802C-D2631AAF88FD}] => C:\Program Files (x86)\Steam\steamapps\common\Budget Cuts Demo\Budget Cuts Demo.exe
FirewallRules: [{C1242F36-AF05-4FA2-ACD2-BF7612FAD25D}] => C:\Program Files (x86)\Steam\steamapps\common\Budget Cuts Demo\Budget Cuts Demo.exe
FirewallRules: [{E672579E-CF64-4868-BBF8-CAC65AD037AC}] => C:\Program Files (x86)\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{4C455939-159E-4D7F-8F8B-0BEBC9D83809}] => C:\Program Files (x86)\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{933A580C-27A3-49AF-8F9D-FE19F5737A43}] => C:\Program Files (x86)\ViveSetup\PCClient\web\apps\phone\vivephoneinit\VivePhoneInit.exe
FirewallRules: [{09CFA7F9-CB17-45AF-822D-9EC5335324B8}] => C:\Program Files (x86)\ViveSetup\PCClient\web\apps\phone\nw.exe
FirewallRules: [{6C2FAD04-3C23-4A81-9712-5A41EF63BDB9}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcadeBuilder.exe
FirewallRules: [{6E918B06-9DBF-460E-8856-D2CB96DD8879}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcadeBuilder.exe
FirewallRules: [{7572F680-0BE0-40D7-85C5-F570ED729ACB}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcade\Binaries\Win64\NewRetroArcade.exe
FirewallRules: [{39927F1D-A8B7-44BB-ABDE-A76414D9A306}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcade\Binaries\Win64\NewRetroArcade.exe
FirewallRules: [{597E0A57-DA1D-4D25-A9B4-0530A2A0F089}] => C:\Program Files (x86)\Steam\steamapps\common\Eleven Table Tennis VR\pong_waves_vr.exe
FirewallRules: [{3A6473EB-6ABD-4853-B7D5-39FC3B8C2FE6}] => C:\Program Files (x86)\Steam\steamapps\common\Eleven Table Tennis VR\pong_waves_vr.exe
FirewallRules: [{5FC6996A-0E7B-4DF7-B849-AFE78C47987F}] => C:\Program Files (x86)\Steam\steamapps\common\VanishingRealms\VanishingRealms.exe
FirewallRules: [{49F2F2E9-197B-4A88-8ED2-E7D977FB35A3}] => C:\Program Files (x86)\Steam\steamapps\common\VanishingRealms\VanishingRealms.exe
FirewallRules: [{0AFBB2C3-9694-4C03-9A89-657FCA3C9221}] => C:\Program Files (x86)\Steam\steamapps\common\PoolNationVR\PoolNationVR.exe
FirewallRules: [{D768FB6D-083C-4BC6-A0A7-0FD318176CA1}] => C:\Program Files (x86)\Steam\steamapps\common\PoolNationVR\PoolNationVR.exe
FirewallRules: [{12BA2F2C-ED2A-44CA-9CD3-A02C1450674F}] => C:\Program Files (x86)\Steam\steamapps\common\EarthVR\Earth.exe
FirewallRules: [{08AAD793-035A-4BEF-B33F-251E151EEAB7}] => C:\Program Files (x86)\Steam\steamapps\common\EarthVR\Earth.exe
FirewallRules: [{555A9D2D-6591-4160-8412-3662AD3FDC3A}] => C:\Program Files (x86)\Steam\steamapps\common\theBlu\theblu.exe
FirewallRules: [{205577A7-4709-4858-955A-F78D1967658A}] => C:\Program Files (x86)\Steam\steamapps\common\theBlu\theblu.exe
FirewallRules: [{72ADE6AB-4738-4AD0-A9AB-1DC9F3A64434}] => C:\Program Files (x86)\Steam\steamapps\common\Accounting\Accounting.exe
FirewallRules: [{0343C420-A0D0-4C14-BC9D-1CD35AAE43FB}] => C:\Program Files (x86)\Steam\steamapps\common\Accounting\Accounting.exe
FirewallRules: [{3C59F27A-3909-467B-9C78-A4C9BEF85ECD}] => C:\Program Files (x86)\Steam\steamapps\common\Brookhaven\BrookhavenGame.exe
FirewallRules: [{1D477925-1504-45E3-AF10-39400DEC7FA0}] => C:\Program Files (x86)\Steam\steamapps\common\Brookhaven\BrookhavenGame.exe
FirewallRules: [{008F1AA2-C031-4875-B162-C85D2922004F}] => C:\Program Files (x86)\Steam\steamapps\common\Space Pirate Trainer VR\SpacePirateVR.exe
FirewallRules: [{2D26FDED-BF46-4A3D-941B-19E7B3EC8000}] => C:\Program Files (x86)\Steam\steamapps\common\Space Pirate Trainer VR\SpacePirateVR.exe
FirewallRules: [{2C5B3BA8-7402-454E-8193-AD52FFEE581E}] => C:\Program Files (x86)\Steam\steamapps\common\Carmageddon Max Damage\bin\Carmageddon_Max_Damage.exe
FirewallRules: [{6453D716-CFBE-4B29-ADF1-9E43E9345A31}] => C:\Program Files (x86)\Steam\steamapps\common\Carmageddon Max Damage\bin\Carmageddon_Max_Damage.exe
FirewallRules: [UDP Query User{CE30115C-575A-421B-ACA8-E69B9EC0A7EE}C:\program files\realvnc\vnc viewer\vncviewer.exe] => C:\program files\realvnc\vnc viewer\vncviewer.exe
FirewallRules: [TCP Query User{3CCD8441-36EF-440D-AA33-59EA3E21AFD2}C:\program files\realvnc\vnc viewer\vncviewer.exe] => C:\program files\realvnc\vnc viewer\vncviewer.exe
FirewallRules: [UDP Query User{615CD6D3-D19D-47E2-BE0A-D96333D6C739}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{35F3AE2E-A8D6-44AA-92F1-0A3155F2A1B8}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{75B01C3A-9FD2-47FB-A7D1-25569179E147}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{0BE3CBA6-6BCF-4594-809F-D63CB5533B58}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{96B5C580-8209-4793-A3E2-B6669FE62AAF}] => C:\Program Files (x86)\Steam\steamapps\common\The Jackbox Party Pack 3\The Jackbox Party Pack 3.exe
FirewallRules: [{772733BF-1B19-402E-83B3-A7D22DCF7B61}] => C:\Program Files (x86)\Steam\steamapps\common\The Jackbox Party Pack 3\The Jackbox Party Pack 3.exe
FirewallRules: [{6021C39E-063C-42F8-890C-04E918D50FFC}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1DE213FE-2600-4CCA-937F-8E2619278BEF}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A74B487D-9045-453C-93CC-E66219B2CFE6}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{D81DA872-A136-4294-A128-46935C868AE9}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{83C1C48E-D239-4E50-A5AD-75AD83869D2A}] => C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{C3390215-4BBE-4375-8163-35DBCA0A1586}] => C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{2D04E49E-0377-4046-BC9C-7743B6673069}] => C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe
FirewallRules: [{F9B2668A-0657-4B8B-A4A6-E8FF8319E4F2}] => C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe
FirewallRules: [{3E1C5970-2647-4A17-A0FB-C4107D010ABC}] => C:\Program Files (x86)\Steam\steamapps\common\ClusterPuck 99\ClusterPuck99.exe
FirewallRules: [{50E75D87-D813-48FD-96F5-DCF91AF60BDB}] => C:\Program Files (x86)\Steam\steamapps\common\ClusterPuck 99\ClusterPuck99.exe
FirewallRules: [UDP Query User{1BCB1118-E5F8-48DF-B712-A270D51F7DB3}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [TCP Query User{D32C819E-46D6-414D-BEA6-39BC8A429EB6}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [{01C44DCE-D7B0-43DC-812C-02D211B14973}] => C:\Program Files (x86)\Steam\steamapps\common\Painkiller Hell & Damnation\Binaries\Win32\PKHDGame-Win32-Shipping.exe
FirewallRules: [{6F48ABCE-9FB9-445D-B9F6-7F115344844E}] => C:\Program Files (x86)\Steam\steamapps\common\Painkiller Hell & Damnation\Binaries\Win32\PKHDGame-Win32-Shipping.exe
FirewallRules: [{F6964CE8-C2CB-403B-B70D-623FA6750124}] => C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{89F23949-305A-4FC7-9AB0-5603E73BE375}] => C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{2F6C256F-AFCF-4374-85C0-EB4044F20D27}] => C:\Program Files (x86)\Steam\steamapps\common\KnightSquad\KnightSquad.exe
FirewallRules: [{EFE9AA5E-40EE-4F3D-894E-A0CA4BB9612D}] => C:\Program Files (x86)\Steam\steamapps\common\KnightSquad\KnightSquad.exe
FirewallRules: [{A40B24C8-5681-4BBF-9B2C-7E8292F5A3D0}] => C:\Program Files (x86)\Steam\steamapps\common\WormsXHD\Launcher.exe
FirewallRules: [{79C93102-3C2B-4818-9DFD-7742D07D6C62}] => C:\Program Files (x86)\Steam\steamapps\common\WormsXHD\Launcher.exe
FirewallRules: [{D0E48F1B-583D-4144-83EF-9D4E6ECB56B2}] => C:\Program Files (x86)\Steam\steamapps\common\TrialsPC\datapack\trialsFMX.exe
FirewallRules: [{C80A6EE0-CE2A-420E-9B56-6B5743A1375A}] => C:\Program Files (x86)\Steam\steamapps\common\TrialsPC\datapack\trialsFMX.exe
FirewallRules: [{DAD9C499-B607-4E20-8F87-DDA3480CBF9C}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{9078C5EA-7687-4DF5-89CA-3400924E5AAF}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{88E9AC29-3DD7-47BF-B0D5-888813B2A3FE}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{22DDECFF-7064-4E7E-8037-170A44D42DD4}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{BC24CA56-B395-48EF-961E-0A5EC2F99F04}] => C:\Program Files (x86)\Steam\steamapps\common\Earth Defense Force 4.1\EDF41.exe
FirewallRules: [{F451472B-5FD2-426F-B9D5-21E8C78BEABC}] => C:\Program Files (x86)\Steam\steamapps\common\Earth Defense Force 4.1\EDF41.exe
FirewallRules: [{C7A0D9E2-E1F0-45B4-9C96-4081330A42B6}] => C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{D54F9766-A450-4BB0-9782-6119AF400472}] => C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [UDP Query User{F06E72EF-A276-4802-9BAF-1141F62BA00A}C:\users\**********\appdata\roaming\spotify\spotify.exe] => C:\users\**********\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5B16157B-9A31-4B12-BA3D-C67AFF1FF86E}C:\users\**********\appdata\roaming\spotify\spotify.exe] => C:\users\**********\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5AB6093A-228F-4EF2-901F-A809186D4650}] => C:\Program Files (x86)\Steam\steamapps\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{9E4B32E7-6458-47F2-8119-F4EE7AB4A25F}] => C:\Program Files (x86)\Steam\steamapps\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{9D624CA8-4A4E-4E82-AFC5-48CDB4EEA332}] => C:\Program Files (x86)\Steam\steamapps\common\Quiplash\Quiplash.exe
FirewallRules: [{0BB0677E-B0D9-433C-8DA1-74A902FB5996}] => C:\Program Files (x86)\Steam\steamapps\common\Quiplash\Quiplash.exe
FirewallRules: [{A87668DC-B5E6-45D6-BA87-E07791C2B8DF}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{266609B3-7133-45B2-85B3-522C5CE0868E}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{89AB280A-B531-43A1-83C2-A0D4B6307C14}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{08873FAD-11B4-4E83-B55D-D0D8BDE471BB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ABD926D6-A1E4-4CAF-B8EB-5F3631A7BE6C}] => C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe
FirewallRules: [{226C1B45-6CB5-4EC2-B98A-8BD5BA7C39ED}] => C:\Program Files (x86)\ASUS\ROG Gaming Center\AndroidService.exe
FirewallRules: [{EE5B96A8-85F8-4B5D-A5A7-24D64FA8C1F8}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{4F82CA82-D115-4CDD-9383-015DB1FBC4A0}] => C:\Program Files (x86)\Steam\steamapps\common\ArizonaSunshine\ArizonaSunshine.exe
FirewallRules: [{07DCEFCB-4168-4464-B2C9-BA473E40D2FA}] => C:\Program Files (x86)\Steam\steamapps\common\ArizonaSunshine\ArizonaSunshine.exe
FirewallRules: [{F3DE1EF8-AE05-4AE5-80C9-C9492BB31E5A}] => C:\Program Files (x86)\Steam\steamapps\common\VR The Diner Duo\VRTheDinerDuo.exe
FirewallRules: [{289CFB8C-6D69-4AAB-9B16-F14C368B784D}] => C:\Program Files (x86)\Steam\steamapps\common\VR The Diner Duo\VRTheDinerDuo.exe
FirewallRules: [{B1F9762C-359B-411F-A600-C217005D6BED}] => C:\Program Files (x86)\Steam\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{685B2364-C3CC-4196-91A7-1DAA0912FE88}] => C:\Program Files (x86)\Steam\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{E9C8AAB2-3506-4054-8AB3-1BCE73769269}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E96959CC-1A96-4A43-B21E-1BA6849D468B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{4C6D1552-AC00-4114-A4A7-CD0D07F45823}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D377652B-985C-4F28-88FE-16F588203686}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3713FF71-4589-47B3-A99E-48F17FF2EC74}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
FirewallRules: [{D77B33B2-51FD-4AF1-B44E-E5121A9E26AA}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
FirewallRules: [{BC339B3B-0278-4510-A1B4-D6B5DF2E7F4A}] => C:\Program Files\App Dynamic\AirServer\AirServer.exe
FirewallRules: [{CBAB0096-FA9C-4016-8EEC-6B8E44B6863E}] => C:\Program Files\App Dynamic\AirServer\AirServer.exe
FirewallRules: [{83C8C425-1B91-4CCF-83AC-2236DE68B0F3}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8980E943-9693-469C-9E17-BA36C503D9B8}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{A0F07450-6DE8-4F5D-8D23-7114830DAF7F}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{328A7677-4330-4254-96FF-2D5C342DFAD6}] => C:\Program Files (x86)\Steam\steamapps\common\F13Beta\SummerCamp.exe
FirewallRules: [{E61B69E6-16C4-4972-9FA6-64CAAB4A7989}] => C:\Program Files (x86)\Steam\steamapps\common\F13Beta\SummerCamp.exe
FirewallRules: [{6116FD00-7E55-49A1-9E27-20CE0F4237E6}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{B9193C2E-B770-43C0-A872-7EA2161BD938}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData.exe
FirewallRules: [{3F889BB0-CD5F-47A9-BEE0-14BF11A9E183}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData.exe
FirewallRules: [{2D9272D2-851D-4B8F-A654-3720F482110A}] => C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe
FirewallRules: [{EEAEB44D-F0A2-497E-B2A1-F6B81119F8B9}] => C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe
FirewallRules: [{54466F7F-8D3E-4B13-AD7F-559B0BE8507C}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData\Binaries\Win64\RawData-Win64-Shipping.exe
FirewallRules: [{43A1BF51-F8C9-412A-B261-E040EC44F8DB}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData\Binaries\Win64\RawData-Win64-Shipping.exe
FirewallRules: [{30665C2F-1BC9-4889-8154-DD241914E9B8}] => C:\Program Files (x86)\Steam\steamapps\common\Quake 3 Arena\quake3.exe
FirewallRules: [{DB082626-9E89-456C-8A3A-E572089776AE}] => C:\Program Files (x86)\Steam\steamapps\common\Quake 3 Arena\quake3.exe
FirewallRules: [{5B84FD6E-6131-4685-A399-5C91B8354BD6}] => C:\Program Files (x86)\Steam\steamapps\common\Sairento VR\SairentoVR.exe
FirewallRules: [{65319BAC-2646-4917-A2EA-9F8F7F944373}] => C:\Program Files (x86)\Steam\steamapps\common\Sairento VR\SairentoVR.exe
FirewallRules: [{E0F07FF4-6D24-4324-A854-B90833CEBEE5}] => C:\Program Files (x86)\Steam\steamapps\common\AChairinaRoom\AChairInARoom_Greenwater.exe
FirewallRules: [{24F0B509-FD74-49AC-B2EC-457BD02B3CF8}] => C:\Program Files (x86)\Steam\steamapps\common\AChairinaRoom\AChairInARoom_Greenwater.exe
FirewallRules: [{7D9DBDA1-A8FC-445C-A720-C843975F3785}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The First Encounter\Bin\x64\Sam2017_VR.exe
FirewallRules: [{79300C5D-5897-4573-9795-70558A9C4D71}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The First Encounter\Bin\x64\Sam2017_VR.exe

==================== Wiederherstellungspunkte =========================

16-12-2016 02:15:28 Installed AirServer Universal (x64)
20-12-2016 04:03:15 Installed Mobile Mouse Server.
28-12-2016 22:07:28 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/28/2016 10:07:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/28/2016 01:27:30 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (12/28/2016 01:27:20 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/28/2016 12:21:18 AM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (12/22/2016 11:30:55 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (12/22/2016 11:30:55 PM) (Source: DbxSvc) (EventID: 270) (User: )
Description: Filter Unload failed with: (-2145452013) Der angegebene Filter wurde nicht gefunden.

Error: (12/22/2016 10:38:05 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (12/22/2016 10:38:05 PM) (Source: DbxSvc) (EventID: 270) (User: )
Description: Filter Unload failed with: (-2145452013) Der angegebene Filter wurde nicht gefunden.

