| |
| |||||||
Log-Analyse und Auswertung: ADW und FRST Log-File AuswertungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
15.05.2017, 10:42
| #1 |
 |  ADW und FRST Log-File Auswertung Guten Tag Trojaner Board Forum, leider wurde automatisch von meinem pc Etwas installiert während ich abwesend war. ich habe adwarecleaner laufen lassen, danach einen MwBytetest gefundene Ziele gelöscht, jetzt habe ich einen FRST Suchlauf gemacht. Ich hänge euch einmal die Logdaten von ADW-Cleaner, MwB und FRST hier ein! Code:
ATTFilter # AdwCleaner v6.046[/U][/B] - Bericht erstellt am 15/05/2017 um 02:19:36
# Aktualisiert am 24/04/2017 von Malwarebytes
# Datenbank : 2017-05-14.2 [Server]
# Betriebssystem : Windows 10 Pro (X64)
# Benutzername : - DESKTOP-0EEJ8BI
# Gestartet von : C:\Users\\Downloads\AdwCleaner_6.046.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
[-] Dienst gelöscht: AdvancedSystemCareService10
***** [ Ordner ] *****
[-] Ordner gelöscht: C:\Users\\AppData\LocalLow\IObit\Advanced SystemCare
[-] Ordner gelöscht: C:\Users\\AppData\Roaming\IObit\Advanced SystemCare
[-] Ordner gelöscht: C:\Program Files\WinZip Smart Monitor
[-] Ordner gelöscht: C:\ProgramData\TweakBit
[-] Ordner gelöscht: C:\ProgramData\WinZip\WinZip Smart Monitor
[-] Ordner gelöscht: C:\ProgramData\IObit\ASCDownloader
[-] Ordner gelöscht: C:\ProgramData\IObit\Advanced SystemCare
[-] Ordner gelöscht: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
[#] Ordner mit Neustart gelöscht: C:\Program Files (x86)\IObit\Advanced SystemCare
[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
[-] Ordner gelöscht: C:\Users\\AppData\Local\Temp\DriverFinder
[#] Ordner mit Neustart gelöscht: C:\Users\\AppData\Local\Temp\driverfinder
[-] Ordner gelöscht: C:\Users\\AppData\Local\Temp\DMR
***** [ Dateien ] *****
[#] Datei gelöscht: C:\Users\\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 10.lnk
[-] Datei gelöscht: C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
[-] Aufgabe gelöscht: ASC10_PerformanceMonitor
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\TWEAKBIT
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Auslogics
[-] Schlüssel gelöscht: HKLM\SOFTWARE\IOBIT\ASC
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com
[-] Wert gelöscht: HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\Software\Microsoft\Windows\CurrentVersion\Run [Advanced SystemCare 10]
[#] Wert mit Neustart gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Advanced SystemCare 10]
[#] Wert mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Advanced SystemCare 10]
[-] Schlüssel gelöscht: HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
[-] Schlüssel gelöscht: HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
[-] Schlüssel gelöscht: HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [5191 Bytes] - [15/05/2017 02:19:36]
C:\AdwCleaner\AdwCleaner[S0].txt - [5201 Bytes] - [15/05/2017 02:17:46]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [5337 Bytes] ##########
MalwarebyteLogfiles sind zwar da, aber steht nichts drin... recht komisch. Frst Logfile Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2017 durchgeführt von (Administrator) auf DESKTOP-0EEJ8BI (15-05-2017 11:19:49) Gestartet von C:\Users\\Downloads Geladene Profile: (Verfügbare Profile: defaultuser0 & ) Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Edge) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.19\AsusFanControlService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe () C:\Program Files\Trust GXT 363 headset\CPL\FaceLift_x64.exe (Valve Corporation) D:\Steam\Steam.exe (Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (TeamSpeak Systems GmbH) D:\TeamSpeak3\ts3client_win64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files (x86)\ASUS\AI Suite III\AsusMiniBar.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9197568 2017-05-13] (Realtek Semiconductor) HKLM\...\Run: [EasySettingBox] => C:\Program Files (x86)\Samsung\Easy Setting Box\EasySettingBox.exe [578048 2015-09-21] () HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17406072 2017-01-24] (Logitech Inc.) HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [1878016 2017-04-21] (WinZip) HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124360 2017-04-21] (WinZip Computing, S.L.) HKLM\...\Run: [Cm108BSound] => C:\Program Files\Trust GXT 363 headset\CPL\FaceLift_x64.exe [2359296 2014-11-10] () HKLM-x32\...\Run: [EasySettingBox] => C:\Program Files (x86)\Samsung\Easy Setting Box\EasySettingBox.exe*************************************************************** [578048 2015-09-21] () HKLM-x32\...\Run: [Inno3D] => C:\Program Files (x86)\Inno3D\Inno3D.exe [18286592 2016-12-22] (InnoVISION Multimedia Ltd.) HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe [17524944 2017-03-30] (Corsair Components, Inc.) HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.) HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\...\Run: [Steam] => D:\Steam\steam.exe [3019552 2017-04-26] (Valve Corporation) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.254.254 Tcpip\..\Interfaces\{b1c018dd-de8e-4062-9587-1c6ef9f515b3}: [DhcpNameServer] 192.168.254.254 Internet Explorer: ================== Edge: ====== Edge Extension: (AdBlock) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.11.0.0_neutral__c1wakc4j0nefm [2017-05-13] FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll [2017-05-11] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll [2017-05-11] () FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-13] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-13] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\\AppData\Local\Google\Chrome\User Data\Default [2017-05-15] CHR Extension: (Google Präsentationen) - C:\Users\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-04-28] CHR Extension: (Google Docs) - C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-04-28] CHR Extension: (Google Drive) - C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-28] CHR Extension: (YouTube) - C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-28] CHR Extension: (Google Tabellen) - C:\Users\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-04-28] CHR Extension: (Google Docs Offline) - C:\Users\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-28] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-28] CHR Extension: (Google Mail) - C:\Users\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-28] CHR Extension: (Chrome Media Router) - C:\Users\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-06-05] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2015-06-05] (ASUSTeK Computer Inc.) R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2015-09-16] () [Datei ist nicht signiert] R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.19\AsusFanControlService.exe [396088 2015-09-17] (ASUSTeK Computer Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1517576 2017-04-26] () S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [382504 2017-04-19] (EasyAntiCheat Ltd) U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-04-17] (Hi-Rez Studios) [Datei ist nicht signiert] R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2016-09-20] (Nero AG) R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [505856 2017-02-10] (Intel Corporation) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-01-24] (Logitech Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-05-02] (NVIDIA Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert] R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75136 2017-05-10] () S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 S2 WinZip Smart Monitor Service; "C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-06-05] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] () R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation) R3 CMUAC; C:\WINDOWS\system32\DRIVERS\CMUAC.sys [613888 2014-10-09] (C-MEDIA) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [43000 2017-01-31] (Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [27640 2017-01-31] (Corsair) R3 e1rexpress; C:\WINDOWS\system32\DRIVERS\e1r65x64.sys [540112 2016-07-30] (Intel Corporation) S3 EasyAntiCheatSys; C:\WINDOWS\system32\drivers\EasyAntiCheat.sys [629800 2017-05-14] () S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [54736 2017-05-13] () R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-03-26] (REALiX(tm)) R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2015-09-16] (ASUSTeK Computer Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-01-24] (Logitech Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2017-05-15] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a2b0acab06663645\nvlddmkm.sys [14456944 2017-05-02] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [59448 2017-04-20] (NVIDIA Corporation) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (MBB) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-15 11:19 - 2017-05-15 11:20 - 00015827 _____ C:\Users\Downloads\FRST.txt 2017-05-15 11:19 - 2017-05-15 11:19 - 00000000 ____D C:\FRST 2017-05-15 11:18 - 2017-05-15 11:19 - 02429952 _____ (Farbar) C:\Users\Downloads\FRST64.exe 2017-05-15 02:30 - 2017-05-15 11:06 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-05-15 02:29 - 2017-05-15 02:29 - 00001175 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2017-05-15 02:29 - 2017-05-15 02:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2017-05-15 02:29 - 2017-05-15 02:29 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-05-15 02:29 - 2017-05-15 02:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2017-05-15 02:29 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2017-05-15 02:29 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2017-05-15 02:29 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-05-15 02:24 - 2017-05-15 02:28 - 22851472 _____ (Malwarebytes ) C:\Users\Downloads\mbam-setup-2.2.1.1043.exe 2017-05-15 02:16 - 2017-05-15 02:19 - 