| |
| |||||||
Log-Analyse und Auswertung: Hartnäckiger Virus - Reimage?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
09.01.2017, 10:26
| #1 |
 |  Hartnäckiger Virus - Reimage? Hallo liebe Leute Ich sitze hier bei meinen Schwiegereltern am PC und bekomme leicht die Krise. Regelmäßig öffnet sich ein neuer Tab, ohne mein Zutun. Oft wird mir dort ein Repair-Tool für Windows 7 namens Reimage angeboten. Manchmal wird aber auch ganz willkürlich irgendeine Seite geöffnet. Werbe-Popups werden eingeblendet, trotz Popup-Blocker und Malwarebytes zeigt mir auch regelmäßig neue Bedrohungen an, die ich zwar lösche aber scheinbar dann doch irgendwie nicht weg sind. Sehr nervig ist es, wenn ich wie gerade eben beim Einloggen, mein Passwort eingeben will und bei jedem Mausklick ein neuer Tab geöffnet wird. Wie gesagt, Malwarebytes und auch AdwCleaner haben bisher keinen Erfolg gebracht. Wäre um jede Hilfe dankbar. MfG Shadow315 |
|
09.01.2017, 11:10
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Hartnäckiger Virus - Reimage?Zitat:
  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
09.01.2017, 12:04
| #3 |
| | Hartnäckiger Virus - Reimage? Ja natürlich, sorry. Habe so lange schon kein Problem mehr mit Viren gehabt.
__________________Hier erst mal der Log von MalwareBytes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 09.01.2017 Suchlaufzeit: 11:12 Protokolldatei: Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.09.03 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 298225 Abgelaufene Zeit: 19 Min., 9 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, In Quarantäne, [06d1a6d33e6aa09643a891f95aa960a0], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [4f8862174563a4925f8c58327a89e719], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v6.042 - Bericht erstellt am 09/01/2017 um 11:57:09
# Aktualisiert am 06/01/2017 von Malwarebytes
# Datenbank : 2017-01-09.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Jasmine - JASMINE-PC
# Gestartet von : C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2UJM6KB\adwcleaner_6.042.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner gelöscht: C:\Program Files (x86)\Pando Networks\Media Booster
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [12649 Bytes] - [04/01/2017 17:08:16]
C:\AdwCleaner\AdwCleaner[C2].txt - [1703 Bytes] - [05/01/2017 17:38:39]
C:\AdwCleaner\AdwCleaner[C3].txt - [1219 Bytes] - [09/01/2017 11:57:09]
C:\AdwCleaner\AdwCleaner[R0].txt - [9300 Bytes] - [16/09/2014 09:24:40]
C:\AdwCleaner\AdwCleaner[R1].txt - [4705 Bytes] - [22/09/2014 18:28:12]
C:\AdwCleaner\AdwCleaner[R2].txt - [1327 Bytes] - [17/10/2014 12:21:16]
C:\AdwCleaner\AdwCleaner[S0].txt - [8890 Bytes] - [16/09/2014 09:31:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [4006 Bytes] - [22/09/2014 18:32:57]
C:\AdwCleaner\AdwCleaner[S2].txt - [1174 Bytes] - [17/10/2014 12:29:04]
C:\AdwCleaner\AdwCleaner[S3].txt - [12055 Bytes] - [04/01/2017 17:07:10]
C:\AdwCleaner\AdwCleaner[S4].txt - [1933 Bytes] - [05/01/2017 17:38:07]
C:\AdwCleaner\AdwCleaner[S5].txt - [2216 Bytes] - [09/01/2017 11:56:31]
########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [1950 Bytes] ##########
|
|
09.01.2017, 12:10
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Hartnäckiger Virus - Reimage? MEHR wurde da nicht gefunden?? 
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
09.01.2017, 12:14
| #5 |
| | Hartnäckiger Virus - Reimage? Nein, das sind die beiden aktuellen Logs, die ich gerade eben erstellt habe. Und bei fast jedem Mausklick, erscheint kurz ein neuer Tab. Manchmal bleibt der Tab offen, manchmal schließt er auch sofort. Nervt total. Ich bin ratlos. Sowas hatte ich noch nie. |
|
09.01.2017, 12:27
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Hartnäckiger Virus - Reimage? Es geht darum, ob es vorher andere Funde gab. Wenn ja alle Logs dazu posten.
__________________ --> Hartnäckiger Virus - Reimage? |
|
09.01.2017, 15:47
| #7 |
| | Hartnäckiger Virus - Reimage? Okay, da habe ich einige Scans gemacht. Ich poste einfach alle Scan-Protokolle, seit das Problem besteht. Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 08.01.2017 Suchlaufzeit: 23:18 Protokolldatei: 1.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.08.04 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 298055 Abgelaufene Zeit: 16 Min., 12 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, In Quarantäne, [a7cde5942c7c46f08d004c3e01029a66], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [44309cddb9efd165d6b7a3e72cd718e8], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 07.01.2017 Suchlaufzeit: 16:47 Protokolldatei: 2.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.07.02 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 297833 Abgelaufene Zeit: 13 Min., 33 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, In Quarantäne, [c8463a3fb4f4d3639ccdf59441c220e0], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [4fbfbebbf6b253e33b2e7e0b11f206fa], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 06.01.2017 Suchlaufzeit: 20:49 Protokolldatei: 3.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.06.08 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 298011 Abgelaufene Zeit: 12 Min., 3 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, Löschen bei Neustart, [d4dcf7816a3e60d64eb6c5c47d868d73], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [d8d8b7c1d6d28bab49bb3f4a907307f9], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 06.01.2017 Suchlaufzeit: 20:35 Protokolldatei: 4.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.06.08 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 298007 Abgelaufene Zeit: 13 Min., 48 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, In Quarantäne, [9d135127109843f307fd1c6d5ba88b75], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [f2be7ff933754aec659f9ced72917888], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 05.01.2017 Suchlaufzeit: 17:12 Protokolldatei: 5.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.05.05 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 297744 Abgelaufene Zeit: 13 Min., 14 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, In Quarantäne, [3d0c492fc6e29f97384dbfc87d8643bd], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [1732fe7aecbc55e1c5c0a3e4c73c27d9], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 05.01.2017 Suchlaufzeit: 02:16 Protokolldatei: 6.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.04.10 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 297132 Abgelaufene Zeit: 13 Min., 19 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 26 PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\jetpack\sparpilot__campaign0@sparpilot.com, In Quarantäne, [28c20374d4d4152169a74b1756aad927], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\jetpack\sparpilot__campaign0@sparpilot.com\simple-storage, In Quarantäne, [28c20374d4d4152169a74b1756aad927], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\defaults, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\defaults\preferences, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\locale, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\addon-sdk, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\addon-sdk\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\async, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\async\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\deepest-merge, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\deepest-merge\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\service, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\trusted-links, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\trusted-links\lib, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], Dateien: 55 PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, In Quarantäne, [02e8bbbc68402f0712bef393cf34e21e], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, In Quarantäne, [b238c1b6a206999d4d83622444bf10f0], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\jetpack\sparpilot__campaign0@sparpilot.com\simple-storage\store.json, In Quarantäne, [28c20374d4d4152169a74b1756aad927], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\bootstrap.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\harness-options.json, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\icon.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\icon64.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\install.rdf, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\locales.json, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\options.xul, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\defaults\preferences\prefs.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF\manifest.mf, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF\mozilla.rsa, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF\mozilla.sf, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\async\lib\async.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\deepest-merge\lib\index.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\config.json, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\icon128.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\icon48.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\icon64.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\domains.json, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bar-bg.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bar-logo-small.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bar-logo.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bg-fade-line.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\diagonal-line.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-bg-act.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-bg.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-details-bg-act.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-details-bg.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\nav-extraitem-bg-act.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\nav-item-bg-act.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\nav-item-bg.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\sprite.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-empty-big.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-empty.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-full-big.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-full.png, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib\jquery.hoverIntent.min.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib\jquery.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib\jquery.ui.min.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod\custom.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod\toolbar.css, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod\toolbar.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\config.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\controller.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\main.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\preisheld.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\service\promotion-dynamic.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\api.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\sparpilot-api.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\task.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\tasks.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\utils.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\trusted-links\lib\trusted-links.js, In Quarantäne, [c2289bdc0d9bf4421cff6708669a6c94], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 03.01.2017 Suchlaufzeit: 17:55 Protokolldatei: 7.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.01.03.07 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jasmine Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 297133 Abgelaufene Zeit: 14 Min., 28 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 2 PUP.Optional.MindSpark, HKU\S-1-5-21-838575733-3782424441-3606765584-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EasyPDFCombineTooltab Uninstall Internet Explorer, Keine Aktion durch Benutzer, [1b684334c9df6bcb75ccbe34ae5506fa], PUP.Optional.AuslogicsDiskDefrag, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1, Keine Aktion durch Benutzer, [dfa491e65b4da98d49d7cfdf9b65a858], Registrierungswerte: 1 PUP.Optional.MindSpark, HKU\S-1-5-21-838575733-3782424441-3606765584-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EasyPDFCombineTooltab Uninstall Internet Explorer|Publisher, Mindspark Interactive Network, Inc., Keine Aktion durch Benutzer, [abd83542f6b265d1e0217918a25eeb15] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 26 PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\jetpack\sparpilot__campaign0@sparpilot.com, Keine Aktion durch Benutzer, [03806710297f2b0b69a12d35f60a1ce4], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\jetpack\sparpilot__campaign0@sparpilot.com\simple-storage, Keine Aktion durch Benutzer, [03806710297f2b0b69a12d35f60a1ce4], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\defaults, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\defaults\preferences, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\locale, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\addon-sdk, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\addon-sdk\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\async, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\async\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\deepest-merge, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\deepest-merge\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\service, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\trusted-links, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\trusted-links\lib, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], Dateien: 56 PUP.Optional.MindSpark, C:\Users\Jasmine\AppData\Local\EasyPDFCombineTooltab\TooltabExtension.dll, Keine Aktion durch Benutzer, [1b684334c9df6bcb75ccbe34ae5506fa], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, Keine Aktion durch Benutzer, [542fdb9c317781b56e835f25f60da15f], PUP.Optional.CrossRider, C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, Keine Aktion durch Benutzer, [a7dc1f58703878beb938b7cdd92af30d], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\jetpack\sparpilot__campaign0@sparpilot.com\simple-storage\store.json, Keine Aktion durch Benutzer, [03806710297f2b0b69a12d35f60a1ce4], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\bootstrap.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\harness-options.json, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\icon.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\icon64.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\install.rdf, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\locales.json, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\options.xul, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\defaults\preferences\prefs.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF\manifest.mf, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF\mozilla.rsa, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\META-INF\mozilla.sf, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\async\lib\async.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\deepest-merge\lib\index.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\config.json, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\icon128.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\icon48.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\icon64.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\domains.json, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bar-bg.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bar-logo-small.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bar-logo.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\bg-fade-line.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\diagonal-line.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-bg-act.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-bg.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-details-bg-act.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\list-item-details-bg.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\nav-extraitem-bg-act.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\nav-item-bg-act.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\nav-item-bg.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\sprite.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-empty-big.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-empty.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-full-big.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\images\stars-full.png, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib\jquery.hoverIntent.min.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib\jquery.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\lib\jquery.ui.min.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod\custom.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod\toolbar.css, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\data\preisheld\pagemod\toolbar.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\config.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\controller.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\main.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\preisheld.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-0\lib\service\promotion-dynamic.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\api.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\sparpilot-api.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\task.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\tasks.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\sparpilot-api\lib\utils.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], PUP.Optional.SparPilot, C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\sparpilot__campaign0@sparpilot.com\resources\trusted-links\lib\trusted-links.js, Keine Aktion durch Benutzer, [a8db1d5a3177fe3873a284ebb050cc34], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Und hier die letzten Scans von AdwCleaner: Code:
ATTFilter # AdwCleaner v6.041 - Bericht erstellt am 05/01/2017 um 17:38:07
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-03.1 [Lokal]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Jasmine - JASMINE-PC
# Gestartet von : C:\Users\Jasmine\Downloads\AdwCleaner_6.041.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
Keine schädlichen Dienste gefunden.
***** [ Ordner ] *****
Keine schädlichen Ordner gefunden.
***** [ Dateien ] *****
Keine schädlichen Dateien gefunden.
***** [ DLL ] *****
Keine infizierten DLLs gefunden.
***** [ WMI ] *****
Keine schädlichen Schlüssel gefunden.
***** [ Verknüpfungen ] *****
Keine infizierten Verknüpfungen gefunden.
***** [ Aufgabenplanung ] *****
Keine schädlichen Aufgaben gefunden.
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Reimage
***** [ Internetbrowser ] *****
Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [12649 Bytes] - [04/01/2017 17:08:16]
C:\AdwCleaner\AdwCleaner[R0].txt - [9300 Bytes] - [16/09/2014 09:24:40]
C:\AdwCleaner\AdwCleaner[R1].txt - [4705 Bytes] - [22/09/2014 18:28:12]
C:\AdwCleaner\AdwCleaner[R2].txt - [1327 Bytes] - [17/10/2014 12:21:16]
C:\AdwCleaner\AdwCleaner[S0].txt - [8890 Bytes] - [16/09/2014 09:31:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [4006 Bytes] - [22/09/2014 18:32:57]
C:\AdwCleaner\AdwCleaner[S2].txt - [1174 Bytes] - [17/10/2014 12:29:04]
C:\AdwCleaner\AdwCleaner[S3].txt - [12055 Bytes] - [04/01/2017 17:07:10]
C:\AdwCleaner\AdwCleaner[S4].txt - [1777 Bytes] - [05/01/2017 17:38:07]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1850 Bytes] ##########
Code:
ATTFilter # AdwCleaner v6.041 - Bericht erstellt am 04/01/2017 um 17:07:10
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-03.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Jasmine - JASMINE-PC
# Gestartet von : C:\Users\Jasmine\Downloads\AdwCleaner_6.041.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
Keine schädlichen Dienste gefunden.
***** [ Ordner ] *****
Ordner Gefunden: C:\Users\Jasmine\AppData\Local\EasyPDFCombineTooltab
Ordner Gefunden: C:\Users\Jasmine\AppData\LocalLow\IE-BHO
Ordner Gefunden: C:\Users\Jasmine\AppData\Roaming\Security Systems
Ordner Gefunden: C:\ProgramData\Auslogics
Ordner Gefunden: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
Ordner Gefunden: C:\Program Files (x86)\Auslogics
Ordner Gefunden: C:\Users\Jasmine\AppData\Local\Temp\Security Systems
***** [ Dateien ] *****
Keine schädlichen Dateien gefunden.
***** [ DLL ] *****
Keine infizierten DLLs gefunden.
***** [ WMI ] *****
Keine schädlichen Schlüssel gefunden.
***** [ Verknüpfungen ] *****
Keine infizierten Verknüpfungen gefunden.
***** [ Aufgabenplanung ] *****
Keine schädlichen Aufgaben gefunden.
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WebCakeUpdaterService
Schlüssel Gefunden: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WebCakeUpdaterService
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Schlüssel Gefunden: HKCU\Software\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Wert Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{59C0C5BD-2579-433A-BBB8-AFFD59642BAF}]
Schlüssel Gefunden: HKU\.DEFAULT\Software\AskPartnerNetwork
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\DriverTuner
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\DriverTuner_Init
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\Yahoo\Companion
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\EasyPDFCombine
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\EasyPDFCombineTooltab Uninstall Internet Explorer
Schlüssel Gefunden: HKU\S-1-5-18\Software\AskPartnerNetwork
Schlüssel Gefunden: HKCU\Software\DriverTuner
Schlüssel Gefunden: HKCU\Software\DriverTuner_Init
Schlüssel Gefunden: HKCU\Software\Yahoo\Companion
Schlüssel Gefunden: HKCU\Software\EasyPDFCombine
Schlüssel Gefunden: HKLM\SOFTWARE\Auslogics
Schlüssel Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\EasyPDFCombineTooltab Uninstall Internet Explorer
Schlüssel Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Foxy Secure
Schlüssel Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
Schlüssel Gefunden: [x64] HKCU\Software\DriverTuner
Schlüssel Gefunden: [x64] HKCU\Software\DriverTuner_Init
Schlüssel Gefunden: [x64] HKCU\Software\Yahoo\Companion
Schlüssel Gefunden: [x64] HKCU\Software\EasyPDFCombine
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\EasyPDFCombineTooltab Uninstall Internet Explorer
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89EA4F1B8FBCDEF47AE328E455E28AA0
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97ECFF59EE08D4F47BB1464DEC37DA87
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A8CB937199A57E748B6AC433DA453EE2
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4E78E12704AFCE408C7FBE501F1AA0A
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6A54B56C58C82a4688AFB93F42EA17B
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F0390A76D28822743A68D7F1AB22E6D0
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0A5AC497E6BBC8D45BE8AD6619DA8217
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0E53FAB6-BA16-47DF-920A-9A888342CB5E}
Schlüssel Gefunden: HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\Microsoft\Internet Explorer\SearchScopes\{32058555-680C-452E-BA2D-AE83C8180009}
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0E53FAB6-BA16-47DF-920A-9A888342CB5E}
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{32058555-680C-452E-BA2D-AE83C8180009}
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0E53FAB6-BA16-47DF-920A-9A888342CB5E}
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{32058555-680C-452E-BA2D-AE83C8180009}
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akz.imgfarm.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\hp.myway.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\imgfarm.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ttdetect.staticimgfarm.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akz.imgfarm.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\hp.myway.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\imgfarm.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ttdetect.staticimgfarm.com
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\ApnTBMon
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\Browser Extensions
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\Browser Infrastructure Helper
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
***** [ Internetbrowser ] *****
Firefox pref Gefunden: [C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\prefs.js] - "browser.newtab.url" - "chrome://unitedtb/content/newtab/newtab-page.xhtml"
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.
*************************
C:\AdwCleaner\AdwCleaner[R0].txt - [9300 Bytes] - [16/09/2014 09:24:40]
C:\AdwCleaner\AdwCleaner[R1].txt - [4705 Bytes] - [22/09/2014 18:28:12]
C:\AdwCleaner\AdwCleaner[R2].txt - [1327 Bytes] - [17/10/2014 12:21:16]
C:\AdwCleaner\AdwCleaner[S0].txt - [8890 Bytes] - [16/09/2014 09:31:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [4006 Bytes] - [22/09/2014 18:32:57]
C:\AdwCleaner\AdwCleaner[S2].txt - [1174 Bytes] - [17/10/2014 12:29:04]
C:\AdwCleaner\AdwCleaner[S3].txt - [11709 Bytes] - [04/01/2017 17:07:10]
########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [11783 Bytes] ##########
|
|
09.01.2017, 16:05
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Hartnäckiger Virus - Reimage?+++ WICHTIGER HINWEIS +++ Während der Analyse und Bereinigung nimmst du KEINERLEI Änderungen auf eigene Faust vor, d.h. du installierst oder deinstallierst keine Software ohne Absprache. Auch veränderst du keine Systemeinstellungen, solange wir deinen Fall bearbeiten. Änderungen, Installationen oder Deinstallationen machst du AUSSCHLIESSLICH nur auf Anweisung! Es wird erforderlich sein, deinen Virenscanner zu deaktivieren und in bestimmten Fällen auch zu deinstallieren, damit vernünftig bereinigt werden kann. Dein System ist daher erst wenn wir hier fertig sind wieder für den alltäglichen Gebrauch wie surfen oder mailen von mir freigegeben. Gelesen und verstanden? Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
09.01.2017, 21:38
| #9 |
| | Hartnäckiger Virus - Reimage? FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-01-2017
durchgeführt von Jasmine (Administrator) auf JASMINE-PC (09-01-2017 21:33:16)
Gestartet von C:\Users\Jasmine\Downloads
Geladene Profile: Jasmine (Verfügbare Profile: Jasmine)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\vVX3000.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7936032 2009-06-26] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Run: [VX3000] => C:\windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Run: [Google Update] => C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-17] (Google Inc.)
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{DA14A638-219A-41A4-AB37-FC662BD4D999}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
hxxp://www.giga.de/androidnews/
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll => Keine Datei
BHO-x32: Kein Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-14] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-14] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-838575733-3782424441-3606765584-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default [2017-01-09]
FF user.js: detected! => C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\user.js [2015-06-27]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\t3squ8qs.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\t3squ8qs.default -> hxxps://www.google.com/search
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\t3squ8qs.default -> Google
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\t3squ8qs.default -> Bing
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\t3squ8qs.default -> Yahoo!