Error: (12/22/2016 12:45:51 AM) (Source: VNC Server) (EventID: 256) (User: )
Description: Agent: SDisplay: Unable to initialize core type 0: No displays found

Error: (12/21/2016 05:42:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vncserverui.exe, Version: 5.3.2.19179, Zeitstempel: 0x5755cb57
Name des fehlerhaften Moduls: vncserverui.exe, Version: 5.3.2.19179, Zeitstempel: 0x5755cb57
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000002c0e63
ID des fehlerhaften Prozesses: 0x6a4
Startzeit der fehlerhaften Anwendung: 0x01d25ba2c0c83f61
Pfad der fehlerhaften Anwendung: C:\Program Files\RealVNC\VNC Server\vncserverui.exe
Pfad des fehlerhaften Moduls: C:\Program Files\RealVNC\VNC Server\vncserverui.exe
Berichtskennung: 7713dc44-7190-4023-a39d-61acc73488ca
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (01/02/2017 11:25:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 11:25:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 11:25:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 04:43:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 04:43:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 04:43:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 02:50:54 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 02:50:54 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 02:50:53 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 02:55:05 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16319.89 MB
Verfügbarer physikalischer RAM: 13238.39 MB
Summe virtueller Speicher: 18751.89 MB
Verfügbarer virtueller Speicher: 15171.66 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:476.18 GB) (Free:169.66 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 388EC185)

Partition: GPT.

==================== Ende von Addition.txt ============================


Alt 04.01.2017, 08:23   #6
Deathkid535
/// Malwareteam
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Hi,

Schritt # 1: AdwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt # 2: FRST

Bitte noch ein frisches FRST-Log, mit Additions.txt angehakt.



Schritt # 3: Bitte Posten
  • Das Log von AdwCleaner
  • Das frische FRST-Log
  • Die frische Additions.txt
__________________
--> Win10 - "There is a Recommended Update for this PC"

Alt 05.01.2017, 00:47   #7
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Adwcleaner hatte Bedrohungen erkannt und entfernt, anbei alle frischen Log files:

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v6.041 - Bericht erstellt am 05/01/2017 um 00:36:24
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-03.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : ****** - ******
# Gestartet von : C:\Users\******\Downloads\AdwCleaner_6.041.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcddogkbbapgikkkbjaipefkbmlbofio
[-] Ordner gelöscht: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pcddogkbbapgikkkbjaipefkbmlbofio


***** [ Dateien ] *****

[-] Datei gelöscht: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pcddogkbbapgikkkbjaipefkbmlbofio_0.localstorage
[-] Datei gelöscht: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pcddogkbbapgikkkbjaipefkbmlbofio_0.localstorage-journal


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****

[-] Aufgabe gelöscht: Search Provided by Bing nanir


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\PRODUCTSETUP
[-] Schlüssel gelöscht: HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\csastats
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\csastats
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\csastats
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Daten  wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}


***** [ Browser ] *****

[-] Firefox Einstellungen bereinigt: "browser.startup.homepage" -  "hxxps://de.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=xy_ea1e6286&param1=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%3D%3D&param2=NqZdMGZ8LGJbNd%3D%3D"
[-] [C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: anisearch.de
[-] [C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: ani
[-] [C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: play-asia.com
[-] [C:\Users\******\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: pcddogkbbapgikkkbjaipefkbmlbofio


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock2 - Gelöscht C:\Program Files (x86)\Bonjour\mdnsNSP.dll
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3933 Bytes] - [05/01/2017 00:36:24]
C:\AdwCleaner\AdwCleaner[S0].txt - [3200 Bytes] - [05/01/2017 00:35:31]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4079 Bytes] ##########
--- --- ---

FRST Part 1

FRST Logfile:
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von ****** (Administrator) auf ****** (05-01-2017 00:38:33)
Gestartet von C:\Users\******\Downloads
Geladene Profile: ****** (Verfügbare Profile: ******)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(HTC Corporation) C:\Program Files\HTC Account\Htc.Identity.Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncagent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserverui.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.350_none_43278ee965418581\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(App Dynamic ehf) C:\Program Files\App Dynamic\AirServer\AirServer.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
() C:\Program Files\AutoHotkey\AutoHotkey.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AirServer64] => C:\Program Files\App Dynamic\AirServer\AirServer.exe [6125576 2016-11-22] (App Dynamic ehf)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25779624 2016-12-21] (Dropbox, Inc.)
HKLM-x32\...\Run: [HTC Store User Content Helper] => C:\Program Files (x86)\ViveSetup\PCClient\HTCVRMarketplaceUserContextHelper.exe [108880 2016-12-30] ()
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Spotify Web Helper] => C:\Users\******\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-21] (Spotify Ltd)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Spotify] => C:\Users\******\AppData\Roaming\Spotify\Spotify.exe [7153264 2016-12-21] (Spotify Ltd)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [f.lux] => C:\Users\******\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fn Keys.lnk [2016-10-16]
ShortcutTarget: Fn Keys.lnk -> C:\Autohotkey\Fn Keys.ahk ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll Keine Datei 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8c3306fe-05a4-4130-9bf9-c70f13325195}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{dd29b1b9-ea4f-4e88-9a7a-0e7c36a64416}: [NameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-ff2033b4
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-ff2033b4
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ff2033b4&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ff2033b4&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: pk0hyrin.default
FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\pk0hyrin.default [2017-01-02]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\pk0hyrin.default -> search.yahoo.com
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\pk0hyrin.default -> search.yahoo.com
FF Keyword.URL: Mozilla\Firefox\Profiles\pk0hyrin.default -> user_pref("keyword.URL", true);
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\pk0hyrin.default\searchplugins\search.yahoo.com.xml [2016-12-29]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] ()
FF Plugin HKU\S-1-5-21-4081720298-658147086-3706344339-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-10-28] ()
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.tagesschau.de/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> google.com_
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default [2017-01-05]
CHR Extension: (Google Drive) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-15]
CHR Extension: (YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-15]
CHR Extension: (AdBlock) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-28]
CHR Extension: (Looper for YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg [2016-10-15]
CHR Extension: (Google Maps) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-10-15]
CHR Extension: (Save to Pocket) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-12-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-15]
CHR Extension: (Google Mail) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-15]
CHR Extension: (Chrome Media Router) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-20]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-15] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-15] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-12-21] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [229648 2016-10-01] (EasyAntiCheat Ltd)
R2 esifsvc; C:\WINDOWS\SysWoW64\esif_uf.exe [1392792 2015-11-09] (Intel Corporation)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent)
R2 HTC Account Service; C:\Program Files\HTC Account\Htc.Identity.Service.exe [20712 2016-12-15] (HTC Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-04-04] ()
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [49704 2016-06-07] (ASUSTeK COMPUTER INC.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
S2 Viveport; C:\Program Files (x86)\ViveSetup\PCClient\ViveportService.exe [72016 2016-12-30] ()
R2 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [5663824 2016-06-06] (RealVNC Ltd)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-30] (Intel(R) Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3833248 2016-04-04] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [95224 2016-05-19] (ASUS Corporation)
S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [66136 2016-11-29] (Broadcom Corporation.)
S3 CY3014.X64; C:\WINDOWS\system32\DRIVERS\CY3014.X64.SYS [3546928 2016-09-02] ()
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [108608 2016-09-24] (Dokan Project)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [55784 2015-11-09] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [52200 2015-11-09] (Intel Corporation)
S3 ElgatoVAD; C:\WINDOWS\system32\DRIVERS\ElgatoVAD.sys [39208 2016-08-09] (Elgato Systems GmbH)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [260072 2015-11-09] (Intel Corporation)
S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] () [Datei ist nicht signiert]
S3 GeneStor; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [115704 2015-07-15] (GenesysLogic)
R1 gfdriver; C:\WINDOWS\System32\drivers\gfdriver.sys [51904 2015-01-14] (Titan ARC Corp.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [341256 2016-04-20] (Intel Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7139088 2016-05-08] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_11a67240324f74de\nvlddmkm.sys [14200880 2016-12-12] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [898296 2016-01-13] (Realtek                                            )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 00:31 - 2017-01-05 00:36 - 00000000 ____D C:\AdwCleaner
2017-01-04 16:50 - 2017-01-04 16:51 - 00000046 _____ C:\Users\******\Desktop\black.html
2017-01-04 04:43 - 2017-01-04 04:43 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-01-04 04:03 - 2017-01-04 04:03 - 00000000 ____D C:\Users\******\AppData\Roaming\NVIDIA
2017-01-04 03:52 - 2017-01-04 03:52 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-04 03:52 - 2016-12-11 19:47 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00548408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-01-04 03:52 - 2016-12-11 19:23 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-01-04 03:52 - 2016-12-09 09:52 - 07639617 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-01-04 03:52 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-01-04 03:52 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-01-04 03:52 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-01-04 03:52 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-01-04 03:51 - 2016-12-12 04:03 - 00215608 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-01-04 03:51 - 2016-12-12 04:03 - 00201664 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-01-04 03:51 - 2016-12-11 19:47 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
FRST Part 2
Code:
ATTFilter
2017-01-04 03:49 - 2016-12-12 22:27 - 00047032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2017-01-04 03:49 - 2016-12-12 04:03 - 40125496 _____ C:\WINDOWS\system32\nvcompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 35222976 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 34710584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 28201408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 10912744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 10803880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 10353960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 09158616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 08913328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 08761560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 03934504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 03474392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 02950200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 02587704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01953336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437633.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01595456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01586744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437633.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01038392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00974784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00942528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00894400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00802768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00801560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00683640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00643928 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00642392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00617696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00572888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00438208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00394888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00388544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00386104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00347072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00327408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00212936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2017-01-04 03:49 - 2016-12-12 04:03 - 00046024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00042286 _____ C:\WINDOWS\system32\nvinfo.pb
2017-01-04 03:49 - 2016-12-12 04:03 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2017-01-04 03:49 - 2016-12-12 04:03 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
2017-01-04 03:25 - 2017-01-04 03:46 - 393367376 _____ (NVIDIA Corporation) C:\Users\******\Downloads\376.33-notebook-win10-64bit-international-whql.exe
2017-01-04 02:57 - 2017-01-04 02:57 - 02133200 _____ C:\Users\******\Documents\cemu_1.6.4.zip
2017-01-03 02:53 - 2017-01-03 02:53 - 00000000 ____D C:\Users\******\AppData\LocalLow\Owlchemy Labs
2017-01-03 00:16 - 2017-01-03 00:16 - 00047191 _____ C:\Users\******\Downloads\frst-addition.zip
2017-01-02 23:50 - 2017-01-02 23:50 - 00000000 ____D C:\Users\******\Downloads\FRST-OlderVersion
2017-01-02 15:31 - 2017-01-02 15:33 - 00000718 _____ C:\Users\******\Desktop\Neues Textdokument.txt
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sonokinetic Ltd
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Local\Deployment
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Local\Apps\2.0
2017-01-02 14:56 - 2017-01-02 14:56 - 00593368 _____ () C:\Users\******\Downloads\setup.exe
2017-01-01 22:45 - 2017-01-01 22:45 - 785221938 _____ C:\Users\******\Downloads\Waifu Sex Simulator 2.0 Patch.7z
2017-01-01 22:12 - 2017-01-01 22:12 - 00000000 ____D C:\Users\******\AppData\LocalLow\Wolf & Wood Interactive Ltd
2017-01-01 20:58 - 2017-01-01 20:58 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mixed Realms
2017-01-01 20:42 - 2017-01-05 00:31 - 03977168 _____ C:\Users\******\Downloads\AdwCleaner_6.041.exe
2017-01-01 20:41 - 2017-01-01 20:44 - 54199488 _____ (Malwarebytes ) C:\Users\******\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-01 02:34 - 2017-01-01 02:34 - 02103788 _____ C:\Users\******\Downloads\all-rail-gun-maps.zip
2017-01-01 00:49 - 2017-01-05 00:38 - 00021005 _____ C:\Users\******\Downloads\FRST.txt
2017-01-01 00:49 - 2017-01-03 00:11 - 00064293 _____ C:\Users\******\Downloads\Addition.txt
2017-01-01 00:48 - 2017-01-05 00:38 - 00000000 ____D C:\FRST
2017-01-01 00:47 - 2017-01-02 23:50 - 02418176 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2016-12-31 01:26 - 2016-12-31 01:26 - 04482080 _____ C:\Users\******\Downloads\hidtovpad.elf
2016-12-31 01:19 - 2016-12-31 05:20 - 00000000 ____D C:\Users\******\AppData\Roaming\Cronus
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CronusPRO
2016-12-31 01:16 - 2016-12-31 01:17 - 00000000 ____D C:\Program Files (x86)\CronusPRO
2016-12-31 01:02 - 2016-12-31 01:02 - 00063257 _____ C:\Users\******\Downloads\C08ULePW8AEQeiY.jpg
2016-12-31 00:52 - 2016-12-31 01:16 - 13683048 _____ C:\Users\******\Downloads\Cronus_0112_Setup.exe
2016-12-29 17:54 - 2016-12-29 17:54 - 00369948 _____ C:\Users\******\Downloads\AuRa.zip
2016-12-29 17:35 - 2016-12-29 17:35 - 00402907 _____ C:\WINDOWS\Bid For Power Uninstaller.exe
2016-12-29 17:35 - 2016-12-29 17:35 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bid For Power
2016-12-29 16:53 - 2016-12-29 16:54 - 13877245 _____ C:\Users\******\Downloads\spearmint-0.4-windows.zip
2016-12-28 01:27 - 2016-12-28 01:27 - 00000000 ____D C:\Users\Default\AppData\Local\CEF
2016-12-28 01:27 - 2016-12-28 01:27 - 00000000 ____D C:\Users\Default User\AppData\Local\CEF
2016-12-23 04:37 - 2016-12-23 04:37 - 00000000 ____D C:\Users\******\AppData\Local\SummerCamp
2016-12-23 03:38 - 2016-12-23 03:38 - 00000000 ____D C:\Users\******\AppData\Local\RawData
2016-12-22 23:30 - 2016-12-22 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-12-20 05:50 - 2016-12-20 05:50 - 00602646 _____ C:\Users\******\Downloads\PS3PS4toWiiU_FirmwareUpdateGuide_201608.pdf
2016-12-20 04:08 - 2016-12-20 04:08 - 00000000 ____D C:\Users\******\AppData\Local\Apple
2016-12-20 04:08 - 2016-12-20 04:08 - 00000000 ____D C:\ProgramData\Apple
2016-12-20 04:04 - 2016-12-28 00:21 - 00000000 ____D C:\Program Files\Bonjour
2016-12-20 04:04 - 2016-12-28 00:21 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-12-20 04:03 - 2016-12-20 04:03 - 00000000 ____D C:\Users\******\AppData\Local\Downloaded Installations
2016-12-20 04:03 - 2016-12-20 04:03 - 00000000 ____D C:\Users\******\AppData\Local\AirMouse
2016-12-20 04:00 - 2016-12-20 04:03 - 11835888 _____ (RPA Tech, Inc ) C:\Users\******\Downloads\setup3.3.2.exe
2016-12-16 05:27 - 2016-12-16 05:27 - 00000000 ____D C:\Users\******\AppData\Local\CrashReportClient
2016-12-16 02:15 - 2016-12-16 02:15 - 00000000 ____D C:\Program Files\App Dynamic
2016-12-15 17:06 - 2017-01-02 18:18 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mozilla
2016-12-15 17:05 - 2016-12-15 17:12 - 00000000 ____D C:\Users\******\AppData\Local\Mozilla
2016-12-15 17:05 - 2016-12-15 17:06 - 00000000 ____D C:\Users\******\AppData\Roaming\Mozilla
2016-12-15 17:05 - 2016-12-15 17:05 - 00001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-15 17:05 - 2016-12-15 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-15 17:05 - 2016-12-15 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-15 17:02 - 2016-12-15 17:02 - 00243720 _____ C:\Users\******\Downloads\Firefox Setup Stub 50.1.0.exe
2016-12-13 05:54 - 2016-12-13 05:54 - 00000000 ____D C:\Users\******\AppData\Local\Chromium
2016-12-09 06:09 - 2016-12-09 06:09 - 00002183 _____ C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2016-12-09 06:09 - 2016-12-09 06:09 - 00000000 ____D C:\Users\******\AppData\Local\FluxSoftware
2016-12-08 00:48 - 2016-11-17 14:44 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-12-08 00:48 - 2016-11-17 14:44 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-12-08 00:48 - 2016-11-17 14:44 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 00:37 - 2016-12-05 11:06 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-05 00:37 - 2016-12-05 11:02 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-05 00:37 - 2016-10-15 15:40 - 00000000 ___RD C:\Dropbox
2017-01-05 00:37 - 2016-10-15 13:18 - 00000000 ____D C:\Users\******\AppData\Local\Spotify
2017-01-05 00:37 - 2016-09-30 12:47 - 00000000 ____D C:\Program Files (x86)\Steam
2017-01-05 00:37 - 2016-09-30 12:19 - 00000182 _____ C:\Users\******\AppData\Roaming\sp_data.sys
2017-01-05 00:36 - 2016-11-30 04:32 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-05 00:36 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-01-05 00:36 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2017-01-05 00:30 - 2016-12-05 11:02 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-04 23:54 - 2016-10-15 13:16 - 00000000 ____D C:\Users\******\AppData\Roaming\Spotify
2017-01-04 16:42 - 2016-12-05 11:06 - 00003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2017-01-04 16:42 - 2016-12-05 11:06 - 00003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2017-01-04 06:41 - 2016-11-29 21:32 - 00000000 ____D C:\Users\******\AppData\Local\HTC_Neo
2017-01-04 06:16 - 2016-09-30 15:16 - 00000000 ____D C:\Users\******\AppData\Local\CrashDumps
2017-01-04 06:11 - 2016-07-16 23:51 - 00928168 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-04 06:11 - 2016-07-16 23:51 - 00209868 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-04 06:11 - 2016-03-24 12:50 - 02287922 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-04 04:44 - 2016-11-29 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIVE Software
2017-01-04 04:44 - 2016-03-24 13:04 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-04 03:52 - 2016-12-05 12:57 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-04 03:52 - 2016-12-05 11:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-04 03:52 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-01-04 03:52 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-04 03:51 - 2016-09-11 10:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-02 15:34 - 2016-12-05 11:03 - 00000000 ____D C:\Users\******
2017-01-01 19:15 - 2016-12-05 00:37 - 00000000 ____D C:\Users\******\AppData\Roaming\matzman666
2017-01-01 00:33 - 2016-12-01 01:04 - 00000200 _____ C:\Users\******\AppData\Roaming\WB.CFG
2016-12-31 06:51 - 2016-11-27 02:53 - 00000000 ____D C:\Users\******\AppData\Roaming\vlc
2016-12-31 01:17 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\Logs
2016-12-29 17:59 - 2016-09-30 13:10 - 00000000 ____D C:\Games
2016-12-29 16:32 - 2016-11-29 12:46 - 00000000 ____D C:\Users\******\AppData\Local\ElevatedDiagnostics
2016-12-29 16:32 - 2016-11-29 12:45 - 00000000 ____D C:\Users\******\AppData\Local\Diagnostics
2016-12-29 16:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\config\RegBack
2016-12-28 20:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-12-28 01:27 - 2016-11-29 14:53 - 00000000 ____D C:\Program Files\HTC Account
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-28 00:21 - 2016-12-05 11:05 - 00015948 _____ C:\WINDOWS\PFRO.log
2016-12-22 23:30 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs
2016-12-22 23:30 - 2016-03-24 13:06 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-12-21 23:23 - 2016-10-15 14:30 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-21 20:41 - 2016-10-01 01:41 - 00537848 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2016-12-20 04:29 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-20 04:04 - 2016-07-16 07:04 - 00000000 ___RD C:\Program Files
2016-12-20 00:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\config
2016-12-20 00:16 - 2016-10-15 12:43 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-19 22:29 - 2016-12-05 11:06 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-19 22:29 - 2016-12-05 11:06 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 21:30 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Drivers\UMDF
2016-12-16 05:18 - 2016-10-01 01:41 - 00000000 ____D C:\Users\******\AppData\Local\UnrealEngine
2016-12-16 02:15 - 2016-10-27 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirServer Universal (x64)
2016-12-16 02:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\config\systemprofile
2016-12-15 22:00 - 2016-11-30 04:33 - 00000000 ____D C:\Users\******\AppData\Local\JDownloader v2.0
2016-12-15 22:00 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Desktop
2016-12-13 17:37 - 2016-12-05 11:03 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-13 17:37 - 2016-12-05 11:03 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000001.regtrans-ms
2016-12-13 17:37 - 2016-12-05 11:03 - 00065536 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TM.blf
2016-12-13 17:37 - 2016-07-16 07:04 - 42991616 _____ C:\WINDOWS\system32\config\COMPONENTS
2016-12-13 16:58 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\WinSxS
2016-12-12 18:16 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-10 21:01 - 2016-09-30 12:20 - 00000000 ____D C:\Users\******\AppData\Local\NVIDIA Corporation
2016-12-09 23:43 - 2016-12-05 11:03 - 00000000 ____D C:\Users\******\AppData\Local\Microsoft
2016-12-09 23:38 - 2016-07-16 12:47 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-09 05:39 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2016-12-07 18:37 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\assembly
2016-12-07 00:07 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-06 23:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-12-06 23:58 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WDI