00000000 ____D C:\AdwCleaner 2017-05-15 02:15 - 2017-05-15 02:16 - 04102600 _____ C:\Users\Downloads\AdwCleaner_6.046.exe 2017-05-15 01:58 - 2017-05-15 01:58 - 00000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A} 2017-05-15 01:57 - 2017-05-15 01:58 - 00002926 _____ C:\WINDOWS\System32\Tasks 2017-05-15 01:57 - 2017-05-15 01:57 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled 2017-05-14 20:55 - 2017-05-01 22:51 - 06437312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-05-14 20:55 - 2017-05-01 22:51 - 02479552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-05-14 20:55 - 2017-05-01 22:51 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-05-14 20:55 - 2017-05-01 22:51 - 00392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-05-14 20:55 - 2017-05-01 22:51 - 00069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-05-14 20:55 - 2017-05-01 22:14 - 00134592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-05-14 20:54 - 2017-05-02 00:38 - 00513144 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2017-05-14 20:54 - 2017-05-02 00:38 - 00418936 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 40201848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 35388864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 35281528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 28623480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 11056456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 11024384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 10547440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 09245744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 09014792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 08805232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 04092088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 03792320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 03247736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 01988032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438205.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 01589696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438205.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 01278528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 01054144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00995736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00991168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00960960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00911992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00821184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00776048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00688968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00651200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00618744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00612088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00609912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00577728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00499320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00218040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2017-05-14 20:53 - 2017-05-02 00:38 - 00046008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2017-05-14 20:53 - 2017-05-02 00:38 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb 2017-05-14 20:51 - 2017-05-14 20:55 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-05-14 20:14 - 2017-05-14 20:48 - 437877496 _____ (NVIDIA Corporation) C:\Users\Downloads\382.05-desktop-win10-64bit-international-whql (2).exe 2017-05-14 17:21 - 2017-05-14 17:23 - 00000000 ____D C:\Users\AppData\Local\FreeReign 2017-05-14 17:21 - 2017-05-14 17:21 - 00000000 ____D C:\Users\Documents\FreeReign 2017-05-14 17:21 - 2017-05-14 17:21 - 00000000 ____D C:\Users\AppData\Local\CrashRpt 2017-05-14 16:09 - 2017-04-20 03:59 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-05-14 16:09 - 2017-04-20 03:59 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-05-14 14:22 - 2017-05-14 16:03 - 390810906 _____ (NVIDIA Corporation) C:\Users\Downloads\382.05-desktop-win10-64bit-international-whql (1).exe 2017-05-14 14:04 - 2017-05-14 14:21 - 14670855 _____ (NVIDIA Corporation) C:\Users\Downloads\382.05-desktop-win10-64bit-international-whql.exe 2017-05-14 02:01 - 2017-05-14 02:01 - 00001854 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Lucky Emperor Casino.lnk 2017-05-14 02:01 - 2017-05-14 02:01 - 00001848 _____ C:\Users\Public\Desktop\Lucky Emperor Casino.lnk 2017-05-14 02:01 - 2017-05-14 02:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lucky Emperor Casino 2017-05-13 21:01 - 2017-05-13 21:01 - 00000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-2002056414-2650981169-1809370040-1001 2017-05-13 18:44 - 2017-05-14 12:57 - 00000445 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2017-05-13 16:35 - 2017-05-15 11:13 - 00000000 _____ C:\WINDOWS\Path.idx 2017-05-13 16:30 - 2017-05-15 11:08 - 01048576 _____ C:\WINDOWS\PE_Rom.dll 2017-05-13 16:21 - 2016-04-15 03:24 - 08390656 _____ C:\Users\Downloads\CROSSBLADE-RANGER-ASUS-1802.CAP 2017-05-13 16:09 - 2017-05-13 16:09 - 00000000 ____D C:\Program Files\AMD 2017-05-13 16:09 - 2017-05-13 16:09 - 00000000 ____D C:\CIMTEMP 2017-05-13 16:08 - 2017-05-13 16:08 - 00000000 _____ C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_CROSSBLADE RANGER.alu 2017-05-13 16:05 - 2017-05-13 16:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2017-05-13 16:03 - 2017-05-13 16:05 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS 2017-05-13 16:03 - 2014-02-24 11:49 - 00014464 _____ C:\WINDOWS\SysWOW64\Drivers\AsUpIO.sys 2017-05-13 15:56 - 2017-05-13 15:56 - 00037507 _____ C:\Users\Downloads\BUPDATER_VER131 (1).rar 2017-05-13 15:54 - 2017-05-13 15:54 - 05412753 _____ C:\Users\Downloads\CROSSBLADE-RANGER-ASUS-1802.zip 2017-05-13 15:54 - 2017-05-13 15:54 - 00037507 _____ C:\Users\Downloads\BUPDATER_VER131.rar 2017-05-13 15:45 - 2017-05-15 01:57 - 00000000 ____D C:\Program Files (x86)\IObit 2017-05-13 15:45 - 2017-05-15 01:52 - 00002369 _____ C:\Users\Public\Desktop\Driver Booster 4.lnk 2017-05-13 15:45 - 2017-05-13 15:45 - 00003400 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler 2017-05-13 15:45 - 2017-05-13 15:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 4 2017-05-13 15:09 - 2017-05-13 15:09 - 00002340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-05-13 15:09 - 2017-05-13 15:09 - 00002328 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-05-13 15:03 - 2017-05-13 15:03 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-05-13 15:03 - 2017-05-13 15:03 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-05-13 13:28 - 2017-05-13 13:28 - 00001128 _____ C:\WINDOWS\system32\.crusader 2017-05-13 13:16 - 2017-05-13 13:29 - 00054736 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys 2017-05-13 13:14 - 2017-05-14 16:13 - 00000000 ____D C:\WINDOWS\LastGood 2017-05-13 13:14 - 2017-05-13 13:14 - 03203584 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2017-05-13 13:14 - 2017-05-13 13:14 - 02201600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2017-05-13 13:14 - 2017-05-13 13:14 - 01353824 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2017-05-13 13:14 - 2017-05-13 13:14 - 00689880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2017-05-13 13:14 - 2017-05-13 13:14 - 00343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2017-05-13 13:13 - 2017-05-13 13:13 - 72520712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2017-05-13 13:13 - 2017-05-13 13:13 - 09124224 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2017-05-13 13:13 - 2017-05-13 13:13 - 03014144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2017-05-13 12:46 - 2017-05-13 13:06 - 00000000 ____D C:\$SysReset 2017-05-13 12:09 - 2017-05-13 13:27 - 00000000 ____D C:\ProgramData\HitmanPro 2017-05-13 12:09 - 2017-05-13 12:09 - 00000000 ____D C:\Program Files\HitmanPro 2017-05-13 12:03 - 2017-05-13 12:04 - 14579723 _____ C:\Users\Downloads\HitmanPro_3720.zip 2017-05-13 11:23 - 2017-05-13 11:28 - 44243991 _____ C:\Users\Downloads\Auto-Tune_EFX_3_VST3_64+32-bit_v3.0.1d.zip 2017-05-13 02:45 - 2017-05-13 11:42 - 00000000 ____D C:\ProgramData\Screaming Bee 2017-05-13 02:45 - 2017-05-13 11:42 - 00000000 ____D C:\Program Files (x86)\Screaming Bee 2017-05-13 02:45 - 2017-05-13 11:21 - 00000000 ____D C:\Users\AppData\Roaming\Screaming Bee 2017-05-13 00:24 - 2017-05-13 00:49 - 00906048 _____ C:\Users\Downloads\Nicht bestätigt 955672.crdownload 2017-05-13 00:03 - 2017-05-13 00:06 - 33244631 _____ C:\Users\Downloads\auto-tune_efx2_vst_pc_v2.0.1.zip 2017-05-12 23:48 - 2017-05-13 13:06 - 00000000 ____D C:\Users\AppData\Roaming\Audacity 2017-05-12 23:48 - 2017-05-13 13:06 - 00000000 ____D C:\Program Files (x86)\Audacity 2017-05-12 23:48 - 2017-05-12 23:48 - 00000000 ____D C:\Users\AppData\Local\Audacity 2017-05-12 23:44 - 2017-05-12 23:44 - 00197968 _____ C:\Users\Downloads\GSnapWin32.zip 2017-05-12 23:42 - 2017-05-12 23:42 - 00226149 _____ C:\Users\Downloads\autotalent_win.zip 2017-05-12 23:41 - 2017-05-12 23:41 - 00226089 _____ C:\Users\Downloads\GSnapWin64 (1).zip 2017-05-12 17:27 - 2017-05-12 17:30 - 36626786 _____ C:\Users\Downloads\Auto-Tune_8_VST_PC_v8.0.5.zip 2017-05-12 17:22 - 2017-05-12 17:22 - 00226089 _____ C:\Users\Downloads\GSnapWin64.zip 2017-05-12 17:13 - 2017-05-12 17:13 - 00549471 _____ C:\Users\Downloads\vac414demo.zip 2017-05-12 00:20 - 2017-05-12 00:20 - 00681788 _____ C:\WINDOWS\Minidump\051217-20750-01.dmp 2017-05-11 21:38 - 2017-05-11 21:38 - 00001124 _____ C:\Users\Desktop\CBS.log - Verknüpfung.lnk 2017-05-11 21:34 - 2017-05-11 21:38 - 00365052 _____ C:\Users\Desktop\sfcdetails.txt 2017-05-11 21:16 - 2017-05-11 21:16 - 00000000 ____D C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z 2017-05-11 21:16 - 2017-05-11 21:16 - 00000000 ____D C:\Program Files (x86)\GPU-Z 2017-05-11 21:15 - 2017-05-11 21:16 - 03262248 