FF Homepage: Mozilla\Firefox\Profiles\t3squ8qs.default -> hxxps://www.malwarebytes.org/restorebrowser/yhp-ff
chrome://unitedtb/content/newtab/startpage.xhtml
FF Extension: (Fox Sec 7) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\fx@foxysecureKDJJHVLSDUVFU.com [2014-10-20] [ist nicht signiert]
FF Extension: (WEB.DE MailCheck) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\mailcheck@web.de [2016-12-15]
FF Extension: (Search Addon Plus) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\{13e41689-0b2b-4737-95a7-d0ff34134694}.xpi [2015-09-02] [ist nicht signiert]
FF Extension: (DownloadShield) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\{1a2a3d59-8f2a-4138-9cbd-5c960639bb5f}.xpi [2015-11-07] [ist nicht signiert]
FF Extension: (Adblock Plus) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF => nicht gefunden
FF HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: (McAfee Security Scan Plus) - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-13] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-13] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-09-14] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll [2009-06-23] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-838575733-3782424441-3606765584-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-838575733-3782424441-3606765584-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-838575733-3782424441-3606765584-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://de.search.yahoo.com/?type=201117&fr=yo-yhp-ch
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSearchKeyword: Default -> google.de_
CHR Plugin: (Shockwave Flash) - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\PepperFlash\pepflashplayer.dll => Keine Datei
CHR Plugin: (Native Client) - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\pdf.dll => Keine Datei
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Users\Jasmine\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
CHR Profile: C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default [2017-01-09]
CHR Extension: (Adblock Plus) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Edit URL) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmfgopimgpikdhokmlohfcibokjnodkn [2017-01-01]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-26]
CHR Extension: (Chrome Media Router) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>
StartMenuInternet: Google Chrome.Q55UBRYIZ4WM3GDY3LE2KWQIOA - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-11] (Electronic Arts)
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-09-14] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [29208 2014-09-16] ()
S3 RTL8023x64; C:\windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-01-09 21:33 - 2017-01-09 21:33 - 00013884 _____ C:\Users\Jasmine\Downloads\FRST.txt
2017-01-09 21:33 - 2017-01-09 21:33 - 00000000 ____D C:\FRST
2017-01-09 21:32 - 2017-01-09 21:32 - 02419200 _____ (Farbar) C:\Users\Jasmine\Downloads\FRST64.exe
2017-01-09 15:45 - 2017-01-09 15:45 - 03988944 _____ C:\Users\Jasmine\Desktop\adwcleaner_6.042.exe
2017-01-09 15:38 - 2017-01-09 15:38 - 00022146 _____ C:\Users\Jasmine\Desktop\7.txt
2017-01-09 15:38 - 2017-01-09 15:38 - 00020173 _____ C:\Users\Jasmine\Desktop\6.txt
2017-01-09 15:37 - 2017-01-09 15:37 - 00019297 _____ C:\6.txt
2017-01-09 15:37 - 2017-01-09 15:37 - 00001591 _____ C:\Users\Jasmine\Desktop\5.txt
2017-01-09 15:37 - 2017-01-09 15:37 - 00001591 _____ C:\Users\Jasmine\Desktop\4.txt
2017-01-09 15:36 - 2017-01-09 15:36 - 00001597 _____ C:\Users\Jasmine\Desktop\3.txt
2017-01-09 15:36 - 2017-01-09 15:36 - 00001591 _____ C:\Users\Jasmine\Desktop\2.txt
2017-01-09 15:35 - 2017-01-09 15:35 - 00001591 _____ C:\Users\Jasmine\Desktop\1.txt
2017-01-09 15:29 - 2017-01-09 15:29 - 00001591 _____ C:\3.txt
2017-01-09 15:29 - 2017-01-09 15:29 - 00001591 _____ C:\2.txt
2017-01-09 11:50 - 2017-01-09 11:50 - 00001585 _____ C:\Users\Jasmine\Desktop\Neues Textdokument.txt
2017-01-06 02:14 - 2009-07-26 13:07 - 00321629 _____ C:\Users\Jasmine\Desktop\Video053.3gp
2017-01-05 14:06 - 2017-01-05 14:06 - 188992113 _____ C:\windows\MEMORY.DMP
2017-01-05 14:06 - 2017-01-05 14:06 - 00315056 _____ C:\windows\Minidump\010517-19749-01.dmp
2017-01-05 14:06 - 2017-01-05 14:06 - 00000000 ____D C:\windows\Minidump
2017-01-01 20:52 - 2017-01-01 20:52 - 00002200 _____ C:\Users\Jasmine\Downloads\CSTrail14.user.js
2017-01-01 20:52 - 2017-01-01 20:52 - 00002200 _____ C:\Users\Jasmine\Downloads\CSTrail14 (2).user.js
2017-01-01 20:52 - 2017-01-01 20:52 - 00002200 _____ C:\Users\Jasmine\Downloads\CSTrail14 (1).user.js
2017-01-01 20:47 - 2017-01-01 20:47 - 00002524 _____ C:\Users\Jasmine\Downloads\Nicht bestätigt 727589.crdownload
2016-12-29 23:30 - 2016-12-29 23:52 - 00000000 ____D C:\Users\Jasmine\Desktop\bilder neu
2016-12-21 20:37 - 2016-12-21 20:43 - 00001179 _____ C:\Users\Jasmine\Desktop\Widerpsruch Jasmine.txt
2016-12-21 20:27 - 2016-12-21 20:45 - 00001186 _____ C:\Users\Jasmine\Desktop\Widerspruch Hartmut.txt
2016-12-15 12:39 - 2016-12-15 12:39 - 00001907 _____ C:\Users\Jasmine\Downloads\ca8f566e46b19c0feeb76573a81770b8bdac87cf1d13595768adf38256fb44.png
2016-12-14 16:28 - 2016-11-21 19:16 - 00154856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2016-12-14 16:28 - 2016-11-21 19:16 - 00095464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2016-12-14 16:28 - 2016-11-21 19:12 - 01462272 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00730624 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00463872 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00345600 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2016-12-14 16:28 - 2016-11-21 19:12 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2016-12-14 16:28 - 2016-11-20 17:20 - 00666112 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2016-12-14 16:28 - 2016-11-20 17:20 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2016-12-14 16:28 - 2016-11-20 17:20 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2016-12-14 16:28 - 2016-11-20 17:20 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcrypt.dll
2016-12-14 16:28 - 2016-11-20 17:20 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00342528 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00254464 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2016-12-14 16:28 - 2016-11-20 17:04 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2016-12-14 16:28 - 2016-11-20 16:58 - 00159744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2016-12-14 16:28 - 2016-11-20 16:57 - 00291328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2016-12-14 16:28 - 2016-11-20 16:57 - 00129536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2016-12-14 16:28 - 2016-11-20 16:57 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2016-12-14 16:28 - 2016-11-20 16:57 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2016-12-14 16:28 - 2016-11-20 16:52 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2016-12-14 16:28 - 2016-11-20 15:07 - 00467392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2016-12-14 16:28 - 2016-11-17 17:41 - 00370920 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2016-12-14 16:28 - 2016-11-15 00:27 - 00394448 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-12-14 16:28 - 2016-11-14 23:39 - 00346320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-12-14 16:28 - 2016-11-12 20:48 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2016-12-14 16:28 - 2016-11-12 20:48 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2016-12-14 16:28 - 2016-11-12 20:28 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2016-12-14 16:28 - 2016-11-12 20:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2016-12-14 16:28 - 2016-11-12 20:26 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2016-12-14 16:28 - 2016-11-12 20:25 - 00576000 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-12-14 16:28 - 2016-11-12 20:25 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2016-12-14 16:28 - 2016-11-12 20:21 - 02896384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-12-14 16:28 - 2016-11-12 20:15 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2016-12-14 16:28 - 2016-11-12 20:14 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2016-12-14 16:28 - 2016-11-12 20:09 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2016-12-14 16:28 - 2016-11-12 20:08 - 25759744 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-12-14 16:28 - 2016-11-12 20:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2016-12-14 16:28 - 2016-11-12 20:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2016-12-14 16:28 - 2016-11-12 20:07 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-12-14 16:28 - 2016-11-12 20:07 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2016-12-14 16:28 - 2016-11-12 19:56 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2016-12-14 16:28 - 2016-11-12 19:53 - 06049280 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-12-14 16:28 - 2016-11-12 19:52 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2016-12-14 16:28 - 2016-11-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2016-12-14 16:28 - 2016-11-12 19:41 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 16:28 - 2016-11-12 19:40 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2016-12-14 16:28 - 2016-11-12 19:35 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2016-12-14 16:28 - 2016-11-12 19:34 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-12-14 16:28 - 2016-11-12 19:31 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-12-14 16:28 - 2016-11-12 19:30 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2016-12-14 16:28 - 2016-11-12 19:29 - 00498688 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-12-14 16:28 - 2016-11-12 19:29 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2016-12-14 16:28 - 2016-11-12 19:29 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2016-12-14 16:28 - 2016-11-12 19:28 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2016-12-14 16:28 - 2016-11-12 19:27 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-12-14 16:28 - 2016-11-12 19:20 - 02287616 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-12-14 16:28 - 2016-11-12 19:20 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2016-12-14 16:28 - 2016-11-12 19:19 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2016-12-14 16:28 - 2016-11-12 19:17 - 20302848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-12-14 16:28 - 2016-11-12 19:15 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2016-12-14 16:28 - 2016-11-12 19:11 - 00725504 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-12-14 16:28 - 2016-11-12 19:10 - 00806912 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-12-14 16:28 - 2016-11-12 19:08 - 02131456 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-12-14 16:28 - 2016-11-12 19:08 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2016-12-14 16:28 - 2016-11-12 19:03 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2016-12-14 16:28 - 2016-11-12 18:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-12-14 16:28 - 2016-11-12 18:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2016-12-14 16:28 - 2016-11-12 18:52 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2016-12-14 16:28 - 2016-11-12 18:51 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2016-12-14 16:28 - 2016-11-12 18:49 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-12-14 16:28 - 2016-11-12 18:47 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2016-12-14 16:28 - 2016-11-12 18:41 - 15257088 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-12-14 16:28 - 2016-11-12 18:40 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-12-14 16:28 - 2016-11-12 18:38 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-12-14 16:28 - 2016-11-12 18:37 - 04608000 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-12-14 16:28 - 2016-11-12 18:36 - 02055680 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-12-14 16:28 - 2016-11-12 18:36 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2016-12-14 16:28 - 2016-11-12 18:35 - 02920960 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-12-14 16:28 - 2016-11-12 18:21 - 13653504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-12-14 16:28 - 2016-11-12 18:20 - 01543680 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-12-14 16:28 - 2016-11-12 18:11 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-12-14 16:28 - 2016-11-12 18:05 - 02444800 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-12-14 16:28 - 2016-11-12 18:02 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-12-14 16:28 - 2016-11-12 18:02 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-12-14 16:28 - 2016-11-10 17:32 - 01009152 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2016-12-14 16:28 - 2016-11-10 17:19 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2016-12-14 16:28 - 2016-11-09 17:41 - 00114408 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2016-12-14 16:28 - 2016-11-09 17:33 - 03244032 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00070144 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00025088 _____ (Microsoft Corporation) C:\windows\system32\msimsg.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 02365440 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 01806848 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimsg.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2016-12-14 16:28 - 2016-11-09 17:02 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe
2016-12-14 16:28 - 2016-11-09 16:55 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\msiexec.exe
2016-12-14 16:28 - 2016-11-06 17:33 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2016-12-14 16:28 - 2016-11-06 17:16 - 00312832 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2016-12-14 16:28 - 2016-11-06 17:01 - 03219456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-12-14 16:28 - 2016-10-27 16:33 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2016-12-14 16:28 - 2016-10-27 16:20 - 00627712 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2016-12-14 16:28 - 2016-10-11 16:40 - 00631176 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2016-12-14 16:28 - 2016-10-11 16:37 - 05547752 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-12-14 16:28 - 2016-10-11 16:37 - 00706792 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2016-12-14 16:28 - 2016-10-11 16:34 - 01732864 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00880640 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2016-12-14 16:28 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2016-12-14 16:28 - 2016-10-11 16:21 - 01314112 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00275456 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:03 - 00148480 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2016-12-14 16:28 - 2016-10-11 16:03 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2016-12-14 16:28 - 2016-10-11 16:03 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2016-12-14 16:28 - 2016-10-11 15:59 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2016-12-14 16:28 - 2016-10-11 15:59 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2016-12-14 16:28 - 2016-10-11 15:55 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\bcdedit.exe
2016-12-14 16:28 - 2016-10-11 15:55 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2016-12-14 16:28 - 2016-10-11 15:51 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2016-12-14 16:28 - 2016-10-11 15:51 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2016-12-14 16:28 - 2016-10-11 15:51 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2016-12-14 16:28 - 2016-10-11 15:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2016-12-14 16:28 - 2016-10-11 15:50 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 15:50 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 15:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 15:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 14:18 - 00419648 _____ C:\windows\SysWOW64\locale.nls
2016-12-14 16:28 - 2016-10-11 14:17 - 00419648 _____ C:\windows\system32\locale.nls
2016-12-14 16:28 - 2016-10-08 14:06 - 00633296 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2016-12-14 16:28 - 2016-10-04 16:31 - 01483264 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2016-12-14 16:28 - 2016-10-04 16:31 - 00229376 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2016-12-14 16:28 - 2016-10-04 16:31 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2016-12-14 16:28 - 2016-10-04 16:31 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-01-09 21:13 - 2013-06-11 11:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2017-01-09 21:09 - 2013-06-11 12:06 - 00000000 ____D C:\Users\Jasmine\AppData\Roaming\Skype
2017-01-09 19:13 - 2015-07-04 17:24 - 00000392 _____ C:\windows\Tasks\update-sys.job
2017-01-09 18:44 - 2015-07-04 17:24 - 00000392 _____ C:\windows\Tasks\update-S-1-5-21-838575733-3782424441-3606765584-1001.job
2017-01-09 15:45 - 2014-09-16 09:24 - 00000000 ____D C:\AdwCleaner
2017-01-09 15:39 - 2014-09-14 21:00 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-09 12:06 - 2009-07-14 05:45 - 00025376 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-09 12:06 - 2009-07-14 05:45 - 00025376 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-09 12:03 - 2009-09-14 07:03 - 00699416 _____ C:\windows\system32\perfh007.dat
2017-01-09 12:03 - 2009-09-14 07:03 - 00149556 _____ C:\windows\system32\perfc007.dat
2017-01-09 12:03 - 2009-07-14 06:13 - 01620612 _____ C:\windows\system32\PerfStringBackup.INI
2017-01-09 12:03 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2017-01-09 11:58 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2017-01-09 11:57 - 2013-11-01 17:16 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2017-01-08 22:59 - 2014-10-10 08:14 - 00000000 ____D C:\Users\Jasmine\AppData\Roaming\vlc
2017-01-07 20:00 - 2016-11-21 21:59 - 00000948 _____ C:\Users\Jasmine\Desktop\nativelog.txt
2017-01-06 01:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\ModemLogs
2017-01-05 16:15 - 2014-10-10 08:19 - 00000000 ____D C:\Users\Jasmine\AppData\Roaming\.minecraft
2017-01-05 10:57 - 2009-07-14 06:32 - 00000000 ____D C:\windows\Downloaded Program Files
2017-01-01 01:39 - 2015-04-13 13:35 - 00000000 ____D C:\Users\Jasmine\AppData\Local\ElevatedDiagnostics
2016-12-31 10:07 - 2016-08-27 07:52 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-31 10:07 - 2013-06-11 12:06 - 00000000 ____D C:\ProgramData\Skype
2016-12-29 09:05 - 2009-07-14 06:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
2016-12-26 17:35 - 2009-07-14 06:32 - 00000000 ____D C:\windows\twain_32
2016-12-26 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64
2016-12-26 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\DriverStore
2016-12-17 00:20 - 2013-06-11 19:32 - 00003542 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 00:20 - 2013-06-11 19:32 - 00003414 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 00:20 - 2013-06-11 10:56 - 00003722 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001UA
2016-12-17 00:20 - 2013-06-11 10:56 - 00003450 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001Core
2016-12-17 00:20 - 2009-07-14 04:20 - 00000000 ____D C:\windows\Tasks
2016-12-15 14:25 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2016-12-15 03:49 - 2009-07-14 04:20 - 00000000 __RSD C:\windows\assembly
2016-12-15 03:49 - 2009-07-14 04:20 - 00000000 ____D C:\windows\Microsoft.NET
2016-12-15 03:41 - 2009-07-14 04:20 - 00000000 ____D C:\windows\winsxs
2016-12-15 03:40 - 2009-07-14 05:45 - 04824048 _____ C:\windows\system32\FNTCACHE.DAT
2016-12-15 03:40 - 2009-07-14 03:34 - 00189440 ____H C:\Users\Default\NTUSER.DAT.LOG1
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\en-US
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\de-DE
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\en-US
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\de-DE
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Boot
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\AppPatch
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-15 03:12 - 2013-08-14 21:27 - 00000000 ____D C:\windows\system32\MRT
2016-12-15 03:09 - 2013-06-07 10:12 - 135632432 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-12-15 03:06 - 2014-02-26 01:18 - 01593956 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2016-12-15 03:02 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\catroot2
2016-12-14 21:21 - 2013-06-11 11:23 - 00002336 _____ C:\Users\Jasmine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-13 21:13 - 2013-06-11 11:58 - 00802904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-12-13 21:13 - 2013-06-11 11:58 - 00144472 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-13 21:13 - 2013-06-11 11:58 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-12-13 21:13 - 2013-06-11 11:57 - 00000000 ____D C:\windows\system32\Macromed
2016-12-13 21:13 - 2010-09-16 16:25 - 00000000 ____D C:\windows\SysWOW64\Macromed
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2014-11-25 10:54 - 2014-11-25 11:01 - 0000132 _____ () C:\Users\Jasmine\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-10-27 12:10 - 2014-10-27 12:10 - 0005911 _____ () C:\Users\Jasmine\AppData\Local\recently-used.xbel
2015-07-04 17:24 - 2015-07-04 17:24 - 0000003 _____ () C:\Users\Jasmine\AppData\Local\updater.log
2015-07-04 17:24 - 2016-08-26 17:02 - 0000424 _____ () C:\Users\Jasmine\AppData\Local\UserProducts.xml
2010-09-16 16:25 - 2010-09-16 16:25 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\flashax10.exe
Einige Dateien in TEMP:
====================
C:\Users\Jasmine\AppData\Local\Temp\APNSetup.exe
C:\Users\Jasmine\AppData\Local\Temp\avastclear.exe
C:\Users\Jasmine\AppData\Local\Temp\BackupSetup.exe
C:\Users\Jasmine\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Jasmine\AppData\Local\Temp\fp_pl_pfs_installer-2.exe
C:\Users\Jasmine\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Jasmine\AppData\Local\Temp\fx6-ff-ie-gg-de-2014-10-15.exe
C:\Users\Jasmine\AppData\Local\Temp\install_reader11_de_ltr5x64d_awc_aih.exe
C:\Users\Jasmine\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Jasmine\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Jasmine\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Jasmine\AppData\Local\Temp\Quarantine.exe
C:\Users\Jasmine\AppData\Local\Temp\riftuninstall.exe
C:\Users\Jasmine\AppData\Local\Temp\sdan.exe
C:\Users\Jasmine\AppData\Local\Temp\sdapk.exe
C:\Users\Jasmine\AppData\Local\Temp\sdaspwn.exe
C:\Users\Jasmine\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jasmine\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Jasmine\AppData\Local\Temp\uninst1.exe
C:\Users\Jasmine\AppData\Local\Temp\vcredist_x64.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-01-03 00:13
==================== Ende von FRST.txt ============================
Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von Jasmine (09-01-2017 21:34:19)
Gestartet von C:\Users\Jasmine\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2013-06-07 08:30:09)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-838575733-3782424441-3606765584-500 - Administrator - Disabled)
Gast (S-1-5-21-838575733-3782424441-3606765584-501 - Limited - Disabled)
Jasmine (S-1-5-21-838575733-3782424441-3606765584-1001 - Administrator - Enabled) => C:\Users\Jasmine
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Photoshop CS5.1 (HKLM-x32\...\{9158FF30-78D7-40EF-B83E-451AC5334640}) (Version: 12.1 - Adobe Systems Incorporated)
Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.)