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-11-30 04:33 - 2016-11-30 04:33 - 0020189 _____ () C:\Users\******\AppData\Roaming\Loboponidaka
2016-09-30 17:34 - 2016-10-28 21:11 - 0002733 _____ () C:\Users\******\AppData\Roaming\SpeedRunnersLog.txt
2016-09-30 12:19 - 2017-01-05 00:37 - 0000182 _____ () C:\Users\******\AppData\Roaming\sp_data.sys
2016-12-01 01:04 - 2017-01-01 00:33 - 0000200 _____ () C:\Users\******\AppData\Roaming\WB.CFG
2016-12-05 11:02 - 2016-12-05 11:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job


Einige Dateien in TEMP:
====================
C:\Users\******\AppData\Local\Temp\libeay32.dll
C:\Users\******\AppData\Local\Temp\msvcr120.dll
C:\Users\******\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\******\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\******\AppData\Local\Temp\nvStInst.exe
C:\Users\******\AppData\Local\Temp\sqlite3.dll
C:\Users\******\AppData\Local\Temp\vcredist_x86.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-29 16:32

==================== Ende von FRST.txt ============================
--- --- ---


Addition.txt
FRST Additions Logfile:
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von ****** (05-01-2017 00:38:58)
Gestartet von C:\Users\******\Downloads
Windows 10 Home Version 1607 (X64) (2016-12-05 10:08:03)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4081720298-658147086-3706344339-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4081720298-658147086-3706344339-503 - Limited - Disabled)
Gast (S-1-5-21-4081720298-658147086-3706344339-501 - Limited - Disabled)
****** (S-1-5-21-4081720298-658147086-3706344339-1001 - Administrator - Enabled) => C:\Users\******

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

A Chair in a Room: Greenwater (HKLM\...\Steam App 427760) (Version:  - Wolf &amp; Wood Interactive Ltd)
Accounting (HKLM\...\Steam App 518580) (Version:  - Crows Crows Crows)
Activision(R) (x32 Version: 1.00.0000 - Activision) Hidden
AirServer Universal (x64) (HKLM\...\{A61F995D-62E3-4B4A-9365-ABB9DBFA388D}) (Version: 5.1.2 - App Dynamic)
Ansel (Version: 376.33 - NVIDIA Corporation) Hidden
Arizona Sunshine (HKLM\...\Steam App 342180) (Version:  - Vertigo Games)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.10 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.16.0002 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS)
Asus Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.32 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0048 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.1.19 - ICEpower a/s)
AutoHotkey 1.1.24.02 (HKLM\...\AutoHotkey) (Version: 1.1.24.02 - Lexikos)
Bid For Power (HKLM-x32\...\Bid For Power) (Version: 1.2 - DigitalZone)
BingProvidedSearch (HKLM-x32\...\{8FBF677F-DF3F-B6FF-6EBF-C67FBE3F15FF}) (Version:  - )
Blur(TM) (HKLM-x32\...\InstallShield_{589A63D3-89E1-4D9B-8DBC-6039BB27289E}) (Version: 1.00.0000 - Activision)
Budget Cuts Demo (HKLM\...\Steam App 459860) (Version:  - Neat Corporation)
Carmageddon: Max Damage (HKLM\...\Steam App 505170) (Version:  - Stainless Games Ltd)
ClusterPuck 99 (HKLM\...\Steam App 337960) (Version:  - PHL Collective)
Connect version 3.2.4 (HKLM-x32\...\{D8B98D6D-FEF3-4245-8BF5-598F28C28517}_is1) (Version: 3.2.4 - Continuata Ltd)
Cronus PRO 1.12 (HKLM-x32\...\Cronus PRO) (Version: 1.12 - CronusMAX Team)
Dead by Daylight (HKLM\...\Steam App 381210) (Version:  - Behaviour Digital Inc.)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.3 - ASUSTek Computer Inc.)
Dokan Driver (x64) (Version: 1.1.0.2 - HTC Corp.) Hidden
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
Dropbox (HKLM-x32\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
EARTH DEFENSE FORCE 4.1  The Shadow of New Despair (HKLM\...\Steam App 410320) (Version:  - SANDLOT)
Eleven: Table Tennis VR (HKLM\...\Steam App 488310) (Version:  - For Fun Labs)
Elgato Game Capture HD (HKLM\...\{ED82792C-D579-412E-B2BB-CD612498A3B7}) (Version: 3.50.88.2088 - Elgato Systems GmbH)
f.lux (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Flux) (Version:  - )
Friday the 13th: The Game BETA (HKLM\...\Steam App 569300) (Version:  - )
Fruit Ninja VR (HKLM\...\Steam App 486780) (Version:  - Halfbrick Studios Pty Ltd)
Game Capture HD60 S v1.1.0.167 (HKLM-x32\...\Software_Elgato_Game Capture HD60 S) (Version: 1.1.0.167 - Elgato Systems)
GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.23) (Version: 1.5.23 - ASUS)
GameFirst IV (x32 Version: 1.5.23 - ASUS) Hidden
Gang Beasts (HKLM\...\Steam App 285900) (Version:  - Boneloaf)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Earth VR (HKLM\...\Steam App 348250) (Version:  - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version:  - Rockstar North)
HTC Account (Version: 1.1.2.6 - HTC Corporation) Hidden
ILLUSION プレイクラブ (HKLM-x32\...\{EDA7A566-434A-4784-AE98-74AFA46A2485}) (Version: 1.00.0000 - ILLUSION)
Intel(R) Chipset Device Software (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{A984B01A-6823-4C0F-8E83-BE08B3256209}) (Version: 18.1.1612.3253 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{498e3edb-cc7c-42dc-832e-11fdfed6d76e}) (Version: 18.40.3 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Job Simulator (HKLM\...\Steam App 448280) (Version:  - Owlchemy Labs)
Knight Squad (HKLM\...\Steam App 294000) (Version:  - Chainsawesome Games)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.6.8 - Hermann Schinagl)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mount Your Friends (HKLM\...\Steam App 296470) (Version:  - Stegersaurus Software Inc.)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla)
NewRetroArcade: Neon (HKLM\...\Steam App 465780) (Version:  - Digital Cybercherries)
NVIDIA 3D Vision Treiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.33 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.16.2 - OBS Project)
Painkiller Hell & Damnation (HKLM\...\Steam App 214870) (Version:  - The Farm 51)
Pinball FX2 VR (HKLM\...\Steam App 547590) (Version:  - Zen Studios)
PixelMaster Video HDR (HKLM\...\{65302154-AAF6-4020-A070-76CAA9CEC8D3}) (Version: 1.1.37 - ASUS)
Pool Nation VR  (HKLM\...\Steam App 269170) (Version:  - Cherry Pop Games)
Project64 version 2.3.0.210 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.0.210 - )
Quake III Arena (HKLM\...\Steam App 2200) (Version:  - id Software)
Quiplash (HKLM\...\Steam App 351510) (Version:  - Jackbox Games, Inc.)
Raw Data (HKLM\...\Steam App 436320) (Version:  - Survios)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7818 - Realtek Semiconductor Corp.)
Rec Room (HKLM\...\Steam App 471710) (Version:  - Against Gravity)
Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.5 - Rockstar Games)
ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 1.0.12 - ASUS)
Sairento VR (HKLM\...\Steam App 555880) (Version:  - Mixed Realms Pte Ltd)
Serious Sam 3: BFE (HKLM\...\Steam App 41070) (Version:  - Croteam)
Serious Sam VR: The First Encounter (HKLM\...\Steam App 552450) (Version:  - Croteam VR)
Serious Sam VR: The Last Hope (HKLM\...\Steam App 465240) (Version:  - Croteam VR)
Sonokinetic Content Manager (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\3a0c6f576a92e147) (Version: 1.2.2.7 - Sonokinetic Ltd)
Space Pirate Trainer (HKLM\...\Steam App 418650) (Version:  - I-Illusions)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamVR (HKLM\...\Steam App 250820) (Version:  - )
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
The Brookhaven Experiment (HKLM\...\Steam App 440630) (Version:  - Phosphor Games)
The Jackbox Party Pack 3 (HKLM\...\Steam App 434170) (Version:  - Jackbox Games, Inc.)
The Lab (HKLM\...\Steam App 450390) (Version:  - Valve)
theBlu (HKLM\...\Steam App 451520) (Version:  - Wevr, Inc.)
Toastify (HKLM-x32\...\Toastify) (Version: 1.6 - Jesper Palm)
Trials Evolution Gold Edition (HKLM\...\Steam App 220160) (Version:  - Redlynx Ltd)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vanishing Realms (HKLM\...\Steam App 322770) (Version:  - Indimo Labs LLC)
Vive (x32 Version: 1.0.8889.974 - HTC Corp.) Hidden
Vive Diagnosis (HKLM-x32\...\{3a2fbb45-ffeb-4ade-96e1-d1eea735e0f1}) (Version: 1.0.1.13 - HTC Corp.)
Vive DirectX 9.0 (HKLM-x32\...\{ac723cbb-bf65-46e5-ac2e-58d5a959e196}) (Version: 1.0.1.2 - HTC Corp.)
VIVE Software (HKLM-x32\...\VIVE Software) (Version: 1.0.1.105 - HTC)
ViveDiag (x32 Version: 1.0.1.13 - HTC Corp.) Hidden
ViveDriver (HKLM-x32\...\{8ff389b7-122a-494c-9d04-cb3165b8738d}) (Version: 1.1.0.8 - HTC Corp.)
ViveDummy (x32 Version: 0.9.0.4 - HTC) Hidden
ViveDX9 (x32 Version: 1.0.1.2 - HTC Corp.) Hidden
VivePhoneServices (x32 Version: 1.1.0.4 - HTC Corp.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VNC Server 5.3.2 (HKLM\...\{BD3BF59A-3CD6-49B3-A166-E57BF55FF959}) (Version: 5.3.2.19179 - RealVNC Ltd)
VNC Viewer 5.3.2 (HKLM\...\{F10020E5-D194-469E-B494-DDCE5D76A3A0}) (Version: 5.3.2.19179 - RealVNC Ltd)
VR The Diner Duo (HKLM\...\Steam App 530120) (Version:  - Whirlybird Games)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vuze Leap 2.6 (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\{a9a27088-7578-499d-ad2b-67ba95a4def4}) (Version: 2.6 - Azureus Software, Inc.)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.1.1.8 - WildTangent)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
Windows Driver Package - ASUS (AsusPTPDrv) HIDClass  (04/28/2016 11.0.0.10) (HKLM\...\2E5C3DB999A508D7469B1F0294BCAF149A6B7ABB) (Version: 04/28/2016 11.0.0.10 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.1.0 - ASUS)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Worms Ultimate Mayhem (HKLM\...\Steam App 70600) (Version:  - Team17 Digital Ltd)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {17D73A19-6F14-41DA-9E25-D56AECD6B9EC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-02-23] (ASUSTek Computer Inc.)
Task: {180A57A1-CCB1-4373-AE34-3E9AC290D311} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
Task: {1A813745-5C62-4FA9-A5FE-C76088F8D729} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)
Task: {1ED94F8B-6C7E-4D6B-812D-7B2784C70938} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {1EF3E5B8-37AE-4546-BE3F-98825C662409} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-15] (Google Inc.)
Task: {2095B846-10FC-406B-897F-561EB4DBE5CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-15] (Google Inc.)
Task: {2E3B106D-56A0-4D3C-8A31-83F06385F045} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {47922D6D-E96B-4367-A4E1-1430F28C7396} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {5D88BF17-7C7D-4B94-A7B8-832B555F8C19} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-05-24] (ASUS)
Task: {619E0C02-4C51-46BF-AF91-3FDD42D66727} - System32\Tasks\{8C0B2CF8-35E8-41BF-BFA2-693F6B61456B} => pcalua.exe -a "C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe" -d "C:\Program Files (x86)\Activision\Blur(TM)"
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-01-19] (ASUSTek Computer Inc.)
Task: {6A341053-76BE-46E6-982B-56ADA2756E91} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {716CCBE3-8654-413D-AB11-C8F1B28DFFFA} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-10-15] (Dropbox, Inc.)
Task: {721F5C3B-58BC-4D27-A034-272F29F4F74C} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-05-13] (Realtek Semiconductor)
Task: {7D670C6A-14EF-49EF-AFA9-1CE5A71A5C49} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)
Task: {853F616A-D44C-4DDC-AEAB-46322997361B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-05-13] (Realtek Semiconductor)
Task: {A7F50025-B640-46F8-9F88-38E969D7C6B9} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {C530860D-8341-46DB-AFBB-C00396C7BB2D} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [2016-06-07] (ASUSTek Computer Inc.)
Task: {D993944C-79F9-486E-9BD8-08F05031CE7C} - System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => C:\Users\******\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403\UpdTask.exe [2013-05-07] ()
Task: {EC2D6CA5-E86D-486C-8562-F91034A2F6A0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-10-15] (Dropbox, Inc.)
Task: {F26B0020-CC22-42A3-AB59-6722D299C575} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
Task: {F5A73441-D659-45F6-A065-460B3E5DBBF6} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {FB5E02FC-CC24-4B52-BAC6-D390D12F9875} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension\Donate.lnk -> hxxp://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.htm