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Downloads\GPU-Z_ASUS_ROG_1.20.0.exe 2017-05-11 19:53 - 2017-05-11 19:53 - 00000000 ____D C:\Users\AppData\LocalLow\Temp 2017-05-11 17:10 - 2017-05-15 01:23 - 00000000 ____D C:\Users\Documents\888poker 2017-05-11 17:10 - 2017-05-11 20:42 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-05-11 17:10 - 2017-05-11 17:10 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-05-11 17:10 - 2017-05-11 17:10 - 00002058 _____ C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\888poker.lnk 2017-05-11 17:10 - 2017-05-11 17:10 - 00002034 _____ C:\Users\Desktop\888poker.lnk 2017-05-11 17:10 - 2017-05-11 17:10 - 00000000 ____D C:\Users\AppData\Roaming\pacificpoker 2017-05-11 17:10 - 2017-05-11 17:10 - 00000000 ____D C:\Users\AppData\Roaming\InstallShield Installation Information 2017-05-11 17:10 - 2017-05-11 17:10 - 00000000 ____D C:\Program Files (x86)\PacificPoker 2017-05-11 16:52 - 2017-05-11 17:09 - 00000000 ____D C:\Users\Documents\PokerInstallerLogs 2017-05-11 16:51 - 2017-05-11 16:52 - 00641496 _____ (Random-Logic) C:\Users\Downloads\888poker_installer.exe 2017-05-11 11:49 - 2017-05-11 11:50 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2017-05-11 11:48 - 2017-05-02 00:38 - 03607464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-05-11 11:48 - 2017-04-20 03:59 - 01600560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2017-05-11 11:46 - 2017-05-11 11:46 - 00000000 ____D C:\NVIDIA 2017-05-11 11:38 - 2017-04-28 18:43 - 01171888 _____ (Igor Pavlov) C:\Users\Desktop\DDU v17.0.6.4.exe 2017-05-11 11:36 - 2017-05-11 11:36 - 01080706 _____ C:\Users\Downloads\[Guru3D.com]-DDU.zip 2017-05-11 11:29 - 2017-05-12 00:20 - 00000000 ____D C:\WINDOWS\Minidump 2017-05-11 11:29 - 2017-05-11 11:30 - 00596468 _____ C:\WINDOWS\Minidump\051117-27656-01.dmp 2017-05-10 12:35 - 2017-05-10 12:35 - 00189248 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe 2017-05-10 12:35 - 2017-05-10 12:35 - 00075136 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe 2017-05-10 12:35 - 2017-05-10 12:35 - 00000000 ____D C:\Users\Documents\Assassin's Creed III 2017-05-09 13:22 - 2017-05-09 17:34 - 405596328 _____ (NVIDIA Corporation) C:\Users\Downloads\378.92-desktop-win10-64bit-international-whql (2).exe 2017-05-09 13:21 - 2017-05-09 13:21 - 26559663 _____ (NVIDIA Corporation) C:\Users\Downloads\Nicht bestätigt 837516.crdownload 2017-05-05 21:38 - 2017-05-05 21:38 - 00003296 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-05-05 21:38 - 2017-05-05 21:38 - 00002441 _____ C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-05-05 21:37 - 2017-05-05 21:37 - 00000000 ____D C:\Users\AppData\Local\DBG 2017-05-05 21:36 - 2017-05-05 21:36 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-05-05 21:34 - 2017-05-05 21:34 - 00000020 ___SH C:\Users\ntuser.ini 2017-05-05 20:22 - 2017-05-05 20:22 - 00000000 ____D C:\Windows.old 2017-05-05 20:21 - 2017-05-05 20:21 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 20506112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 08321440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 08246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 06761048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02444184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-05-05 20:21 - 2017-05-05 20:21 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-05-05 20:21 - 2017-05-05 20:21 - 01885696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01411640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01323880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01074688 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00986592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2017-05-05 20:21 - 2017-05-05 20:21 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2017-05-05 20:21 - 2017-05-05 20:21 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00387416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-05-05 20:21 - 2017-05-05 20:21 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00206232 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-05-05 20:21 - 2017-05-05 20:21 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin 2017-05-05 20:21 - 2017-05-05 20:21 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-05-05 20:21 - 2017-05-05 20:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-05-05 20:18 - 2017-05-05 20:18 - 00543648 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-05-05 20:18 - 2017-05-05 20:18 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-05-05 20:18 - 2017-05-05 20:18 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-05-05 20:18 - 2017-05-05 19:25 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-05-05 20:16 - 2017-05-05 20:16 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-05-05 20:16 - 2017-05-05 20:16 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-05-05 20:16 - 2017-05-05 20:16 - 00000000 ____D C:\Program Files\MSBuild 2017-05-05 20:16 - 2017-05-05 20:16 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-05-05 20:16 - 2017-05-05 20:16 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-05-05 20:16 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-05-05 20:16 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-05-05 20:16 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-05-05 20:16 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-05-05 20:16 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-05-05 20:16 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-05-05 20:09 - 2017-05-05 20:09 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER 2017-05-05 19:45 - 2017-05-05 19:45 - 00000000 ____D C:\ProgramData\USOShared 2017-05-05 19:42 - 2017-05-05 19:45 - 00011433 _____ C:\WINDOWS\diagwrn.xml 2017-05-05 19:42 - 2017-05-05 19:45 - 00011433 _____ C:\WINDOWS\diagerr.xml 2017-05-05 19:40 - 2017-05-15 11:10 - 02428276 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-05-05 19:39 - 2017-05-15 11:04 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-05-05 19:39 - 2017-05-14 20:55 - 00003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-05 19:39 - 2017-05-14 20:55 - 00003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-05 19:39 - 2017-05-14 20:55 - 00003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-05 19:39 - 2017-05-14 20:55 - 00003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-05 19:39 - 2017-05-14 20:55 - 00003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-05 19:39 - 2017-05-05 19:39 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-05-05 19:39 - 2017-05-05 19:39 - 00002968 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-05 19:39 - 2017-05-05 19:39 - 00002572 _____ C:\WINDOWS\System32\Tasks\WinZip Update Notifier 2017-05-05 19:38 - 2017-05-15 11:10 - 00003050 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC 2017-05-05 19:32 - 2017-05-05 19:32 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-05-05 19:30 - 2017-05-05 19:34 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-05-05 19:28 - 2017-05-15 02:19 - 00000000 ____D C:\Users 2017-05-05 19:28 - 2017-05-13 13:07 - 00000000 ____D C:\Users\defaultuser0 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Vorlagen 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Startmenü 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Netzwerkumgebung 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Lokale Einstellungen 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Eigene Dateien 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Druckumgebung 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Documents\Eigene Videos 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Documents\Eigene Musik 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Documents\Eigene Bilder 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\AppData\Local\Verlauf 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\AppData\Local\Anwendungsdaten 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\Anwendungsdaten 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Vorlagen 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Startmenü 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Netzwerkumgebung 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Lokale Einstellungen 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Eigene Dateien 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Druckumgebung 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Videos 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Musik 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Eigene Bilder 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Verlauf 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Anwendungsdaten 2017-05-05 19:28 - 2017-05-05 19:28 - 00000000 _SHDL C:\Users\defaultuser0\Anwendungsdaten 2017-05-05 19:28 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-05-05 19:27 - 2017-05-15 11:04 - 00000000 ____D C:\ProgramData\NVIDIA 2017-05-05 19:27 - 2017-05-14 20:55 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-05-05 19:27 - 2017-05-14 20:55 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-05-05 19:27 - 2017-05-01 22:52 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-05-05 19:27 - 2017-05-01 22:51 - 00548800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-05-05 19:27 - 2017-05-01 22:51 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-05-05 19:27 - 2017-04-25 23:11 - 07944687 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-05-05 19:26 - 2017-05-13 13:14 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-05-05 19:26 - 2017-05-05 19:26 - 00000000 ____D C:\Program Files\Realtek 2017-05-05 19:25 - 2017-05-15 11:03 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-05-05 19:25 - 2017-05-08 12:54 - 00312944 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-05-05 18:09 - 2017-05-05 21:34 - 00000000 ___DC C:\WINDOWS\Panther 2017-05-05 18:09 - 2017-05-05 19:03 - 00000000 ___HD C:\$WINDOWS.