Google Chrome (HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0279FF2F-F1A2-4A73-842C-7E1818BD9093} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {1192E8A9-1475-4CD0-9195-E18440C074DC} - System32\Tasks\{A05BBCC6-7978-4607-9BDF-3FBD2F9F7E66} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.4.0.102/de/go/help.faq.installer?LastError=1638
Task: {284A7F21-2582-409A-816A-1D477549E7CE} - System32\Tasks\{56D76694-52D2-4617-A67F-06D8C7E7AA38} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {2A9D0EA0-DA49-4075-BE3E-8F613050A32E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-838575733-3782424441-3606765584-1001
Task: {2EB40DB4-D200-41B3-B631-99CA0F29399D} - System32\Tasks\{72B530D8-A62F-4485-B85B-2EA3F926395D} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.5.0.102/de/go/help.faq.installer?LastError=1638
Task: {30BF359F-D181-4354-B634-8412E37FD20E} - System32\Tasks\{F209766A-5B4E-43AA-829D-A42887106590} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.6.80.103/de/go/help.faq.installer?LastError=1638
Task: {39E0AC08-87CB-4D3C-B28C-A4CE123D2076} - System32\Tasks\{39930610-F864-422A-A93F-B0E820D98710} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {4B720732-8566-4F44-83C5-E7C650D3FA0B} - System32\Tasks\{CE11A2B3-4861-4517-946E-AD1634D08933} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {684022B8-BD7D-43F8-97D6-C9DD4325C263} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {6B23A38B-23C4-4DAE-BC43-17D71D9DBD60} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13] (Adobe Systems Incorporated)
Task: {6DF19A37-4E08-484A-BC43-7519FCEFA645} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001Core => C:\Users\Jasmine\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {757F2066-9311-48BB-956D-E3349A84B704} - System32\Tasks\{F3CFA133-48C9-4C44-BA96-644AE4A3B838} => pcalua.exe -a "C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\064TQC54\Freewarea_Installer.exe" -d C:\Users\Jasmine\Desktop
Task: {762BE73C-452E-45EC-BAF5-83C47C8BFA14} - System32\Tasks\{BD299DBE-820E-4F54-8C3A-5BF13963FF13} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {7A7D7B29-98C9-4BE2-A189-4563540FA14F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {8E718EEA-A414-4B69-9008-85D06782DA33} - System32\Tasks\{D66ECE40-5A34-446D-B363-4DDE82B800F9} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.4.64.102/de/go/help.faq.installer?LastError=1638
Task: {943C5CCF-5D15-49EC-AA1E-10717A7EDFC3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {9843CEE6-E476-4F1F-A2D5-BCA59D7654D9} - System32\Tasks\{25018952-1340-4013-9EA6-8345A1290E06} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {99D4BBD5-0C7D-4F3E-90A6-3B47B64ADCB1} - System32\Tasks\{B0EAB067-B159-413F-A747-C632CD816CC9} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {9F34F92B-F604-4237-AF2B-4B266B733E89} - System32\Tasks\{71B12FF9-29D7-4AFF-9EA4-1A3B85140BD5} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.4.64.102/de/go/help.faq.installer?LastError=1638
Task: {A9A4EF2E-76EC-468F-979F-247ABE198638} - System32\Tasks\{7D103EDF-43A6-44A7-AF94-9FD79923398D} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {B240998E-64EA-4E40-8FC9-69EC90CF0CBB} - System32\Tasks\{33015C40-13EE-4921-8D75-784A5785E03E} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {D0CE5626-4B58-4076-B7D4-5DA87E8498EF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001UA => C:\Users\Jasmine\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {DE4B60C1-1983-4857-8ED8-6D5F9D0A6E73} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {E0802AEC-3BDD-4623-90F3-CCB372223DDA} - System32\Tasks\{54E9CC1C-D0BD-4564-9A37-5EC7FE9FC375} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.6.85.105/de/go/help.faq.installer?LastError=1638
Task: {EC800062-7C44-4D4C-B398-0B2A83C8A9C5} - System32\Tasks\AdobeAAMUpdater-1.0-Jasmine-PC-Jasmine => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15] (Adobe Systems Incorporated)
Task: {FB86FF4C-FB42-4D70-BE50-8E925A03A17B} - System32\Tasks\update-S-1-5-21-838575733-3782424441-3606765584-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\update-S-1-5-21-838575733-3782424441-3606765584-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2009-11-19 03:34 - 2009-11-19 03:34 - 00022016 _____ () C:\windows\System32\suge1l6.dll
2013-09-14 08:25 - 2013-09-14 08:25 - 00076888 _____ () C:\windows\SysWOW64\PnkBstrA.exe
2009-11-03 16:03 - 2009-11-03 16:03 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-09-16 16:02 - 2010-09-16 16:02 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-06-03 19:59 - 2009-06-03 19:59 - 00619816 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll
2009-06-03 19:59 - 2009-06-03 19:59 - 00013096 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll
2016-12-14 21:21 - 2016-12-08 08:29 - 01829208 _____ () C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 21:21 - 2016-12-08 08:29 - 00085848 _____ () C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Jasmine\Marvel Avengers.avi:TOC.WMV [130]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jasmine\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\Jasmine\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: Healthcare => C:\Program Files\Lenovo\HealthCare\HealthCare.exe /hide
MSCONFIG\startupreg: jmekey => C:\Program Files (x86)\jmesoft\hotkey.exe
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Unattend0000000001{BFA3D12B-66DD-4617-923A-E864BC7D20B5} => C:\Windows\test.bat
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{280B5E73-6E7B-4CA4-A1D8-5901009BE093}] => C:\Program Files (x86)\Common Files\Mcafee\MNA\McNaSvc.exe
FirewallRules: [{7996DEA3-6EA0-4F35-9E3C-0A4B4CFF9037}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{9C519F40-0F32-4514-ADFD-2C56463592C6}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CE25D13D-F92B-4A7B-88F5-AC5BB82C8F08}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{F203D1EF-F68E-458D-9F42-AF83FC7499D4}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{BE610487-9F01-47BE-B336-E80A5CB49DB0}] => C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{9E44C8F0-F300-4A0F-82E7-5488797EC103}] => C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{F7776F42-DCF5-4BBC-8097-7B68246FA4D5}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{946E056D-1709-4939-B1D7-8F3DA726DFEF}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D1E1C5FB-06A8-4C79-BE66-2C77EA171912}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{20DB0A9D-8CE5-4B61-BF8B-823D76E9FDAD}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{92814C2F-DD0C-48C9-9F23-DF6D9161D144}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C02EEAB8-3214-45DF-8DCE-799096E40AB2}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{0FF2E33B-CA39-4584-8D7E-11BFD6A51689}C:\users\jasmine\documents\infestation survivor stories\infestation.exe] => C:\users\jasmine\documents\infestation survivor stories\infestation.exe
FirewallRules: [UDP Query User{7CFE69F4-FA9D-41E8-A045-397A97E04FAA}C:\users\jasmine\documents\infestation survivor stories\infestation.exe] => C:\users\jasmine\documents\infestation survivor stories\infestation.exe
FirewallRules: [TCP Query User{02DA6AD4-2A06-4407-97AB-7D85C6BBA35E}C:\program files (x86)\java\jre7\bin\javaw.exe] => C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3384FEAB-35CF-4F0F-A003-FEE4DC176F36}C:\program files (x86)\java\jre7\bin\javaw.exe] => C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{37954A3C-CCCE-4EBD-866C-8FC93CFF9909}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{3E03A35A-D30D-4C46-A1B6-E4C2A3B888FB}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{4A6C057F-7B93-4268-855F-387F09306227}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{F7201157-93B6-4E48-BC5B-077773E0FA73}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{8DAA0E4A-C027-4E55-9F6F-9BC9D5357745}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{A32CDB6D-F828-4A00-8EFA-D87564828F08}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{062433F0-677F-44C3-B763-00838845964D}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{48DDC43F-1C34-4174-98A1-F2B8FE4EC08E}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{18A3508C-E06A-41D3-9D69-06050C9FEB00}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{0DA783BF-13F7-4D0B-A245-C2CA9F8FACB5}] => C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{F0E7A99C-762D-49F6-AD8D-28CD3968B9C9}] => C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{F4DE5B61-82C4-43E0-9543-C5BBA7DBF6B6}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{4CB86A66-6A34-4982-A46C-2363C74770DE}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [{26CFC839-2056-4A6B-96A8-9ED5935B5653}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{B65AF496-0F8A-49A4-A6BD-A387C24362BC}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{35C327E8-0478-4CF5-BE47-6D97AA757553}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{9D457228-416D-4E94-9CE7-6D3608AC1437}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{F4E1B68F-5FAF-475E-9F76-1011B794F03D}] => C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{729317B7-1313-4C3D-84B3-26656A4D82E9}] => C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{CB85EC59-F64F-4D96-BDE9-C46D7FF5F7C1}] => C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{25934E66-B424-4866-B317-905800EFCBC3}] => C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{C83FA7D5-43AF-4D0A-85EF-1E29F1BF7752}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{A7A63C50-1D33-434B-8294-42692C41EE79}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{BDBA1F84-561A-4F3A-A25C-1AF416CC2636}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{49B8B897-7820-4FAC-8106-E8BC6010B05A}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{AD9F43DA-B6E8-4463-838C-3D874AF38608}] => C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{0878526A-D4C9-4B4D-BED5-CEAA5736CF18}] => C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{6B1D0BDF-1569-43F6-BC6A-00386E908CC8}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{88EFF28E-B98B-419B-B13B-E2460B57C3F7}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{ABD0BDE9-347A-4C5A-9F40-8CD9CD059534}] => C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5910D7B2-D7FA-43AA-A18F-A1F607E523BE}] => C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BECAB7E6-A831-422F-9B9E-D9E8063349C4}] => C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{80EB1D0B-34A4-4D19-BF95-1CDD9F615946}] => C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{DD289E92-A81F-4567-A8E0-D259F2AB1ACF}] => C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{FCA7522C-A16A-4146-A24E-F55B606E02E2}] => C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{562F7EBB-E783-4CDB-B65C-B329430D9B76}] => C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{2FE857D8-8174-4D98-8B25-A7745AAF3388}] => C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{F1348015-6C61-4DE8-BAB7-79CB488E05BB}] => C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{AFE03D45-52B2-42FD-A59B-7EA733D4EFFD}] => C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{6ECFABF5-8EBC-44D7-A12A-DAD0434DD543}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{33E8D20A-0CF6-47A6-A147-AF8B396A638B}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{08A12901-07FA-453D-A7F9-0A6EB026873A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{5B147C98-4930-4D12-AF95-D8C1CFAA53D3}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{A4DF9794-06CE-484B-8BEC-67E139D15FDF}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{391F0565-F7A8-46C9-A00F-E287B4D9D806}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{78F8E367-B8BA-491C-ADBB-23690DCD946E}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{CF2D92BB-5BEE-4F1D-96D1-678C74CB281C}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{33BC1278-FCB5-4937-B8FC-24B9CF60EA48}] => D:\FSetup.exe
FirewallRules: [{FF25C315-CCD0-4294-B0A5-491A24CD1FB7}] => D:\FSetup.exe
FirewallRules: [{500396A1-11D1-4341-A74C-87BB9C066BE7}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{0F24371E-CBA1-4504-BEF0-16B93DC34F4A}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{88B26F34-A730-4266-BB46-62FE5D1418B3}] => C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{EDDD842E-E9A6-4723-9799-D36FB5BB8668}] => C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{DDF13D5A-507C-4936-9A94-FFE676BBFD83}] => C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{2FE68A46-7A1A-4F14-A690-8C3F82F89E36}] => C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{76732ED2-5652-4AFB-A265-32A04B333463}] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{F7AD4853-04B4-41B4-8C94-F2A3C58CD42D}] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{19D2DCA2-3060-4B52-8B43-FFA28A9B6333}] => C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{C3F1F396-1829-44CE-B8C9-D0BF081613B1}] => C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/09/2017 12:51:39 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/08/2017 05:55:12 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/08/2017 12:00:04 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/07/2017 08:38:52 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/07/2017 12:00:02 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/06/2017 10:47:25 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/06/2017 12:03:54 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/06/2017 11:31:51 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).
Error: (01/06/2017 01:19:29 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\msiexec.exe /V; Beschreibung = League of Legends entfernt; Fehler = 0x80070422).
Error: (01/06/2017 01:19:27 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\msiexec.exe /V; Beschreibung = Removed League of Legends; Fehler = 0x80070422).
Systemfehler:
=============
Error: (01/09/2017 11:58:22 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/09/2017 11:58:22 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/09/2017 11:58:21 AM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
Error: (01/09/2017 11:58:20 AM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
Error: (01/09/2017 11:58:20 AM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
Error: (01/09/2017 11:57:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Druckwarteschlange" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
Error: (01/09/2017 11:57:51 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "Spooler" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
Die Anforderung wird nicht unterstützt.
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (01/09/2017 11:57:26 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (01/09/2017 11:56:56 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/09/2017 11:56:51 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MSCamSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
==================== Speicherinformationen ===========================
Prozessor: Pentium(R) Dual-Core CPU E5500 @ 2.80GHz
Prozentuale Nutzung des RAM: 59%
Installierter physikalischer RAM: 2047.24 MB
Verfügbarer physikalischer RAM: 826.23 MB
Summe virtueller Speicher: 4094.48 MB
Verfügbarer virtueller Speicher: 2390.32 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:440.59 GB) (Free:324.86 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3F0C8A1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=440.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)
==================== Ende von Addition.txt ============================
|
|
09.01.2017, 23:10
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Hartnäckiger Virus - Reimage? 1. Schritt: Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers 2. Schritt: Kaspersky TDSS-Killer Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
11.01.2017, 00:32
| #11 |
| | Hartnäckiger Virus - Reimage? Mbar-log - 1. Scan Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2017.01.10.08
rootkit: v2016.11.20.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18537
Jasmine :: JASMINE-PC [administrator]
10.01.2017 22:04:34
mbar-log-2017-01-10 (22-04-34).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 299919
Time elapsed: 24 minute(s), 50 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\Users\Jasmine\Desktop\Neuer Ordner\Minecraft Sicherungen\Keygen\keygen.exe (RiskWare.Tool.CK) -> Delete on reboot. [7cc47307ddcb38fe2309b2b039c8e020]
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2017.01.10.08
rootkit: v2016.11.20.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18537
Jasmine :: JASMINE-PC [administrator]
10.01.2017 22:37:29
mbar-log-2017-01-10 (22-37-29).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 300061
Time elapsed: 25 minute(s), 37 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter 23:12:07.0081 0x0d1c TDSS rootkit removing tool 3.1.0.12 Nov 7 2016 07:10:01
23:12:13.0401 0x0d1c ============================================================
23:12:13.0401 0x0d1c Current date / time: 2017/01/10 23:12:13.0401
23:12:13.0401 0x0d1c SystemInfo:
23:12:13.0401 0x0d1c
23:12:13.0401 0x0d1c OS Version: 6.1.7601 ServicePack: 1.0
23:12:13.0401 0x0d1c Product type: Workstation
23:12:13.0401 0x0d1c ComputerName: JASMINE-PC
23:12:13.0401 0x0d1c UserName: Jasmine
23:12:13.0401 0x0d1c Windows directory: C:\windows
23:12:13.0401 0x0d1c System windows directory: C:\windows
23:12:13.0401 0x0d1c Running under WOW64
23:12:13.0401 0x0d1c Processor architecture: Intel x64
23:12:13.0401 0x0d1c Number of processors: 2
23:12:13.0401 0x0d1c Page size: 0x1000
23:12:13.0401 0x0d1c Boot type: Normal boot
23:12:13.0401 0x0d1c CodeIntegrityOptions = 0x00000001
23:12:13.0401 0x0d1c ============================================================
23:12:14.0612 0x0d1c KLMD registered as C:\windows\system32\drivers\52487788.sys
23:12:14.0612 0x0d1c KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23572, osProperties = 0x1
23:12:14.0763 0x0d1c System UUID: {5F0FDCCB-BDE8-D9C6-A26C-0DB83B113DAF}
23:12:15.0063 0x0d1c Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:12:15.0078 0x0d1c ============================================================
23:12:15.0078 0x0d1c \Device\Harddisk0\DR0:
23:12:15.0079 0x0d1c MBR partitions:
23:12:15.0079 0x0d1c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
23:12:15.0079 0x0d1c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3712E000
23:12:15.0079 0x0d1c ============================================================
23:12:15.0100 0x0d1c C: <-> \Device\Harddisk0\DR0\Partition2
23:12:15.0100 0x0d1c ============================================================
23:12:15.0100 0x0d1c Initialize success
23:12:15.0100 0x0d1c ============================================================
23:13:20.0141 0x02bc ============================================================
23:13:20.0141 0x02bc Scan started
23:13:20.0141 0x02bc Mode: Manual; SigCheck; TDLFS;
23:13:20.0141 0x02bc ============================================================
23:13:20.0141 0x02bc KSN ping started
23:13:20.0298 0x02bc KSN ping finished: true
23:13:21.0084 0x02bc ================ Scan system memory ========================
23:13:21.0084 0x02bc System memory - ok
23:13:21.0085 0x02bc ================ Scan services =============================
23:13:21.0199 0x02bc [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\windows\system32\drivers\1394ohci.sys
23:13:21.0322 0x02bc 1394ohci - ok
23:13:21.0362 0x02bc [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\windows\system32\drivers\ACPI.sys
23:13:21.0381 0x02bc ACPI - ok
23:13:21.0405 0x02bc [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
23:13:21.0457 0x02bc AcpiPmi - ok
23:13:21.0554 0x02bc [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
23:13:21.0564 0x02bc AdobeARMservice - ok
23:13:21.0634 0x02bc [ CA363F172E1978FD155764F2840B0BE8, CB14E2C94ABB8C8809F4E96472F6D1A9A3A0860217631F592E0F62F043165575 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:13:21.0670 0x02bc AdobeFlashPlayerUpdateSvc - ok
23:13:21.0717 0x02bc [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\windows\system32\DRIVERS\adp94xx.sys
23:13:21.0739 0x02bc adp94xx - ok
23:13:21.0776 0x02bc [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\windows\system32\DRIVERS\adpahci.sys
23:13:21.0794 0x02bc adpahci - ok
23:13:21.0810 0x02bc [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\windows\system32\DRIVERS\adpu320.sys
23:13:21.0824 0x02bc adpu320 - ok
23:13:21.0858 0x02bc [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc C:\windows\System32\aelupsvc.dll
23:13:21.0897 0x02bc AeLookupSvc - ok
23:13:21.0952 0x02bc [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD C:\windows\system32\drivers\afd.sys
23:13:22.0010 0x02bc AFD - ok
23:13:22.0044 0x02bc [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\windows\system32\drivers\agp440.sys
23:13:22.0056 0x02bc agp440 - ok
23:13:22.0084 0x02bc [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\windows\System32\alg.exe
23:13:22.0133 0x02bc ALG - ok
23:13:22.0162 0x02bc [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\windows\system32\drivers\aliide.sys
23:13:22.0175 0x02bc aliide - ok