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2004-09-30 19:15 - 2004-09-30 19:15 - 00192000 _____ () C:\Program Files\LinkShellExtension\RockallDLL.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-12-05 11:33 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-05 11:32 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-05 11:33 - 2016-11-02 11:13 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-12-05 13:42 - 2016-12-05 13:44 - 01084928 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1611.3132.0_x64__8wekyb3d8bbwe\TimeBackground.dll
2016-12-05 11:33 - 2016-11-02 11:13 - 00115712 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\DeviceSideServicesActionUriHandler.dll
2016-12-05 11:33 - 2016-11-02 11:13 - 00522752 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.NodeWinrtWrap.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 00040448 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\winrt-projections\bin\Winrt_Projections.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00813056 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http\bin\NodeRT_Windows_Web_Http.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00963584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.headers\bin\NodeRT_Windows_Web_Http_Headers.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00249344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.filters\bin\NodeRT_Windows_Web_Http_Filters.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00572416 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.storage.streams\bin\NodeRT_Windows_Storage_Streams.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00403968 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.foundation\bin\NodeRT_Windows_Foundation.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00183296 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\nodert-buffer-utils\bin\NodeRT_Buffer_Utils.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00288256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.cortana.pal\bin\NodeRT_Windows_Cortana_PAL.node
2016-12-05 11:43 - 2016-12-05 11:44 - 00055808 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.10.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 03014664 _____ () C:\Program Files\App Dynamic\AirServer\avcodec-56.dll
2016-11-10 15:40 - 2016-11-10 15:40 - 00039424 _____ () C:\Program Files\App Dynamic\AirServer\avdevice-56.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00388616 _____ () C:\Program Files\App Dynamic\AirServer\avformat-56.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00423944 _____ () C:\Program Files\App Dynamic\AirServer\avutil-54.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00632328 _____ () C:\Program Files\App Dynamic\AirServer\swscale-3.dll
2016-11-10 15:40 - 2016-11-10 15:40 - 00186368 _____ () C:\Program Files\App Dynamic\AirServer\avfilter-5.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00428552 _____ () C:\Program Files\App Dynamic\AirServer\qp.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00172552 _____ () C:\Program Files\App Dynamic\AirServer\swresample-1.dll
2016-10-16 02:19 - 2016-10-13 10:07 - 01208832 _____ () C:\Program Files\AutoHotkey\AutoHotkey.exe
2016-05-24 12:44 - 2016-05-24 12:44 - 00027648 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 51777648 _____ () C:\Users\******\AppData\Roaming\Spotify\libcef.dll
2016-10-27 00:02 - 2016-12-21 20:36 - 00110192 _____ () C:\Users\******\AppData\Roaming\Spotify\SpotifyWinRT.dll
2016-09-30 12:58 - 2016-12-08 16:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-09-30 12:58 - 2016-12-20 03:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-09-30 12:58 - 2016-12-20 03:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-09-30 12:58 - 2016-07-04 23:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 01803888 _____ () C:\Users\******\AppData\Roaming\Spotify\libglesv2.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 00086128 _____ () C:\Users\******\AppData\Roaming\Spotify\libegl.dll
2016-10-15 15:26 - 2016-11-11 21:36 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-12-22 23:30 - 2016-11-11 21:37 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-10-15 15:26 - 2016-11-11 21:38 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-12-22 23:30 - 2016-11-11 21:38 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-12-22 23:30 - 2016-11-11 21:35 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2016-12-22 23:30 - 2016-12-03 09:13 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-12-22 23:30 - 2016-12-21 19:26 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-12-22 23:30 - 2016-11-11 21:42 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-12-22 23:30 - 2016-11-11 21:42 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00171320 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-12-13 05:54 - 2016-12-05 17:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-09-30 12:58 - 2015-09-25 00:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-05-25 22:52 - 2016-05-25 22:52 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-12-30 19:41 - 2016-12-30 19:41 - 00072016 _____ () C:\Program Files (x86)\ViveSetup\PCClient\ViveportService.exe
2016-12-30 19:38 - 2016-12-30 19:38 - 00483664 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_update_requester_api.dll
2016-12-30 19:39 - 2016-12-30 19:39 - 00402432 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_service_api.dll
2016-12-30 19:39 - 2016-12-30 19:39 - 01912832 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_store_api.dll
2016-12-30 19:39 - 2016-12-30 19:39 - 01639936 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_wkstore_api.dll
2016-12-30 19:39 - 2016-12-30 19:39 - 00378088 _____ () C:\Program Files (x86)\ViveSetup\PCClient\x86\vita_msg_proxy.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2015-10-30 08:21 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\******\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{5e2884bd-4546-4c7b-8ca3-083fe0944360}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "Elgato Sound Capture"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "HTC Store User Content Helper"
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\StartupApproved\Run: => "f.lux"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{FC65AEF7-CE44-4758-B638-088B0AC3238C}] => C:\Program Files (x86)\Steam\steamapps\common\FruitNinjaVR\FruitNinjaVR.exe
FirewallRules: [{71D08EF4-192F-4E94-A4A0-E14063635E93}] => C:\Program Files (x86)\Steam\steamapps\common\FruitNinjaVR\FruitNinjaVR.exe
FirewallRules: [{E2E2861F-F452-4565-972D-9AD4115A3379}] => C:\Users\******\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{D8B40F12-03DA-4369-9C8A-2C4926D2D1CD}] => C:\Users\******\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{726FF98F-2F62-469B-A13D-29DB82B52B59}] => C:\Program Files (x86)\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{7AD13187-4703-46BE-85EC-461036845460}] => C:\Program Files (x86)\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{F1ACD154-6B2B-4CC7-B72F-873C9AB1816A}] => C:\Program Files (x86)\Steam\steamapps\common\Pinball FX2 VR\Pinball FX2.exe
FirewallRules: [{5EE27B4A-FAE2-4CEA-9507-CD671C5F84B7}] => C:\Program Files (x86)\Steam\steamapps\common\Pinball FX2 VR\Pinball FX2.exe
FirewallRules: [{D6070B8C-D8BF-4D3D-802C-D2631AAF88FD}] => C:\Program Files (x86)\Steam\steamapps\common\Budget Cuts Demo\Budget Cuts Demo.exe
FirewallRules: [{C1242F36-AF05-4FA2-ACD2-BF7612FAD25D}] => C:\Program Files (x86)\Steam\steamapps\common\Budget Cuts Demo\Budget Cuts Demo.exe
FirewallRules: [{E672579E-CF64-4868-BBF8-CAC65AD037AC}] => C:\Program Files (x86)\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{4C455939-159E-4D7F-8F8B-0BEBC9D83809}] => C:\Program Files (x86)\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{933A580C-27A3-49AF-8F9D-FE19F5737A43}] => C:\Program Files (x86)\ViveSetup\PCClient\web\apps\phone\vivephoneinit\VivePhoneInit.exe
FirewallRules: [{09CFA7F9-CB17-45AF-822D-9EC5335324B8}] => C:\Program Files (x86)\ViveSetup\PCClient\web\apps\phone\nw.exe
FirewallRules: [{6C2FAD04-3C23-4A81-9712-5A41EF63BDB9}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcadeBuilder.exe
FirewallRules: [{6E918B06-9DBF-460E-8856-D2CB96DD8879}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcadeBuilder.exe
FirewallRules: [{7572F680-0BE0-40D7-85C5-F570ED729ACB}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcade\Binaries\Win64\NewRetroArcade.exe
FirewallRules: [{39927F1D-A8B7-44BB-ABDE-A76414D9A306}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcade\Binaries\Win64\NewRetroArcade.exe
FirewallRules: [{597E0A57-DA1D-4D25-A9B4-0530A2A0F089}] => C:\Program Files (x86)\Steam\steamapps\common\Eleven Table Tennis VR\pong_waves_vr.exe
FirewallRules: [{3A6473EB-6ABD-4853-B7D5-39FC3B8C2FE6}] => C:\Program Files (x86)\Steam\steamapps\common\Eleven Table Tennis VR\pong_waves_vr.exe
FirewallRules: [{5FC6996A-0E7B-4DF7-B849-AFE78C47987F}] => C:\Program Files (x86)\Steam\steamapps\common\VanishingRealms\VanishingRealms.exe
FirewallRules: [{49F2F2E9-197B-4A88-8ED2-E7D977FB35A3}] => C:\Program Files (x86)\Steam\steamapps\common\VanishingRealms\VanishingRealms.exe
FirewallRules: [{0AFBB2C3-9694-4C03-9A89-657FCA3C9221}] => C:\Program Files (x86)\Steam\steamapps\common\PoolNationVR\PoolNationVR.exe
FirewallRules: [{D768FB6D-083C-4BC6-A0A7-0FD318176CA1}] => C:\Program Files (x86)\Steam\steamapps\common\PoolNationVR\PoolNationVR.exe
FirewallRules: [{12BA2F2C-ED2A-44CA-9CD3-A02C1450674F}] => C:\Program Files (x86)\Steam\steamapps\common\EarthVR\Earth.exe
FirewallRules: [{08AAD793-035A-4BEF-B33F-251E151EEAB7}] => C:\Program Files (x86)\Steam\steamapps\common\EarthVR\Earth.exe
FirewallRules: [{555A9D2D-6591-4160-8412-3662AD3FDC3A}] => C:\Program Files (x86)\Steam\steamapps\common\theBlu\theblu.exe
FirewallRules: [{205577A7-4709-4858-955A-F78D1967658A}] => C:\Program Files (x86)\Steam\steamapps\common\theBlu\theblu.exe
FirewallRules: [{72ADE6AB-4738-4AD0-A9AB-1DC9F3A64434}] => C:\Program Files (x86)\Steam\steamapps\common\Accounting\Accounting.exe
FirewallRules: [{0343C420-A0D0-4C14-BC9D-1CD35AAE43FB}] => C:\Program Files (x86)\Steam\steamapps\common\Accounting\Accounting.exe
FirewallRules: [{3C59F27A-3909-467B-9C78-A4C9BEF85ECD}] => C:\Program Files (x86)\Steam\steamapps\common\Brookhaven\BrookhavenGame.exe
FirewallRules: [{1D477925-1504-45E3-AF10-39400DEC7FA0}] => C:\Program Files (x86)\Steam\steamapps\common\Brookhaven\BrookhavenGame.exe
FirewallRules: [{008F1AA2-C031-4875-B162-C85D2922004F}] => C:\Program Files (x86)\Steam\steamapps\common\Space Pirate Trainer VR\SpacePirateVR.exe
FirewallRules: [{2D26FDED-BF46-4A3D-941B-19E7B3EC8000}] => C:\Program Files (x86)\Steam\steamapps\common\Space Pirate Trainer VR\SpacePirateVR.exe
FirewallRules: [{2C5B3BA8-7402-454E-8193-AD52FFEE581E}] => C:\Program Files (x86)\Steam\steamapps\common\Carmageddon Max Damage\bin\Carmageddon_Max_Damage.exe
FirewallRules: [{6453D716-CFBE-4B29-ADF1-9E43E9345A31}] => C:\Program Files (x86)\Steam\steamapps\common\Carmageddon Max Damage\bin\Carmageddon_Max_Damage.exe
FirewallRules: [UDP Query User{CE30115C-575A-421B-ACA8-E69B9EC0A7EE}C:\program files\realvnc\vnc viewer\vncviewer.exe] => C:\program files\realvnc\vnc viewer\vncviewer.exe
FirewallRules: [TCP Query User{3CCD8441-36EF-440D-AA33-59EA3E21AFD2}C:\program files\realvnc\vnc viewer\vncviewer.exe] => C:\program files\realvnc\vnc viewer\vncviewer.exe
FirewallRules: [UDP Query User{615CD6D3-D19D-47E2-BE0A-D96333D6C739}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{35F3AE2E-A8D6-44AA-92F1-0A3155F2A1B8}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{75B01C3A-9FD2-47FB-A7D1-25569179E147}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{0BE3CBA6-6BCF-4594-809F-D63CB5533B58}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{96B5C580-8209-4793-A3E2-B6669FE62AAF}] => C:\Program Files (x86)\Steam\steamapps\common\The Jackbox Party Pack 3\The Jackbox Party Pack 3.exe
FirewallRules: [{772733BF-1B19-402E-83B3-A7D22DCF7B61}] => C:\Program Files (x86)\Steam\steamapps\common\The Jackbox Party Pack 3\The Jackbox Party Pack 3.exe
FirewallRules: [{6021C39E-063C-42F8-890C-04E918D50FFC}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1DE213FE-2600-4CCA-937F-8E2619278BEF}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A74B487D-9045-453C-93CC-E66219B2CFE6}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{D81DA872-A136-4294-A128-46935C868AE9}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{83C1C48E-D239-4E50-A5AD-75AD83869D2A}] => C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{C3390215-4BBE-4375-8163-35DBCA0A1586}] => C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{2D04E49E-0377-4046-BC9C-7743B6673069}] => C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe
FirewallRules: [{F9B2668A-0657-4B8B-A4A6-E8FF8319E4F2}] => C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe
FirewallRules: [{3E1C5970-2647-4A17-A0FB-C4107D010ABC}] => C:\Program Files (x86)\Steam\steamapps\common\ClusterPuck 99\ClusterPuck99.exe
FirewallRules: [{50E75D87-D813-48FD-96F5-DCF91AF60BDB}] => C:\Program Files (x86)\Steam\steamapps\common\ClusterPuck 99\ClusterPuck99.exe
FirewallRules: [UDP Query User{1BCB1118-E5F8-48DF-B712-A270D51F7DB3}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [TCP Query User{D32C819E-46D6-414D-BEA6-39BC8A429EB6}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [{01C44DCE-D7B0-43DC-812C-02D211B14973}] => C:\Program Files (x86)\Steam\steamapps\common\Painkiller Hell & Damnation\Binaries\Win32\PKHDGame-Win32-Shipping.exe
FirewallRules: [{6F48ABCE-9FB9-445D-B9F6-7F115344844E}] => C:\Program Files (x86)\Steam\steamapps\common\Painkiller Hell & Damnation\Binaries\Win32\PKHDGame-Win32-Shipping.exe
FirewallRules: [{F6964CE8-C2CB-403B-B70D-623FA6750124}] => C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{89F23949-305A-4FC7-9AB0-5603E73BE375}] => C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{2F6C256F-AFCF-4374-85C0-EB4044F20D27}] => C:\Program Files (x86)\Steam\steamapps\common\KnightSquad\KnightSquad.exe
FirewallRules: [{EFE9AA5E-40EE-4F3D-894E-A0CA4BB9612D}] => C:\Program Files (x86)\Steam\steamapps\common\KnightSquad\KnightSquad.exe
FirewallRules: [{A40B24C8-5681-4BBF-9B2C-7E8292F5A3D0}] => C:\Program Files (x86)\Steam\steamapps\common\WormsXHD\Launcher.exe
FirewallRules: [{79C93102-3C2B-4818-9DFD-7742D07D6C62}] => C:\Program Files (x86)\Steam\steamapps\common\WormsXHD\Launcher.exe
FirewallRules: [{D0E48F1B-583D-4144-83EF-9D4E6ECB56B2}] => C:\Program Files (x86)\Steam\steamapps\common\TrialsPC\datapack\trialsFMX.exe
FirewallRules: [{C80A6EE0-CE2A-420E-9B56-6B5743A1375A}] => C:\Program Files (x86)\Steam\steamapps\common\TrialsPC\datapack\trialsFMX.exe
FirewallRules: [{DAD9C499-B607-4E20-8F87-DDA3480CBF9C}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{9078C5EA-7687-4DF5-89CA-3400924E5AAF}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{88E9AC29-3DD7-47BF-B0D5-888813B2A3FE}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{22DDECFF-7064-4E7E-8037-170A44D42DD4}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{BC24CA56-B395-48EF-961E-0A5EC2F99F04}] => C:\Program Files (x86)\Steam\steamapps\common\Earth Defense Force 4.1\EDF41.exe
FirewallRules: [{F451472B-5FD2-426F-B9D5-21E8C78BEABC}] => C:\Program Files (x86)\Steam\steamapps\common\Earth Defense Force 4.1\EDF41.exe
FirewallRules: [{C7A0D9E2-E1F0-45B4-9C96-4081330A42B6}] => C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{D54F9766-A450-4BB0-9782-6119AF400472}] => C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [UDP Query User{F06E72EF-A276-4802-9BAF-1141F62BA00A}C:\users\******\appdata\roaming\spotify\spotify.exe] => C:\users\******\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5B16157B-9A31-4B12-BA3D-C67AFF1FF86E}C:\users\******\appdata\roaming\spotify\spotify.exe] => C:\users\******\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5AB6093A-228F-4EF2-901F-A809186D4650}] => C:\Program Files (x86)\Steam\steamapps\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{9E4B32E7-6458-47F2-8119-F4EE7AB4A25F}] => C:\Program Files (x86)\Steam\steamapps\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{9D624CA8-4A4E-4E82-AFC5-48CDB4EEA332}] => C:\Program Files (x86)\Steam\steamapps\common\Quiplash\Quiplash.exe
FirewallRules: [{0BB0677E-B0D9-433C-8DA1-74A902FB5996}] => C:\Program Files (x86)\Steam\steamapps\common\Quiplash\Quiplash.exe
FirewallRules: [{A87668DC-B5E6-45D6-BA87-E07791C2B8DF}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{266609B3-7133-45B2-85B3-522C5CE0868E}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{89AB280A-B531-43A1-83C2-A0D4B6307C14}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{08873FAD-11B4-4E83-B55D-D0D8BDE471BB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ABD926D6-A1E4-4CAF-B8EB-5F3631A7BE6C}] => C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe
FirewallRules: [{226C1B45-6CB5-4EC2-B98A-8BD5BA7C39ED}] => C:\Program Files (x86)\ASUS\ROG Gaming Center\AndroidService.exe
FirewallRules: [{EE5B96A8-85F8-4B5D-A5A7-24D64FA8C1F8}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{4F82CA82-D115-4CDD-9383-015DB1FBC4A0}] => C:\Program Files (x86)\Steam\steamapps\common\ArizonaSunshine\ArizonaSunshine.exe
FirewallRules: [{07DCEFCB-4168-4464-B2C9-BA473E40D2FA}] => C:\Program Files (x86)\Steam\steamapps\common\ArizonaSunshine\ArizonaSunshine.exe
FirewallRules: [{F3DE1EF8-AE05-4AE5-80C9-C9492BB31E5A}] => C:\Program Files (x86)\Steam\steamapps\common\VR The Diner Duo\VRTheDinerDuo.exe
FirewallRules: [{289CFB8C-6D69-4AAB-9B16-F14C368B784D}] => C:\Program Files (x86)\Steam\steamapps\common\VR The Diner Duo\VRTheDinerDuo.exe
FirewallRules: [{B1F9762C-359B-411F-A600-C217005D6BED}] => C:\Program Files (x86)\Steam\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{685B2364-C3CC-4196-91A7-1DAA0912FE88}] => C:\Program Files (x86)\Steam\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{E9C8AAB2-3506-4054-8AB3-1BCE73769269}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E96959CC-1A96-4A43-B21E-1BA6849D468B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{4C6D1552-AC00-4114-A4A7-CD0D07F45823}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D377652B-985C-4F28-88FE-16F588203686}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3713FF71-4589-47B3-A99E-48F17FF2EC74}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
FirewallRules: [{D77B33B2-51FD-4AF1-B44E-E5121A9E26AA}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
FirewallRules: [{BC339B3B-0278-4510-A1B4-D6B5DF2E7F4A}] => C:\Program Files\App Dynamic\AirServer\AirServer.exe
FirewallRules: [{CBAB0096-FA9C-4016-8EEC-6B8E44B6863E}] => C:\Program Files\App Dynamic\AirServer\AirServer.exe
FirewallRules: [{83C8C425-1B91-4CCF-83AC-2236DE68B0F3}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8980E943-9693-469C-9E17-BA36C503D9B8}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{A0F07450-6DE8-4F5D-8D23-7114830DAF7F}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{328A7677-4330-4254-96FF-2D5C342DFAD6}] => C:\Program Files (x86)\Steam\steamapps\common\F13Beta\SummerCamp.exe
FirewallRules: [{E61B69E6-16C4-4972-9FA6-64CAAB4A7989}] => C:\Program Files (x86)\Steam\steamapps\common\F13Beta\SummerCamp.exe
FirewallRules: [{6116FD00-7E55-49A1-9E27-20CE0F4237E6}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{B9193C2E-B770-43C0-A872-7EA2161BD938}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData.exe
FirewallRules: [{3F889BB0-CD5F-47A9-BEE0-14BF11A9E183}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData.exe
FirewallRules: [{2D9272D2-851D-4B8F-A654-3720F482110A}] => C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe
FirewallRules: [{EEAEB44D-F0A2-497E-B2A1-F6B81119F8B9}] => C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe
FirewallRules: [{54466F7F-8D3E-4B13-AD7F-559B0BE8507C}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData\Binaries\Win64\RawData-Win64-Shipping.exe
FirewallRules: [{43A1BF51-F8C9-412A-B261-E040EC44F8DB}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData\Binaries\Win64\RawData-Win64-Shipping.exe
FirewallRules: [{30665C2F-1BC9-4889-8154-DD241914E9B8}] => C:\Program Files (x86)\Steam\steamapps\common\Quake 3 Arena\quake3.exe
FirewallRules: [{DB082626-9E89-456C-8A3A-E572089776AE}] => C:\Program Files (x86)\Steam\steamapps\common\Quake 3 Arena\quake3.exe
FirewallRules: [{5B84FD6E-6131-4685-A399-5C91B8354BD6}] => C:\Program Files (x86)\Steam\steamapps\common\Sairento VR\SairentoVR.exe
FirewallRules: [{65319BAC-2646-4917-A2EA-9F8F7F944373}] => C:\Program Files (x86)\Steam\steamapps\common\Sairento VR\SairentoVR.exe
FirewallRules: [{E0F07FF4-6D24-4324-A854-B90833CEBEE5}] => C:\Program Files (x86)\Steam\steamapps\common\AChairinaRoom\AChairInARoom_Greenwater.exe
FirewallRules: [{24F0B509-FD74-49AC-B2EC-457BD02B3CF8}] => C:\Program Files (x86)\Steam\steamapps\common\AChairinaRoom\AChairInARoom_Greenwater.exe
FirewallRules: [{7D9DBDA1-A8FC-445C-A720-C843975F3785}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The First Encounter\Bin\x64\Sam2017_VR.exe
FirewallRules: [{79300C5D-5897-4573-9795-70558A9C4D71}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The First Encounter\Bin\x64\Sam2017_VR.exe
FirewallRules: [{8542E5DF-C3C3-4164-9A8B-8DE93ECD2F81}] => C:\Program Files (x86)\Steam\steamapps\common\Job Simulator\JobSimulator.exe
FirewallRules: [{E7ECECDD-F2A6-4189-BFF2-9029CFD06ED3}] => C:\Program Files (x86)\Steam\steamapps\common\Job Simulator\JobSimulator.exe