~BT 2017-05-05 18:07 - 2017-05-05 18:09 - 00000036 _____ C:\WINDOWS\progress.ini 2017-05-05 14:47 - 2017-05-05 21:33 - 00000000 ___HD C:\$GetCurrent 2017-05-05 14:46 - 2017-05-05 21:34 - 00000000 ____D C:\Windows10Upgrade 2017-05-05 14:46 - 2017-05-05 14:46 - 06385872 _____ (Microsoft Corporation) C:\Users\Downloads\Windows10Upgrade28085.exe 2017-05-05 14:46 - 2017-05-05 14:46 - 00000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10-Upgrade-Assistent.lnk 2017-05-05 14:46 - 2017-05-05 14:46 - 00000719 _____ C:\Users\Desktop\Windows 10-Upgrade-Assistent.lnk 2017-05-05 14:16 - 2017-05-05 14:16 - 06266850 _____ C:\Users\Desktop\SysteminfoForNvidia.nfo 2017-05-04 00:50 - 2017-05-04 00:51 - 05958864 _____ (eVenture Limited ) C:\Users\Downloads\Hide.me-Setup-1.2.12.exe 2017-05-04 00:08 - 2017-05-04 00:28 - 00000600 _____ C:\Users\PUTTY.RND 2017-05-04 00:07 - 2017-05-04 00:07 - 02569224 _____ C:\Users\Downloads\ultrasurf1603.zip 2017-05-04 00:02 - 2017-05-04 00:02 - 02351159 _____ C:\Users\Downloads\FreeHideIP-4.1.8.2.Setup.exe 2017-05-04 00:02 - 2017-05-04 00:02 - 00000000 ____D C:\Users\AppData\Roaming\FreeHideIP 2017-05-04 00:02 - 2017-05-04 00:02 - 00000000 ____D C:\ProgramData\FreeHideIP 2017-05-03 16:17 - 2017-05-03 16:48 - 436782552 _____ (NVIDIA Corporation) C:\Users\Downloads\381.89-desktop-win10-64bit-international-whql (1).exe 2017-05-02 22:00 - 2017-05-02 22:00 - 00001256 _____ C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk 2017-05-02 22:00 - 2017-05-02 22:00 - 00000000 ____D C:\Users\AppData\Local\UNP 2017-05-02 20:13 - 2017-05-13 13:06 - 00000000 ____D C:\ProgramData\FaceLift 2017-05-02 20:13 - 2017-05-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trust GXT 363 headset 2017-05-02 20:13 - 2017-05-02 20:13 - 00171361 _____ C:\WINDOWS\Cm6xxx.ini.cfl 2017-05-02 20:13 - 2017-05-02 20:13 - 00002083 _____ C:\Users\Desktop\Trust GXT 363 headset.lnk 2017-05-02 20:13 - 2017-05-02 20:13 - 00000548 _____ C:\WINDOWS\Cm6xxx.ini.imi 2017-05-02 20:13 - 2017-05-02 20:13 - 00000497 _____ C:\WINDOWS\system\Cm6xxx.ini 2017-05-02 20:13 - 2017-05-02 20:13 - 00000126 _____ C:\WINDOWS\system\Dlap.pfx 2017-05-02 20:13 - 2017-05-02 20:13 - 00000000 ____D C:\Program Files\Trust GXT 363 headset 2017-05-02 20:13 - 2015-09-14 10:26 - 00004115 _____ C:\WINDOWS\Cm6xxx.ini.cfg 2017-05-02 20:13 - 2015-03-10 10:33 - 00834048 _____ C:\WINDOWS\system32\Cmeau6620.exe 2017-05-02 20:13 - 2009-08-19 19:00 - 00359424 _____ C:\WINDOWS\system32\CmiInstallResAll64.dll 2017-05-02 20:13 - 2006-10-06 08:45 - 00524768 _____ (Microsoft Corporation) C:\WINDOWS\difxapi.dll 2017-05-02 20:12 - 2017-05-02 20:12 - 00000000 ____D C:\download 2017-05-02 20:12 - 2014-10-31 10:50 - 04542392 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMEFFECTAPO.dll 2017-05-02 20:12 - 2014-10-31 10:50 - 00693264 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMCPLEXT.dll 2017-05-02 20:12 - 2014-10-09 08:22 - 00613888 _____ (C-MEDIA) C:\WINDOWS\system32\Drivers\CMUAC.SYS 2017-05-02 20:09 - 2017-05-05 19:34 - 00000000 ____D C:\WINDOWS\system32\UNP 2017-05-02 20:09 - 2017-05-02 20:11 - 00000000 ____D C:\Program Files\UNP 2017-05-02 20:02 - 2017-05-02 20:11 - 22430944 _____ C:\Users\Downloads\20407_11_02.exe 2017-05-02 15:44 - 2017-05-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair Utility Engine 2017-05-02 15:44 - 2017-05-02 15:44 - 00001199 _____ C:\Users\Public\Desktop\Corsair Utility Engine.lnk 2017-05-02 15:44 - 2017-05-02 15:44 - 00000000 ____D C:\Program Files (x86)\Corsair 2017-05-02 15:07 - 2017-05-02 15:43 - 161615872 _____ C:\Users\Downloads\CorsairUtilityEngineSetup_2.12.66_release.msi 2017-05-02 15:06 - 2017-05-02 15:06 - 00812764 _____ C:\Users\Downloads\Corsair-VOID-Gaming-Headsets-Technical-Guide.pdf 2017-05-02 14:59 - 2017-05-15 01:51 - 00453880 _____ (ASMedia Technology Inc) C:\WINDOWS\system32\Drivers\asmtxhci.sys 2017-05-02 14:44 - 2017-05-02 14:44 - 00643406 _____ C:\Users\Downloads\Destroy-Windows-10-Spying.zip 2017-05-01 22:01 - 2017-05-01 22:01 - 02115252 _____ (SiSoftware ) C:\Users\Downloads\Nicht bestätigt 278003.crdownload 2017-05-01 21:40 - 2017-05-05 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2017-05-01 21:40 - 2017-05-01 21:40 - 00001179 _____ C:\Users\Desktop\EVEREST Home Edition.lnk 2017-05-01 21:40 - 2017-05-01 21:40 - 00000000 ____D C:\Program Files (x86)\Lavalys 2017-05-01 21:38 - 2017-05-01 21:40 - 04179293 _____ (Lavalys, Inc. ) C:\Users\Downloads\everesthome220.exe 2017-05-01 21:31 - 2017-05-01 21:31 - 00000000 ____D C:\Users\Desktop\hardware monitor 2017-05-01 21:30 - 2017-05-01 21:30 - 00514172 _____ C:\Users\Downloads\openhardwaremonitor-v0.8.0-beta.zip 2017-05-01 13:54 - 2017-05-01 13:54 - 01192632 _____ (Microsoft Corporation) C:\Users\Downloads\winsdksetup.exe 2017-05-01 13:52 - 2017-05-01 13:52 - 00998056 _____ (Microsoft Corporation) C:\Users\Downloads\sdksetup.exe 2017-05-01 01:54 - 2017-05-01 01:54 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-DESKTOP-0EEJ8BI-Windows-10-Pro-(64-bit).dat 2017-05-01 01:53 - 2017-05-01 01:53 - 00000000 ____D C:\RegBackup 2017-05-01 01:41 - 2017-05-01 01:41 - 00190803 _____ C:\WINDOWS\Tweaking.com - Windows Repair Setup Log.txt 2017-05-01 01:41 - 2017-05-01 01:41 - 00000000 ____D C:\Program Files (x86)\Tweaking.com 2017-05-01 01:40 - 2017-05-01 01:41 - 32090952 _____ (Tweaking.com) C:\Users\Downloads\tweaking.com_windows_repair_aio_setup.exe 2017-04-30 22:05 - 2017-05-01 21:30 - 00000000 ____D C:\Users\AppData\Local\WinZip 2017-04-30 22:05 - 2017-04-30 22:05 - 00111149 _____ C:\Users\Desktop\WinZip-Datei (neu).zip 2017-04-30 22:05 - 2017-04-30 22:05 - 00000000 _____ C:\Users\Desktop\WinZip Zipx-Datei (neu).zipx 2017-04-30 22:04 - 2017-05-15 02:19 - 00000000 ____D C:\ProgramData\WinZip 2017-04-30 22:04 - 2017-05-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.5 2017-04-30 22:04 - 2017-04-30 22:04 - 00002278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Update Benachrichtigungsdienst.lnk 2017-04-30 22:04 - 2017-04-30 22:04 - 00002227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip Hintergrund-Tools.lnk 2017-04-30 22:04 - 2017-04-30 22:04 - 00002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk 2017-04-30 22:04 - 2017-04-30 22:04 - 00002177 _____ C:\Users\Public\Desktop\WinZip.lnk 2017-04-30 22:04 - 2017-04-30 22:04 - 00000000 ____D C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.5 2017-04-30 22:04 - 2017-04-30 22:04 - 00000000 ____D C:\Program Files\WinZip 2017-04-30 21:56 - 2017-04-30 21:56 - 00763096 _____ (WinZip Computing, S.L.) C:\Users\Downloads\winzip21.exe 2017-04-30 21:56 - 2017-04-30 21:56 - 00000000 ____D C:\ProgramData\UniqueId 2017-04-30 21:54 - 2017-05-01 13:59 - 00000000 ____D C:\Users\Desktop\Neuer Ordner 2017-04-30 21:52 - 2017-04-30 21:52 - 00000020 _____ C:\Users\Desktop\WinRAR-Archiv (neu).rar 2017-04-30 21:33 - 2017-04-30 21:33 - 01496584 _____ C:\Users\Downloads\Microsoft Debugging Tools - CHIP-Installer.exe 2017-04-28 14:43 - 2017-04-20 03:59 - 01756728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2017-04-28 14:43 - 2017-04-20 03:59 - 01318968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2017-04-28 14:43 - 2017-04-20 03:59 - 00122936 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2017-04-28 14:42 - 2017-05-14 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-04-28 14:42 - 2017-05-02 00:38 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2017-04-28 14:39 - 2017-04-20 03:59 - 00059448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-04-28 13:59 - 2017-04-28 14:29 - 436782552 _____ (NVIDIA Corporation) C:\Users\Downloads\381.89-desktop-win10-64bit-international-whql.exe 2017-04-28 13:57 - 2017-05-15 02:11 - 00000000 ____D C:\Users\Desktop\ktm 2017-04-28 12:33 - 2016-12-14 04:37 - 150174684 _____ C:\Users\Desktop\pak01_075.vpk 2017-04-28 12:15 - 2016-03-24 12:57 - 110016396 _____ C:\Users\Desktop\pak01_042.vpk 2017-04-27 12:49 - 2017-04-27 12:49 - 00000000 ____D C:\Users\AppData\Roaming\LibreOffice 2017-04-27 12:48 - 2017-05-05 19:34 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.3 2017-04-27 12:48 - 2017-04-27 12:48 - 00001207 _____ C:\Users\Public\Desktop\LibreOffice 5.3.lnk 2017-04-27 12:48 - 2017-04-27 12:48 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5 2017-04-27 12:20 - 2017-04-27 12:21 - 01496584 _____ C:\Users\Downloads\LibreOffice 32 Bit - CHIP-Installer.exe 2017-04-26 16:14 - 2017-04-26 16:14 - 00000000 ____D C:\Users\AppData\Roaming\OBS 2017-04-25 16:22 - 2017-04-25 16:22 - 00001654 _____ C:\Users\Public\Desktop\Launch Monitor Driver Installer.lnk 2017-04-25 16:22 - 2017-04-25 16:22 - 00000000 ____D C:\Program Files (x86)\MonitorDriver 2017-04-25 16:21 - 2017-04-25 16:22 - 08413184 _____ C:\Users\Downloads\S24D330H (1).exe 2017-04-25 13:27 - 2017-04-25 17:24 - 435407592 _____ (NVIDIA Corporation) C:\Users\Downloads\381.65-desktop-win10-64bit-international-whql.exe 2017-04-24 17:17 - 2017-05-14 01:25 - 00629800 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys 2017-04-24 17:16 - 2017-04-24 17:16 - 00000000 ____D C:\Users\AppData\Local\HirezLauncherUI 2017-04-24 17:16 - 2017-04-19 13:54 - 00382504 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe 2017-04-24 17:15 - 2017-05-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2017-04-24 17:15 - 2017-04-24 17:18 - 00000000 ____D C:\ProgramData\Hi-Rez Studios 2017-04-21 13:30 - 2017-04-21 13:30 - 00000000 ____D C:\ProgramData\mgs 2017-04-21 13:30 - 2017-04-21 13:30 - 00000000 ____D C:\Microgaming 2017-04-19 13:48 - 2017-04-19 13:48 - 00000897 _____ C:\Users\Desktop\finkenstr 74 um 12_30.contact ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-15 11:10 - 2017-03-20 06:41 - 01112608 _____ C:\WINDOWS\system32\perfh007.dat 2017-05-15 11:10 - 2017-03-20 06:41 - 00251578 _____ C:\WINDOWS\system32\perfc007.dat 2017-05-15 11:04 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-05-15 11:04 - 2017-03-18 13:40 - 01048576 _____ C:\WINDOWS\system32\config\BBI 2017-05-15 07:49 