23:13:22.0206 0x02bc [ D696F317BD465A602566F8E1DCCE15F7, 6CE77CD4221C0854986F760D1944DF9F4255192D99630D43A0527A6D58D83406 ] AMD External Events Utility C:\windows\system32\atiesrxx.exe
23:13:22.0254 0x02bc AMD External Events Utility - ok
23:13:22.0275 0x02bc [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\windows\system32\drivers\amdide.sys
23:13:22.0286 0x02bc amdide - ok
23:13:22.0310 0x02bc [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\windows\system32\DRIVERS\amdk8.sys
23:13:22.0354 0x02bc AmdK8 - ok
23:13:22.0537 0x02bc [ D1D06810BF7E21F5763EB06CB7E7262B, 77DEEA2C76D1C3E65E3D4F1FB2C671195019E9B78336EA4E040565DB88228611 ] amdkmdag C:\windows\system32\DRIVERS\atipmdag.sys
23:13:22.0805 0x02bc amdkmdag - ok
23:13:22.0846 0x02bc [ 6BA71D6616B56816E57394D77DD1BB6F, 5250378D4CA31578D8E92DD4402E2AA34C2299EA2D9471AC5A9A7CEA46A54CB3 ] amdkmdap C:\windows\system32\DRIVERS\atikmpag.sys
23:13:22.0871 0x02bc amdkmdap - ok
23:13:22.0894 0x02bc [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\windows\system32\DRIVERS\amdppm.sys
23:13:22.0921 0x02bc AmdPPM - ok
23:13:22.0955 0x02bc [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\windows\system32\drivers\amdsata.sys
23:13:22.0967 0x02bc amdsata - ok
23:13:22.0999 0x02bc [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\windows\system32\DRIVERS\amdsbs.sys
23:13:23.0013 0x02bc amdsbs - ok
23:13:23.0031 0x02bc [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\windows\system32\drivers\amdxata.sys
23:13:23.0041 0x02bc amdxata - ok
23:13:23.0085 0x02bc [ FCE5C79717A487BDC71F3DEC78A684CA, F5520F112A4EBDD10444AA5E9FDB9125219FCF768FEB95AB608BC84D60136816 ] AppID C:\windows\system32\drivers\appid.sys
23:13:23.0130 0x02bc AppID - ok
23:13:23.0149 0x02bc [ 8921E1D8AE5171691F186A7C5B98B630, 4A37313BB94D4B49D0294C9439AD0793DE328F9F4DA1C47E34E6ACEA46AF6E14 ] AppIDSvc C:\windows\System32\appidsvc.dll
23:13:23.0173 0x02bc AppIDSvc - ok
23:13:23.0202 0x02bc [ DE23E052E557580674785CDF45B613F3, A955ADC6CC7D816BA7CE1065F911E7A3295A1908C22BE0A3C506C38CFEE8DE0D ] Appinfo C:\windows\System32\appinfo.dll
23:13:23.0227 0x02bc Appinfo - ok
23:13:23.0252 0x02bc [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\windows\system32\DRIVERS\arc.sys
23:13:23.0263 0x02bc arc - ok
23:13:23.0283 0x02bc [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\windows\system32\DRIVERS\arcsas.sys
23:13:23.0295 0x02bc arcsas - ok
23:13:23.0378 0x02bc [ EE424A5CE56E3923D59BB7DE2E15036D, 8B8196870EFE74D43EDA72674021A46846D370E97A6A058134D84A721AECD091 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:13:23.0429 0x02bc aspnet_state - ok
23:13:23.0461 0x02bc [ D95E64416A4A3ED6986E0F474DA934BD, DBB4A0DED0DABE1F8FF0DB8C0E9EC4EC906A85A45DC0AEC013A8744F9BF5D40E ] aswHwid C:\windows\system32\drivers\aswHwid.sys
23:13:23.0486 0x02bc aswHwid - ok
23:13:23.0512 0x02bc [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
23:13:23.0593 0x02bc AsyncMac - ok
23:13:23.0615 0x02bc [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\windows\system32\drivers\atapi.sys
23:13:23.0624 0x02bc atapi - ok
23:13:23.0654 0x02bc [ 77C149E6D702737B2E372DEE166FAEF8, D18FEAE9D915D5F25B787B755F9C6321A9C9506D4F563DD637E3586401E36053 ] AtiHdmiService C:\windows\system32\drivers\AtiHdmi.sys
23:13:23.0691 0x02bc AtiHdmiService - ok
23:13:23.0867 0x02bc [ 52BD95CAA9CAE8977FE043E9AD6D2D0E, E96DD29A2FCE1403340CB29D34F657DF17F483F62A2E8E24890F9BC4812B2971 ] atikmdag C:\windows\system32\DRIVERS\atikmdag.sys
23:13:24.0091 0x02bc atikmdag - ok
23:13:24.0154 0x02bc [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
23:13:24.0212 0x02bc AudioEndpointBuilder - ok
23:13:24.0231 0x02bc [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv C:\windows\System32\Audiosrv.dll
23:13:24.0254 0x02bc AudioSrv - ok
23:13:24.0283 0x02bc [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\windows\System32\AxInstSV.dll
23:13:24.0351 0x02bc AxInstSV - ok
23:13:24.0386 0x02bc [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\windows\system32\DRIVERS\bxvbda.sys
23:13:24.0426 0x02bc b06bdrv - ok
23:13:24.0452 0x02bc [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
23:13:24.0480 0x02bc b57nd60a - ok
23:13:24.0515 0x02bc [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\windows\System32\bdesvc.dll
23:13:24.0547 0x02bc BDESVC - ok
23:13:24.0562 0x02bc [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\windows\system32\drivers\Beep.sys
23:13:24.0591 0x02bc Beep - ok
23:13:24.0636 0x02bc [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\windows\System32\bfe.dll
23:13:24.0669 0x02bc BFE - ok
23:13:24.0710 0x02bc [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\windows\System32\qmgr.dll
23:13:24.0828 0x02bc BITS - ok
23:13:24.0876 0x02bc [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
23:13:24.0964 0x02bc blbdrive - ok
23:13:25.0008 0x02bc [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser C:\windows\system32\DRIVERS\bowser.sys
23:13:25.0043 0x02bc bowser - ok
23:13:25.0058 0x02bc [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\windows\system32\DRIVERS\BrFiltLo.sys
23:13:25.0104 0x02bc BrFiltLo - ok
23:13:25.0115 0x02bc [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\windows\system32\DRIVERS\BrFiltUp.sys
23:13:25.0137 0x02bc BrFiltUp - ok
23:13:25.0169 0x02bc [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\windows\System32\browser.dll
23:13:25.0190 0x02bc Browser - ok
23:13:25.0208 0x02bc [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\windows\System32\Drivers\Brserid.sys
23:13:25.0261 0x02bc Brserid - ok
23:13:25.0275 0x02bc [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
23:13:25.0307 0x02bc BrSerWdm - ok
23:13:25.0324 0x02bc [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
23:13:25.0346 0x02bc BrUsbMdm - ok
23:13:25.0363 0x02bc [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
23:13:25.0388 0x02bc BrUsbSer - ok
23:13:25.0410 0x02bc [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys
23:13:25.0435 0x02bc BTHMODEM - ok
23:13:25.0465 0x02bc [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\windows\system32\bthserv.dll
23:13:25.0504 0x02bc bthserv - ok
23:13:25.0520 0x02bc [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
23:13:25.0567 0x02bc cdfs - ok
23:13:25.0606 0x02bc [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
23:13:25.0622 0x02bc cdrom - ok
23:13:25.0656 0x02bc [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\windows\System32\certprop.dll
23:13:25.0702 0x02bc CertPropSvc - ok
23:13:25.0729 0x02bc [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\windows\system32\DRIVERS\circlass.sys
23:13:25.0758 0x02bc circlass - ok
23:13:25.0792 0x02bc [ 3D67C27DD17B254D7915FA16A5AE3573, 5B3A6C6A7F940C06362775DAF13CEADA37C7AA84A509458A57C23B4369970A90 ] CLFS C:\windows\system32\CLFS.sys
23:13:25.0812 0x02bc CLFS - ok
23:13:25.0861 0x02bc [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:13:25.0875 0x02bc clr_optimization_v2.0.50727_32 - ok
23:13:25.0899 0x02bc [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:13:25.0914 0x02bc clr_optimization_v2.0.50727_64 - ok
23:13:25.0974 0x02bc [ 5BAF4F1296D4D91FC28560CDB4C37C4B, ACA4BC57ED1F8432F18F0F215EC7FF956BAEF6E02760779E264E4008A979E9DD ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:13:26.0008 0x02bc clr_optimization_v4.0.30319_32 - ok
23:13:26.0056 0x02bc [ 569B54004A7E85A74FD92841DE6058E2, 58949313D0F6B1C06359B2F3C68E29940B1655A17E93FFC3718F6D2EAE1633E4 ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:13:26.0100 0x02bc clr_optimization_v4.0.30319_64 - ok
23:13:26.0130 0x02bc [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
23:13:26.0153 0x02bc CmBatt - ok
23:13:26.0188 0x02bc [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\windows\system32\drivers\cmdide.sys
23:13:26.0200 0x02bc cmdide - ok
23:13:26.0246 0x02bc [ A98CED39AD91B445E2E442A9BD67E8B4, B4189DEEF1C0EE22AE983119047B1A40FFDD8F3E163DFFABD7C2706231B0B1B0 ] CNG C:\windows\system32\Drivers\cng.sys
23:13:26.0273 0x02bc CNG - ok
23:13:26.0297 0x02bc [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\windows\system32\DRIVERS\compbatt.sys
23:13:26.0308 0x02bc Compbatt - ok
23:13:26.0340 0x02bc [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\windows\system32\drivers\CompositeBus.sys
23:13:26.0366 0x02bc CompositeBus - ok
23:13:26.0383 0x02bc COMSysApp - ok
23:13:26.0401 0x02bc [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\windows\system32\DRIVERS\crcdisk.sys
23:13:26.0412 0x02bc crcdisk - ok
23:13:26.0455 0x02bc [ 2C6632CECFDBBE793FDA8AF9CA55A9CC, 335188515F798483660E529204A13012E4D21B0ECA489224A11C26F91A5B3CCE ] CryptSvc C:\windows\system32\cryptsvc.dll
23:13:26.0495 0x02bc CryptSvc - ok
23:13:26.0542 0x02bc [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] DcomLaunch C:\windows\system32\rpcss.dll
23:13:26.0594 0x02bc DcomLaunch - ok
23:13:26.0628 0x02bc [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\windows\System32\defragsvc.dll
23:13:26.0680 0x02bc defragsvc - ok
23:13:26.0707 0x02bc [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC C:\windows\system32\Drivers\dfsc.sys
23:13:26.0756 0x02bc DfsC - ok
23:13:26.0790 0x02bc [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\windows\system32\dhcpcore.dll
23:13:26.0831 0x02bc Dhcp - ok
23:13:26.0923 0x02bc [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack C:\windows\system32\diagtrack.dll
23:13:27.0008 0x02bc DiagTrack - ok
23:13:27.0041 0x02bc [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\windows\system32\drivers\discache.sys
23:13:27.0086 0x02bc discache - ok
23:13:27.0145 0x02bc [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk C:\windows\system32\drivers\disk.sys
23:13:27.0172 0x02bc Disk - ok
23:13:27.0202 0x02bc [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\windows\System32\dnsrslvr.dll
23:13:27.0241 0x02bc Dnscache - ok
23:13:27.0270 0x02bc [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\windows\System32\dot3svc.dll
23:13:27.0321 0x02bc dot3svc - ok
23:13:27.0345 0x02bc [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\windows\system32\dps.dll
23:13:27.0396 0x02bc DPS - ok
23:13:27.0424 0x02bc [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
23:13:27.0442 0x02bc drmkaud - ok
23:13:27.0496 0x02bc [ 3A9D7D464BDB3B70D7ECF689ADABBD4D, B4F5B23705EA1BA453FE30791CA245E1A5F7FBEABAD026E4A8A15A9FC44E8C9C ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
23:13:27.0531 0x02bc DXGKrnl - ok
23:13:27.0564 0x02bc [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\windows\System32\eapsvc.dll
23:13:27.0614 0x02bc EapHost - ok
23:13:27.0728 0x02bc [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\windows\system32\DRIVERS\evbda.sys
23:13:27.0873 0x02bc ebdrv - ok
23:13:27.0917 0x02bc [ 6918ACBA1558AF363F6AA8D217AFCA8D, D8CA4E9F3FA0F5CE674D647DDBFD3C3676A07FB0268BBB51782468E144575F49 ] EFS C:\windows\System32\lsass.exe
23:13:27.0962 0x02bc EFS - ok
23:13:28.0017 0x02bc [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\windows\ehome\ehRecvr.exe
23:13:28.0064 0x02bc ehRecvr - ok
23:13:28.0087 0x02bc [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\windows\ehome\ehsched.exe
23:13:28.0122 0x02bc ehSched - ok
23:13:28.0164 0x02bc [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO C:\windows\system32\Drivers\ElbyCDIO.sys
23:13:28.0178 0x02bc ElbyCDIO - ok
23:13:28.0219 0x02bc [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\windows\system32\DRIVERS\elxstor.sys
23:13:28.0245 0x02bc elxstor - ok
23:13:28.0270 0x02bc [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\windows\system32\drivers\errdev.sys
23:13:28.0297 0x02bc ErrDev - ok
23:13:28.0349 0x02bc [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\windows\system32\es.dll
23:13:28.0412 0x02bc EventSystem - ok
23:13:28.0433 0x02bc [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\windows\system32\drivers\exfat.sys
23:13:28.0486 0x02bc exfat - ok
23:13:28.0518 0x02bc [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\windows\system32\drivers\fastfat.sys
23:13:28.0561 0x02bc fastfat - ok
23:13:28.0604 0x02bc [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\windows\system32\fxssvc.exe
23:13:28.0655 0x02bc Fax - ok
23:13:28.0670 0x02bc [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\windows\system32\DRIVERS\fdc.sys
23:13:28.0694 0x02bc fdc - ok
23:13:28.0728 0x02bc [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\windows\system32\fdPHost.dll
23:13:28.0786 0x02bc fdPHost - ok
23:13:28.0807 0x02bc [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\windows\system32\fdrespub.dll
23:13:28.0855 0x02bc FDResPub - ok
23:13:28.0889 0x02bc [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\windows\system32\drivers\fileinfo.sys
23:13:28.0901 0x02bc FileInfo - ok
23:13:28.0914 0x02bc [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\windows\system32\drivers\filetrace.sys
23:13:28.0956 0x02bc Filetrace - ok
23:13:28.0975 0x02bc [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\windows\system32\DRIVERS\flpydisk.sys
23:13:29.0003 0x02bc flpydisk - ok
23:13:29.0033 0x02bc [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
23:13:29.0049 0x02bc FltMgr - ok
23:13:29.0116 0x02bc [ 700A5373FA66F1DAAECBD2CFB88C73ED, D6C1C4C846BC24EB6539ECC701A456FA53BB6679C79391F5B70580D47B6CE395 ] FontCache C:\windows\system32\FntCache.dll
23:13:29.0177 0x02bc FontCache - ok
23:13:29.0221 0x02bc [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:13:29.0231 0x02bc FontCache3.0.0.0 - ok
23:13:29.0251 0x02bc [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\windows\system32\drivers\FsDepends.sys
23:13:29.0262 0x02bc FsDepends - ok
23:13:29.0282 0x02bc [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
23:13:29.0294 0x02bc Fs_Rec - ok
23:13:29.0322 0x02bc [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
23:13:29.0339 0x02bc fvevol - ok
23:13:29.0359 0x02bc [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\windows\system32\DRIVERS\gagp30kx.sys
23:13:29.0371 0x02bc gagp30kx - ok
23:13:29.0417 0x02bc [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc C:\windows\System32\gpsvc.dll
23:13:29.0466 0x02bc gpsvc - ok
23:13:29.0532 0x02bc [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:13:29.0543 0x02bc gupdate - ok
23:13:29.0550 0x02bc [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:13:29.0559 0x02bc gupdatem - ok
23:13:29.0577 0x02bc [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
23:13:29.0620 0x02bc hcw85cir - ok
23:13:29.0658 0x02bc [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
23:13:29.0689 0x02bc HdAudAddService - ok
23:13:29.0713 0x02bc [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\windows\system32\drivers\HDAudBus.sys
23:13:29.0728 0x02bc HDAudBus - ok
23:13:29.0745 0x02bc [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\windows\system32\DRIVERS\HidBatt.sys
23:13:29.0764 0x02bc HidBatt - ok
23:13:29.0782 0x02bc [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\windows\system32\DRIVERS\hidbth.sys
23:13:29.0797 0x02bc HidBth - ok
23:13:29.0812 0x02bc [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\windows\system32\DRIVERS\hidir.sys
23:13:29.0837 0x02bc HidIr - ok
23:13:29.0870 0x02bc [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\windows\system32\hidserv.dll
23:13:29.0909 0x02bc hidserv - ok
23:13:29.0953 0x02bc [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
23:13:29.0996 0x02bc HidUsb - ok
23:13:30.0031 0x02bc [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\windows\system32\kmsvc.dll
23:13:30.0071 0x02bc hkmsvc - ok
23:13:30.0108 0x02bc [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\windows\system32\ListSvc.dll
23:13:30.0132 0x02bc HomeGroupListener - ok
23:13:30.0156 0x02bc [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\windows\system32\provsvc.dll
23:13:30.0187 0x02bc HomeGroupProvider - ok
23:13:30.0216 0x02bc [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
23:13:30.0228 0x02bc HpSAMD - ok
23:13:30.0260 0x02bc [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP C:\windows\system32\drivers\HTTP.sys
23:13:30.0316 0x02bc HTTP - ok
23:13:30.0339 0x02bc [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
23:13:30.0349 0x02bc hwpolicy - ok
23:13:30.0389 0x02bc [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\windows\system32\drivers\i8042prt.sys
23:13:30.0402 0x02bc i8042prt - ok
23:13:30.0430 0x02bc [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
23:13:30.0451 0x02bc iaStorV - ok
23:13:30.0519 0x02bc [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:13:30.0551 0x02bc idsvc - ok
23:13:30.0575 0x02bc IEEtwCollectorService - ok
23:13:30.0762 0x02bc [ A87261EF1546325B559374F5689CF5BC, 8DE48A8A13A32AAAC54CDDF58F3F61BE3E2802C1D9CA1CA98E57EB0D65FB6002 ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys
23:13:30.0960 0x02bc igfx - ok
23:13:31.0001 0x02bc [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\windows\system32\DRIVERS\iirsp.sys
23:13:31.0011 0x02bc iirsp - ok
23:13:31.0046 0x02bc [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\windows\System32\ikeext.dll
23:13:31.0085 0x02bc IKEEXT - ok
23:13:31.0172 0x02bc [ 31C32BC56D85D109EBB0C526BE5CACA7, E09A338EAEFD615FDB755B57F02E6033A2E5B6849BA3D66803286424F7D91EBE ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
23:13:31.0238 0x02bc IntcAzAudAddService - ok
23:13:31.0257 0x02bc [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\windows\system32\drivers\intelide.sys
23:13:31.0268 0x02bc intelide - ok
23:13:31.0283 0x02bc [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
23:13:31.0297 0x02bc intelppm - ok
23:13:31.0313 0x02bc [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\windows\system32\ipbusenum.dll
23:13:31.0358 0x02bc IPBusEnum - ok
23:13:31.0392 0x02bc [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
23:13:31.0435 0x02bc IpFilterDriver - ok
23:13:31.0471 0x02bc [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\windows\System32\iphlpsvc.dll
23:13:31.0521 0x02bc iphlpsvc - ok
23:13:31.0551 0x02bc [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
23:13:31.0563 0x02bc IPMIDRV - ok
23:13:31.0587 0x02bc [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\windows\system32\drivers\ipnat.sys
23:13:31.0619 0x02bc IPNAT - ok
23:13:31.0634 0x02bc [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\windows\system32\drivers\irenum.sys
23:13:31.0675 0x02bc IRENUM - ok
23:13:31.0689 0x02bc [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\windows\system32\drivers\isapnp.sys
23:13:31.0700 0x02bc isapnp - ok
23:13:31.0735 0x02bc [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
23:13:31.0751 0x02bc iScsiPrt - ok
23:13:31.0773 0x02bc [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
23:13:31.0784 0x02bc kbdclass - ok
23:13:31.0808 0x02bc [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
23:13:31.0836 0x02bc kbdhid - ok
23:13:31.0855 0x02bc [ 6918ACBA1558AF363F6AA8D217AFCA8D, D8CA4E9F3FA0F5CE674D647DDBFD3C3676A07FB0268BBB51782468E144575F49 ] KeyIso C:\windows\system32\lsass.exe
23:13:31.0874 0x02bc KeyIso - ok
23:13:31.0909 0x02bc [ F54475BA70B5CDA4EF11DC44BFB07F40, 9A6FA4978746F2F75D6B5892C1FE2042FF86C588AFEEC80534E0FB2F4450F9C3 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
23:13:31.0921 0x02bc KSecDD - ok
23:13:31.0935 0x02bc [ ED1D1E1AAACF08438F9BCF731C8CA168, 8DFE5F7E1080B65A75BC840708AB7A42EA42510D5507EF86294649C72430B569 ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
23:13:31.0947 0x02bc KSecPkg - ok
23:13:31.0965 0x02bc [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\windows\system32\drivers\ksthunk.sys
23:13:32.0006 0x02bc ksthunk - ok
23:13:32.0032 0x02bc [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\windows\system32\msdtckrm.dll
23:13:32.0080 0x02bc KtmRm - ok
23:13:32.0132 0x02bc [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\windows\system32\srvsvc.dll
23:13:32.0172 0x02bc LanmanServer - ok
23:13:32.0196 0x02bc [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
23:13:32.0248 0x02bc LanmanWorkstation - ok
23:13:32.0275 0x02bc [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
23:13:32.0305 0x02bc lltdio - ok
23:13:32.0326 0x02bc [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\windows\System32\lltdsvc.dll
23:13:32.0376 0x02bc lltdsvc - ok
23:13:32.0396 0x02bc [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\windows\System32\lmhsvc.dll
23:13:32.0442 0x02bc lmhosts - ok
23:13:32.0480 0x02bc [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\windows\system32\DRIVERS\lsi_fc.sys
23:13:32.0492 0x02bc LSI_FC - ok
23:13:32.0508 0x02bc [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\windows\system32\DRIVERS\lsi_sas.sys
23:13:32.0520 0x02bc LSI_SAS - ok
23:13:32.0535 0x02bc [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\windows\system32\DRIVERS\lsi_sas2.sys
23:13:32.0546 0x02bc LSI_SAS2 - ok
23:13:32.0561 0x02bc [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\windows\system32\DRIVERS\lsi_scsi.sys
23:13:32.0573 0x02bc LSI_SCSI - ok
23:13:32.0587 0x02bc [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\windows\system32\drivers\luafv.sys
23:13:32.0629 0x02bc luafv - ok