==================== Wiederherstellungspunkte =========================

20-12-2016 04:03:15 Installed Mobile Mouse Server.
28-12-2016 22:07:28 Geplanter Prüfpunkt
04-01-2017 04:43:21 Vive

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/05/2017 12:37:04 AM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (01/04/2017 06:16:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SamTLH.exe, Version: 3.0.3.0, Zeitstempel: 0x5852ba1c
Name des fehlerhaften Moduls: D3D11.dll_unloaded, Version: 10.0.14393.351, Zeitstempel: 0x5801a469
Ausnahmecode: 0xc00001a5
Fehleroffset: 0x0009c317
ID des fehlerhaften Prozesses: 0x1f2c
Startzeit der fehlerhaften Anwendung: 0x01d26648e70e5282
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
Pfad des fehlerhaften Moduls: D3D11.dll
Berichtskennung: a8a611dd-d183-40b1-82c2-d38dbd9064f2
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/04/2017 04:43:51 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (01/04/2017 04:43:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (01/04/2017 04:43:23 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (01/04/2017 03:50:10 AM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (01/04/2017 03:00:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Cemu.exe, Version: 0.0.0.0, Zeitstempel: 0x5857b99e
Name des fehlerhaften Moduls: Cemu.exe, Version: 0.0.0.0, Zeitstempel: 0x5857b99e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009e8d9
ID des fehlerhaften Prozesses: 0x12c4
Startzeit der fehlerhaften Anwendung: 0x01d2662e16e19a33
Pfad der fehlerhaften Anwendung: C:\Games\Emulatoren\Wii U\Cemu.exe
Pfad des fehlerhaften Moduls: C:\Games\Emulatoren\Wii U\Cemu.exe
Berichtskennung: fec91aaa-6409-4c26-bd9d-2f3f87a44180
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/28/2016 10:07:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/28/2016 01:27:30 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (12/28/2016 01:27:20 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (01/05/2017 12:37:16 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{9A4948D9-13FC-4FAC-B60A-FBA6EE0FB11C}
 und der APPID 
{50E1C3FD-EC35-490E-9CCF-C68F9AE91919}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 12:37:05 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 12:37:05 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 12:37:05 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 12:37:05 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 12:37:05 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 12:36:51 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\IWMSSvc.dll

Error: (01/05/2017 12:36:51 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\IWMSSvc.dll

Error: (01/05/2017 12:36:49 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\IWMSSvc.dll

Error: (01/05/2017 12:36:40 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
Es wird bereits eine Instanz des Dienstes ausgeführt.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 13%
Installierter physikalischer RAM: 16319.89 MB
Verfügbarer physikalischer RAM: 14067.84 MB
Summe virtueller Speicher: 18751.89 MB
Verfügbarer virtueller Speicher: 16376.04 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:476.18 GB) (Free:167.11 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 388EC185)

Partition: GPT.

==================== Ende von Addition.txt ============================
--- --- ---

Alt 05.01.2017, 10:10   #8
Deathkid535
/// Malwareteam
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Hi,

Schritt # 1: ESET


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt # 2: Bitte Posten
  • Das Log von ESET
Alt 07.01.2017, 23:12   #9
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=77a71d768297c1429dbe268fa2aa7c15
# end=init
# utc_time=2017-01-07 09:23:20
# local_time=2017-01-07 10:23:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 31988
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=77a71d768297c1429dbe268fa2aa7c15
# end=updated
# utc_time=2017-01-07 09:29:12
# local_time=2017-01-07 10:29:12 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=77a71d768297c1429dbe268fa2aa7c15
# engine=31988
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-01-07 10:08:32
# local_time=2017-01-07 11:08:32 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 159359 15157528 0 0
# scanned=293974
# found=2
# cleaned=0
# scan_time=2359
sh=28BFC2A0A6ED544BB87669017F07F03834896D7E ft=1 fh=edb59fab8be01a58 vn="Variante von Win32/DealPly.EO.gen eventuell unerwünschte Anwendung" ac=I fn="C:\Users\******\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403\UpdTask.exe"
sh=DDFD6BC63250C63DA1DF700E3DAE7BB4507B306A ft=0 fh=0000000000000000 vn="VBS/Kryptik.DY Trojaner" ac=I fn="C:\Users\******\AppData\Roaming\Loboponidaka"

Alt 09.01.2017, 13:08   #10
Deathkid535
/// Malwareteam
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Hi,

Schritt # 1: FRST-Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\******\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403\UpdTask.exe
C:\Users\******\AppData\Roaming\Loboponidaka
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Schritt # 2: FRST

Und noch ein frisches FRST-Log bitte, mit Additions.txt angehakt.



Schritt # 3: Bitte Posten
  • Das Fixlog von FRST
  • Das frische FRST-Log
  • Die frische Additions.txt
Alt 10.01.2017, 00:15   #11
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Fixlog FRST
Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von ****** (10-01-2017 00:07:25) Run:1
Gestartet von C:\Users\******\Downloads
Geladene Profile: ****** (Verfügbare Profile: ******)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Users\******\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403\UpdTask.exe
C:\Users\******\AppData\Roaming\Loboponidaka
emptytemp:
*****************

C:\Users\******\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403\UpdTask.exe => erfolgreich verschoben
C:\Users\******\AppData\Roaming\Loboponidaka => erfolgreich verschoben

=========== EmptyTemp: ==========

BITS transfer queue => 3762356 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 28486766 B
Java, Flash, Steam htmlcache => 249301594 B
Windows/system/drivers => 12861529 B
Edge => 1885729 B
Chrome => 795464407 B
Firefox => 62767920 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 8960 B
NetworkService => 185888 B
****** => 330348823 B

RecycleBin => 0 B
EmptyTemp: => 1.4 GB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 00:08:16 ====
frische FRST-Log
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-01-2017
durchgeführt von ****** (Administrator) auf ****** (10-01-2017 00:10:13)
Gestartet von C:\Users\******\Downloads
Geladene Profile: ****** (Verfügbare Profile: ******)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(HTC Corporation) C:\Program Files\HTC Account\Htc.Identity.Service.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.350_none_43278ee965418581\TiWorker.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncagent.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserverui.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(App Dynamic ehf) C:\Program Files\App Dynamic\AirServer\AirServer.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files\AutoHotkey\AutoHotkey.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\******\AppData\Roaming\Spotify\Spotify.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AirServer64] => C:\Program Files\App Dynamic\AirServer\AirServer.exe [6125576 2016-11-22] (App Dynamic ehf)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25779624 2016-12-21] (Dropbox, Inc.)
HKLM-x32\...\Run: [HTC Store User Content Helper] => C:\Program Files (x86)\ViveSetup\PCClient\HTCVRMarketplaceUserContextHelper.exe [108880 2016-12-30] ()
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Spotify Web Helper] => C:\Users\******\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-21] (Spotify Ltd)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Spotify] => C:\Users\******\AppData\Roaming\Spotify\Spotify.exe [7153264 2016-12-21] (Spotify Ltd)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2882848 2017-01-05] (Valve Corporation)
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Run: [f.lux] => C:\Users\******\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2016-04-19] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fn Keys.lnk [2016-10-16]
ShortcutTarget: Fn Keys.lnk -> C:\Autohotkey\Fn Keys.ahk ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll Keine Datei 
Tcpip\..\Interfaces\{8c3306fe-05a4-4130-9bf9-c70f13325195}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{dd29b1b9-ea4f-4e88-9a7a-0e7c36a64416}: [NameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-ff2033b4
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-ff2033b4
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ff2033b4&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ff2033b4&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: pk0hyrin.default
FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\pk0hyrin.default [2017-01-10]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\pk0hyrin.default -> search.yahoo.com
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\pk0hyrin.default -> search.yahoo.com
FF Keyword.URL: Mozilla\Firefox\Profiles\pk0hyrin.default -> user_pref("keyword.URL", true);
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\pk0hyrin.default\searchplugins\search.yahoo.com.xml [2016-12-29]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] ()
FF Plugin HKU\S-1-5-21-4081720298-658147086-3706344339-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2017-01-09] ()
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.tagesschau.de/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> google.com_
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default [2017-01-10]
CHR Extension: (Google Drive) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-15]
CHR Extension: (YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-15]
CHR Extension: (AdBlock) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-28]
CHR Extension: (Looper for YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg [2016-10-15]
CHR Extension: (Google Maps) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-10-15]
CHR Extension: (Save to Pocket) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-12-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-15]
CHR Extension: (Google Mail) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-15]
CHR Extension: (Chrome Media Router) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-20]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-15] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-15] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-12-21] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [229648 2016-10-01] (EasyAntiCheat Ltd)
R2 esifsvc; C:\WINDOWS\SysWoW64\esif_uf.exe [1392792 2015-11-09] (Intel Corporation)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent)
R2 HTC Account Service; C:\Program Files\HTC Account\Htc.Identity.Service.exe [20712 2016-12-15] (HTC Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-04-04] ()
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [49704 2016-06-07] (ASUSTeK COMPUTER INC.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
S2 Viveport; C:\Program Files (x86)\ViveSetup\PCClient\ViveportService.exe [72016 2016-12-30] ()
R2 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [5663824 2016-06-06] (RealVNC Ltd)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-30] (Intel(R) Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3833248 2016-04-04] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [95224 2016-05-19] (ASUS Corporation)
R3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [66136 2016-11-29] (Broadcom Corporation.)
S3 CY3014.X64; C:\WINDOWS\system32\DRIVERS\CY3014.X64.SYS [3546928 2016-09-02] ()
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [108608 2016-09-24] (Dokan Project)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [55784 2015-11-09] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [52200 2015-11-09] (Intel Corporation)
S3 ElgatoVAD; C:\WINDOWS\system32\DRIVERS\ElgatoVAD.sys [39208 2016-08-09] (Elgato Systems GmbH)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [260072 2015-11-09] (Intel Corporation)
S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] () [Datei ist nicht signiert]
S3 GeneStor; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [115704 2015-07-15] (GenesysLogic)
R1 gfdriver; C:\WINDOWS\System32\drivers\gfdriver.sys [51904 2015-01-14] (Titan ARC Corp.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [341256 2016-04-20] (Intel Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7139088 2016-05-08] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_11a67240324f74de\nvlddmkm.sys [14200880 2016-12-12] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [898296 2016-01-13] (Realtek                                            )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-10 00:07 - 2017-01-10 00:08 - 00001437 _____ C:\Users\******\Downloads\Fixlog.txt
2017-01-09 22:45 - 2017-01-09 22:45 - 00000000 ____D C:\Users\******\AppData\Local\Guns
2017-01-09 21:05 - 2017-01-09 21:05 - 00000000 ____D C:\Users\******\AppData\LocalLow\Ubisoft
2017-01-09 04:21 - 2017-01-09 04:21 - 00000000 ____D C:\Users\******\AppData\LocalLow\Bigscreen, Inc_
2017-01-09 04:21 - 2017-01-09 04:21 - 00000000 ____D C:\Users\******\AppData\Local\Crashpad
2017-01-09 04:21 - 2017-01-09 04:21 - 00000000 ____D C:\Users\******\AppData\Local\Bigscreen
2017-01-09 03:17 - 2017-01-09 03:17 - 00000121 _____ C:\Users\******\Desktop\Tina Guo Patreon.url
2017-01-08 23:39 - 2017-01-09 20:59 - 00000000 ____D C:\Users\******\AppData\Roaming\TS3Client
2017-01-08 23:39 - 2017-01-08 23:39 - 00000972 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-01-08 23:39 - 2017-01-08 23:39 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-01-08 23:37 - 2017-01-08 23:38 - 32019840 _____ (TeamSpeak Systems GmbH) C:\Users\******\Downloads\TeamSpeak3-Client-win64-3.0.19.4.exe
2017-01-08 17:07 - 2017-01-08 17:07 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mechabit
2017-01-08 17:00 - 2017-01-08 17:00 - 00000000 ____D C:\Users\******\AppData\LocalLow\GameTroopers
2017-01-07 23:44 - 2017-01-07 23:45 - 10698619 _____ C:\Users\******\Downloads\OpenVR-AdvancedSettings-Standalone-v2.2-hotfix1.7z
2017-01-07 23:26 - 2017-01-07 23:27 - 24265429 _____ C:\Users\******\Downloads\OpenVR-AdvancedSettings-Installer-v2.2-hotfix1.exe
2017-01-07 23:20 - 2017-01-07 23:20 - 03137264 _____ C:\Users\******\Downloads\hidtovpad (1).elf
2017-01-07 23:18 - 2017-01-07 23:18 - 00135229 _____ C:\Users\******\Downloads\release.zip
2017-01-07 22:22 - 2017-01-07 22:23 - 02870984 _____ (ESET) C:\Users\******\Downloads\esetsmartinstaller_deu.exe
2017-01-05 00:31 - 2017-01-05 00:36 - 00000000 ____D C:\AdwCleaner
2017-01-04 04:43 - 2017-01-04 04:43 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-01-04 04:03 - 2017-01-04 04:03 - 00000000 ____D C:\Users\******\AppData\Roaming\NVIDIA
2017-01-04 03:52 - 2017-01-04 03:52 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-04 03:52 - 2016-12-11 19:47 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00548408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-01-04 03:52 - 2016-12-11 19:23 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-01-04 03:52 - 2016-12-09 09:52 - 07639617 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-01-04 03:52 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-01-04 03:52 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-01-04 03:52 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-01-04 03:52 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-01-04 03:51 - 2016-12-12 04:03 - 00215608 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-01-04 03:51 - 2016-12-12 04:03 - 00201664 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-01-04 03:51 - 2016-12-11 19:47 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-01-04 03:49 - 2016-12-12 22:27 - 00047032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2017-01-04 03:49 - 2016-12-12 04:03 - 40125496 _____ C:\WINDOWS\system32\nvcompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 35222976 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 34710584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 28201408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 10912744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 10803880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 10353960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 09158616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 08913328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 08761560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 03934504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 03474392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 02950200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 02587704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01953336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437633.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01595456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01586744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437633.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 01038392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00974784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00942528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00894400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00802768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00801560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00683640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00643928 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00642392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00617696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00572888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00438208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00394888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00388544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00386104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00347072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00327408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00212936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2017-01-04 03:49 - 2016-12-12 04:03 - 00046024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2017-01-04 03:49 - 2016-12-12 04:03 - 00042286 _____ C:\WINDOWS\system32\nvinfo.pb
2017-01-04 03:49 - 2016-12-12 04:03 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2017-01-04 03:49 - 2016-12-12 04:03 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
2017-01-04 03:25 - 2017-01-04 03:46 - 393367376 _____ (NVIDIA Corporation) C:\Users\******\Downloads\376.33-notebook-win10-64bit-international-whql.exe
2017-01-04 02:57 - 2017-01-04 02:57 - 02133200 _____ C:\Users\******\Documents\cemu_1.6.4.zip
2017-01-03 02:53 - 2017-01-03 02:53 - 00000000 ____D C:\Users\******\AppData\LocalLow\Owlchemy Labs
2017-01-03 00:16 - 2017-01-03 00:16 - 00047191 _____ C:\Users\******\Downloads\frst-addition.zip
2017-01-02 23:50 - 2017-01-10 00:06 - 00000000 ____D C:\Users\******\Downloads\FRST-OlderVersion
2017-01-02 15:31 - 2017-01-02 15:33 - 00000718 _____ C:\Users\******\Desktop\Neues Textdokument.txt
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sonokinetic Ltd
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Local\Deployment
2017-01-02 14:57 - 2017-01-02 14:57 - 00000000 ____D C:\Users\******\AppData\Local\Apps\2.0
2017-01-02 14:56 - 2017-01-02 14:56 - 00593368 _____ () C:\Users\******\Downloads\setup.exe
2017-01-01 22:12 - 2017-01-01 22:12 - 00000000 ____D C:\Users\******\AppData\LocalLow\Wolf & Wood Interactive Ltd
2017-01-01 20:58 - 2017-01-01 20:58 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mixed Realms
2017-01-01 20:42 - 2017-01-05 00:31 - 03977168 _____ C:\Users\******\Downloads\AdwCleaner_6.041.exe
2017-01-01 20:41 - 2017-01-01 20:44 - 54199488 _____ (Malwarebytes ) C:\Users\******\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-01 02:34 - 2017-01-01 02:34 - 02103788 _____ C:\Users\******\Downloads\all-rail-gun-maps.zip
2017-01-01 00:49 - 2017-01-10 00:10 - 00021539 _____ C:\Users\******\Downloads\FRST.txt
2017-01-01 00:49 - 2017-01-05 00:39 - 00065987 _____ C:\Users\******\Downloads\Addition.txt
2017-01-01 00:48 - 2017-01-10 00:10 - 00000000 ____D C:\FRST
2017-01-01 00:47 - 2017-01-10 00:06 - 02419200 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2016-12-31 01:26 - 2016-12-31 01:26 - 04482080 _____ C:\Users\******\Downloads\hidtovpad.elf
2016-12-31 01:19 - 2017-01-08 05:05 - 00000000 ____D C:\Users\******\AppData\Roaming\Cronus
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2016-12-31 01:17 - 2016-12-31 01:17 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CronusPRO
2016-12-31 01:16 - 2016-12-31 01:17 - 00000000 ____D C:\Program Files (x86)\CronusPRO
2016-12-31 01:02 - 2016-12-31 01:02 - 00063257 _____ C:\Users\******\Downloads\C08ULePW8AEQeiY.jpg
2016-12-31 00:52 - 2016-12-31 01:16 - 13683048 _____ C:\Users\******\Downloads\Cronus_0112_Setup.exe
2016-12-29 17:54 - 2016-12-29 17:54 - 00369948 _____ C:\Users\******\Downloads\AuRa.zip
2016-12-29 17:35 - 2016-12-29 17:35 - 00402907 _____ C:\WINDOWS\Bid For Power Uninstaller.exe
2016-12-29 17:35 - 2016-12-29 17:35 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bid For Power
2016-12-29 16:53 - 2016-12-29 16:54 - 13877245 _____ C:\Users\******\Downloads\spearmint-0.4-windows.zip
2016-12-28 01:27 - 2016-12-28 01:27 - 00000000 ____D C:\Users\Default\AppData\Local\CEF
2016-12-28 01:27 - 2016-12-28 01:27 - 00000000 ____D C:\Users\Default User\AppData\Local\CEF
2016-12-23 04:37 - 2016-12-23 04:37 - 00000000 ____D C:\Users\******\AppData\Local\SummerCamp
2016-12-23 03:38 - 2016-12-23 03:38 - 00000000 ____D C:\Users\******\AppData\Local\RawData
2016-12-22 23:30 - 2016-12-22 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-12-21 19:15 - 2016-12-21 19:15 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-12-20 05:50 - 2016-12-20 05:50 - 00602646 _____ C:\Users\******\Downloads\PS3PS4toWiiU_FirmwareUpdateGuide_201608.pdf
2016-12-20 04:08 - 2016-12-20 04:08 - 00000000 ____D C:\Users\******\AppData\Local\Apple
2016-12-20 04:08 - 2016-12-20 04:08 - 00000000 ____D C:\ProgramData\Apple
2016-12-20 04:04 - 2016-12-28 00:21 - 00000000 ____D C:\Program Files\Bonjour
2016-12-20 04:04 - 2016-12-28 00:21 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-12-20 04:03 - 2016-12-20 04:03 - 00000000 ____D C:\Users\******\AppData\Local\Downloaded Installations
2016-12-20 04:03 - 2016-12-20 04:03 - 00000000 ____D C:\Users\******\AppData\Local\AirMouse
2016-12-20 04:00 - 2016-12-20 04:03 - 11835888 _____ (RPA Tech, Inc ) C:\Users\******\Downloads\setup3.3.2.exe
2016-12-16 05:27 - 2016-12-16 05:27 - 00000000 ____D C:\Users\******\AppData\Local\CrashReportClient
2016-12-16 02:15 - 2016-12-16 02:15 - 00000000 ____D C:\Program Files\App Dynamic
2016-12-15 17:06 - 2017-01-02 18:18 - 00000000 ____D C:\Users\******\AppData\LocalLow\Mozilla
2016-12-15 17:05 - 2016-12-15 17:12 - 00000000 ____D C:\Users\******\AppData\Local\Mozilla
2016-12-15 17:05 - 2016-12-15 17:06 - 00000000 ____D C:\Users\******\AppData\Roaming\Mozilla
2016-12-15 17:05 - 2016-12-15 17:05 - 00001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-15 17:05 - 2016-12-15 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-15 17:05 - 2016-12-15 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-15 17:02 - 2016-12-15 17:02 - 00243720 _____ C:\Users\******\Downloads\Firefox Setup Stub 50.1.0.exe
2016-12-13 05:54 - 2016-12-13 05:54 - 00000000 ____D C:\Users\******\AppData\Local\Chromium