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-05-15 02:19 - 2017-03-26 20:20 - 00000000 ____D C:\Users\AppData\LocalLow\IObit 2017-05-15 02:19 - 2017-03-26 20:20 - 00000000 ____D C:\ProgramData\IObit 2017-05-15 02:19 - 2017-03-26 20:19 - 00000000 ____D C:\Users\AppData\Roaming\IObit 2017-05-15 01:58 - 2017-03-26 20:21 - 00000000 ____D C:\ProgramData\ProductData 2017-05-15 01:51 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF 2017-05-15 01:46 - 2017-02-25 16:04 - 00000000 ____D C:\Users\AppData\Local\CrashDumps 2017-05-14 21:24 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-05-14 20:55 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help 2017-05-14 20:55 - 2017-03-16 18:23 - 00000000 ____D C:\temp 2017-05-14 20:49 - 2017-03-16 21:39 - 00000000 ____D C:\Users\Desktop\DDU Logs 2017-05-14 14:36 - 2017-02-25 22:38 - 00000000 ____D C:\Users\AppData\Local\Ubisoft Game Launcher 2017-05-13 21:19 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-05-13 21:04 - 2017-03-16 22:55 - 00000000 ____D C:\Users\AppData\Local\ElevatedDiagnostics 2017-05-13 16:21 - 2017-03-23 00:10 - 00000000 ____D C:\ProgramData\ASUS 2017-05-13 16:09 - 2017-02-25 17:18 - 00000000 ____D C:\Program Files (x86)\AMD 2017-05-13 16:09 - 2017-02-25 14:34 - 00000000 ____D C:\ProgramData\Package Cache 2017-05-13 16:05 - 2017-02-26 04:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-05-13 16:03 - 2017-03-23 00:10 - 00000000 ____D C:\Program Files (x86)\ASUS 2017-05-13 15:03 - 2017-02-25 14:47 - 00000000 ____D C:\Program Files (x86)\Google 2017-05-13 13:14 - 2016-08-19 02:05 - 03503048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2017-05-13 13:14 - 2016-08-19 02:05 - 03203424 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2017-05-13 13:14 - 2016-08-19 02:05 - 00192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2017-05-13 13:14 - 2016-08-19 01:51 - 05545512 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2017-05-13 13:14 - 2016-08-19 01:51 - 00023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2017-05-13 13:13 - 2016-08-19 01:49 - 00118592 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll 2017-05-13 13:13 - 2016-08-19 01:49 - 00105304 _____ C:\WINDOWS\system32\audioLibVc.dll 2017-05-13 13:09 - 2017-03-08 13:42 - 00000000 ____D C:\ProgramData\HTC 2017-05-13 13:07 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender 2017-05-13 13:06 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-05-13 13:06 - 2017-03-08 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC 2017-05-13 13:06 - 2017-03-08 13:41 - 00000000 ____D C:\Program Files (x86)\HTC 2017-05-13 13:05 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps 2017-05-13 13:00 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\registration 2017-05-13 11:09 - 2017-03-08 13:45 - 00000000 ____D C:\Users\AppData\Roaming\HTC 2017-05-12 13:55 - 2017-02-25 14:21 - 00000000 ____D C:\Users\AppData\Local\VirtualStore 2017-05-12 00:21 - 2017-03-04 18:31 - 00000000 ____D C:\Program Files\WhoCrashed 2017-05-12 00:20 - 2017-03-03 22:25 - 1329933979 _____ C:\WINDOWS\MEMORY.DMP 2017-05-11 21:17 - 2017-03-29 14:39 - 00079360 ___SH C:\Users\Desktop\Thumbs.db 2017-05-11 19:53 - 2017-02-26 03:49 - 00000000 ___RD C:\Users\3D Objects 2017-05-11 17:09 - 2017-03-08 13:41 - 00000000 ____D C:\Users\AppData\Local\Downloaded Installations 2017-05-11 11:39 - 2017-03-06 10:21 - 00000000 ____D C:\Users\AppData\Local\NVIDIA Corporation 2017-05-06 03:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat 2017-05-05 21:51 - 2017-02-25 14:21 - 00000000 ____D C:\Users\AppData\Local\Packages 2017-05-05 21:38 - 2017-02-25 14:23 - 00000000 ___RD C:\Users\OneDrive 2017-05-05 21:34 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-05-05 21:34 - 2016-11-20 23:50 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-05-05 20:24 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-05-05 20:22 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-05-05 20:21 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-05-05 20:21 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-05-05 20:16 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-05-05 20:16 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-05-05 19:47 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache 2017-05-05 19:46 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT 2017-05-05 19:45 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-05-05 19:45 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate 2017-05-05 19:45 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-05-05 19:42 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-05-05 19:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-05-05 19:39 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\HoloShell 2017-05-05 19:38 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries 2017-05-05 19:34 - 2017-03-22 23:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inno3D 2017-05-05 19:34 - 2017-03-21 13:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2017-05-05 19:34 - 2017-03-04 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed 2017-05-05 19:34 - 2017-03-02 12:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2017-05-05 19:34 - 2017-03-01 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2017-05-05 19:34 - 2017-02-25 17:28 - 00000000 ____D C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2017-05-05 19:34 - 2017-02-25 17:24 - 00000000 ____D C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-05 19:34 - 2017-02-25 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-05 19:34 - 2017-02-25 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2017-05-05 19:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool 2017-05-05 19:30 - 2017-03-31 21:03 - 00000000 ____D C:\WINDOWS\system32\appmgmt 2017-05-05 19:30 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\System 2017-05-05 19:30 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-05-05 19:30 - 2017-03-14 17:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2017-05-05 19:30 - 2017-03-03 11:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games 2017-05-05 19:30 - 2017-03-03 09:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2017-05-05 19:30 - 2017-02-25 19:54 - 00000000 ____D C:\Program Files\Intel 2017-05-05 19:29 - 2017-02-25 22:38 - 00000000 ____D C:\Users\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2017-05-05 19:29 - 2017-02-25 14:18 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages 2017-05-05 19:06 - 2017-02-25 14:13 - 00008192 __RSH C:\BOOTSECT.BAK 2017-05-05 18:23 - 2017-02-25 18:51 - 00007594 _____ C:\Users\AppData\Local\Resmon.ResmonCfg 2017-04-30 23:23 - 2017-03-04 17:36 - 00085380 _____ C:\Users\Downloads\bluescreenview-x64.zip 2017-04-28 18:26 - 2017-02-25 14:47 - 00000000 ____D C:\Users\AppData\Local\Google 2017-04-28 14:42 - 2017-03-15 14:57 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-04-28 14:22 - 2017-03-16 21:39 - 00000000 ____D C:\Users\Desktop\settings 2017-04-24 17:17 - 2017-02-25 23:39 - 00000000 ____D C:\Users\Documents\My Games 2017-04-21 13:17 - 2017-03-02 12:10 - 00000000 ____D C:\Program Files (x86)\Battle.net 2017-04-21 13:14 - 2017-02-26 03:41 - 00000000 ____D C:\Users\AppData\Local\Battle.net ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-02-25 18:51 - 2017-05-05 18:23 - 0007594 _____ () C:\Users\AppData\Local\Resmon.ResmonCfg Einige Dateien in TEMP: ==================== 2017-05-11 16:52 - 2017-05-11 17:09 - 130809339 _____ (888) C:\Users\AppData\Local\Temp\888pokersetup.exe 2017-05-11 11:50 - 2017-03-17 00:56 - 0754352 _____ (NVIDIA Corporation) C:\Users\AppData\Local\Temp\nvSCPAPI.dll 2017-05-11 11:50 - 2017-03-17 00:56 - 0867968 _____ (NVIDIA Corporation) C:\Users\AppData\Local\Temp\nvSCPAPI64.dll 2017-05-14 16:10 - 2017-03-17 00:56 - 0352704 _____ (NVIDIA Corporation) C:\Users\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-05-05 19:25 ==================== Ende von FRST.txt ============================ Mfg Falls sie noch etwas brauchen lassen sie es mich wissen und ich würde es gerne hinzufügen. |
|
15.05.2017, 11:39
| #2 |
| | ADW und FRST Log-File Auswertung Hier ist noch die Addition von FRST
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-05-2017
durchgeführt von (15-05-2017 11:21:10)
Gestartet von C:\Users\Downloads
Windows 10 Pro Version 1703 (X64) (2017-05-05 19:33:45)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2002056414-2650981169-1809370040-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2002056414-2650981169-1809370040-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2002056414-2650981169-1809370040-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-2002056414-2650981169-1809370040-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-2002056414-2650981169-1809370040-1005 - Limited - Enabled)
(S-1-5-21-2002056414-2650981169-1809370040-1001 - Administrator - Enabled) => C:\Users
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
888poker (HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\...\InstallShield_{9BABBBA5-D456-471B-A821-0C832267B5C2}) (Version: 7.2.30039 - 888)
888poker (x32 Version: 7.2.30039 - 888) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 1.01.31 - ASUSTeK Computer Inc.)
AMD Catalyst Install Manager (HKLM\...\{450A5C5C-4FCA-F646-1402-A56C811FCB64}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Ansel (Version: 382.05 - NVIDIA Corporation) Hidden
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.26.1 - Asmedia Technology)
Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version: - Ubisoft)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
casinoval (HKLM-x32\...\Casinoval_is1) (Version: - Amuzi)
Corsair Utility Engine (HKLM-x32\...\{D9867424-41AD-45D5-A39B-11D5C9C07782}) (Version: 2.12.66 - Corsair)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version: - Valve)
CPUID ROG CPU-Z 1.73 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.73 - CPUID, Inc.)