23:13:32.0657 0x02bc [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
23:13:32.0670 0x02bc Mcx2Svc - ok
23:13:32.0684 0x02bc [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\windows\system32\DRIVERS\megasas.sys
23:13:32.0695 0x02bc megasas - ok
23:13:32.0714 0x02bc [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\windows\system32\DRIVERS\MegaSR.sys
23:13:32.0730 0x02bc MegaSR - ok
23:13:32.0759 0x02bc [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\windows\system32\mmcss.dll
23:13:32.0806 0x02bc MMCSS - ok
23:13:32.0821 0x02bc [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\windows\system32\drivers\modem.sys
23:13:32.0851 0x02bc Modem - ok
23:13:32.0900 0x02bc [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\windows\system32\DRIVERS\monitor.sys
23:13:32.0916 0x02bc monitor - ok
23:13:32.0936 0x02bc [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
23:13:32.0947 0x02bc mouclass - ok
23:13:32.0963 0x02bc [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
23:13:32.0989 0x02bc mouhid - ok
23:13:33.0023 0x02bc [ 8ADB5445B29941CB41AF2846FD5C93C7, 689582430FE29EC0845B1DB841D3CC49D5D09DE264586E3999EEFE616986D12B ] mountmgr C:\windows\system32\drivers\mountmgr.sys
23:13:33.0035 0x02bc mountmgr - ok
23:13:33.0073 0x02bc [ 9FC679D10A7377BB04ECC3D0E2E26B53, 24ACD4EC1618A052C29E4463138B28F62C8B78D442DB82F4925E64FC5849A096 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:13:33.0085 0x02bc MozillaMaintenance - ok
23:13:33.0107 0x02bc [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\windows\system32\drivers\mpio.sys
23:13:33.0121 0x02bc mpio - ok
23:13:33.0136 0x02bc [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
23:13:33.0166 0x02bc mpsdrv - ok
23:13:33.0210 0x02bc [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\windows\system32\mpssvc.dll
23:13:33.0266 0x02bc MpsSvc - ok
23:13:33.0302 0x02bc [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
23:13:33.0345 0x02bc MRxDAV - ok
23:13:33.0377 0x02bc [ 8A6DD6FDCCC010F7C6480EE7D0C3B92E, F061B59E5569D334C293420A4E98A2E2842037419E13001FF4FDCB9DE4A90BC5 ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
23:13:33.0391 0x02bc mrxsmb - ok
23:13:33.0409 0x02bc [ 68C12354AEA8FB5B559F5F69EF1C0DF0, E73BEFA5615231B86962FDB5201BA05B8A15D51F09BB6232315F44B39C46560D ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
23:13:33.0437 0x02bc mrxsmb10 - ok
23:13:33.0462 0x02bc [ 307E956C0DE630EE0ACE657233C0E83F, 45918BAFA9A1C4F4552A2A259CDFB89146FEE6622BDBC7B6B92D5BB2528586A4 ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
23:13:33.0489 0x02bc mrxsmb20 - ok
23:13:33.0520 0x02bc [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\windows\system32\drivers\msahci.sys
23:13:33.0532 0x02bc msahci - ok
23:13:33.0598 0x02bc [ A592A054D78750B4D73ABAA4C94DECDF, 40B135C9F9EE698EC78BD19BD18353AE2CF4D020DDB9CFC37CD2FDBF7602614A ] MSCamSvc C:\Program Files\Microsoft LifeCam\MSCamS64.exe
23:13:33.0611 0x02bc MSCamSvc - ok
23:13:33.0629 0x02bc [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\windows\system32\drivers\msdsm.sys
23:13:33.0643 0x02bc msdsm - ok
23:13:33.0666 0x02bc [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\windows\System32\msdtc.exe
23:13:33.0702 0x02bc MSDTC - ok
23:13:33.0740 0x02bc [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\windows\system32\drivers\Msfs.sys
23:13:33.0784 0x02bc Msfs - ok
23:13:33.0805 0x02bc [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
23:13:33.0853 0x02bc mshidkmdf - ok
23:13:33.0882 0x02bc [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\windows\system32\drivers\msisadrv.sys
23:13:33.0892 0x02bc msisadrv - ok
23:13:33.0925 0x02bc [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\windows\system32\iscsiexe.dll
23:13:33.0974 0x02bc MSiSCSI - ok
23:13:33.0979 0x02bc msiserver - ok
23:13:34.0015 0x02bc [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
23:13:34.0045 0x02bc MSKSSRV - ok
23:13:34.0058 0x02bc [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
23:13:34.0100 0x02bc MSPCLOCK - ok
23:13:34.0127 0x02bc [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\windows\system32\drivers\MSPQM.sys
23:13:34.0224 0x02bc MSPQM - ok
23:13:34.0261 0x02bc [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\windows\system32\drivers\MsRPC.sys
23:13:34.0282 0x02bc MsRPC - ok
23:13:34.0313 0x02bc [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\windows\system32\drivers\mssmbios.sys
23:13:34.0327 0x02bc mssmbios - ok
23:13:34.0342 0x02bc [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\windows\system32\drivers\MSTEE.sys
23:13:34.0389 0x02bc MSTEE - ok
23:13:34.0408 0x02bc [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\windows\system32\DRIVERS\MTConfig.sys
23:13:34.0456 0x02bc MTConfig - ok
23:13:34.0475 0x02bc [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\windows\system32\Drivers\mup.sys
23:13:34.0493 0x02bc Mup - ok
23:13:34.0530 0x02bc [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\windows\system32\qagentRT.dll
23:13:34.0591 0x02bc napagent - ok
23:13:34.0619 0x02bc [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
23:13:34.0648 0x02bc NativeWifiP - ok
23:13:34.0732 0x02bc [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS C:\windows\system32\drivers\ndis.sys
23:13:34.0783 0x02bc NDIS - ok
23:13:34.0804 0x02bc [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
23:13:34.0856 0x02bc NdisCap - ok
23:13:34.0881 0x02bc [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
23:13:34.0926 0x02bc NdisTapi - ok
23:13:34.0956 0x02bc [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
23:13:35.0002 0x02bc Ndisuio - ok
23:13:35.0028 0x02bc [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
23:13:35.0105 0x02bc NdisWan - ok
23:13:35.0139 0x02bc [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
23:13:35.0228 0x02bc NDProxy - ok
23:13:35.0243 0x02bc [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
23:13:35.0305 0x02bc NetBIOS - ok
23:13:35.0348 0x02bc [ E47D571FEC2C76E867935109AB2A770C, F349D25890B6F476B106FD75BFB081DB737CA9B224D95E44927942FFF2DF82CD ] NetBT C:\windows\system32\DRIVERS\netbt.sys
23:13:35.0413 0x02bc NetBT - ok
23:13:35.0426 0x02bc [ 6918ACBA1558AF363F6AA8D217AFCA8D, D8CA4E9F3FA0F5CE674D647DDBFD3C3676A07FB0268BBB51782468E144575F49 ] Netlogon C:\windows\system32\lsass.exe
23:13:35.0457 0x02bc Netlogon - ok
23:13:35.0491 0x02bc [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\windows\System32\netman.dll
23:13:35.0553 0x02bc Netman - ok
23:13:35.0597 0x02bc [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:13:35.0633 0x02bc NetMsmqActivator - ok
23:13:35.0642 0x02bc [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:13:35.0661 0x02bc NetPipeActivator - ok
23:13:35.0707 0x02bc [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\windows\System32\netprofm.dll
23:13:35.0778 0x02bc netprofm - ok
23:13:35.0788 0x02bc [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:13:35.0804 0x02bc NetTcpActivator - ok
23:13:35.0812 0x02bc [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:13:35.0829 0x02bc NetTcpPortSharing - ok
23:13:35.0856 0x02bc [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\windows\system32\DRIVERS\nfrd960.sys
23:13:35.0869 0x02bc nfrd960 - ok
23:13:35.0905 0x02bc [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\windows\System32\nlasvc.dll
23:13:35.0956 0x02bc NlaSvc - ok
23:13:35.0984 0x02bc [ 1381E95D4E0F94F22DD484B5F8C1D61D, E91C10A62E3B5A610063F48354C6F4A1AAB7300A69EAD59E89ED8EEFDBD99062 ] nmwcd C:\windows\system32\drivers\ccdcmbx64.sys
23:13:36.0048 0x02bc nmwcd - ok
23:13:36.0088 0x02bc [ 205510CDB7B6084BF31760B5D06F9242, F3EAC6A7127DC5A0FEE7A9AFA561A8CA9B6E83FECCD731C890E85C33514B533B ] nmwcdc C:\windows\system32\drivers\ccdcmbox64.sys
23:13:36.0134 0x02bc nmwcdc - ok
23:13:36.0164 0x02bc [ 9573223E205907247AE6D948E3453770, 35D32A415F74863D7408229508F134D53CA0FA7EDD8B0E5FEEFC9DE588D0607B ] nmwcdnsux64 C:\windows\system32\drivers\nmwcdnsux64.sys
23:13:36.0220 0x02bc nmwcdnsux64 - ok
23:13:36.0249 0x02bc [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\windows\system32\drivers\Npfs.sys
23:13:36.0299 0x02bc Npfs - ok
23:13:36.0326 0x02bc [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\windows\system32\nsisvc.dll
23:13:36.0371 0x02bc nsi - ok
23:13:36.0380 0x02bc [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
23:13:36.0419 0x02bc nsiproxy - ok
23:13:36.0494 0x02bc [ 47B2D0B31BDC3EBE6090228E2BA3764D, 984A4B38300954164BCBF57EC1A09C18B53779E60A26E9618B50E26016735787 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
23:13:36.0576 0x02bc Ntfs - ok
23:13:36.0601 0x02bc [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\windows\system32\drivers\Null.sys
23:13:36.0633 0x02bc Null - ok
23:13:36.0688 0x02bc [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\windows\system32\drivers\nvraid.sys
23:13:36.0707 0x02bc nvraid - ok
23:13:36.0730 0x02bc [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\windows\system32\drivers\nvstor.sys
23:13:36.0747 0x02bc nvstor - ok
23:13:36.0764 0x02bc [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\windows\system32\drivers\nv_agp.sys
23:13:36.0778 0x02bc nv_agp - ok
23:13:36.0795 0x02bc [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys
23:13:36.0832 0x02bc ohci1394 - ok
23:13:36.0934 0x02bc [ DE63B75C2B820B425E09C59344051FC2, 09FA23A09166132DA4F24DD6BF7BB6D36DA010251C9C532DC32DD45D67E5DAE6 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
23:13:37.0005 0x02bc Origin Client Service - ok
23:13:37.0043 0x02bc [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\windows\system32\pnrpsvc.dll
23:13:37.0092 0x02bc p2pimsvc - ok
23:13:37.0141 0x02bc [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\windows\system32\p2psvc.dll
23:13:37.0184 0x02bc p2psvc - ok
23:13:37.0211 0x02bc [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\windows\system32\DRIVERS\parport.sys
23:13:37.0265 0x02bc Parport - ok
23:13:37.0294 0x02bc [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\windows\system32\drivers\partmgr.sys
23:13:37.0316 0x02bc partmgr - ok
23:13:37.0362 0x02bc [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc C:\windows\System32\pcasvc.dll
23:13:37.0421 0x02bc PcaSvc - ok
23:13:37.0445 0x02bc [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\windows\system32\drivers\pci.sys
23:13:37.0465 0x02bc pci - ok
23:13:37.0489 0x02bc [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\windows\system32\drivers\pciide.sys
23:13:37.0501 0x02bc pciide - ok
23:13:37.0523 0x02bc [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\windows\system32\DRIVERS\pcmcia.sys
23:13:37.0539 0x02bc pcmcia - ok
23:13:37.0564 0x02bc [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\windows\system32\drivers\pcw.sys
23:13:37.0576 0x02bc pcw - ok
23:13:37.0608 0x02bc [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH C:\windows\system32\drivers\peauth.sys
23:13:37.0660 0x02bc PEAUTH - ok
23:13:37.0723 0x02bc [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\windows\SysWow64\perfhost.exe
23:13:37.0745 0x02bc PerfHost - ok
23:13:37.0821 0x02bc [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\windows\system32\pla.dll
23:13:37.0925 0x02bc pla - ok
23:13:37.0963 0x02bc [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\windows\system32\umpnpmgr.dll
23:13:37.0994 0x02bc PlugPlay - ok
23:13:38.0002 0x02bc PnkBstrA - ok
23:13:38.0023 0x02bc [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
23:13:38.0047 0x02bc PNRPAutoReg - ok
23:13:38.0067 0x02bc [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\windows\system32\pnrpsvc.dll
23:13:38.0095 0x02bc PNRPsvc - ok
23:13:38.0141 0x02bc [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
23:13:38.0198 0x02bc PolicyAgent - ok
23:13:38.0252 0x02bc [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\windows\system32\umpo.dll
23:13:38.0302 0x02bc Power - ok
23:13:38.0340 0x02bc [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
23:13:38.0383 0x02bc PptpMiniport - ok
23:13:38.0408 0x02bc [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\windows\system32\DRIVERS\processr.sys
23:13:38.0431 0x02bc Processor - ok
23:13:38.0462 0x02bc [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\windows\system32\profsvc.dll
23:13:38.0493 0x02bc ProfSvc - ok
23:13:38.0507 0x02bc [ 6918ACBA1558AF363F6AA8D217AFCA8D, D8CA4E9F3FA0F5CE674D647DDBFD3C3676A07FB0268BBB51782468E144575F49 ] ProtectedStorage C:\windows\system32\lsass.exe
23:13:38.0526 0x02bc ProtectedStorage - ok
23:13:38.0550 0x02bc [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\windows\system32\DRIVERS\pacer.sys
23:13:38.0581 0x02bc Psched - ok
23:13:38.0637 0x02bc [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\windows\system32\DRIVERS\ql2300.sys
23:13:38.0696 0x02bc ql2300 - ok
23:13:38.0728 0x02bc [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\windows\system32\DRIVERS\ql40xx.sys
23:13:38.0742 0x02bc ql40xx - ok
23:13:38.0768 0x02bc [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\windows\system32\qwave.dll
23:13:38.0790 0x02bc QWAVE - ok
23:13:38.0801 0x02bc [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
23:13:38.0832 0x02bc QWAVEdrv - ok
23:13:38.0849 0x02bc [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
23:13:38.0880 0x02bc RasAcd - ok
23:13:38.0905 0x02bc [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
23:13:38.0952 0x02bc RasAgileVpn - ok
23:13:38.0973 0x02bc [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\windows\System32\rasauto.dll
23:13:39.0019 0x02bc RasAuto - ok
23:13:39.0052 0x02bc [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
23:13:39.0095 0x02bc Rasl2tp - ok
23:13:39.0127 0x02bc [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\windows\System32\rasmans.dll
23:13:39.0183 0x02bc RasMan - ok
23:13:39.0246 0x02bc [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
23:13:39.0311 0x02bc RasPppoe - ok
23:13:39.0332 0x02bc [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
23:13:39.0380 0x02bc RasSstp - ok
23:13:39.0419 0x02bc [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
23:13:39.0474 0x02bc rdbss - ok
23:13:39.0496 0x02bc [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\windows\system32\DRIVERS\rdpbus.sys
23:13:39.0510 0x02bc rdpbus - ok
23:13:39.0529 0x02bc [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
23:13:39.0575 0x02bc RDPCDD - ok
23:13:39.0593 0x02bc [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
23:13:39.0634 0x02bc RDPENCDD - ok
23:13:39.0658 0x02bc [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
23:13:39.0698 0x02bc RDPREFMP - ok
23:13:39.0760 0x02bc [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
23:13:39.0806 0x02bc RdpVideoMiniport - ok
23:13:39.0840 0x02bc [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\windows\system32\drivers\RDPWD.sys
23:13:39.0885 0x02bc RDPWD - ok
23:13:39.0917 0x02bc [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\windows\system32\drivers\rdyboost.sys
23:13:39.0932 0x02bc rdyboost - ok
23:13:39.0949 0x02bc [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\windows\System32\mprdim.dll
23:13:39.0998 0x02bc RemoteAccess - ok
23:13:40.0028 0x02bc [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\windows\system32\regsvc.dll
23:13:40.0072 0x02bc RemoteRegistry - ok
23:13:40.0092 0x02bc [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
23:13:40.0139 0x02bc RpcEptMapper - ok
23:13:40.0159 0x02bc [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\windows\system32\locator.exe
23:13:40.0185 0x02bc RpcLocator - ok
23:13:40.0241 0x02bc [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] RpcSs C:\windows\system32\rpcss.dll
23:13:40.0271 0x02bc RpcSs - ok
23:13:40.0300 0x02bc [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
23:13:40.0347 0x02bc rspndr - ok
23:13:40.0369 0x02bc [ 68DD0457D18FCCEF7384AE84022F0C86, 82C02EDB30D4FA1145AB1818F9FCE0B73FEB1B94C138B5513794F25FAC85F2CC ] RTL8023x64 C:\windows\system32\DRIVERS\Rtnic64.sys
23:13:40.0381 0x02bc RTL8023x64 - ok
23:13:40.0420 0x02bc [ B49DC435AE3695BAC5623DD94B05732D, D63160B09385ED31C2A479ADC5AFCA483906F38598874972025D680BDB45ECA0 ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys
23:13:40.0457 0x02bc RTL8167 - ok
23:13:40.0471 0x02bc [ 6918ACBA1558AF363F6AA8D217AFCA8D, D8CA4E9F3FA0F5CE674D647DDBFD3C3676A07FB0268BBB51782468E144575F49 ] SamSs C:\windows\system32\lsass.exe
23:13:40.0491 0x02bc SamSs - ok
23:13:40.0519 0x02bc [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\windows\system32\drivers\sbp2port.sys
23:13:40.0532 0x02bc sbp2port - ok
23:13:40.0562 0x02bc [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\windows\System32\SCardSvr.dll
23:13:40.0599 0x02bc SCardSvr - ok
23:13:40.0626 0x02bc [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
23:13:40.0672 0x02bc scfilter - ok
23:13:40.0731 0x02bc [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule C:\windows\system32\schedsvc.dll
23:13:40.0800 0x02bc Schedule - ok
23:13:40.0824 0x02bc [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\windows\System32\certprop.dll
23:13:40.0855 0x02bc SCPolicySvc - ok
23:13:40.0871 0x02bc [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\windows\System32\SDRSVC.dll
23:13:40.0913 0x02bc SDRSVC - ok
23:13:40.0944 0x02bc [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\windows\system32\drivers\secdrv.sys
23:13:40.0971 0x02bc secdrv - ok
23:13:40.0998 0x02bc [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon C:\windows\system32\seclogon.dll
23:13:41.0043 0x02bc seclogon - ok
23:13:41.0097 0x02bc [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\windows\System32\sens.dll
23:13:41.0143 0x02bc SENS - ok
23:13:41.0175 0x02bc [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\windows\system32\sensrsvc.dll
23:13:41.0200 0x02bc SensrSvc - ok
23:13:41.0221 0x02bc [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\windows\system32\DRIVERS\serenum.sys
23:13:41.0244 0x02bc Serenum - ok
23:13:41.0259 0x02bc [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\windows\system32\DRIVERS\serial.sys
23:13:41.0274 0x02bc Serial - ok
23:13:41.0297 0x02bc [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\windows\system32\DRIVERS\sermouse.sys
23:13:41.0324 0x02bc sermouse - ok
23:13:41.0360 0x02bc [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\windows\system32\sessenv.dll
23:13:41.0394 0x02bc SessionEnv - ok
23:13:41.0411 0x02bc [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\windows\system32\drivers\sffdisk.sys
23:13:41.0447 0x02bc sffdisk - ok
23:13:41.0462 0x02bc [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
23:13:41.0473 0x02bc sffp_mmc - ok
23:13:41.0486 0x02bc [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
23:13:41.0501 0x02bc sffp_sd - ok
23:13:41.0527 0x02bc [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\windows\system32\DRIVERS\sfloppy.sys
23:13:41.0538 0x02bc sfloppy - ok
23:13:41.0608 0x02bc [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\windows\System32\ipnathlp.dll
23:13:41.0659 0x02bc SharedAccess - ok
23:13:41.0837 0x02bc [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\windows\System32\shsvcs.dll
23:13:41.0897 0x02bc ShellHWDetection - ok
23:13:41.0924 0x02bc [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\windows\system32\DRIVERS\SiSRaid2.sys
23:13:41.0936 0x02bc SiSRaid2 - ok
23:13:42.0000 0x02bc [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\windows\system32\DRIVERS\sisraid4.sys
23:13:42.0013 0x02bc SiSRaid4 - ok
23:13:42.0071 0x02bc [ F3AAB7DF6408431C762D8721B68F46E4, 56ED764AA660955B8B06322703D086B3A52106625A83CCAF195B08BCBDEDA88F ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
23:13:42.0126 0x02bc SkypeUpdate - ok
23:13:42.0166 0x02bc [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\windows\system32\DRIVERS\smb.sys
23:13:42.0214 0x02bc Smb - ok
23:13:42.0260 0x02bc [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\windows\System32\snmptrap.exe
23:13:42.0288 0x02bc SNMPTRAP - ok
23:13:42.0319 0x02bc [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\windows\system32\drivers\spldr.sys
23:13:42.0330 0x02bc spldr - ok
23:13:42.0362 0x02bc [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\windows\System32\spoolsv.exe
23:13:42.0398 0x02bc Spooler - ok
23:13:42.0522 0x02bc [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\windows\system32\sppsvc.exe
23:13:42.0689 0x02bc sppsvc - ok
23:13:42.0720 0x02bc [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\windows\system32\sppuinotify.dll
23:13:42.0764 0x02bc sppuinotify - ok
23:13:42.0802 0x02bc [ EC666682FE8344CF7E6ED69E74FA9F4F, DCD2A1C046425630689E2C9A6A6E356FE5A2A6664D12C20CFE236FCB32240DF9 ] srv C:\windows\system32\DRIVERS\srv.sys
23:13:42.0850 0x02bc srv - ok
23:13:42.0874 0x02bc [ E450C0318DCE8ED28ED272C8806B8495, D2FD459F8C5E42103EF2F71421FA175A4F0821F8C2A3763093122D433D1C50FB ] srv2 C:\windows\system32\DRIVERS\srv2.sys
23:13:42.0893 0x02bc srv2 - ok
23:13:42.0913 0x02bc [ 9C12C78AD36C23D925711A4640228225, FF72C23F2A08EDF0C41BAF1EB0245AB44FF91365C5466F09C47A8F0928D20994 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
23:13:42.0926 0x02bc srvnet - ok