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-10 00:09 - 2016-10-15 15:40 - 00000000 ___RD C:\Dropbox
2017-01-10 00:09 - 2016-10-15 13:18 - 00000000 ____D C:\Users\******\AppData\Local\Spotify
2017-01-10 00:09 - 2016-09-30 12:47 - 00000000 ____D C:\Program Files (x86)\Steam
2017-01-10 00:08 - 2016-12-05 11:06 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-10 00:08 - 2016-12-05 11:02 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-10 00:08 - 2016-11-29 21:32 - 00000000 ____D C:\Users\******\AppData\Local\HTC_Neo
2017-01-10 00:08 - 2016-09-30 12:19 - 00000182 _____ C:\Users\******\AppData\Roaming\sp_data.sys
2017-01-10 00:08 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2017-01-10 00:07 - 2016-11-30 04:33 - 00000000 ____D C:\Users\******\AppData\Local\257b77b7bdbf5259fa904c5a0b4c6403
2017-01-10 00:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-01-10 00:03 - 2016-09-30 17:57 - 00000000 ____D C:\Users\******\AppData\Local\Ubisoft Game Launcher
2017-01-09 23:59 - 2016-12-05 11:02 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-09 22:47 - 2016-10-15 13:16 - 00000000 ____D C:\Users\******\AppData\Roaming\Spotify
2017-01-09 22:45 - 2016-10-01 01:41 - 00000000 ____D C:\Users\******\AppData\Local\UnrealEngine
2017-01-09 20:23 - 2016-07-16 23:51 - 01075480 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-09 20:23 - 2016-07-16 23:51 - 00251404 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-09 20:23 - 2016-03-24 12:50 - 02568962 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-09 16:10 - 2016-12-05 11:06 - 00003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2017-01-09 16:10 - 2016-12-05 11:06 - 00003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2017-01-09 06:28 - 2016-12-05 11:03 - 00000000 ____D C:\Users\******
2017-01-09 06:20 - 2016-10-16 02:21 - 00000000 ____D C:\Autohotkey
2017-01-09 05:00 - 2016-12-05 00:37 - 00000000 ____D C:\Users\******\AppData\Roaming\matzman666
2017-01-09 04:24 - 2016-11-29 23:14 - 00000000 ____D C:\Users\******\AppData\LocalLow\Valve
2017-01-07 19:02 - 2016-10-15 14:30 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-01-06 07:34 - 2016-09-30 15:16 - 00000000 ____D C:\Users\******\AppData\Local\CrashDumps
2017-01-05 02:21 - 2016-11-29 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIVE Software
2017-01-05 01:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-05 00:36 - 2016-11-30 04:32 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-04 04:44 - 2016-03-24 13:04 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-04 03:52 - 2016-12-05 12:57 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-04 03:52 - 2016-12-05 11:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-04 03:52 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-01-04 03:52 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-04 03:51 - 2016-09-11 10:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-01 00:33 - 2016-12-01 01:04 - 00000200 _____ C:\Users\******\AppData\Roaming\WB.CFG
2016-12-31 06:51 - 2016-11-27 02:53 - 00000000 ____D C:\Users\******\AppData\Roaming\vlc
2016-12-31 01:17 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\Logs
2016-12-29 17:59 - 2016-09-30 13:10 - 00000000 ____D C:\Games
2016-12-29 16:32 - 2016-11-29 12:46 - 00000000 ____D C:\Users\******\AppData\Local\ElevatedDiagnostics
2016-12-29 16:32 - 2016-11-29 12:45 - 00000000 ____D C:\Users\******\AppData\Local\Diagnostics
2016-12-28 01:27 - 2016-11-29 14:53 - 00000000 ____D C:\Program Files\HTC Account
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default\AppData\Local
2016-12-28 01:27 - 2016-07-16 12:47 - 00000000 ____D C:\Users\Default User\AppData\Local
2016-12-22 23:30 - 2016-03-24 13:06 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-12-21 20:41 - 2016-10-01 01:41 - 00537848 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2016-12-20 04:29 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-20 00:16 - 2016-10-15 12:43 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-19 22:29 - 2016-12-05 11:06 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-19 22:29 - 2016-12-05 11:06 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 21:30 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Drivers\UMDF
2016-12-16 02:15 - 2016-10-27 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirServer Universal (x64)
2016-12-16 02:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\config\systemprofile
2016-12-15 22:00 - 2016-11-30 04:33 - 00000000 ____D C:\Users\******\AppData\Local\JDownloader v2.0
2016-12-13 17:37 - 2016-12-05 11:03 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{f8d8b5e2-4ba6-11e6-80cd-0026b955b121}.TMContainer00000000000000000002.regtrans-ms
2016-12-12 18:16 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-09-30 17:34 - 2016-10-28 21:11 - 0002733 _____ () C:\Users\******\AppData\Roaming\SpeedRunnersLog.txt
2016-09-30 12:19 - 2017-01-10 00:08 - 0000182 _____ () C:\Users\******\AppData\Roaming\sp_data.sys
2016-12-01 01:04 - 2017-01-01 00:33 - 0000200 _____ () C:\Users\******\AppData\Roaming\WB.CFG
2016-12-05 11:02 - 2016-12-05 11:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-08 16:40

==================== Ende von FRST.txt ============================
frische Additions.txt
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von ****** (10-01-2017 00:10:37)
Gestartet von C:\Users\******\Downloads
Windows 10 Home Version 1607 (X64) (2016-12-05 10:08:03)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4081720298-658147086-3706344339-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4081720298-658147086-3706344339-503 - Limited - Disabled)
Gast (S-1-5-21-4081720298-658147086-3706344339-501 - Limited - Disabled)
****** (S-1-5-21-4081720298-658147086-3706344339-1001 - Administrator - Enabled) => C:\Users\******

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

A Chair in a Room: Greenwater (HKLM\...\Steam App 427760) (Version:  - Wolf &amp; Wood Interactive Ltd)
Accounting (HKLM\...\Steam App 518580) (Version:  - Crows Crows Crows)
Activision(R) (x32 Version: 1.00.0000 - Activision) Hidden
AirServer Universal (x64) (HKLM\...\{A61F995D-62E3-4B4A-9365-ABB9DBFA388D}) (Version: 5.1.2 - App Dynamic)
Ansel (Version: 376.33 - NVIDIA Corporation) Hidden
Arizona Sunshine (HKLM\...\Steam App 342180) (Version:  - Vertigo Games)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.10 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.16.0002 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS)
Asus Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.32 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0048 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.1.19 - ICEpower a/s)
AutoHotkey 1.1.24.02 (HKLM\...\AutoHotkey) (Version: 1.1.24.02 - Lexikos)
Bid For Power (HKLM-x32\...\Bid For Power) (Version: 1.2 - DigitalZone)
Bigscreen Beta (HKLM\...\Steam App 457550) (Version:  - Bigscreen, Inc.)
BingProvidedSearch (HKLM-x32\...\{8FBF677F-DF3F-B6FF-6EBF-C67FBE3F15FF}) (Version:  - )
Blur(TM) (HKLM-x32\...\InstallShield_{589A63D3-89E1-4D9B-8DBC-6039BB27289E}) (Version: 1.00.0000 - Activision)
Budget Cuts Demo (HKLM\...\Steam App 459860) (Version:  - Neat Corporation)
Bullet Sorrow VR (HKLM\...\Steam App 521950) (Version:  - VikingVRStudio)
Carmageddon: Max Damage (HKLM\...\Steam App 505170) (Version:  - Stainless Games Ltd)
ClusterPuck 99 (HKLM\...\Steam App 337960) (Version:  - PHL Collective)
Connect version 3.2.4 (HKLM-x32\...\{D8B98D6D-FEF3-4245-8BF5-598F28C28517}_is1) (Version: 3.2.4 - Continuata Ltd)
Cronus PRO 1.12 (HKLM-x32\...\Cronus PRO) (Version: 1.12 - CronusMAX Team)
Dead by Daylight (HKLM\...\Steam App 381210) (Version:  - Behaviour Digital Inc.)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.3 - ASUSTek Computer Inc.)
Dokan Driver (x64) (Version: 1.1.0.2 - HTC Corp.) Hidden
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
Dropbox (HKLM-x32\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
EARTH DEFENSE FORCE 4.1  The Shadow of New Despair (HKLM\...\Steam App 410320) (Version:  - SANDLOT)
Eleven: Table Tennis VR (HKLM\...\Steam App 488310) (Version:  - For Fun Labs)
Elgato Game Capture HD (HKLM\...\{ED82792C-D579-412E-B2BB-CD612498A3B7}) (Version: 3.50.88.2088 - Elgato Systems GmbH)
f.lux (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Flux) (Version:  - )
Friday the 13th: The Game BETA (HKLM\...\Steam App 569300) (Version:  - )
Fruit Ninja VR (HKLM\...\Steam App 486780) (Version:  - Halfbrick Studios Pty Ltd)
Game Capture HD60 S v1.1.0.167 (HKLM-x32\...\Software_Elgato_Game Capture HD60 S) (Version: 1.1.0.167 - Elgato Systems)
GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.23) (Version: 1.5.23 - ASUS)
GameFirst IV (x32 Version: 1.5.23 - ASUS) Hidden
Gang Beasts (HKLM\...\Steam App 285900) (Version:  - Boneloaf)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Earth VR (HKLM\...\Steam App 348250) (Version:  - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version:  - Rockstar North)
HTC Account (Version: 1.1.2.6 - HTC Corporation) Hidden
Intel(R) Chipset Device Software (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{A984B01A-6823-4C0F-8E83-BE08B3256209}) (Version: 18.1.1612.3253 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{498e3edb-cc7c-42dc-832e-11fdfed6d76e}) (Version: 18.40.3 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Job Simulator (HKLM\...\Steam App 448280) (Version:  - Owlchemy Labs)
Knight Squad (HKLM\...\Steam App 294000) (Version:  - Chainsawesome Games)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.6.8 - Hermann Schinagl)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mount Your Friends (HKLM\...\Steam App 296470) (Version:  - Stegersaurus Software Inc.)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla)
NewRetroArcade: Neon (HKLM\...\Steam App 465780) (Version:  - Digital Cybercherries)
NVIDIA 3D Vision Treiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.33 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.16.2 - OBS Project)
Overkill VR (HKLM\...\Steam App 518720) (Version:  - Starloop Studios)
Painkiller Hell & Damnation (HKLM\...\Steam App 214870) (Version:  - The Farm 51)
Pinball FX2 VR (HKLM\...\Steam App 547590) (Version:  - Zen Studios)
PixelMaster Video HDR (HKLM\...\{65302154-AAF6-4020-A070-76CAA9CEC8D3}) (Version: 1.1.37 - ASUS)
Pool Nation VR  (HKLM\...\Steam App 269170) (Version:  - Cherry Pop Games)
Project64 version 2.3.0.210 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.0.210 - )
Quake III Arena (HKLM\...\Steam App 2200) (Version:  - id Software)
Quiplash (HKLM\...\Steam App 351510) (Version:  - Jackbox Games, Inc.)
Raw Data (HKLM\...\Steam App 436320) (Version:  - Survios)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7818 - Realtek Semiconductor Corp.)
Rec Room (HKLM\...\Steam App 471710) (Version:  - Against Gravity)
Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.5 - Rockstar Games)
ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 1.0.12 - ASUS)
Sairento VR (HKLM\...\Steam App 555880) (Version:  - Mixed Realms Pte Ltd)
Serious Sam 3: BFE (HKLM\...\Steam App 41070) (Version:  - Croteam)
Serious Sam VR: The First Encounter (HKLM\...\Steam App 552450) (Version:  - Croteam VR)
Serious Sam VR: The Last Hope (HKLM\...\Steam App 465240) (Version:  - Croteam VR)
Sonokinetic Content Manager (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\3a0c6f576a92e147) (Version: 1.2.2.7 - Sonokinetic Ltd)
Space Pirate Trainer (HKLM\...\Steam App 418650) (Version:  - I-Illusions)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamVR (HKLM\...\Steam App 250820) (Version:  - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
The Brookhaven Experiment (HKLM\...\Steam App 440630) (Version:  - Phosphor Games)
The Jackbox Party Pack 3 (HKLM\...\Steam App 434170) (Version:  - Jackbox Games, Inc.)
The Lab (HKLM\...\Steam App 450390) (Version:  - Valve)
theBlu (HKLM\...\Steam App 451520) (Version:  - Wevr, Inc.)
Toastify (HKLM-x32\...\Toastify) (Version: 1.6 - Jesper Palm)
Trials Evolution Gold Edition (HKLM\...\Steam App 220160) (Version:  - Redlynx Ltd)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 25.0 - Ubisoft)
Vanishing Realms (HKLM\...\Steam App 322770) (Version:  - Indimo Labs LLC)
Vive (x32 Version: 1.0.8889.974 - HTC Corp.) Hidden
Vive Diagnosis (HKLM-x32\...\{3a2fbb45-ffeb-4ade-96e1-d1eea735e0f1}) (Version: 1.0.1.13 - HTC Corp.)
Vive DirectX 9.0 (HKLM-x32\...\{ac723cbb-bf65-46e5-ac2e-58d5a959e196}) (Version: 1.0.1.2 - HTC Corp.)
VIVE Software (HKLM-x32\...\VIVE Software) (Version: 1.0.1.105 - HTC)
ViveDiag (x32 Version: 1.0.1.13 - HTC Corp.) Hidden
ViveDriver (HKLM-x32\...\{8ff389b7-122a-494c-9d04-cb3165b8738d}) (Version: 1.1.0.8 - HTC Corp.)
ViveDummy (x32 Version: 0.9.0.4 - HTC) Hidden
ViveDX9 (x32 Version: 1.0.1.2 - HTC Corp.) Hidden
VivePhoneServices (x32 Version: 1.1.0.4 - HTC Corp.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VNC Server 5.3.2 (HKLM\...\{BD3BF59A-3CD6-49B3-A166-E57BF55FF959}) (Version: 5.3.2.19179 - RealVNC Ltd)
VNC Viewer 5.3.2 (HKLM\...\{F10020E5-D194-469E-B494-DDCE5D76A3A0}) (Version: 5.3.2.19179 - RealVNC Ltd)
VR The Diner Duo (HKLM\...\Steam App 530120) (Version:  - Whirlybird Games)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vuze Leap 2.6 (HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\{a9a27088-7578-499d-ad2b-67ba95a4def4}) (Version: 2.6 - Azureus Software, Inc.)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.1.1.8 - WildTangent)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
Windows Driver Package - ASUS (AsusPTPDrv) HIDClass  (04/28/2016 11.0.0.10) (HKLM\...\2E5C3DB999A508D7469B1F0294BCAF149A6B7ABB) (Version: 04/28/2016 11.0.0.10 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.1.0 - ASUS)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Worms Ultimate Mayhem (HKLM\...\Steam App 70600) (Version:  - Team17 Digital Ltd)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {17D73A19-6F14-41DA-9E25-D56AECD6B9EC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-02-23] (ASUSTek Computer Inc.)
Task: {180A57A1-CCB1-4373-AE34-3E9AC290D311} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
Task: {1A813745-5C62-4FA9-A5FE-C76088F8D729} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)
Task: {1ED94F8B-6C7E-4D6B-812D-7B2784C70938} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {1EF3E5B8-37AE-4546-BE3F-98825C662409} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-15] (Google Inc.)
Task: {2095B846-10FC-406B-897F-561EB4DBE5CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-15] (Google Inc.)
Task: {2A4E6777-36F9-416B-BDA4-FEA8981440E8} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {2E3B106D-56A0-4D3C-8A31-83F06385F045} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {47922D6D-E96B-4367-A4E1-1430F28C7396} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {5D88BF17-7C7D-4B94-A7B8-832B555F8C19} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-05-24] (ASUS)
Task: {619E0C02-4C51-46BF-AF91-3FDD42D66727} - System32\Tasks\{8C0B2CF8-35E8-41BF-BFA2-693F6B61456B} => pcalua.exe -a "C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe" -d "C:\Program Files (x86)\Activision\Blur(TM)"
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-01-19] (ASUSTek Computer Inc.)
Task: {716CCBE3-8654-413D-AB11-C8F1B28DFFFA} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-10-15] (Dropbox, Inc.)
Task: {721F5C3B-58BC-4D27-A034-272F29F4F74C} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-05-13] (Realtek Semiconductor)
Task: {7D670C6A-14EF-49EF-AFA9-1CE5A71A5C49} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)
Task: {853F616A-D44C-4DDC-AEAB-46322997361B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-05-13] (Realtek Semiconductor)
Task: {8C2356C4-5358-406B-A5FB-2927087F1D1C} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {A7F50025-B640-46F8-9F88-38E969D7C6B9} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {C530860D-8341-46DB-AFBB-C00396C7BB2D} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [2016-06-07] (ASUSTek Computer Inc.)
Task: {D993944C-79F9-486E-9BD8-08F05031CE7C} - System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG
Task: {EC2D6CA5-E86D-486C-8562-F91034A2F6A0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-10-15] (Dropbox, Inc.)
Task: {F26B0020-CC22-42A3-AB59-6722D299C575} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
Task: {FB5E02FC-CC24-4B52-BAC6-D390D12F9875} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Link Shell Extension\Donate.lnk -> hxxp://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.htm