Driver Booster 4.4 (HKLM-x32\...\Driver Booster_is1) (Version: 4.4.0 - IObit)
Easy Setting Box (HKLM-x32\...\{7E750925-00C9-4B23-A1E8-BBFC0955CFD8}) (Version: 1.0.21 - Samsung)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Far Cry® 3 (HKLM\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.77.0 - HTC)
Inno3D TunelT OC Utility version V1.0.0.014 (HKLM-x32\...\Inno3D TunelT OC Utility_is1) (Version: V1.0.0.014 - )
Intel(R) Network Connections 22.0.18.0 (HKLM\...\PROSetDX) (Version: 22.0.18.0 - Intel)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Last Man Standing (HKLM\...\Steam App 506540) (Version: - Free Reign Entertainment)
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
LibreOffice 5.3.2.2 (HKLM-x32\...\{8DA98699-6AD4-49CF-A9A0-B5E7B7981BE6}) (Version: 5.3.2.2 - The Document Foundation)
Logitech Gaming Software 8.91 (HKLM\...\Logitech Gaming Software) (Version: 8.91.48 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Mortal Kombat X (HKLM\...\Steam App 307780) (Version: - NetherRealm Studios)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.05 - NVIDIA Corporation)
NVIDIA Grafiktreiber 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.05 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.4.8.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OEM Application Profile (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.4 - Rockstar Games)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
SHIELD Wireless Controller Driver (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stronghold Crusader 2 (HKLM\...\Steam App 232890) (Version: - FireFly Studios)
TeamSpeak 3 Client (HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal)
Trust GXT 363 headset (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006620}) (Version: 1.00.0019 - )
Uplay (HKLM-x32\...\Uplay) (Version: 28.1 - Ubisoft)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1-3) (Version: 1.0.42.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (Version: 1.0.42.1 - LunarG, Inc.) Hidden
WhoCrashed 5.53 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows 10-Upgrade-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17387 - Microsoft Corporation)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
WinZip 21.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C2410F}) (Version: 21.5.12480 - WinZip Computing, S.L. )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1F62E7D2-0B9A-4590-BB22-3D4490D1A100} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-13] (Google Inc.)
Task: {36018D4F-AC83-465D-943C-A120518D9F9B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-02] (NVIDIA Corporation)
Task: {5A8F6627-DBAD-416F-BD25-7FC5F9B21965} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\4.4.0\Scheduler.exe [2017-03-28] (IObit)
Task: {5D973998-0E32-4A64-819D-03D8ACB7AC24} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe
Task: {63396451-3D1C-4E6D-9591-827C2A8ED625} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2015-01-09] ()
Task: {6A7D2EAB-C90A-4EC4-9A7F-7F8BFB57A070} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)
Task: {6F09F475-DA1F-42DD-A893-AC8650B7D9BE} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-02] (NVIDIA Corporation)
Task: {7BEAA37B-983F-4BCC-BF68-90E06C0DD51A} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)
Task: {7E78D3BC-D609-4178-8691-101519F0B94C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-02] (NVIDIA Corporation)
Task: {7F9E2EB9-CAE3-4E06-8148-57B2B177D43C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-02] (NVIDIA Corporation)
Task: {8275BC82-5D93-41B0-B653-92B9063DFD34} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-02] (NVIDIA Corporation)
Task: {82947A30-5A7D-415A-B6D2-658E0C386E4B} - System32\Tasks\S-1-5-21-2002056414-2650981169-1809370040-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-03-18] (Microsoft Corporation)
Task: {930BB384-4756-4E4A-AF46-931FB708932F} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2015-09-16] (TODO: <Company name>)
Task: {988D7A53-8DD7-4903-9E88-0D223DD0794F} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2015-11-13] ()
Task: {9C328A09-078A-4C79-B792-D0FB5C4049B1} - System32\Tasks\Driver Booster SkipUAC => C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe [2017-05-03] (IObit)
Task: {A4932404-2BDE-4F0C-9580-887757A6442B} - System32\Tasks\WinZip Update Notifier => C:\Program Files\WinZip\WZUpdateNotifier.exe [2017-04-21] (WinZip)
Task: {D6EB9C20-E5FA-432B-B450-4450B01B6BD2} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2015-12-09] (ASUSTeK Computer Inc.)
Task: {D8537581-58CB-42C3-9499-CB6FE21420A1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-13] (Google Inc.)
Task: {E92FB60C-849B-40F5-BEE3-5FC57FA9BFAB} - System32\Tasks\ASC10_SkipUac_ => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
Task: {EA5BE073-FE73-4856-A253-192163286084} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-11] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-03-23 00:12 - 2015-09-16 12:50 - 01360016 _____ () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2017-03-23 00:10 - 2015-06-05 13:00 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2013-10-17 16:27 - 2013-10-17 16:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2017-05-10 12:35 - 2017-05-10 12:35 - 00075136 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2017-02-10 14:17 - 2017-02-10 14:17 - 00451072 ____R () C:\Program Files\Intel\NCS2\WmiProv\Ncs2Provider.dll
2017-02-10 14:17 - 2017-02-10 14:17 - 00418304 ____R () C:\Program Files\Intel\NCS2\Agent\AdapterAgnt.DLL
2017-05-13 16:03 - 2015-01-09 22:48 - 01461560 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-05-13 16:03 - 2015-11-13 11:37 - 01267640 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
2017-03-18 22:59 - 2017-03-20 06:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-05-13 16:04 - 2014-08-01 15:37 - 01056768 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
2017-05-13 16:04 - 2014-08-28 10:37 - 00033424 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2017-01-24 00:19 - 2017-01-24 00:19 - 01096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2017-01-24 00:19 - 2017-01-24 00:19 - 00241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2017-05-02 20:13 - 2014-11-10 04:52 - 02359296 ____N () C:\Program Files\Trust GXT 363 headset\CPL\FaceLift_x64.exe
2017-02-21 11:34 - 2017-05-13 13:19 - 00176408 _____ () D:\TeamSpeak3\quazip.dll
2016-07-19 14:42 - 2017-05-13 13:19 - 00020248 _____ () D:\TeamSpeak3\libEGL.DLL
2016-07-19 14:42 - 2017-05-13 13:19 - 01975064 _____ () D:\TeamSpeak3\libGLESv2.dll
2017-02-21 11:34 - 2017-05-13 13:19 - 00107288 _____ () D:\TeamSpeak3\soundbackends\directsound_win64.dll
2017-02-21 11:34 - 2017-05-13 13:19 - 00128280 _____ () D:\TeamSpeak3\soundbackends\windowsaudiosession_win64.dll
2017-05-05 13:39 - 2017-05-05 13:39 - 00152064 _____ () D:\TeamSpeak3\config\plugins\gamepad_joystick_win64.dll
2017-05-13 15:09 - 2017-05-09 11:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
2017-05-13 15:09 - 2017-05-09 11:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
2017-05-13 16:03 - 2015-09-17 11:05 - 00947512 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ASUSMiniBar.exe
2017-03-23 00:10 - 2017-05-15 11:04 - 00033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2017-03-23 00:10 - 2015-06-05 13:00 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2016-10-21 10:07 - 2016-10-21 10:07 - 00030720 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2016-10-21 10:07 - 2016-10-21 10:07 - 00607016 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2016-10-21 10:07 - 2016-10-21 10:07 - 00059392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2016-10-21 10:07 - 2016-10-21 10:07 - 00035864 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2016-10-21 10:07 - 2016-10-21 10:07 - 00079888 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2017-05-13 16:03 - 2014-10-09 09:31 - 00237568 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll
2017-05-13 16:03 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll
2017-05-13 16:03 - 2015-09-16 18:50 - 00712192 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2017-05-13 16:03 - 2015-11-12 14:54 - 00863232 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2017-05-13 16:03 - 2015-09-16 18:50 - 00803840 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2017-05-13 16:03 - 2015-09-18 00:19 - 00814080 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2017-05-13 16:03 - 2015-09-17 10:58 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Log4cxxWrapper.dll
2017-05-13 16:03 - 2015-09-17 10:58 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2017-05-13 16:03 - 2015-02-09 17:53 - 00872960 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AI Charger+\AIChargerPlus.dll
2017-05-13 16:03 - 2015-12-09 17:06 - 04407296 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll
2017-05-13 16:03 - 2015-09-16 18:50 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\Log4cxxWrapper.dll
2017-05-13 16:03 - 2015-01-28 09:19 - 01141248 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll
2017-05-13 16:03 - 2015-09-17 11:05 - 00828928 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Version\Version.dll
2017-03-23 00:12 - 2015-09-16 12:50 - 00053248 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Exeio.dll
2017-03-23 00:12 - 2015-09-16 12:50 - 00278528 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Vender.dll
2017-05-13 16:03 - 2015-09-17 10:58 - 00663552 _____ () C:\Program Files (x86)\ASUS\AI Suite III\aaHMLib.dll
2017-05-13 16:05 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll
2017-05-13 16:03 - 2015-09-17 10:58 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll
2017-05-13 16:03 - 2015-09-17 10:58 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll
2017-05-13 16:05 - 2010-09-23 11:51 - 00114688 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\AsIdxParser.dll
2017-05-13 16:05 - 2010-02-25 14:01 - 00139264 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\Aszip.dll
2017-05-13 16:04 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll
2017-05-13 16:04 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll
2017-03-23 12:23 - 2017-03-10 02:13 - 00674592 _____ () D:\Steam\SDL2.dll
2017-04-27 23:07 - 2017-04-26 01:55 - 02465056 _____ () D:\Steam\video.dll
2017-02-25 16:36 - 2016-09-01 03:02 - 04969248 _____ () D:\Steam\v8.dll
2017-02-25 16:36 - 2016-01-27 09:49 - 00491008 _____ () D:\Steam\libavformat-56.dll
2017-02-25 16:36 - 2016-01-27 09:49 - 00332800 _____ () D:\Steam\libavresample-2.dll
2017-02-25 16:36 - 2016-01-27 09:49 - 02549760 _____ () D:\Steam\libavcodec-56.dll
2017-02-25 16:36 - 2016-01-27 09:49 - 00442880 _____ () D:\Steam\libavutil-54.dll
2017-02-25 16:36 - 2016-01-27 09:49 - 00485888 _____ () D:\Steam\libswscale-3.dll
2017-02-25 16:36 - 2016-09-01 03:02 - 01195296 _____ () D:\Steam\icuuc.dll
2017-02-25 16:36 - 2016-09-01 03:02 - 01563936 _____ () D:\Steam\icui18n.dll
2017-04-27 23:07 - 2017-04-26 01:55 - 00848672 _____ () D:\Steam\bin\chromehtml.DLL