23:13:42.0944 0x02bc [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
23:13:42.0996 0x02bc SSDPSRV - ok
23:13:43.0018 0x02bc [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\windows\system32\sstpsvc.dll
23:13:43.0050 0x02bc SstpSvc - ok
23:13:43.0147 0x02bc [ 90E22D7CDE08E07446D238A569BCAB7C, 3D4F413D0B0C9CF28D06E0476F24AC6441C8678DF786D9971B39C91C9F9B8020 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
23:13:43.0206 0x02bc Steam Client Service - ok
23:13:43.0234 0x02bc [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\windows\system32\DRIVERS\stexstor.sys
23:13:43.0245 0x02bc stexstor - ok
23:13:43.0286 0x02bc [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\windows\System32\wiaservc.dll
23:13:43.0327 0x02bc stisvc - ok
23:13:43.0351 0x02bc [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\windows\system32\drivers\swenum.sys
23:13:43.0362 0x02bc swenum - ok
23:13:43.0444 0x02bc [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
23:13:43.0480 0x02bc SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
23:13:43.0562 0x02bc Detect skipped due to KSN trusted
23:13:43.0562 0x02bc SwitchBoard - ok
23:13:43.0596 0x02bc [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\windows\System32\swprv.dll
23:13:43.0652 0x02bc swprv - ok
23:13:43.0721 0x02bc [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain C:\windows\system32\sysmain.dll
23:13:43.0819 0x02bc SysMain - ok
23:13:43.0841 0x02bc [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\windows\System32\TabSvc.dll
23:13:43.0861 0x02bc TabletInputService - ok
23:13:43.0884 0x02bc [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\windows\System32\tapisrv.dll
23:13:43.0933 0x02bc TapiSrv - ok
23:13:44.0013 0x02bc [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] Tcpip C:\windows\system32\drivers\tcpip.sys
23:13:44.0092 0x02bc Tcpip - ok
23:13:44.0173 0x02bc [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
23:13:44.0244 0x02bc TCPIP6 - ok
23:13:44.0268 0x02bc [ 7FE5586314EE7D6AA8483264A089E5AF, 4E3EA68713A45C22F1B9A1AA125E15D06D0C5E637B815537431ADFB6D7563879 ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
23:13:44.0291 0x02bc tcpipreg - ok
23:13:44.0312 0x02bc [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
23:13:44.0347 0x02bc TDPIPE - ok
23:13:44.0368 0x02bc [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
23:13:44.0395 0x02bc TDTCP - ok
23:13:44.0430 0x02bc [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx C:\windows\system32\DRIVERS\tdx.sys
23:13:44.0454 0x02bc tdx - ok
23:13:44.0483 0x02bc [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\windows\system32\drivers\termdd.sys
23:13:44.0495 0x02bc TermDD - ok
23:13:44.0537 0x02bc [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\windows\System32\termsrv.dll
23:13:44.0574 0x02bc TermService - ok
23:13:44.0599 0x02bc [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\windows\system32\themeservice.dll
23:13:44.0630 0x02bc Themes - ok
23:13:44.0656 0x02bc [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\windows\system32\mmcss.dll
23:13:44.0687 0x02bc THREADORDER - ok
23:13:44.0715 0x02bc [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\windows\System32\trkwks.dll
23:13:44.0750 0x02bc TrkWks - ok
23:13:44.0785 0x02bc [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
23:13:44.0836 0x02bc TrustedInstaller - ok
23:13:44.0863 0x02bc [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
23:13:44.0889 0x02bc tssecsrv - ok
23:13:44.0925 0x02bc [ 17C6B51CBCCDED95B3CC14E22791F85E, EE417C19E9B2C258D62A74F1F2421AFFBAC67ACD62481CAA08F5B6A3439C1D7C ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
23:13:44.0962 0x02bc TsUsbFlt - ok
23:13:44.0989 0x02bc [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
23:13:45.0022 0x02bc tunnel - ok
23:13:45.0052 0x02bc [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\windows\system32\DRIVERS\uagp35.sys
23:13:45.0063 0x02bc uagp35 - ok
23:13:45.0093 0x02bc [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\windows\system32\DRIVERS\udfs.sys
23:13:45.0146 0x02bc udfs - ok
23:13:45.0185 0x02bc [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\windows\system32\UI0Detect.exe
23:13:45.0213 0x02bc UI0Detect - ok
23:13:45.0230 0x02bc [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
23:13:45.0243 0x02bc uliagpkx - ok
23:13:45.0272 0x02bc [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\windows\system32\drivers\umbus.sys
23:13:45.0297 0x02bc umbus - ok
23:13:45.0324 0x02bc [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\windows\system32\DRIVERS\umpass.sys
23:13:45.0335 0x02bc UmPass - ok
23:13:45.0362 0x02bc [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\windows\System32\upnphost.dll
23:13:45.0402 0x02bc upnphost - ok
23:13:45.0442 0x02bc [ 311C90F0767A63000AC35DD0A7078A30, DB80E10015DCC595F90C31CE61590DB07E84F8B13DA904B2D59233678C366A2D ] upperdev C:\windows\system32\DRIVERS\usbser_lowerfltx64.sys
23:13:45.0495 0x02bc upperdev - ok
23:13:45.0538 0x02bc [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\windows\system32\drivers\usbaudio.sys
23:13:45.0558 0x02bc usbaudio - ok
23:13:45.0583 0x02bc [ 28B81917A195B67617AF7DCF4DFE5736, 40A4D2AAE1BDE5ABA8708ED150396E913C566ECD5CDA40D6C6DB256F1B9FD4A9 ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
23:13:45.0605 0x02bc usbccgp - ok
23:13:45.0637 0x02bc [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\windows\system32\drivers\usbcir.sys
23:13:45.0657 0x02bc usbcir - ok
23:13:45.0686 0x02bc [ B626F048318DAE65A3317F0592BE592C, 284D8FFE1D35F852EFDA182A72288AC3A10D6ED825FE2CC5812497D3FE291AF1 ] usbehci C:\windows\system32\drivers\usbehci.sys
23:13:45.0711 0x02bc usbehci - ok
23:13:45.0746 0x02bc [ 390109E8E05BA00375DCB1ED64DC60AF, B8628502590B423BEFB6F7C8C69FAD0667AD0746FF6B444EE02016E8E1052B78 ] usbhub C:\windows\system32\drivers\usbhub.sys
23:13:45.0776 0x02bc usbhub - ok
23:13:45.0806 0x02bc [ B4DF0F4C1D9D25DFE1DAD1D8670F1D4F, 4317C2DEDC639527B53864BAEC46CBE022D298C0503E29E1072DD1C851D92BFC ] usbohci C:\windows\system32\drivers\usbohci.sys
23:13:45.0830 0x02bc usbohci - ok
23:13:45.0864 0x02bc [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
23:13:45.0881 0x02bc usbprint - ok
23:13:45.0908 0x02bc [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\windows\system32\DRIVERS\usbscan.sys
23:13:45.0946 0x02bc usbscan - ok
23:13:45.0975 0x02bc [ B57B4F0BEC4270A281B9F8537EB2FA04, 554273482EE85F010DC62E412C9933E65BD63AA09911BD25D86F86D2618EF382 ] usbser C:\windows\system32\drivers\usbser.sys
23:13:46.0008 0x02bc usbser - ok
23:13:46.0034 0x02bc [ C03DA998E412D69D18DD11D835229AF0, DD43E370EF370767588A6D56A51A4ADF99B5E063C7AA0528F91FD431DE7C2932 ] UsbserFilt C:\windows\system32\DRIVERS\usbser_lowerfltjx64.sys
23:13:46.0057 0x02bc UsbserFilt - ok
23:13:46.0081 0x02bc [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
23:13:46.0121 0x02bc USBSTOR - ok
23:13:46.0150 0x02bc [ CFEAAF96E666E3DCBD8F6DFF516784AE, 006218A3DB5851790CC0A7F3DCD7B3AF82F624DA679296DE507AFD36C5468317 ] usbuhci C:\windows\system32\drivers\usbuhci.sys
23:13:46.0161 0x02bc usbuhci - ok
23:13:46.0189 0x02bc [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys
23:13:46.0222 0x02bc usbvideo - ok
23:13:46.0254 0x02bc [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\windows\System32\uxsms.dll
23:13:46.0303 0x02bc UxSms - ok
23:13:46.0315 0x02bc [ 6918ACBA1558AF363F6AA8D217AFCA8D, D8CA4E9F3FA0F5CE674D647DDBFD3C3676A07FB0268BBB51782468E144575F49 ] VaultSvc C:\windows\system32\lsass.exe
23:13:46.0335 0x02bc VaultSvc - ok
23:13:46.0359 0x02bc [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
23:13:46.0371 0x02bc vdrvroot - ok
23:13:46.0410 0x02bc [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\windows\System32\vds.exe
23:13:46.0468 0x02bc vds - ok
23:13:46.0506 0x02bc [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\windows\system32\DRIVERS\vgapnp.sys
23:13:46.0520 0x02bc vga - ok
23:13:46.0531 0x02bc [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\windows\System32\drivers\vga.sys
23:13:46.0575 0x02bc VgaSave - ok
23:13:46.0601 0x02bc [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\windows\system32\drivers\vhdmp.sys
23:13:46.0617 0x02bc vhdmp - ok
23:13:46.0640 0x02bc [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\windows\system32\drivers\viaide.sys
23:13:46.0651 0x02bc viaide - ok
23:13:46.0673 0x02bc [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\windows\system32\drivers\volmgr.sys
23:13:46.0685 0x02bc volmgr - ok
23:13:46.0712 0x02bc [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\windows\system32\drivers\volmgrx.sys
23:13:46.0731 0x02bc volmgrx - ok
23:13:46.0746 0x02bc [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\windows\system32\drivers\volsnap.sys
23:13:46.0763 0x02bc volsnap - ok
23:13:46.0780 0x02bc [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\windows\system32\DRIVERS\vsmraid.sys
23:13:46.0795 0x02bc vsmraid - ok
23:13:46.0856 0x02bc [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\windows\system32\vssvc.exe
23:13:46.0960 0x02bc VSS - ok
23:13:46.0985 0x02bc [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\windows\System32\drivers\vwifibus.sys
23:13:47.0015 0x02bc vwifibus - ok
23:13:47.0104 0x02bc [ C366AE91D2CC2C1C25380061D235C36B, FF641D2D913223069EEDCDC08286D91D40BEE5FC7471610DE76E98D8A32045A2 ] VX3000 C:\windows\system32\DRIVERS\VX3000.sys
23:13:47.0195 0x02bc VX3000 - ok
23:13:47.0269 0x02bc [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\windows\system32\w32time.dll
23:13:47.0376 0x02bc W32Time - ok
23:13:47.0406 0x02bc [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\windows\system32\DRIVERS\wacompen.sys
23:13:47.0432 0x02bc WacomPen - ok
23:13:47.0465 0x02bc [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
23:13:47.0505 0x02bc WANARP - ok
23:13:47.0519 0x02bc [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
23:13:47.0548 0x02bc Wanarpv6 - ok
23:13:47.0612 0x02bc [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\windows\system32\wbengine.exe
23:13:47.0681 0x02bc wbengine - ok
23:13:47.0704 0x02bc [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\windows\System32\wbiosrvc.dll
23:13:47.0724 0x02bc WbioSrvc - ok
23:13:47.0747 0x02bc [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\windows\System32\wcncsvc.dll
23:13:47.0773 0x02bc wcncsvc - ok
23:13:47.0784 0x02bc [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
23:13:47.0821 0x02bc WcsPlugInService - ok
23:13:47.0844 0x02bc [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\windows\system32\DRIVERS\wd.sys
23:13:47.0855 0x02bc Wd - ok
23:13:47.0900 0x02bc [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
23:13:47.0933 0x02bc Wdf01000 - ok
23:13:47.0967 0x02bc [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\windows\system32\wdi.dll
23:13:48.0003 0x02bc WdiServiceHost - ok
23:13:48.0008 0x02bc [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\windows\system32\wdi.dll
23:13:48.0023 0x02bc WdiSystemHost - ok
23:13:48.0053 0x02bc [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient C:\windows\System32\webclnt.dll
23:13:48.0097 0x02bc WebClient - ok
23:13:48.0125 0x02bc [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\windows\system32\wecsvc.dll
23:13:48.0174 0x02bc Wecsvc - ok
23:13:48.0194 0x02bc [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\windows\System32\wercplsupport.dll
23:13:48.0242 0x02bc wercplsupport - ok
23:13:48.0265 0x02bc [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\windows\System32\WerSvc.dll
23:13:48.0311 0x02bc WerSvc - ok
23:13:48.0335 0x02bc [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
23:13:48.0366 0x02bc WfpLwf - ok
23:13:48.0399 0x02bc [ B14EF15BD757FA488F9C970EEE9C0D35, F27DF2D47E7076786AE7C396583D7A1C56B93E766711066C900964FC7313E794 ] WimFltr C:\windows\system32\DRIVERS\wimfltr.sys
23:13:48.0413 0x02bc WimFltr - ok
23:13:48.0439 0x02bc [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\windows\system32\drivers\wimmount.sys
23:13:48.0449 0x02bc WIMMount - ok
23:13:48.0465 0x02bc WinDefend - ok
23:13:48.0483 0x02bc WinHttpAutoProxySvc - ok
23:13:48.0504 0x02bc [ 66C365B542195C1F6E2FF4A7D8F3827C, FB43A64453283D1B236AFF73F010B8F6106B971047313B9B4EBE925C4DD325A2 ] WinI2C-DDC C:\windows\system32\drivers\DDCDrv.sys
23:13:48.0515 0x02bc WinI2C-DDC - ok
23:13:48.0558 0x02bc [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
23:13:48.0595 0x02bc Winmgmt - ok
23:13:48.0676 0x02bc [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM C:\windows\system32\WsmSvc.dll
23:13:48.0766 0x02bc WinRM - ok
23:13:48.0814 0x02bc [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys
23:13:48.0828 0x02bc WinUsb - ok
23:13:48.0869 0x02bc [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\windows\System32\wlansvc.dll
23:13:48.0906 0x02bc Wlansvc - ok
23:13:48.0932 0x02bc [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\windows\system32\drivers\wmiacpi.sys
23:13:48.0943 0x02bc WmiAcpi - ok
23:13:48.0970 0x02bc [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
23:13:48.0996 0x02bc wmiApSrv - ok
23:13:49.0026 0x02bc WMPNetworkSvc - ok
23:13:49.0040 0x02bc [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\windows\System32\wpcsvc.dll
23:13:49.0072 0x02bc WPCSvc - ok
23:13:49.0093 0x02bc [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
23:13:49.0119 0x02bc WPDBusEnum - ok
23:13:49.0140 0x02bc [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
23:13:49.0183 0x02bc ws2ifsl - ok
23:13:49.0205 0x02bc [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\windows\System32\wscsvc.dll
23:13:49.0223 0x02bc wscsvc - ok
23:13:49.0229 0x02bc WSearch - ok
23:13:49.0254 0x02bc [ 83575C43B2BFE9AB0661A7F957E843C0, 6FCE62721902A4F35F1A4CED8AF60A0346CFAB657ED92DE4CEFF19BDB830D32D ] wsvd C:\windows\system32\DRIVERS\wsvd.sys
23:13:49.0266 0x02bc wsvd - ok
23:13:49.0363 0x02bc [ 31F32E0C1A8BA9A37EEC23DE5F27F847, 0180832BC6172C9A4C32B5B222BB3F91EA615A5EBDA98DB79ED4FED258C2D257 ] wuauserv C:\windows\system32\wuaueng.dll
23:13:49.0489 0x02bc wuauserv - ok
23:13:49.0523 0x02bc [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\windows\system32\drivers\WudfPf.sys
23:13:49.0546 0x02bc WudfPf - ok
23:13:49.0578 0x02bc [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
23:13:49.0603 0x02bc WUDFRd - ok
23:13:49.0633 0x02bc [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\windows\System32\WUDFSvc.dll
23:13:49.0663 0x02bc wudfsvc - ok
23:13:49.0695 0x02bc [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\windows\System32\wwansvc.dll
23:13:49.0738 0x02bc WwanSvc - ok
23:13:49.0786 0x02bc [ B3EEACF62445E24FBB2CD4B0FB4DB026, 2E5B6220094C47754233EDA59E6514CE47AC6C6879F367C72B2C02330EABE8E0 ] yukonw7 C:\windows\system32\DRIVERS\yk62x64.sys
23:13:49.0807 0x02bc yukonw7 - ok
23:13:49.0811 0x02bc ================ Scan global ===============================
23:13:49.0836 0x02bc [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\windows\system32\basesrv.dll
23:13:49.0873 0x02bc [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\windows\system32\winsrv.dll
23:13:49.0887 0x02bc [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\windows\system32\winsrv.dll
23:13:49.0906 0x02bc [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\windows\system32\sxssrv.dll
23:13:49.0941 0x02bc [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\windows\system32\services.exe
23:13:49.0949 0x02bc [ Global ] - ok
23:13:49.0949 0x02bc ================ Scan MBR ==================================
23:13:49.0957 0x02bc [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:13:50.0142 0x02bc \Device\Harddisk0\DR0 - ok
23:13:50.0142 0x02bc ================ Scan VBR ==================================
23:13:50.0173 0x02bc [ 042C067EF2B3BF59EAC9946207409DD3 ] \Device\Harddisk0\DR0\Partition1
23:13:50.0178 0x02bc \Device\Harddisk0\DR0\Partition1 - ok
23:13:50.0182 0x02bc [ CAF1AC9FF198354AFD81219140D73C63 ] \Device\Harddisk0\DR0\Partition2
23:13:50.0183 0x02bc \Device\Harddisk0\DR0\Partition2 - ok
23:13:50.0185 0x02bc ================ Scan generic autorun ======================
23:13:50.0425 0x02bc [ 80EC17D1050474885A219FAF7F6243FB, 843E09BCC6B194EE57150F8359A75CFD6BC02CEE929AB4C0AA22E5C53CFA6D6D ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
23:13:50.0586 0x02bc RtHDVCpl - ok
23:13:50.0655 0x02bc [ 393F021E2A9FA19AC94BA4482E32FC6C, 8DC7A061643099B8A1915ADB59D89912A117883D4194BCC05F653E19DFD321A9 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
23:13:50.0675 0x02bc AdobeAAMUpdater-1.0 - ok
23:13:50.0724 0x02bc [ 69764A6475A4C54732E6A07CE6EF8BE2, BF983299386AC0A16FA798D8EED43B3E88541D49A03E3F6F2B89A9A0C9A18503 ] C:\windows\vVX3000.exe
23:13:50.0746 0x02bc VX3000 - ok
23:13:50.0796 0x02bc [ 4EC4260D778FB923BA1AB697AFF6C0E3, 72372369153F675C26F938C5106BFD8704FC518348BC95961214B76DECB68689 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
23:13:50.0827 0x02bc StartCCC - detected UnsignedFile.Multi.Generic ( 1 )
23:13:50.0942 0x02bc Detect skipped due to KSN trusted
23:13:50.0942 0x02bc StartCCC - ok
23:13:50.0993 0x02bc [ 54FA8528EDA1B6B34615F4EA3FCB35E6, B078821475D6FDED19579A487484D0752DC6E1AA0D1ACA71353C743B00291C61 ] C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
23:13:51.0002 0x02bc CLMLServer - ok
23:13:51.0020 0x02bc [ 4EFCDF3DB1BBA69C09622991280C4ACB, A86D4694BCFFF3C0FAF07C56A410A8317A953FB581CDCDBED5CAF735A0E2AC0D ] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe
23:13:51.0032 0x02bc UpdateP2GoShortCut - ok
23:13:51.0053 0x02bc [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
23:13:51.0072 0x02bc SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
23:13:51.0072 0x02bc Detect skipped due to KSN trusted
23:13:51.0072 0x02bc SwitchBoard - ok
23:13:51.0135 0x02bc [ E1636F57581CAB5D995FD54D2991EF57, BB6B3D005054D386D596A4BA4D9D2F1284D7C845C1CD5EE63775B4569559E0EB ] C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe
23:13:51.0189 0x02bc AdobeCS5.5ServiceManager - ok
23:13:51.0239 0x02bc [ 3BD79A1F6D2EA0FDDEA3F8914B2A6A0C, 332E6806EFF846A2E6D0DC04A70D3503855DABFA83E6EC27F37E2D9103E80E51 ] C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
23:13:51.0248 0x02bc VirtualCloneDrive - ok
23:13:51.0296 0x02bc [ E05782E0B697CADBBC17E78C67280B30, 87A142350F1BD9FF7ADDDBF80AC5C1EFDCE93F8E3142B95ACC8D85DDE77D42D8 ] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
23:13:51.0311 0x02bc Lightshot - ok
23:13:51.0352 0x02bc [ 0133E5265FDD7063F87856C9BD5156C9, 27C0389B3FA0209C6B4D1A8A75AAD23525DD3B5DB7B0CD7358D1D6417818C8EF ] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
23:13:51.0363 0x02bc LifeCam - ok
23:13:51.0425 0x02bc [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
23:13:51.0489 0x02bc Sidebar - ok
23:13:51.0513 0x02bc [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
23:13:51.0546 0x02bc mctadmin - ok
23:13:51.0591 0x02bc [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
23:13:51.0626 0x02bc Sidebar - ok
23:13:51.0634 0x02bc [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
23:13:51.0651 0x02bc mctadmin - ok
23:13:51.0760 0x02bc [ FE9E6388A039441098EB09C070EA5049, 3888822AF992F3BE27E9F973E31EBEE5302901E4A8260A9A6CF6B2BB2A12D173 ] C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe
23:13:51.0787 0x02bc Google Update - ok
23:13:51.0823 0x02bc Skype - ok
23:13:51.0827 0x02bc Waiting for KSN requests completion. In queue: 76
23:13:52.0101 0x0118 Object required for P2P: [ 54FA8528EDA1B6B34615F4EA3FCB35E6 ] C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
23:13:52.0270 0x0118 Object send P2P result: true
23:13:52.0997 0x02bc Win FW state via NFP2: enabled ( trusted )
23:13:53.0094 0x02bc ============================================================
23:13:53.0094 0x02bc Scan finished
23:13:53.0094 0x02bc ============================================================
23:13:53.0107 0x03e8 Detected object count: 0
23:13:53.0107 0x03e8 Actual detected object count: 0
23:15:12.0802 0x0e90 Deinitialize success
|
|
11.01.2017, 10:06
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Hartnäckiger Virus - Reimage? Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
11.01.2017, 11:05
| #13 |
| | Hartnäckiger Virus - Reimage? Anmerkung: Beim AdwCleaner habe ich stets den Link hier im Forum genutzt. Als ich die aktuelle Version 6.041 gedownloadet und gestartet hab, bekam ich eine Meldung, dass eine neuere Version vorhanden ist (V 6.042). Die habe ich bisher immer gedownloadet und damit gescannt. Das habe ich hier aber nicht gemacht und mit der hier aufgeführten Version gescannt. Es wurde nichts gefunden und daher wurde der PC auch nicht automatisch neu gestartet. Ich selbst habe das jetzt auch nicht gemacht, sondern habe sofort mit JRT weitergemacht. Erwähne ich jetzt, falls diese Information relevant sein könnte. Adw-Log: Code:
ATTFilter # AdwCleaner v6.041 - Bericht erstellt am 11/01/2017 um 10:54:42
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-10.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Jasmine - JASMINE-PC
# Gestartet von : C:\Users\Jasmine\Downloads\AdwCleaner_6.041.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
Keine schädlichen Dienste gefunden.