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-04 03:52 - 2016-12-11 19:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-05 11:33 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-05 11:09 - 2016-12-05 11:09 - 00959168 _____ () C:\Users\******\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll
2004-09-30 19:15 - 2004-09-30 19:15 - 00192000 _____ () C:\Program Files\LinkShellExtension\RockallDLL.dll
2016-12-05 11:33 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-05 11:33 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-12-05 11:33 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-05 11:32 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-12-05 11:33 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-12-05 11:33 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-12-05 11:33 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-05 11:33 - 2016-11-02 11:13 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 03014664 _____ () C:\Program Files\App Dynamic\AirServer\avcodec-56.dll
2016-11-10 15:40 - 2016-11-10 15:40 - 00039424 _____ () C:\Program Files\App Dynamic\AirServer\avdevice-56.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00388616 _____ () C:\Program Files\App Dynamic\AirServer\avformat-56.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00423944 _____ () C:\Program Files\App Dynamic\AirServer\avutil-54.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00632328 _____ () C:\Program Files\App Dynamic\AirServer\swscale-3.dll
2016-11-10 15:40 - 2016-11-10 15:40 - 00186368 _____ () C:\Program Files\App Dynamic\AirServer\avfilter-5.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00428552 _____ () C:\Program Files\App Dynamic\AirServer\qp.dll
2016-11-22 12:35 - 2016-11-22 12:35 - 00172552 _____ () C:\Program Files\App Dynamic\AirServer\swresample-1.dll
2016-12-20 00:16 - 2016-12-08 09:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-20 00:16 - 2016-12-08 09:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-10-16 02:19 - 2016-10-13 10:07 - 01208832 _____ () C:\Program Files\AutoHotkey\AutoHotkey.exe
2016-05-24 12:44 - 2016-05-24 12:44 - 00027648 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2016-05-24 12:44 - 2016-05-24 12:44 - 00029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 51777648 _____ () C:\Users\******\AppData\Roaming\Spotify\libcef.dll
2016-10-27 00:02 - 2016-12-21 20:36 - 00110192 _____ () C:\Users\******\AppData\Roaming\Spotify\SpotifyWinRT.dll
2016-09-30 12:58 - 2016-12-23 19:28 - 00657184 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-09-30 12:58 - 2017-01-05 19:48 - 02329376 _____ () C:\Program Files (x86)\Steam\video.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-09-30 12:58 - 2016-01-27 08:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-09-30 12:58 - 2016-09-01 02:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-09-30 12:58 - 2017-01-05 19:48 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-09-30 12:58 - 2016-07-04 23:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-11-29 15:08 - 2017-01-03 23:44 - 02192672 _____ () C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\vrclient.dll
2016-11-29 15:08 - 2017-01-03 23:44 - 01247008 _____ () C:\Program Files (x86)\Steam\steamapps\common\SteamVR\drivers\lighthouse\bin\win32\driver_lighthouse.dll
2016-11-29 15:11 - 2017-01-03 23:44 - 00046368 _____ () C:\Program Files (x86)\Steam\steamapps\common\SteamVR\drivers\lighthouse\bin\win32\aitcamlib.dll
2016-11-29 15:08 - 2016-11-29 15:11 - 00322560 _____ () C:\Program Files (x86)\Steam\steamapps\common\SteamVR\drivers\lighthouse\bin\win32\AitH264Capture.dll
2016-11-29 15:11 - 2016-11-29 15:11 - 00167936 _____ () C:\Program Files (x86)\Steam\steamapps\common\SteamVR\drivers\lighthouse\bin\win32\AitUVCExtApi.dll
2016-10-15 15:26 - 2016-11-11 21:36 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-10-15 15:26 - 2016-11-11 21:36 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-12-22 23:30 - 2016-11-11 21:37 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-10-15 15:26 - 2016-11-11 21:38 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-12-22 23:30 - 2016-11-11 21:36 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-12-22 23:30 - 2016-11-11 21:38 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-10-15 15:26 - 2016-11-11 21:38 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-12-22 23:30 - 2016-11-11 21:35 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2016-12-22 23:30 - 2016-12-03 09:13 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-12-22 23:30 - 2016-12-21 19:26 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-10-15 15:26 - 2016-11-11 21:37 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-12-22 23:30 - 2016-11-11 21:42 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-12-22 23:30 - 2016-11-11 21:42 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-12-22 23:30 - 2016-12-21 19:26 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00171320 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-10-15 15:26 - 2016-11-11 21:39 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2016-10-15 15:26 - 2016-12-21 19:26 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-12-22 23:30 - 2016-12-21 19:26 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-10-15 13:18 - 2016-12-21 20:36 - 01803888 _____ () C:\Users\******\AppData\Roaming\Spotify\libglesv2.dll
2016-10-15 13:18 - 2016-12-21 20:36 - 00086128 _____ () C:\Users\******\AppData\Roaming\Spotify\libegl.dll
2016-12-13 05:54 - 2016-12-05 17:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-09-30 12:58 - 2015-09-25 00:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2015-10-30 08:21 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4081720298-658147086-3706344339-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\******\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{5e2884bd-4546-4c7b-8ca3-083fe0944360}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "Elgato Sound Capture"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "HTC Store User Content Helper"
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4081720298-658147086-3706344339-1001\...\StartupApproved\Run: => "f.lux"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{FC65AEF7-CE44-4758-B638-088B0AC3238C}] => C:\Program Files (x86)\Steam\steamapps\common\FruitNinjaVR\FruitNinjaVR.exe
FirewallRules: [{71D08EF4-192F-4E94-A4A0-E14063635E93}] => C:\Program Files (x86)\Steam\steamapps\common\FruitNinjaVR\FruitNinjaVR.exe
FirewallRules: [{E2E2861F-F452-4565-972D-9AD4115A3379}] => C:\Users\******\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{D8B40F12-03DA-4369-9C8A-2C4926D2D1CD}] => C:\Users\******\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{726FF98F-2F62-469B-A13D-29DB82B52B59}] => C:\Program Files (x86)\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{7AD13187-4703-46BE-85EC-461036845460}] => C:\Program Files (x86)\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{F1ACD154-6B2B-4CC7-B72F-873C9AB1816A}] => C:\Program Files (x86)\Steam\steamapps\common\Pinball FX2 VR\Pinball FX2.exe
FirewallRules: [{5EE27B4A-FAE2-4CEA-9507-CD671C5F84B7}] => C:\Program Files (x86)\Steam\steamapps\common\Pinball FX2 VR\Pinball FX2.exe
FirewallRules: [{D6070B8C-D8BF-4D3D-802C-D2631AAF88FD}] => C:\Program Files (x86)\Steam\steamapps\common\Budget Cuts Demo\Budget Cuts Demo.exe
FirewallRules: [{C1242F36-AF05-4FA2-ACD2-BF7612FAD25D}] => C:\Program Files (x86)\Steam\steamapps\common\Budget Cuts Demo\Budget Cuts Demo.exe
FirewallRules: [{E672579E-CF64-4868-BBF8-CAC65AD037AC}] => C:\Program Files (x86)\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{4C455939-159E-4D7F-8F8B-0BEBC9D83809}] => C:\Program Files (x86)\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{933A580C-27A3-49AF-8F9D-FE19F5737A43}] => C:\Program Files (x86)\ViveSetup\PCClient\web\apps\phone\vivephoneinit\VivePhoneInit.exe
FirewallRules: [{09CFA7F9-CB17-45AF-822D-9EC5335324B8}] => C:\Program Files (x86)\ViveSetup\PCClient\web\apps\phone\nw.exe
FirewallRules: [{6C2FAD04-3C23-4A81-9712-5A41EF63BDB9}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcadeBuilder.exe
FirewallRules: [{6E918B06-9DBF-460E-8856-D2CB96DD8879}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcadeBuilder.exe
FirewallRules: [{7572F680-0BE0-40D7-85C5-F570ED729ACB}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcade\Binaries\Win64\NewRetroArcade.exe
FirewallRules: [{39927F1D-A8B7-44BB-ABDE-A76414D9A306}] => C:\Program Files (x86)\Steam\steamapps\common\New Retro Arcade Neon\NewRetroArcade\Binaries\Win64\NewRetroArcade.exe
FirewallRules: [{597E0A57-DA1D-4D25-A9B4-0530A2A0F089}] => C:\Program Files (x86)\Steam\steamapps\common\Eleven Table Tennis VR\pong_waves_vr.exe
FirewallRules: [{3A6473EB-6ABD-4853-B7D5-39FC3B8C2FE6}] => C:\Program Files (x86)\Steam\steamapps\common\Eleven Table Tennis VR\pong_waves_vr.exe
FirewallRules: [{5FC6996A-0E7B-4DF7-B849-AFE78C47987F}] => C:\Program Files (x86)\Steam\steamapps\common\VanishingRealms\VanishingRealms.exe
FirewallRules: [{49F2F2E9-197B-4A88-8ED2-E7D977FB35A3}] => C:\Program Files (x86)\Steam\steamapps\common\VanishingRealms\VanishingRealms.exe
FirewallRules: [{0AFBB2C3-9694-4C03-9A89-657FCA3C9221}] => C:\Program Files (x86)\Steam\steamapps\common\PoolNationVR\PoolNationVR.exe
FirewallRules: [{D768FB6D-083C-4BC6-A0A7-0FD318176CA1}] => C:\Program Files (x86)\Steam\steamapps\common\PoolNationVR\PoolNationVR.exe
FirewallRules: [{12BA2F2C-ED2A-44CA-9CD3-A02C1450674F}] => C:\Program Files (x86)\Steam\steamapps\common\EarthVR\Earth.exe
FirewallRules: [{08AAD793-035A-4BEF-B33F-251E151EEAB7}] => C:\Program Files (x86)\Steam\steamapps\common\EarthVR\Earth.exe
FirewallRules: [{555A9D2D-6591-4160-8412-3662AD3FDC3A}] => C:\Program Files (x86)\Steam\steamapps\common\theBlu\theblu.exe
FirewallRules: [{205577A7-4709-4858-955A-F78D1967658A}] => C:\Program Files (x86)\Steam\steamapps\common\theBlu\theblu.exe
FirewallRules: [{72ADE6AB-4738-4AD0-A9AB-1DC9F3A64434}] => C:\Program Files (x86)\Steam\steamapps\common\Accounting\Accounting.exe
FirewallRules: [{0343C420-A0D0-4C14-BC9D-1CD35AAE43FB}] => C:\Program Files (x86)\Steam\steamapps\common\Accounting\Accounting.exe
FirewallRules: [{3C59F27A-3909-467B-9C78-A4C9BEF85ECD}] => C:\Program Files (x86)\Steam\steamapps\common\Brookhaven\BrookhavenGame.exe
FirewallRules: [{1D477925-1504-45E3-AF10-39400DEC7FA0}] => C:\Program Files (x86)\Steam\steamapps\common\Brookhaven\BrookhavenGame.exe
FirewallRules: [{008F1AA2-C031-4875-B162-C85D2922004F}] => C:\Program Files (x86)\Steam\steamapps\common\Space Pirate Trainer VR\SpacePirateVR.exe
FirewallRules: [{2D26FDED-BF46-4A3D-941B-19E7B3EC8000}] => C:\Program Files (x86)\Steam\steamapps\common\Space Pirate Trainer VR\SpacePirateVR.exe
FirewallRules: [{2C5B3BA8-7402-454E-8193-AD52FFEE581E}] => C:\Program Files (x86)\Steam\steamapps\common\Carmageddon Max Damage\bin\Carmageddon_Max_Damage.exe
FirewallRules: [{6453D716-CFBE-4B29-ADF1-9E43E9345A31}] => C:\Program Files (x86)\Steam\steamapps\common\Carmageddon Max Damage\bin\Carmageddon_Max_Damage.exe
FirewallRules: [UDP Query User{CE30115C-575A-421B-ACA8-E69B9EC0A7EE}C:\program files\realvnc\vnc viewer\vncviewer.exe] => C:\program files\realvnc\vnc viewer\vncviewer.exe
FirewallRules: [TCP Query User{3CCD8441-36EF-440D-AA33-59EA3E21AFD2}C:\program files\realvnc\vnc viewer\vncviewer.exe] => C:\program files\realvnc\vnc viewer\vncviewer.exe
FirewallRules: [UDP Query User{615CD6D3-D19D-47E2-BE0A-D96333D6C739}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{35F3AE2E-A8D6-44AA-92F1-0A3155F2A1B8}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{75B01C3A-9FD2-47FB-A7D1-25569179E147}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{0BE3CBA6-6BCF-4594-809F-D63CB5533B58}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{96B5C580-8209-4793-A3E2-B6669FE62AAF}] => C:\Program Files (x86)\Steam\steamapps\common\The Jackbox Party Pack 3\The Jackbox Party Pack 3.exe
FirewallRules: [{772733BF-1B19-402E-83B3-A7D22DCF7B61}] => C:\Program Files (x86)\Steam\steamapps\common\The Jackbox Party Pack 3\The Jackbox Party Pack 3.exe
FirewallRules: [{6021C39E-063C-42F8-890C-04E918D50FFC}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1DE213FE-2600-4CCA-937F-8E2619278BEF}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A74B487D-9045-453C-93CC-E66219B2CFE6}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{D81DA872-A136-4294-A128-46935C868AE9}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{83C1C48E-D239-4E50-A5AD-75AD83869D2A}] => C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{C3390215-4BBE-4375-8163-35DBCA0A1586}] => C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{2D04E49E-0377-4046-BC9C-7743B6673069}] => C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe
FirewallRules: [{F9B2668A-0657-4B8B-A4A6-E8FF8319E4F2}] => C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe
FirewallRules: [{3E1C5970-2647-4A17-A0FB-C4107D010ABC}] => C:\Program Files (x86)\Steam\steamapps\common\ClusterPuck 99\ClusterPuck99.exe
FirewallRules: [{50E75D87-D813-48FD-96F5-DCF91AF60BDB}] => C:\Program Files (x86)\Steam\steamapps\common\ClusterPuck 99\ClusterPuck99.exe
FirewallRules: [UDP Query User{1BCB1118-E5F8-48DF-B712-A270D51F7DB3}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [TCP Query User{D32C819E-46D6-414D-BEA6-39BC8A429EB6}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [{01C44DCE-D7B0-43DC-812C-02D211B14973}] => C:\Program Files (x86)\Steam\steamapps\common\Painkiller Hell & Damnation\Binaries\Win32\PKHDGame-Win32-Shipping.exe
FirewallRules: [{6F48ABCE-9FB9-445D-B9F6-7F115344844E}] => C:\Program Files (x86)\Steam\steamapps\common\Painkiller Hell & Damnation\Binaries\Win32\PKHDGame-Win32-Shipping.exe
FirewallRules: [{F6964CE8-C2CB-403B-B70D-623FA6750124}] => C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{89F23949-305A-4FC7-9AB0-5603E73BE375}] => C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
FirewallRules: [{2F6C256F-AFCF-4374-85C0-EB4044F20D27}] => C:\Program Files (x86)\Steam\steamapps\common\KnightSquad\KnightSquad.exe
FirewallRules: [{EFE9AA5E-40EE-4F3D-894E-A0CA4BB9612D}] => C:\Program Files (x86)\Steam\steamapps\common\KnightSquad\KnightSquad.exe
FirewallRules: [{A40B24C8-5681-4BBF-9B2C-7E8292F5A3D0}] => C:\Program Files (x86)\Steam\steamapps\common\WormsXHD\Launcher.exe
FirewallRules: [{79C93102-3C2B-4818-9DFD-7742D07D6C62}] => C:\Program Files (x86)\Steam\steamapps\common\WormsXHD\Launcher.exe
FirewallRules: [{D0E48F1B-583D-4144-83EF-9D4E6ECB56B2}] => C:\Program Files (x86)\Steam\steamapps\common\TrialsPC\datapack\trialsFMX.exe
FirewallRules: [{C80A6EE0-CE2A-420E-9B56-6B5743A1375A}] => C:\Program Files (x86)\Steam\steamapps\common\TrialsPC\datapack\trialsFMX.exe
FirewallRules: [{DAD9C499-B607-4E20-8F87-DDA3480CBF9C}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{9078C5EA-7687-4DF5-89CA-3400924E5AAF}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{88E9AC29-3DD7-47BF-B0D5-888813B2A3FE}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{22DDECFF-7064-4E7E-8037-170A44D42DD4}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{BC24CA56-B395-48EF-961E-0A5EC2F99F04}] => C:\Program Files (x86)\Steam\steamapps\common\Earth Defense Force 4.1\EDF41.exe
FirewallRules: [{F451472B-5FD2-426F-B9D5-21E8C78BEABC}] => C:\Program Files (x86)\Steam\steamapps\common\Earth Defense Force 4.1\EDF41.exe
FirewallRules: [{C7A0D9E2-E1F0-45B4-9C96-4081330A42B6}] => C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{D54F9766-A450-4BB0-9782-6119AF400472}] => C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [UDP Query User{F06E72EF-A276-4802-9BAF-1141F62BA00A}C:\users\******\appdata\roaming\spotify\spotify.exe] => C:\users\******\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5B16157B-9A31-4B12-BA3D-C67AFF1FF86E}C:\users\******\appdata\roaming\spotify\spotify.exe] => C:\users\******\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5AB6093A-228F-4EF2-901F-A809186D4650}] => C:\Program Files (x86)\Steam\steamapps\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{9E4B32E7-6458-47F2-8119-F4EE7AB4A25F}] => C:\Program Files (x86)\Steam\steamapps\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{9D624CA8-4A4E-4E82-AFC5-48CDB4EEA332}] => C:\Program Files (x86)\Steam\steamapps\common\Quiplash\Quiplash.exe
FirewallRules: [{0BB0677E-B0D9-433C-8DA1-74A902FB5996}] => C:\Program Files (x86)\Steam\steamapps\common\Quiplash\Quiplash.exe
FirewallRules: [{A87668DC-B5E6-45D6-BA87-E07791C2B8DF}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{266609B3-7133-45B2-85B3-522C5CE0868E}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{89AB280A-B531-43A1-83C2-A0D4B6307C14}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{08873FAD-11B4-4E83-B55D-D0D8BDE471BB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ABD926D6-A1E4-4CAF-B8EB-5F3631A7BE6C}] => C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe
FirewallRules: [{226C1B45-6CB5-4EC2-B98A-8BD5BA7C39ED}] => C:\Program Files (x86)\ASUS\ROG Gaming Center\AndroidService.exe
FirewallRules: [{EE5B96A8-85F8-4B5D-A5A7-24D64FA8C1F8}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{4F82CA82-D115-4CDD-9383-015DB1FBC4A0}] => C:\Program Files (x86)\Steam\steamapps\common\ArizonaSunshine\ArizonaSunshine.exe
FirewallRules: [{07DCEFCB-4168-4464-B2C9-BA473E40D2FA}] => C:\Program Files (x86)\Steam\steamapps\common\ArizonaSunshine\ArizonaSunshine.exe
FirewallRules: [{F3DE1EF8-AE05-4AE5-80C9-C9492BB31E5A}] => C:\Program Files (x86)\Steam\steamapps\common\VR The Diner Duo\VRTheDinerDuo.exe
FirewallRules: [{289CFB8C-6D69-4AAB-9B16-F14C368B784D}] => C:\Program Files (x86)\Steam\steamapps\common\VR The Diner Duo\VRTheDinerDuo.exe
FirewallRules: [{B1F9762C-359B-411F-A600-C217005D6BED}] => C:\Program Files (x86)\Steam\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{685B2364-C3CC-4196-91A7-1DAA0912FE88}] => C:\Program Files (x86)\Steam\steamapps\common\The Lab\TheLab\win64\TheLab.exe
FirewallRules: [{E9C8AAB2-3506-4054-8AB3-1BCE73769269}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E96959CC-1A96-4A43-B21E-1BA6849D468B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{4C6D1552-AC00-4114-A4A7-CD0D07F45823}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D377652B-985C-4F28-88FE-16F588203686}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3713FF71-4589-47B3-A99E-48F17FF2EC74}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
FirewallRules: [{D77B33B2-51FD-4AF1-B44E-E5121A9E26AA}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The Last Hope\Bin\SamTLH.exe
FirewallRules: [{BC339B3B-0278-4510-A1B4-D6B5DF2E7F4A}] => C:\Program Files\App Dynamic\AirServer\AirServer.exe
FirewallRules: [{CBAB0096-FA9C-4016-8EEC-6B8E44B6863E}] => C:\Program Files\App Dynamic\AirServer\AirServer.exe
FirewallRules: [{83C8C425-1B91-4CCF-83AC-2236DE68B0F3}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8980E943-9693-469C-9E17-BA36C503D9B8}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{A0F07450-6DE8-4F5D-8D23-7114830DAF7F}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{328A7677-4330-4254-96FF-2D5C342DFAD6}] => C:\Program Files (x86)\Steam\steamapps\common\F13Beta\SummerCamp.exe
FirewallRules: [{E61B69E6-16C4-4972-9FA6-64CAAB4A7989}] => C:\Program Files (x86)\Steam\steamapps\common\F13Beta\SummerCamp.exe
FirewallRules: [{6116FD00-7E55-49A1-9E27-20CE0F4237E6}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{B9193C2E-B770-43C0-A872-7EA2161BD938}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData.exe
FirewallRules: [{3F889BB0-CD5F-47A9-BEE0-14BF11A9E183}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData.exe
FirewallRules: [{2D9272D2-851D-4B8F-A654-3720F482110A}] => C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe
FirewallRules: [{EEAEB44D-F0A2-497E-B2A1-F6B81119F8B9}] => C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe
FirewallRules: [{54466F7F-8D3E-4B13-AD7F-559B0BE8507C}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData\Binaries\Win64\RawData-Win64-Shipping.exe
FirewallRules: [{43A1BF51-F8C9-412A-B261-E040EC44F8DB}] => C:\Program Files (x86)\Steam\steamapps\common\Raw Data\RawData\Binaries\Win64\RawData-Win64-Shipping.exe
FirewallRules: [{30665C2F-1BC9-4889-8154-DD241914E9B8}] => C:\Program Files (x86)\Steam\steamapps\common\Quake 3 Arena\quake3.exe
FirewallRules: [{DB082626-9E89-456C-8A3A-E572089776AE}] => C:\Program Files (x86)\Steam\steamapps\common\Quake 3 Arena\quake3.exe
FirewallRules: [{5B84FD6E-6131-4685-A399-5C91B8354BD6}] => C:\Program Files (x86)\Steam\steamapps\common\Sairento VR\SairentoVR.exe
FirewallRules: [{65319BAC-2646-4917-A2EA-9F8F7F944373}] => C:\Program Files (x86)\Steam\steamapps\common\Sairento VR\SairentoVR.exe
FirewallRules: [{E0F07FF4-6D24-4324-A854-B90833CEBEE5}] => C:\Program Files (x86)\Steam\steamapps\common\AChairinaRoom\AChairInARoom_Greenwater.exe
FirewallRules: [{24F0B509-FD74-49AC-B2EC-457BD02B3CF8}] => C:\Program Files (x86)\Steam\steamapps\common\AChairinaRoom\AChairInARoom_Greenwater.exe
FirewallRules: [{8542E5DF-C3C3-4164-9A8B-8DE93ECD2F81}] => C:\Program Files (x86)\Steam\steamapps\common\Job Simulator\JobSimulator.exe
FirewallRules: [{E7ECECDD-F2A6-4189-BFF2-9029CFD06ED3}] => C:\Program Files (x86)\Steam\steamapps\common\Job Simulator\JobSimulator.exe
FirewallRules: [{47CF969D-44CD-4C05-B83A-33AD070DFE9E}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The First Encounter\Bin\x64\Sam2017_VR.exe
FirewallRules: [{D79350AC-E8C7-4447-8FD3-D0D2983B59F5}] => C:\Program Files (x86)\Steam\steamapps\common\Serious Sam VR The First Encounter\Bin\x64\Sam2017_VR.exe
FirewallRules: [{286505B3-9909-4EDD-B3B5-1C3ACD413FC7}] => C:\Program Files (x86)\Steam\steamapps\common\Overkill VR\overkillVR.exe
FirewallRules: [{27748AE8-5628-4DB7-8DE8-51A0CF1223C1}] => C:\Program Files (x86)\Steam\steamapps\common\Overkill VR\overkillVR.exe
FirewallRules: [{38820D5D-7761-433D-8C16-E673D148BF9C}] => C:\Program Files (x86)\Steam\steamapps\common\Bigscreen\Bigscreen.exe
FirewallRules: [{3E47DFA3-83E0-44B2-8571-3B726E66C239}] => C:\Program Files (x86)\Steam\steamapps\common\Bigscreen\Bigscreen.exe
FirewallRules: [{956DF123-D1B1-4FC2-AA15-85E7BA4846D4}] => C:\Program Files (x86)\Steam\steamapps\common\Bigscreen\Bigscreen_Data\Bigscreen\win64\Bigscreen.exe
FirewallRules: [{6C708265-857C-4EC2-A844-76C064B08837}] => C:\Program Files (x86)\Steam\steamapps\common\Bigscreen\Bigscreen_Data\Bigscreen\win64\Bigscreen.exe
FirewallRules: [{FCB7DA8F-2045-48AF-A3CF-10149AEF2992}] => C:\Program Files (x86)\Steam\steamapps\common\Bullet Sorrow VR\Guns\Binaries\Win64\Guns-Win64-Shipping.exe
FirewallRules: [{B2268340-9249-4FEC-A029-7AB00D3876C5}] => C:\Program Files (x86)\Steam\steamapps\common\Bullet Sorrow VR\Guns\Binaries\Win64\Guns-Win64-Shipping.exe