2017-02-25 16:36 - 2016-07-05 00:17 - 00266560 _____ () D:\Steam\openvr_api.dll
2017-03-10 06:29 - 2017-01-30 23:41 - 68875552 _____ () D:\Steam\bin\cef\cef.win7\libcef.dll
2017-04-27 23:07 - 2017-04-26 01:55 - 00383776 _____ () D:\Steam\steam.dll
2017-02-25 16:36 - 2015-09-25 01:52 - 00119208 _____ () D:\Steam\winh264.dll
2017-05-13 16:03 - 2015-09-16 18:50 - 00743424 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\EPU.dll
2017-05-13 16:03 - 2015-09-17 14:10 - 00908288 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\FAN.dll
2017-05-13 16:04 - 2014-04-10 15:23 - 00643584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMiniMsg.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2016-07-16 13:47 - 2017-05-05 13:39 - 00003083 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 vortex.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 oca.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 redir.metaservices.microsoft.com
0.0.0.0 choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 wes.df.telemetry.microsoft.com
0.0.0.0 services.wes.df.telemetry.microsoft.com
0.0.0.0 sqm.df.telemetry.microsoft.com
0.0.0.0 telemetry.microsoft.com
0.0.0.0 watson.ppe.telemetry.microsoft.com
0.0.0.0 telemetry.appex.bing.net
0.0.0.0 telemetry.urs.microsoft.com
0.0.0.0 telemetry.appex.bing.net:443
0.0.0.0 settings-sandbox.data.microsoft.com
0.0.0.0 survey.watson.microsoft.com
0.0.0.0 watson.live.com
0.0.0.0 watson.microsoft.com
0.0.0.0 statsfe2.ws.microsoft.com
0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com
0.0.0.0 compatexchange.cloudapp.net
0.0.0.0 a-0001.a-msedge.net
0.0.0.0 statsfe2.update.microsoft.com.akadns.net
0.0.0.0 sls.update.microsoft.com.akadns.net
Da befinden sich 30 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "EasySettingBox"
HKLM\...\StartupApproved\Run: => "WinZip PreLoader"
HKLM\...\StartupApproved\Run: => "WinZip UN"
HKLM\...\StartupApproved\Run32: => "Corsair Utility Engine"
HKLM\...\StartupApproved\Run32: => "EasySettingBox"
HKLM\...\StartupApproved\Run32: => "Inno3D"
HKLM\...\StartupApproved\Run32: => "ASUS AiChargerPlus Execute"
HKU\S-1-5-21-2002056414-2650981169-1809370040-1001\...\StartupApproved\Run: => "OneDrive"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [UDP Query User{61807DDC-C9D8-4FA0-ABDB-B7D8E17F4D4A}C:\users\appdata\local\temp\wz822f\utmp\u.exe] => (Block) C:\users\appdata\local\temp\wz822f\utmp\u.exe
FirewallRules: [TCP Query User{6D41B89D-8967-4F21-826F-66C89A97F1EF}C:\users\appdata\local\temp\wz822f\utmp\u.exe] => (Block) C:\users\appdata\local\temp\wz822f\utmp\u.exe
FirewallRules: [{8C8CA57E-3B8E-4325-93F4-596B2844DC6C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{41D22CF7-66C3-4E9F-8809-99E56AA1BA87}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{E5529BB4-FB53-4A15-909C-2D5D488A9BF5}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{A9739D2E-EBF2-495B-B1A2-C0FC5AC7612B}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{73FAFF91-CBAC-4170-B0A4-DD060F1768A8}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe
FirewallRules: [{62D0E26E-9859-42E5-BA0E-50AFF99891D4}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe
FirewallRules: [{BBB7D7DB-D355-46DB-8C32-B85FCCA92EDB}] => (Allow) D:\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{7BBD4B26-A738-4780-8978-898D1EAEBD94}] => (Allow) D:\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{C4DDC285-5122-4FF3-BDBB-20419D0124AC}] => (Allow) D:\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{952F702F-A7A7-4A05-9CD4-DBD6871CAE0A}] => (Allow) D:\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [UDP Query User{DB19D534-1917-444E-861B-C2C1E8CEAF48}D:\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) D:\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [TCP Query User{38350728-A607-4861-89DA-4E52CA4B196B}D:\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) D:\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [{2382771A-572A-4A86-98A9-ABB5E0F105FB}] => (Allow) D:\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{5722DC1A-9BC5-475B-9E3C-E73CED5E846A}] => (Allow) D:\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{A6F9E73B-74D9-408E-BA9E-F9665B1DFB75}] => (Allow) D:\Steam\steamapps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe
FirewallRules: [{BF37DB18-EC96-4626-A68D-A241CE5BCABE}] => (Allow) D:\Steam\steamapps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe
FirewallRules: [{047A764D-3AD4-409B-AF06-6717AE39A256}] => (Allow) D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{49208ED3-4F54-4921-A518-B50CC4CD0293}] => (Allow) D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{F5CCFE3E-15FA-4B6E-816A-397EBAB8C216}] => (Allow) D:\GTA\GTA5.exe
FirewallRules: [{7D492715-72B5-454B-AEDD-5A3EAC31498B}] => (Allow) D:\GTA\GTA5.exe
FirewallRules: [{4980001D-9ED8-41DC-A36F-FBA5F9EE1D71}] => (Allow) D:\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
FirewallRules: [{9748CE5B-BD52-4455-8660-30DD6EF2E629}] => (Allow) D:\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
FirewallRules: [{63013B50-3ECB-47B6-AB11-24999F3C1934}] => (Allow) D:\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe
FirewallRules: [{0CBF2C0A-8F7C-49A3-9C96-9600FF36D5BF}] => (Allow) D:\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe
FirewallRules: [UDP Query User{FE71290A-3AE5-4351-8C15-40D3D5FD26FA}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{986B237F-83EF-4A6A-9BFA-84056ED8AE94}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{4151F5E4-B012-4CF0-BAB3-E7CD9A4781DB}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{9E359AA9-24D9-4651-9389-6F3029EE585D}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{9EDF1C97-1099-4918-BFD7-C0150AEE40D8}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CEF60667-908C-42F5-BE38-3A50D47F90E9}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5F016E21-DB3C-440A-8A31-309B281953D0}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{73913D30-CA37-467E-9D2B-B65D18052D81}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [UDP Query User{4E32BDF7-7641-414D-A2C6-37B65DCD666A}D:\gta\gta5.exe] => (Allow) D:\gta\gta5.exe
FirewallRules: [TCP Query User{B53A1909-9283-49D3-B991-80D8623C9280}D:\gta\gta5.exe] => (Allow) D:\gta\gta5.exe
FirewallRules: [{87877B35-3DD3-49EF-82FE-F6ED0EC4F989}] => (Allow) D:\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{24E3AA55-8A58-473B-989E-EF6683F27A18}] => (Allow) D:\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{946DFDA6-29B5-476A-AFBE-1473FFF0C842}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{4E8E4E71-ABEA-49EF-98CC-AC66A17B2194}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe
FirewallRules: [{1120257D-9449-4923-BB7B-533C0ACD51B2}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe
FirewallRules: [{A29A026C-88C5-44D2-BDBF-D88E4B7E84BB}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7C23BFB3-A88A-4AC3-9DF1-DB255CDB82B4}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{5B42FC11-F540-43DB-8FA6-88D6B8B7AEC3}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{EDE2ABEE-792B-4CC3-9B43-3096BA310412}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{9C0452B9-D984-4A48-B659-84A7FDB88812}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{392AFFE5-92F2-4CC4-991B-12B8F05EF4F1}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{31338D53-DF8A-433E-B03D-4FB6D1C6564E}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{7D087317-50DC-4BA1-8334-9B31411DBBC5}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{E0F57DCC-50CF-4819-9982-DDCD7BD73CCF}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7C69E97F-97BF-4A5F-A989-5F1D8DBE2997}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [UDP Query User{EEF96BD0-D740-4061-A4DA-29CB9EBAA084}D:\heartstone\hearthstone.exe] => (Allow) D:\heartstone\hearthstone.exe
FirewallRules: [TCP Query User{7543A33E-98B0-4F73-8B0A-A547DE2F75DC}D:\heartstone\hearthstone.exe] => (Allow) D:\heartstone\hearthstone.exe
FirewallRules: [UDP Query User{1E0897FD-6A2F-4E17-8B31-1A5CA89004CF}D:\origin\medal of honor pacific assault\mohpa_server.exe] => (Block) D:\origin\medal of honor pacific assault\mohpa_server.exe
FirewallRules: [TCP Query User{59787816-9F5E-4034-85BA-AC7E41EFB003}D:\origin\medal of honor pacific assault\mohpa_server.exe] => (Block) D:\origin\medal of honor pacific assault\mohpa_server.exe
FirewallRules: [UDP Query User{F4C642E4-8844-43F7-8467-693FED7EDDED}E:\lolll\hearthstone.exe] => (Block) E:\lolll\hearthstone.exe
FirewallRules: [TCP Query User{C41BE919-4C6C-4619-B33B-302C35429C2F}E:\lolll\hearthstone.exe] => (Block) E:\lolll\hearthstone.exe
FirewallRules: [{8BD89EBE-2785-4C22-8C57-8C2E0719E537}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{E4FE59BA-28FF-4670-89DE-D15A6DBB1A6E}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B4C7B019-26F8-47BB-A1C4-315CB460C118}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E9E83EC3-34F4-467F-895F-71147573970A}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{8192B740-AF24-4012-9BC7-A444F1423618}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{B2E6E1A1-267E-4ED9-A501-27821E154B31}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{5F120660-1991-4645-8792-7AEA753211DE}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe
FirewallRules: [{2C8CC41F-C68C-43DB-B32B-8D39D04C2C12}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe
FirewallRules: [{DE1A2B34-5F49-4C77-8A73-CA3A901BF380}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe
FirewallRules: [{C5FE245D-7CC1-4350-B665-5AE6973599CA}] => (Allow) D:\uPlay\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe
FirewallRules: [{C68FFF88-BE4B-4796-873F-41B8D6F343B6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F1BA35AE-0C10-44B0-B5E0-F867029389DA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F48A8166-A5A7-4624-99BB-91F478EA3872}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1012C481-9AF6-45FE-A73A-7AEF2729340A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2CF1E09D-BA3C-4F18-BB59-3806AECF25C7}] => (Allow) D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{E9427035-2798-441D-8D80-8E3A173B88C8}] => (Allow) D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{EFF68A30-7869-4129-995B-16BF7BB98377}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{59494D53-B047-47AA-9F9B-1CD950752601}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{6031C804-3B2C-47B8-98D0-2A3F38559830}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{F0ED7364-D2E2-4070-9257-94C875717ADD}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{2EA7A252-C08E-47CB-A601-68F7CE2EB9CC}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{BAE1FE83-F062-4508-97ED-2DF64D00D9BD}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{76B8D7B0-A1ED-4F15-A95E-12675414AC30}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{AB6F804A-22E5-4574-A0B9-530CA0D71A17}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{4C6F9F63-8EEC-4B99-B8DE-63B5F26F9799}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{7BCC9B3B-0D24-4BAA-80F7-1830DCFFB06C}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{60B6081F-3925-434A-9BE4-2C1372ADE431}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{6E9EBFD1-FFFD-4DEE-8D79-A6B85F91D206}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{BB9E40CA-C354-4E39-BE86-506ED9D1C51F}] => (Allow) D:\Steam\steamapps\common\LMS\Launcher.exe