***** [ Ordner ] *****
Keine schädlichen Ordner gefunden.
***** [ Dateien ] *****
Keine schädlichen Dateien gefunden.
***** [ DLL ] *****
Keine infizierten DLLs gefunden.
***** [ WMI ] *****
Keine schädlichen Schlüssel gefunden.
***** [ Verknüpfungen ] *****
Keine infizierten Verknüpfungen gefunden.
***** [ Aufgabenplanung ] *****
Keine schädlichen Aufgaben gefunden.
***** [ Registrierungsdatenbank ] *****
Keine schädlichen Elemente in der Registrierungsdatenbank gefunden.
***** [ Internetbrowser ] *****
Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [12649 Bytes] - [04/01/2017 17:08:16]
C:\AdwCleaner\AdwCleaner[C2].txt - [1703 Bytes] - [05/01/2017 17:38:39]
C:\AdwCleaner\AdwCleaner[C3].txt - [2029 Bytes] - [09/01/2017 11:57:09]
C:\AdwCleaner\AdwCleaner[R0].txt - [9300 Bytes] - [16/09/2014 09:24:40]
C:\AdwCleaner\AdwCleaner[R1].txt - [4705 Bytes] - [22/09/2014 18:28:12]
C:\AdwCleaner\AdwCleaner[R2].txt - [1327 Bytes] - [17/10/2014 12:21:16]
C:\AdwCleaner\AdwCleaner[S0].txt - [8890 Bytes] - [16/09/2014 09:31:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [4006 Bytes] - [22/09/2014 18:32:57]
C:\AdwCleaner\AdwCleaner[S2].txt - [1174 Bytes] - [17/10/2014 12:29:04]
C:\AdwCleaner\AdwCleaner[S3].txt - [12055 Bytes] - [04/01/2017 17:07:10]
C:\AdwCleaner\AdwCleaner[S4].txt - [1933 Bytes] - [05/01/2017 17:38:07]
C:\AdwCleaner\AdwCleaner[S5].txt - [2216 Bytes] - [09/01/2017 11:56:31]
C:\AdwCleaner\AdwCleaner[S6].txt - [2094 Bytes] - [11/01/2017 10:54:42]
########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [2167 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Home Premium x64
Ran by Jasmine (Administrator) on 11.01.2017 at 10:56:16,37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 90
Successfully deleted: C:\Users\Jasmine\AppData\Local\{B5F70934-5E12-42d2-882D-62D42EA1FA67} (Empty Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\crashrpt (Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage-journal (File)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage (File)
Successfully deleted: C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\extensions\mailcheck@web.de\searchplugins\mailcom-search.xml (File)
Successfully deleted: C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\user.js (File)
Successfully deleted: C:\windows\system32\Tasks\update-S-1-5-21-838575733-3782424441-3606765584-1001 (Task)
Successfully deleted: C:\windows\system32\Tasks\update-sys (Task)
Successfully deleted: C:\windows\Tasks\update-S-1-5-21-838575733-3782424441-3606765584-1001.job (Task)
Successfully deleted: C:\windows\Tasks\update-sys.job (Task)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\064TQC54 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4504B24B (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\460SV6BF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52BZG962 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5P8RW4RP (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8653PLYG (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H6VPIWW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8PKCGIVT (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8XXESBNS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OZA1K0X (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9VAYQH9L (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AWQB9VP3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BPN4GF3S (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ0P3FB3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2CXV3ZS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2UJM6KB (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DM97VK6H (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E5XEU8BZ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EK96YT78 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EZ4G58YF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GXL6BGQH (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYSCGAHV (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LI592AND (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M42I6771 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OIK3RTEO (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PADC3D02 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8RHRPCC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QOK2W4G6 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R16C8X55 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S0VG7QVM (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SU0051XR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T3JI2NIK (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TXW2BTL6 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U40A49NV (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCQJHOL0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YSQN09MR (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\064TQC54 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4504B24B (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\460SV6BF (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52BZG962 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5P8RW4RP (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8653PLYG (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H6VPIWW (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8PKCGIVT (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8XXESBNS (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OZA1K0X (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9VAYQH9L (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AWQB9VP3 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BPN4GF3S (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ0P3FB3 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2CXV3ZS (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2UJM6KB (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DM97VK6H (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E5XEU8BZ (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EK96YT78 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EZ4G58YF (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GXL6BGQH (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IYSCGAHV (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LI592AND (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M42I6771 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OIK3RTEO (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PADC3D02 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8RHRPCC (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QOK2W4G6 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R16C8X55 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S0VG7QVM (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SU0051XR (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T3JI2NIK (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TXW2BTL6 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U40A49NV (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCQJHOL0 (Temporary Internet Files Folder)
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YSQN09MR (Temporary Internet Files Folder)
Deleted the following from C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\prefs.js
user_pref(extensions.unitedinternet.email.runonceNewUsersShown, true);
Registry: 1
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.01.2017 at 10:58:34,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
11.01.2017, 12:01
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Hartnäckiger Virus - Reimage? Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
|
11.01.2017, 13:58
| #15 |
| | Hartnäckiger Virus - Reimage? FRST-Log: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-01-2017
durchgeführt von Jasmine (Administrator) auf JASMINE-PC (11-01-2017 13:51:00)
Gestartet von C:\Users\Jasmine\Downloads
Geladene Profile: Jasmine (Verfügbare Profile: Jasmine)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\vVX3000.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Jasmine\Downloads\FRST64 (1).exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7936032 2009-06-26] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Run: [VX3000] => C:\windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Run: [Google Update] => C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-17] (Google Inc.)
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{DA14A638-219A-41A4-AB37-FC662BD4D999}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
hxxp://www.giga.de/androidnews/
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll => Keine Datei
BHO-x32: Kein Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-14] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-14] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-838575733-3782424441-3606765584-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default [2017-01-11]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\t3squ8qs.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\t3squ8qs.default -> hxxps://www.google.com/search
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\t3squ8qs.default -> Google
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\t3squ8qs.default -> Bing
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\t3squ8qs.default -> Yahoo!
FF Homepage: Mozilla\Firefox\Profiles\t3squ8qs.default -> hxxps://www.malwarebytes.org/restorebrowser/yhp-ff
chrome://unitedtb/content/newtab/startpage.xhtml
FF Extension: (Fox Sec 7) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\fx@foxysecureKDJJHVLSDUVFU.com [2014-10-20] [ist nicht signiert]
FF Extension: (WEB.DE MailCheck) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\mailcheck@web.de [2016-12-15]
FF Extension: (Search Addon Plus) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\{13e41689-0b2b-4737-95a7-d0ff34134694}.xpi [2015-09-02] [ist nicht signiert]
FF Extension: (DownloadShield) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\{1a2a3d59-8f2a-4138-9cbd-5c960639bb5f}.xpi [2015-11-07] [ist nicht signiert]
FF Extension: (Adblock Plus) - C:\Users\Jasmine\AppData\Roaming\Mozilla\Firefox\Profiles\t3squ8qs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF => nicht gefunden
FF HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: (McAfee Security Scan Plus) - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-09-14] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll [2009-06-23] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-838575733-3782424441-3606765584-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-838575733-3782424441-3606765584-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-838575733-3782424441-3606765584-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://de.search.yahoo.com/?type=201117&fr=yo-yhp-ch
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSearchKeyword: Default -> google.de_
CHR Plugin: (Shockwave Flash) - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\PepperFlash\pepflashplayer.dll => Keine Datei
CHR Plugin: (Native Client) - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\pdf.dll => Keine Datei
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Users\Jasmine\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
CHR Profile: C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default [2017-01-11]
CHR Extension: (Adblock Plus) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Edit URL) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmfgopimgpikdhokmlohfcibokjnodkn [2017-01-01]
CHR Extension: (Adobe Acrobat) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-26]
CHR Extension: (Chrome Media Router) - C:\Users\Jasmine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>
StartMenuInternet: Google Chrome.Q55UBRYIZ4WM3GDY3LE2KWQIOA - C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-11] (Electronic Arts)
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-09-14] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [29208 2014-09-16] ()
S3 RTL8023x64; C:\windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-01-11 13:50 - 2017-01-11 13:50 - 02419200 _____ (Farbar) C:\Users\Jasmine\Downloads\FRST64 (1).exe
2017-01-11 10:58 - 2017-01-11 10:58 - 00015210 _____ C:\Users\Jasmine\Desktop\JRT.txt
2017-01-11 10:55 - 2017-01-11 10:55 - 01663040 _____ (Malwarebytes) C:\Users\Jasmine\Downloads\JRT.exe
2017-01-11 10:45 - 2017-01-11 10:46 - 03977168 _____ C:\Users\Jasmine\Downloads\AdwCleaner_6.041.exe
2017-01-11 09:12 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2017-01-11 09:12 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2017-01-11 09:12 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2017-01-11 09:12 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcrypt.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2017-01-11 09:12 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2017-01-11 09:12 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2017-01-11 09:12 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2017-01-11 09:12 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2017-01-11 09:12 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2017-01-11 09:12 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2017-01-11 09:12 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2017-01-11 09:12 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2017-01-11 09:12 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2017-01-10 23:12 - 2017-01-10 23:15 - 00193942 _____ C:\TDSSKiller.3.1.0.12_10.01.2017_23.12.07_log.txt
2017-01-10 23:11 - 2017-01-10 23:11 - 00000492 _____ C:\TDSSKiller.3.1.0.12_10.01.2017_23.11.35_log.txt
2017-01-10 23:10 - 2017-01-10 23:11 - 00004474 _____ C:\TDSSKiller.3.1.0.12_10.01.2017_23.10.44_log.txt
2017-01-10 23:10 - 2017-01-10 23:10 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Jasmine\Desktop\tdsskiller.exe
2017-01-10 22:04 - 2017-01-11 08:59 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-10 22:02 - 2017-01-10 23:10 - 00000000 ____D C:\Users\Jasmine\Desktop\mbar
2017-01-10 22:01 - 2017-01-10 22:01 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Jasmine\Desktop\mbar-1.09.3.1001.exe
2017-01-09 21:34 - 2017-01-09 21:35 - 00033781 _____ C:\Users\Jasmine\Downloads\Addition.txt
2017-01-09 21:33 - 2017-01-11 13:51 - 00014161 _____ C:\Users\Jasmine\Downloads\FRST.txt
2017-01-09 21:33 - 2017-01-11 13:51 - 00000000 ____D C:\FRST
2017-01-09 21:32 - 2017-01-09 21:32 - 02419200 _____ (Farbar) C:\Users\Jasmine\Downloads\FRST64.exe
2017-01-09 15:37 - 2017-01-09 15:37 - 00019297 _____ C:\6.txt
2017-01-09 15:29 - 2017-01-09 15:29 - 00001591 _____ C:\3.txt
2017-01-09 15:29 - 2017-01-09 15:29 - 00001591 _____ C:\2.txt
2017-01-06 02:14 - 2009-07-26 13:07 - 00321629 _____ C:\Users\Jasmine\Desktop\Video053.3gp
2017-01-05 14:06 - 2017-01-05 14:06 - 188992113 _____ C:\windows\MEMORY.DMP
2017-01-05 14:06 - 2017-01-05 14:06 - 00315056 _____ C:\windows\Minidump\010517-19749-01.dmp
2017-01-05 14:06 - 2017-01-05 14:06 - 00000000 ____D C:\windows\Minidump
2017-01-01 20:52 - 2017-01-01 20:52 - 00002200 _____ C:\Users\Jasmine\Downloads\CSTrail14.user.js
2017-01-01 20:52 - 2017-01-01 20:52 - 00002200 _____ C:\Users\Jasmine\Downloads\CSTrail14 (2).user.js
2017-01-01 20:52 - 2017-01-01 20:52 - 00002200 _____ C:\Users\Jasmine\Downloads\CSTrail14 (1).user.js
2017-01-01 20:47 - 2017-01-01 20:47 - 00002524 _____ C:\Users\Jasmine\Downloads\Nicht bestätigt 727589.crdownload
2016-12-29 23:30 - 2016-12-29 23:52 - 00000000 ____D C:\Users\Jasmine\Desktop\bilder neu
2016-12-21 20:37 - 2016-12-21 20:43 - 00001179 _____ C:\Users\Jasmine\Desktop\Widerpsruch Jasmine.txt
2016-12-21 20:27 - 2016-12-21 20:45 - 00001186 _____ C:\Users\Jasmine\Desktop\Widerspruch Hartmut.txt
2016-12-15 12:39 - 2016-12-15 12:39 - 00001907 _____ C:\Users\Jasmine\Downloads\ca8f566e46b19c0feeb76573a81770b8bdac87cf1d13595768adf38256fb44.png
2016-12-14 16:28 - 2016-11-21 19:12 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2016-12-14 16:28 - 2016-11-20 17:19 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2016-12-14 16:28 - 2016-11-20 15:07 - 00467392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2016-12-14 16:28 - 2016-11-17 17:41 - 00370920 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2016-12-14 16:28 - 2016-11-15 00:27 - 00394448 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-12-14 16:28 - 2016-11-14 23:39 - 00346320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-12-14 16:28 - 2016-11-12 20:48 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2016-12-14 16:28 - 2016-11-12 20:48 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2016-12-14 16:28 - 2016-11-12 20:28 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2016-12-14 16:28 - 2016-11-12 20:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2016-12-14 16:28 - 2016-11-12 20:26 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2016-12-14 16:28 - 2016-11-12 20:25 - 00576000 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-12-14 16:28 - 2016-11-12 20:25 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2016-12-14 16:28 - 2016-11-12 20:21 - 02896384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-12-14 16:28 - 2016-11-12 20:15 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2016-12-14 16:28 - 2016-11-12 20:14 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2016-12-14 16:28 - 2016-11-12 20:09 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2016-12-14 16:28 - 2016-11-12 20:08 - 25759744 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-12-14 16:28 - 2016-11-12 20:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2016-12-14 16:28 - 2016-11-12 20:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2016-12-14 16:28 - 2016-11-12 20:07 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-12-14 16:28 - 2016-11-12 20:07 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2016-12-14 16:28 - 2016-11-12 19:56 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2016-12-14 16:28 - 2016-11-12 19:53 - 06049280 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-12-14 16:28 - 2016-11-12 19:52 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2016-12-14 16:28 - 2016-11-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2016-12-14 16:28 - 2016-11-12 19:41 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 16:28 - 2016-11-12 19:40 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2016-12-14 16:28 - 2016-11-12 19:35 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2016-12-14 16:28 - 2016-11-12 19:34 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-12-14 16:28 - 2016-11-12 19:31 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-12-14 16:28 - 2016-11-12 19:30 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2016-12-14 16:28 - 2016-11-12 19:29 - 00498688 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-12-14 16:28 - 2016-11-12 19:29 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2016-12-14 16:28 - 2016-11-12 19:29 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2016-12-14 16:28 - 2016-11-12 19:28 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2016-12-14 16:28 - 2016-11-12 19:27 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-12-14 16:28 - 2016-11-12 19:20 - 02287616 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-12-14 16:28 - 2016-11-12 19:20 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2016-12-14 16:28 - 2016-11-12 19:19 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2016-12-14 16:28 - 2016-11-12 19:17 - 20302848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-12-14 16:28 - 2016-11-12 19:15 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-12-14 16:28 - 2016-11-12 19:14 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2016-12-14 16:28 - 2016-11-12 19:11 - 00725504 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-12-14 16:28 - 2016-11-12 19:10 - 00806912 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-12-14 16:28 - 2016-11-12 19:08 - 02131456 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-12-14 16:28 - 2016-11-12 19:08 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2016-12-14 16:28 - 2016-11-12 19:03 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2016-12-14 16:28 - 2016-11-12 18:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-12-14 16:28 - 2016-11-12 18:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2016-12-14 16:28 - 2016-11-12 18:52 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2016-12-14 16:28 - 2016-11-12 18:51 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2016-12-14 16:28 - 2016-11-12 18:49 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-12-14 16:28 - 2016-11-12 18:47 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2016-12-14 16:28 - 2016-11-12 18:41 - 15257088 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-12-14 16:28 - 2016-11-12 18:40 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-12-14 16:28 - 2016-11-12 18:38 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-12-14 16:28 - 2016-11-12 18:37 - 04608000 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-12-14 16:28 - 2016-11-12 18:36 - 02055680 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-12-14 16:28 - 2016-11-12 18:36 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2016-12-14 16:28 - 2016-11-12 18:35 - 02920960 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-12-14 16:28 - 2016-11-12 18:21 - 13653504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-12-14 16:28 - 2016-11-12 18:20 - 01543680 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-12-14 16:28 - 2016-11-12 18:11 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-12-14 16:28 - 2016-11-12 18:05 - 02444800 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-12-14 16:28 - 2016-11-12 18:02 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-12-14 16:28 - 2016-11-12 18:02 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-12-14 16:28 - 2016-11-10 17:32 - 01009152 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2016-12-14 16:28 - 2016-11-10 17:19 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2016-12-14 16:28 - 2016-11-09 17:41 - 00114408 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2016-12-14 16:28 - 2016-11-09 17:33 - 03244032 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00070144 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00025088 _____ (Microsoft Corporation) C:\windows\system32\msimsg.dll
2016-12-14 16:28 - 2016-11-09 17:33 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 02365440 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 01806848 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimsg.dll
2016-12-14 16:28 - 2016-11-09 17:17 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2016-12-14 16:28 - 2016-11-09 17:02 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe
2016-12-14 16:28 - 2016-11-09 16:55 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\msiexec.exe
2016-12-14 16:28 - 2016-11-06 17:33 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2016-12-14 16:28 - 2016-11-06 17:16 - 00312832 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2016-12-14 16:28 - 2016-11-06 17:01 - 03219456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-12-14 16:28 - 2016-10-27 16:33 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2016-12-14 16:28 - 2016-10-27 16:20 - 00627712 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2016-12-14 16:28 - 2016-10-11 16:40 - 00631176 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2016-12-14 16:28 - 2016-10-11 16:37 - 05547752 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-12-14 16:28 - 2016-10-11 16:37 - 00706792 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2016-12-14 16:28 - 2016-10-11 16:34 - 01732864 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2016-12-14 16:28 - 2016-10-11 16:32 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00880640 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2016-12-14 16:28 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2016-12-14 16:28 - 2016-10-11 16:21 - 01314112 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00275456 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 16:03 - 00148480 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2016-12-14 16:28 - 2016-10-11 16:03 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2016-12-14 16:28 - 2016-10-11 16:03 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2016-12-14 16:28 - 2016-10-11 15:59 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2016-12-14 16:28 - 2016-10-11 15:59 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2016-12-14 16:28 - 2016-10-11 15:55 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\bcdedit.exe