==================== Wiederherstellungspunkte =========================

20-12-2016 04:03:15 Installed Mobile Mouse Server.
28-12-2016 22:07:28 Geplanter Prüfpunkt
04-01-2017 04:43:21 Vive

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/10/2017 12:09:56 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\******\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (01/10/2017 12:08:44 AM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (01/10/2017 12:08:27 AM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10605.221) TYPE: ERROR FUNC: rsrc_app_start_app_in_active_user_session FILE: rsrc_app.c LINE: 328 TIME: 88627420 ms

Unable to start capture program. Error = 2

Error: (01/08/2017 11:31:39 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (01/08/2017 05:52:18 PM) (Source: VNC Server) (EventID: 256) (User: )
Description: Agent: SDisplay: Unable to initialize core type 0: No displays found

Error: (01/08/2017 12:15:16 AM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (01/07/2017 11:26:06 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\******\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (01/07/2017 11:22:13 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\******\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (01/07/2017 11:13:38 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (01/07/2017 11:13:32 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.


Systemfehler:
=============
Error: (01/10/2017 12:08:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/10/2017 12:08:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/10/2017 12:08:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/10/2017 12:08:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/10/2017 12:08:49 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/10/2017 12:07:26 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "COM+-Systemanwendung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/09/2017 07:37:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 07:37:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 07:37:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 04:07:31 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16319.89 MB
Verfügbarer physikalischer RAM: 13380.5 MB
Summe virtueller Speicher: 18751.89 MB
Verfügbarer virtueller Speicher: 15401.94 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:476.18 GB) (Free:152.63 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 388EC185)

Partition: GPT.

==================== Ende von Addition.txt ============================


Alt 10.01.2017, 14:38   #12
Deathkid535
/// Malwareteam
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Hi,

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Task: {D993944C-79F9-486E-9BD8-08F05031CE7C} - System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG
Task: C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG
C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Treten noch Probleme auf?

Alt 11.01.2017, 01:02   #13
hidaviki
 
Win10 - "There is a Recommended Update for this PC" - Standard

Win10 - "There is a Recommended Update for this PC"


Fixlog.txt
Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von ****** (11-01-2017 00:52:29) Run:2
Gestartet von C:\Users\******\Downloads
Geladene Profile: ****** (Verfügbare Profile: ******)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Task: {D993944C-79F9-486E-9BD8-08F05031CE7C} - System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG
Task: C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job => C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe <==== ACHTUNG
C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe
emptytemp:
*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D993944C-79F9-486E-9BD8-08F05031CE7C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D993944C-79F9-486E-9BD8-08F05031CE7C} => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403} => Schlüssel erfolgreich entfernt
C:\WINDOWS\Tasks\{257B77B7-BDBF-5259-FA90-4C5A0B4C6403}.job => erfolgreich verschoben
"C:\Users\MYUULA~1\AppData\Local\257B77~1\UpdTask.exe" => nicht gefunden.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10568228 B
Java, Flash, Steam htmlcache => 7582162 B
Windows/system/drivers => 511795 B
Edge => 0 B
Chrome => 497963153 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 2352 B
****** => 111263 B

RecycleBin => 0 B
EmptyTemp: => 492.8 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 00:52:36 ====
Keine Probleme mehr. Ich bedanke mich herzlichst bei dir für deine Hilfe und Zeit!

Antwort

Themen zu Win10 - "There is a Recommended Update for this PC"
abend, asus, beitrag, brauche, brauche hilfe, dateien, desktop, guten, hilfe, hilfe!, innerhalb, kollege, link, neue, neuen, plagegeist, popup, problem, this, update, willkürlich, win, woche, wochen, zweites


« Windows Defender - Trojaner Entfernt? (Windows 10) | Beim öffnen von bestimmten Seiten, öffnen sich 1000 andere Seiten... »


Ähnliche Themen: Win10 - "There is a Recommended Update for this PC"


  1. win10 gelegentlich Popup: "there is a recommended update for this pc"
    Plagegeister aller Art und deren Bekämpfung - 31.12.2016 (11)
  2. Win10: Windows Update Schleife / "Laufwerk auf Fehler überprüfen"
    Alles rund um Windows - 16.12.2016 (9)
  3. WIN10 IE "Your Computer Needs to Be Cleaned" - erscheint, wenn ich mich in Facebook einloggen will
    Log-Analyse und Auswertung - 04.07.2016 (4)
  4. Win10 bei Rechtsklick im Explorer keine Rückmeldung + verschiedene andere "Probleme"
    Log-Analyse und Auswertung - 29.04.2016 (8)
  5. Verdacht auf "TR/Patched.Ren.Gen2" Win10
    Plagegeister aller Art und deren Bekämpfung - 01.02.2016 (18)
  6. Win10: "Senden an"-Kontextmenüeintrag leer
    Alles rund um Windows - 23.01.2016 (0)
  7. McAfee - Einstellung "manuelles update" wird immer wieder in "Automatisch herunterladen und installieren" gewandelt
    Antiviren-, Firewall- und andere Schutzprogramme - 17.01.2016 (0)
  8. Win10 Arbeitsspeicher + Datenträger wegen dem Prozess "system" stark überlastet
    Plagegeister aller Art und deren Bekämpfung - 14.10.2015 (15)
  9. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  10. Internet Explorer öffnet Pup ups von "lpcloudbox" nach Installation von FreeYoutubeDownloader "update"
    Log-Analyse und Auswertung - 07.09.2014 (5)
  11. Beim Treiber Update "wiederspenstige" Software eingefangen. "SpeedUpMyComputer"
    Plagegeister aller Art und deren Bekämpfung - 27.05.2014 (3)
  12. "This is a Recommended download" entfernen
    Anleitungen, FAQs & Links - 12.01.2014 (2)
  13. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  14. Weiterleitungen und ,,Recommended for you"-Popups
    Plagegeister aller Art und deren Bekämpfung - 06.05.2012 (3)
  15. "HotFixInstallerUI.dll" und "eula.rtf" nach Update / Jetzt externe Festplatte defekt
    Plagegeister aller Art und deren Bekämpfung - 01.12.2009 (2)
  16. "Adware.Virtumonde"/"Downloader.MisleadApp"/"TR/VB.agt.4"/"NewDotNet.A.1350"/"Fakerec
    Plagegeister aller Art und deren Bekämpfung - 22.08.2008 (6)
  17. Popupfenster "Test", Meldung "Static", will Update
    Plagegeister aller Art und deren Bekämpfung - 12.10.2007 (10)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Win10 - "There is a Recommended Update for this PC" - Guten Abend, ich habe das gleiche Problem wie ein Kollege (Link in nächster Zeile) und brauche Hilfe diesen Plagegeist zu beseitigen. Es handelt sich um einen neuen Asus ROG GL502VS - Win10 - "There is a Recommended Update for this PC"...
Archiv
Du betrachtest: Win10 - "There is a Recommended Update for this PC" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131