FirewallRules: [{48D48BB7-A82C-40E0-AA02-9A10F1CFF59A}] => (Allow) D:\Steam\steamapps\common\LMS\Launcher.exe
FirewallRules: [{D02243AA-E23F-47B5-A00A-8A45451C6ECB}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{C8B255D4-BC10-4041-847C-DCE2CE2B3B09}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{98602C94-77DB-41AB-81B6-B8C2A3F93B0D}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{E84AF21B-131A-4797-A398-A1EC9CFE56B2}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{6CA68C20-B867-403F-94E8-4C0DC92991F6}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [TCP Query User{DF73E76B-DC33-46B8-ADA6-D7F8CD5C428A}D:\steam\steamapps\common\lms\lms.exe] => (Allow) D:\steam\steamapps\common\lms\lms.exe
FirewallRules: [UDP Query User{3D2A0DEE-751F-4566-BEAC-2AE68FC1B0E4}D:\steam\steamapps\common\lms\lms.exe] => (Allow) D:\steam\steamapps\common\lms\lms.exe
FirewallRules: [{2C611EA1-0524-40EA-BAF1-7307C3A0C7DD}] => (Block) D:\steam\steamapps\common\lms\lms.exe
FirewallRules: [{B2326945-3CB8-45BD-8DFD-48328DAB9434}] => (Block) D:\steam\steamapps\common\lms\lms.exe
FirewallRules: [{639D6650-AD1C-437F-A867-FFBB5C3EB06E}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5F360E6D-D598-4309-AB95-62DB055C891C}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{EBD02735-2D41-4085-8CC2-DF110B38F4B7}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5A5F23C4-057B-4C8C-AF0E-A0BD73F1A462}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7F8C2605-EF2F-4A16-993B-009A1AD3B3AA}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4AC78EB2-4040-49A7-A8ED-36FD815D9481}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{604C16D3-55C9-4A9D-9AA2-E98A21D442BA}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1384B2F3-0CAB-41D7-85AC-DE75A94DFAA6}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1AF69FF6-94BC-49AE-A0FF-853B85EB7683}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CFA0BCE8-C3E2-41B4-A26B-BF5B1BA30B12}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AD2D5C11-52E0-46BE-99F2-BEE28DF41497}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{54D53372-E474-4026-896A-CF9C9937B241}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{EB8DEEE8-A454-4085-B1D7-DCEB538D0F97}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{E34F60BC-9B41-4E00-85D1-9A028AA7E0E3}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{45E44B48-2A17-4085-8BFF-95A2FA83543A}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{7159AF0A-A667-4803-8446-D7F5681F6A27}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{51FF2D71-93EF-4AE5-98C2-189F59C88CD8}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{ACC9F0C5-0414-4A0E-BA32-ECA0AE4DA952}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{9515FFE8-01DF-4627-9958-089FC30D29A1}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{0DEDC224-36D3-40D0-AB0C-12B67E492E1B}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{53F601A3-22A2-4AB6-A5F2-9ED9DBB678E6}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{EF2148FC-CAC3-48C6-B757-DA25A8699A81}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{9D869F5C-A502-4B05-AAA4-8EC4DFD1A80D}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D24A713B-9545-4D64-8DD9-3F5D81DA74FB}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{323D3416-C3E8-4225-9367-377F01F70049}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7A6D19EB-589F-49F6-93D8-7E512A27878C}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{67C4BCED-3745-4956-B059-6B5FCFF7697B}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1DEDA4F7-C0CB-4C51-93A7-A7D31DCE9C97}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{8C55F14D-BA34-4B60-8F81-DF18CC89B100}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{483E1D65-3B95-4821-A237-C49CF0640C38}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{6ABE55CA-1B79-46D5-9D57-A4912BD2FFF4}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [{ECD6C33F-43D0-4F72-9C37-F25BD9580E7F}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
==================== Wiederherstellungspunkte =========================
13-05-2017 12:47:12 Wiederherstellungsvorgang
13-05-2017 13:12:47 Driver Booster : Realtek High Definition Audio
14-05-2017 14:34:53 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
15-05-2017 01:51:15 Driver Booster : ASMedia USB3.0 eXtensible Host Controller
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: ASMedia USB Root Hub
Description: ASMedia USB Root Hub
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (05/15/2017 11:06:04 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (05/15/2017 11:05:18 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x8007139F
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (05/15/2017 02:22:54 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (05/15/2017 02:22:47 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (05/15/2017 01:46:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: csgo.exe, Version: 0.0.0.0, Zeitstempel: 0x5914aa10
Name des fehlerhaften Moduls: nvd3dum.dll, Version: 22.21.13.8205, Zeitstempel: 0x59079242
Ausnahmecode: 0xc0000005
Fehleroffset: 0x005a7339
ID des fehlerhaften Prozesses: 0x19ac
Startzeit der fehlerhaften Anwendung: 0x01d2cd0c2a5580c0
Pfad der fehlerhaften Anwendung: D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a2b0acab06663645\nvd3dum.dll
Berichtskennung: 361b644b-f2a8-43fc-8519-6c619aa1138c
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (05/15/2017 01:23:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: poker.exe, Version: 7.2.0.35, Zeitstempel: 0x58c9774d
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2378.1268.0, Zeitstempel: 0x57f3b161
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001ae0df
ID des fehlerhaften Prozesses: 0x276c
Startzeit der fehlerhaften Anwendung: 0x01d2ccf7d181845b
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\PacificPoker\bin\poker.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\PacificPoker\bin\libcef.dll
Berichtskennung: cf701c01-1b95-497b-90e7-8b598594888a
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (05/15/2017 01:23:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: csgo.exe, Version: 0.0.0.0, Zeitstempel: 0x5914aa10
Name des fehlerhaften Moduls: nvd3dum.dll, Version: 22.21.13.8205, Zeitstempel: 0x59079242
Ausnahmecode: 0xc0000005
Fehleroffset: 0x003375fe
ID des fehlerhaften Prozesses: 0xda0
Startzeit der fehlerhaften Anwendung: 0x01d2ccf20e2c1917
Pfad der fehlerhaften Anwendung: D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a2b0acab06663645\nvd3dum.dll
Berichtskennung: c137bc53-8a03-4497-945b-129cac34ed98
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (05/14/2017 09:48:40 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (05/14/2017 09:48:38 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (05/14/2017 09:46:17 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Systemfehler:
=============
Error: (05/15/2017 11:04:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WinZip Smart Monitor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (05/15/2017 11:04:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.
Error: (05/15/2017 11:03:39 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-0EEJ8BI)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (05/15/2017 02:25:10 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Übermittlungsoptimierung" wurde nicht richtig gestartet.
Error: (05/15/2017 02:20:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WinZip Smart Monitor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
Error: (05/15/2017 02:20:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.
Error: (05/15/2017 02:19:40 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (05/15/2017 02:19:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Advanced SystemCare Service 10" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/15/2017 02:19:11 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/15/2017 02:19:10 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2017-05-15 05:06:16.853
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiovsmstorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.850
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiovsmstorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.849
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiovsmstorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.845
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiovsmstorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.843
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiovsmstorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.841
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiovsmstorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.823
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.820
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.818
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-05-15 05:06:16.815
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Speicherinformationen ===========================
Prozessor: AMD Athlon(tm) X4 880K Quad Core Processor
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 16323.19 MB
Verfügbarer physikalischer RAM: 12430.72 MB
Summe virtueller Speicher: 16723.19 MB
Verfügbarer virtueller Speicher: 12535.89 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:243.69 GB) (Free:144.41 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:687.37 GB) (Free:345.13 GB) NTFS
Drive e: (USB-HDD) (Fixed) (Total:232.88 GB) (Free:18.93 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 06CFF433)
Partition 1: (Active) - (Size=243.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=462 MB) - (Type=27)
Partition 3: (Not Active) - (Size=687.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 232.9 GB) (Disk ID: 0B3AB645)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
15.05.2017, 20:44
| #3 |
| /// TB-Ausbilder   | ADW und FRST Log-File Auswertung Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Um die Bereinigung möchlichst effektiv und schnell gestalten zu können, bitte ich um Beachtung der folgenden Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Bitte mal die Logdatei von MBAM mit den Funden posten. |
|
19.05.2017, 19:55
| #4 |
| /// TB-Ausbilder | ADW und FRST Log-File Auswertung Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. Profilnachricht inklusive Link zum Thema an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen! |
|
| Themen zu ADW und FRST Log-File Auswertung |
| .dll, askbar, browser, computer, defender, einstellungen, explorer, flash player, google, home, installation, internet, internet explorer, neustart, nvcontainer.exe, prozesse, realtek, scan, server, services.exe, software, teamspeak, temp, trojaner, trojaner board, usb, windows, windowsapps |
Linear-Darstellung