2016-12-14 16:28 - 2016-10-11 15:55 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2016-12-14 16:28 - 2016-10-11 15:51 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2016-12-14 16:28 - 2016-10-11 15:51 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2016-12-14 16:28 - 2016-10-11 15:51 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2016-12-14 16:28 - 2016-10-11 15:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2016-12-14 16:28 - 2016-10-11 15:50 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 15:50 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 15:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 15:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 16:28 - 2016-10-11 14:18 - 00419648 _____ C:\windows\SysWOW64\locale.nls
2016-12-14 16:28 - 2016-10-11 14:17 - 00419648 _____ C:\windows\system32\locale.nls
2016-12-14 16:28 - 2016-10-08 14:06 - 00633296 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2016-12-14 16:28 - 2016-10-04 16:31 - 01483264 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2016-12-14 16:28 - 2016-10-04 16:31 - 00229376 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2016-12-14 16:28 - 2016-10-04 16:31 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2016-12-14 16:28 - 2016-10-04 16:31 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2016-12-14 16:28 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-01-11 13:33 - 2013-06-11 12:06 - 00000000 ____D C:\Users\Jasmine\AppData\Roaming\Skype
2017-01-11 13:13 - 2013-06-11 11:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2017-01-11 12:28 - 2009-07-14 05:45 - 00025376 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-11 12:28 - 2009-07-14 05:45 - 00025376 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-11 12:20 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2017-01-11 11:25 - 2013-08-14 21:27 - 00000000 ____D C:\windows\system32\MRT
2017-01-11 11:24 - 2013-06-07 10:12 - 135657872 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2017-01-11 10:54 - 2014-09-16 09:24 - 00000000 ____D C:\AdwCleaner
2017-01-10 22:40 - 2009-09-14 07:03 - 00699416 _____ C:\windows\system32\perfh007.dat
2017-01-10 22:40 - 2009-09-14 07:03 - 00149556 _____ C:\windows\system32\perfc007.dat
2017-01-10 22:40 - 2009-07-14 06:13 - 01620612 _____ C:\windows\system32\PerfStringBackup.INI
2017-01-10 22:40 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2017-01-10 22:37 - 2014-09-14 21:00 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-10 22:37 - 2014-09-14 21:00 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2017-01-10 22:33 - 2009-07-14 04:20 - 00000000 ____D C:\windows\ModemLogs
2017-01-10 17:13 - 2013-06-11 11:58 - 00802904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2017-01-10 17:13 - 2013-06-11 11:58 - 00144472 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-10 17:13 - 2013-06-11 11:58 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2017-01-10 17:13 - 2013-06-11 11:57 - 00000000 ____D C:\windows\system32\Macromed
2017-01-10 17:13 - 2010-09-16 16:25 - 00000000 ____D C:\windows\SysWOW64\Macromed
2017-01-10 15:31 - 2015-11-07 07:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-10 15:30 - 2015-04-07 07:33 - 00004476 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-09 11:57 - 2013-11-01 17:16 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2017-01-08 22:59 - 2014-10-10 08:14 - 00000000 ____D C:\Users\Jasmine\AppData\Roaming\vlc
2017-01-07 20:00 - 2016-11-21 21:59 - 00000948 _____ C:\Users\Jasmine\Desktop\nativelog.txt
2017-01-05 16:15 - 2014-10-10 08:19 - 00000000 ____D C:\Users\Jasmine\AppData\Roaming\.minecraft
2017-01-05 10:57 - 2009-07-14 06:32 - 00000000 ____D C:\windows\Downloaded Program Files
2017-01-01 01:39 - 2015-04-13 13:35 - 00000000 ____D C:\Users\Jasmine\AppData\Local\ElevatedDiagnostics
2016-12-31 10:07 - 2016-08-27 07:52 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-31 10:07 - 2013-06-11 12:06 - 00000000 ____D C:\ProgramData\Skype
2016-12-29 09:05 - 2009-07-14 06:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
2016-12-26 17:35 - 2009-07-14 06:32 - 00000000 ____D C:\windows\twain_32
2016-12-26 17:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\DriverStore
2016-12-17 00:20 - 2013-06-11 19:32 - 00003542 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 00:20 - 2013-06-11 19:32 - 00003414 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 00:20 - 2013-06-11 10:56 - 00003722 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001UA
2016-12-17 00:20 - 2013-06-11 10:56 - 00003450 _____ C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001Core
2016-12-15 14:25 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2016-12-15 03:49 - 2009-07-14 04:20 - 00000000 __RSD C:\windows\assembly
2016-12-15 03:49 - 2009-07-14 04:20 - 00000000 ____D C:\windows\Microsoft.NET
2016-12-15 03:40 - 2009-07-14 05:45 - 04824048 _____ C:\windows\system32\FNTCACHE.DAT
2016-12-15 03:40 - 2009-07-14 03:34 - 00189440 ____H C:\Users\Default\NTUSER.DAT.LOG1
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\en-US
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\en-US
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Boot
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\windows\AppPatch
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-15 03:38 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-15 03:06 - 2014-02-26 01:18 - 01593956 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2016-12-14 21:21 - 2013-06-11 11:23 - 00002336 _____ C:\Users\Jasmine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2014-11-25 10:54 - 2014-11-25 11:01 - 0000132 _____ () C:\Users\Jasmine\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-10-27 12:10 - 2014-10-27 12:10 - 0005911 _____ () C:\Users\Jasmine\AppData\Local\recently-used.xbel
2015-07-04 17:24 - 2015-07-04 17:24 - 0000003 _____ () C:\Users\Jasmine\AppData\Local\updater.log
2015-07-04 17:24 - 2016-08-26 17:02 - 0000424 _____ () C:\Users\Jasmine\AppData\Local\UserProducts.xml
2010-09-16 16:25 - 2010-09-16 16:25 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\flashax10.exe
Einige Dateien in TEMP:
====================
C:\Users\Jasmine\AppData\Local\Temp\APNSetup.exe
C:\Users\Jasmine\AppData\Local\Temp\avastclear.exe
C:\Users\Jasmine\AppData\Local\Temp\BackupSetup.exe
C:\Users\Jasmine\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Jasmine\AppData\Local\Temp\fp_pl_pfs_installer-2.exe
C:\Users\Jasmine\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Jasmine\AppData\Local\Temp\fx6-ff-ie-gg-de-2014-10-15.exe
C:\Users\Jasmine\AppData\Local\Temp\install_reader11_de_ltr5x64d_awc_aih.exe
C:\Users\Jasmine\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Jasmine\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Jasmine\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Jasmine\AppData\Local\Temp\Quarantine.exe
C:\Users\Jasmine\AppData\Local\Temp\riftuninstall.exe
C:\Users\Jasmine\AppData\Local\Temp\sdan.exe
C:\Users\Jasmine\AppData\Local\Temp\sdapk.exe
C:\Users\Jasmine\AppData\Local\Temp\sdaspwn.exe
C:\Users\Jasmine\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jasmine\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Jasmine\AppData\Local\Temp\uninst1.exe
C:\Users\Jasmine\AppData\Local\Temp\vcredist_x64.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-01-03 00:13
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von Jasmine (11-01-2017 13:51:53)
Gestartet von C:\Users\Jasmine\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2013-06-07 08:30:09)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-838575733-3782424441-3606765584-500 - Administrator - Disabled)
Gast (S-1-5-21-838575733-3782424441-3606765584-501 - Limited - Disabled)
Jasmine (S-1-5-21-838575733-3782424441-3606765584-1001 - Administrator - Enabled) => C:\Users\Jasmine
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20053 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Photoshop CS5.1 (HKLM-x32\...\{9158FF30-78D7-40EF-B83E-451AC5334640}) (Version: 12.1 - Adobe Systems Incorporated)
Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.)
Google Chrome (HKU\S-1-5-21-838575733-3782424441-3606765584-1001\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-838575733-3782424441-3606765584-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jasmine\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0279FF2F-F1A2-4A73-842C-7E1818BD9093} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {1192E8A9-1475-4CD0-9195-E18440C074DC} - System32\Tasks\{A05BBCC6-7978-4607-9BDF-3FBD2F9F7E66} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.4.0.102/de/go/help.faq.installer?LastError=1638
Task: {284A7F21-2582-409A-816A-1D477549E7CE} - System32\Tasks\{56D76694-52D2-4617-A67F-06D8C7E7AA38} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {2A9D0EA0-DA49-4075-BE3E-8F613050A32E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-838575733-3782424441-3606765584-1001
Task: {2EB40DB4-D200-41B3-B631-99CA0F29399D} - System32\Tasks\{72B530D8-A62F-4485-B85B-2EA3F926395D} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.5.0.102/de/go/help.faq.installer?LastError=1638
Task: {30BF359F-D181-4354-B634-8412E37FD20E} - System32\Tasks\{F209766A-5B4E-43AA-829D-A42887106590} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.6.80.103/de/go/help.faq.installer?LastError=1638
Task: {39E0AC08-87CB-4D3C-B28C-A4CE123D2076} - System32\Tasks\{39930610-F864-422A-A93F-B0E820D98710} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {4B720732-8566-4F44-83C5-E7C650D3FA0B} - System32\Tasks\{CE11A2B3-4861-4517-946E-AD1634D08933} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {6B23A38B-23C4-4DAE-BC43-17D71D9DBD60} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {6DF19A37-4E08-484A-BC43-7519FCEFA645} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001Core => C:\Users\Jasmine\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {757F2066-9311-48BB-956D-E3349A84B704} - System32\Tasks\{F3CFA133-48C9-4C44-BA96-644AE4A3B838} => pcalua.exe -a "C:\Users\Jasmine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\064TQC54\Freewarea_Installer.exe" -d C:\Users\Jasmine\Desktop
Task: {762BE73C-452E-45EC-BAF5-83C47C8BFA14} - System32\Tasks\{BD299DBE-820E-4F54-8C3A-5BF13963FF13} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {7A7D7B29-98C9-4BE2-A189-4563540FA14F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {8E718EEA-A414-4B69-9008-85D06782DA33} - System32\Tasks\{D66ECE40-5A34-446D-B363-4DDE82B800F9} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.4.64.102/de/go/help.faq.installer?LastError=1638
Task: {943C5CCF-5D15-49EC-AA1E-10717A7EDFC3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {9843CEE6-E476-4F1F-A2D5-BCA59D7654D9} - System32\Tasks\{25018952-1340-4013-9EA6-8345A1290E06} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {99D4BBD5-0C7D-4F3E-90A6-3B47B64ADCB1} - System32\Tasks\{B0EAB067-B159-413F-A747-C632CD816CC9} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {9F34F92B-F604-4237-AF2B-4B266B733E89} - System32\Tasks\{71B12FF9-29D7-4AFF-9EA4-1A3B85140BD5} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.4.64.102/de/go/help.faq.installer?LastError=1638
Task: {A9A4EF2E-76EC-468F-979F-247ABE198638} - System32\Tasks\{7D103EDF-43A6-44A7-AF94-9FD79923398D} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.21.0.104/de/go/help.faq.installer?LastError=1638
Task: {B240998E-64EA-4E40-8FC9-69EC90CF0CBB} - System32\Tasks\{33015C40-13EE-4921-8D75-784A5785E03E} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/go/help.faq.installer?LastError=1638
Task: {D0CE5626-4B58-4076-B7D4-5DA87E8498EF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-838575733-3782424441-3606765584-1001UA => C:\Users\Jasmine\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-02] (Google Inc.)
Task: {E0802AEC-3BDD-4623-90F3-CCB372223DDA} - System32\Tasks\{54E9CC1C-D0BD-4564-9A37-5EC7FE9FC375} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.6.85.105/de/go/help.faq.installer?LastError=1638
Task: {EC800062-7C44-4D4C-B398-0B2A83C8A9C5} - System32\Tasks\AdobeAAMUpdater-1.0-Jasmine-PC-Jasmine => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15] (Adobe Systems Incorporated)
Task: {ED5F8934-F028-4279-9B9B-069106866B7E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2009-11-19 03:34 - 2009-11-19 03:34 - 00022016 _____ () C:\windows\System32\suge1l6.dll
2013-09-14 08:25 - 2013-09-14 08:25 - 00076888 _____ () C:\windows\SysWOW64\PnkBstrA.exe
2009-11-03 16:03 - 2009-11-03 16:03 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-09-16 16:02 - 2010-09-16 16:02 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-06-03 19:59 - 2009-06-03 19:59 - 00619816 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll
2009-06-03 19:59 - 2009-06-03 19:59 - 00013096 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll
2016-12-14 21:21 - 2016-12-08 08:29 - 01829208 _____ () C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 21:21 - 2016-12-08 08:29 - 00085848 _____ () C:\Users\Jasmine\AppData\Local\Google\Chrome\Application\55.0.2883.87\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Jasmine\Marvel Avengers.avi:TOC.WMV [130]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-838575733-3782424441-3606765584-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jasmine\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\Jasmine\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: Healthcare => C:\Program Files\Lenovo\HealthCare\HealthCare.exe /hide
MSCONFIG\startupreg: jmekey => C:\Program Files (x86)\jmesoft\hotkey.exe
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Unattend0000000001{BFA3D12B-66DD-4617-923A-E864BC7D20B5} => C:\Windows\test.bat
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{280B5E73-6E7B-4CA4-A1D8-5901009BE093}] => C:\Program Files (x86)\Common Files\Mcafee\MNA\McNaSvc.exe
FirewallRules: [{7996DEA3-6EA0-4F35-9E3C-0A4B4CFF9037}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{9C519F40-0F32-4514-ADFD-2C56463592C6}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CE25D13D-F92B-4A7B-88F5-AC5BB82C8F08}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{F203D1EF-F68E-458D-9F42-AF83FC7499D4}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{BE610487-9F01-47BE-B336-E80A5CB49DB0}] => C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{9E44C8F0-F300-4A0F-82E7-5488797EC103}] => C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{F7776F42-DCF5-4BBC-8097-7B68246FA4D5}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{946E056D-1709-4939-B1D7-8F3DA726DFEF}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D1E1C5FB-06A8-4C79-BE66-2C77EA171912}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{20DB0A9D-8CE5-4B61-BF8B-823D76E9FDAD}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{92814C2F-DD0C-48C9-9F23-DF6D9161D144}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C02EEAB8-3214-45DF-8DCE-799096E40AB2}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{0FF2E33B-CA39-4584-8D7E-11BFD6A51689}C:\users\jasmine\documents\infestation survivor stories\infestation.exe] => C:\users\jasmine\documents\infestation survivor stories\infestation.exe
FirewallRules: [UDP Query User{7CFE69F4-FA9D-41E8-A045-397A97E04FAA}C:\users\jasmine\documents\infestation survivor stories\infestation.exe] => C:\users\jasmine\documents\infestation survivor stories\infestation.exe
FirewallRules: [TCP Query User{02DA6AD4-2A06-4407-97AB-7D85C6BBA35E}C:\program files (x86)\java\jre7\bin\javaw.exe] => C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3384FEAB-35CF-4F0F-A003-FEE4DC176F36}C:\program files (x86)\java\jre7\bin\javaw.exe] => C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{37954A3C-CCCE-4EBD-866C-8FC93CFF9909}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{3E03A35A-D30D-4C46-A1B6-E4C2A3B888FB}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{4A6C057F-7B93-4268-855F-387F09306227}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{F7201157-93B6-4E48-BC5B-077773E0FA73}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{8DAA0E4A-C027-4E55-9F6F-9BC9D5357745}] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{A32CDB6D-F828-4A00-8EFA-D87564828F08}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{062433F0-677F-44C3-B763-00838845964D}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{48DDC43F-1C34-4174-98A1-F2B8FE4EC08E}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{18A3508C-E06A-41D3-9D69-06050C9FEB00}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{0DA783BF-13F7-4D0B-A245-C2CA9F8FACB5}] => C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{F0E7A99C-762D-49F6-AD8D-28CD3968B9C9}] => C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{F4DE5B61-82C4-43E0-9543-C5BBA7DBF6B6}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{4CB86A66-6A34-4982-A46C-2363C74770DE}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [{26CFC839-2056-4A6B-96A8-9ED5935B5653}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{B65AF496-0F8A-49A4-A6BD-A387C24362BC}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{35C327E8-0478-4CF5-BE47-6D97AA757553}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{9D457228-416D-4E94-9CE7-6D3608AC1437}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{F4E1B68F-5FAF-475E-9F76-1011B794F03D}] => C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{729317B7-1313-4C3D-84B3-26656A4D82E9}] => C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{CB85EC59-F64F-4D96-BDE9-C46D7FF5F7C1}] => C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{25934E66-B424-4866-B317-905800EFCBC3}] => C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{C83FA7D5-43AF-4D0A-85EF-1E29F1BF7752}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{A7A63C50-1D33-434B-8294-42692C41EE79}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{BDBA1F84-561A-4F3A-A25C-1AF416CC2636}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{49B8B897-7820-4FAC-8106-E8BC6010B05A}] => C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{AD9F43DA-B6E8-4463-838C-3D874AF38608}] => C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{0878526A-D4C9-4B4D-BED5-CEAA5736CF18}] => C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{6B1D0BDF-1569-43F6-BC6A-00386E908CC8}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{88EFF28E-B98B-419B-B13B-E2460B57C3F7}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{ABD0BDE9-347A-4C5A-9F40-8CD9CD059534}] => C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5910D7B2-D7FA-43AA-A18F-A1F607E523BE}] => C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BECAB7E6-A831-422F-9B9E-D9E8063349C4}] => C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{80EB1D0B-34A4-4D19-BF95-1CDD9F615946}] => C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{DD289E92-A81F-4567-A8E0-D259F2AB1ACF}] => C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{FCA7522C-A16A-4146-A24E-F55B606E02E2}] => C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{562F7EBB-E783-4CDB-B65C-B329430D9B76}] => C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{2FE857D8-8174-4D98-8B25-A7745AAF3388}] => C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{F1348015-6C61-4DE8-BAB7-79CB488E05BB}] => C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{AFE03D45-52B2-42FD-A59B-7EA733D4EFFD}] => C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{6ECFABF5-8EBC-44D7-A12A-DAD0434DD543}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{33E8D20A-0CF6-47A6-A147-AF8B396A638B}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{08A12901-07FA-453D-A7F9-0A6EB026873A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{5B147C98-4930-4D12-AF95-D8C1CFAA53D3}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{A4DF9794-06CE-484B-8BEC-67E139D15FDF}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{391F0565-F7A8-46C9-A00F-E287B4D9D806}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{78F8E367-B8BA-491C-ADBB-23690DCD946E}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{CF2D92BB-5BEE-4F1D-96D1-678C74CB281C}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{33BC1278-FCB5-4937-B8FC-24B9CF60EA48}] => D:\FSetup.exe
FirewallRules: [{FF25C315-CCD0-4294-B0A5-491A24CD1FB7}] => D:\FSetup.exe
FirewallRules: [{500396A1-11D1-4341-A74C-87BB9C066BE7}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{0F24371E-CBA1-4504-BEF0-16B93DC34F4A}] => C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{88B26F34-A730-4266-BB46-62FE5D1418B3}] => C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{EDDD842E-E9A6-4723-9799-D36FB5BB8668}] => C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{DDF13D5A-507C-4936-9A94-FFE676BBFD83}] => C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{2FE68A46-7A1A-4F14-A690-8C3F82F89E36}] => C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{76732ED2-5652-4AFB-A265-32A04B333463}] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{F7AD4853-04B4-41B4-8C94-F2A3C58CD42D}] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{19D2DCA2-3060-4B52-8B43-FFA28A9B6333}] => C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{C3F1F396-1829-44CE-B8C9-D0BF081613B1}] => C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/11/2017 11:25:53 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\servicing\TrustedInstaller.exe; Beschreibung = Windows Modules Installer; Fehler = 0x80070422).
Error: (01/11/2017 11:23:50 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).
Error: (01/11/2017 10:56:16 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Jasmine\AppData\Local\Temp\jrt\CreateRestorePoint.exe "JRT Pre-Junkware Removal"; Beschreibung = JRT Pre-Junkware Removal; Fehler = 0x80070422).
Error: (01/11/2017 09:57:39 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/11/2017 12:23:15 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/10/2017 10:32:23 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Jasmine\Desktop\mbar\mbar.exe ; Beschreibung = Malwarebytes Anti-Rootkit Restore Point; Fehler = 0x80070422).
Error: (01/10/2017 10:32:23 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Jasmine\Desktop\mbar\mbar.exe ; Beschreibung = Malwarebytes Anti-Rootkit Restore Point; Fehler = 0x80070422).
Error: (01/10/2017 09:31:00 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Error: (01/10/2017 08:22:58 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).
Error: (01/09/2017 12:51:39 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x80070422).
Systemfehler:
=============
Error: (01/11/2017 12:19:28 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/11/2017 12:19:28 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/11/2017 12:19:27 PM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
Error: (01/11/2017 12:19:26 PM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
Error: (01/11/2017 12:19:26 PM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
Error: (01/11/2017 11:23:35 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{F9717507-6651-4EDB-BFF7-AE615179BCCF}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (01/11/2017 11:23:34 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{3EB3C877-1F16-487C-9050-104DBCD66683}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (01/11/2017 08:59:18 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (01/11/2017 08:59:18 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (01/11/2017 08:59:16 AM) (Source: atikmdag) (EventID: 10269) (User: )
Description: EDID contain an error in the descriptor field
==================== Speicherinformationen ===========================
Prozessor: Pentium(R) Dual-Core CPU E5500 @ 2.80GHz
Prozentuale Nutzung des RAM: 55%
Installierter physikalischer RAM: 2047.24 MB
Verfügbarer physikalischer RAM: 913.22 MB
Summe virtueller Speicher: 4094.48 MB
Verfügbarer virtueller Speicher: 2462.31 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:440.59 GB) (Free:324.67 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3F0C8A1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=440.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)
==================== Ende von Addition.txt ============================
Reimage geöffnet, oder aber eine zufällige Seite. Vorhin Otto.de |
|
| Themen zu Hartnäckiger Virus - Reimage? |
| adwcleaner, eingeblendet, einloggen, erfolg, hartnäckiger, hilfe, leicht, liebe, malwarebytes, mausklick, namens, nervig, neuer, passwort, reimage, schei, seite, sitze, tab, virus, werbe-popups, willkürlich, windows, windows 7, öffnet |
Linear-Darstellung
