ESET meldet Funde

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2017
durchgeführt von Gloriaflyx (Administrator) auf BALDER (27-05-2017 18:07:02)
Gestartet von C:\Users\Gloriaflyx\Desktop
Geladene Profile: Gloriaflyx (Verfügbare Profile: Gloriaflyx & DefaultAppPool)
Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Flux Software LLC) C:\Users\Gloriaflyx\AppData\Local\FluxSoftware\Flux\flux.exe
(SunplusIT, Inc.) C:\Program Files (x86)\Integrated Camera\Monitor.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17032.10331.0_x64__8wekyb3d8bbwe\Music.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17032.10341.0_x64__8wekyb3d8bbwe\Video.UI.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.15063.0_none_1a733a82001933cc\TiWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [401896 2016-11-03] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-08-22] (IvoSoft)
HKLM-x32\...\Run: [Integrated Camera_Monitor] => C:\Program Files (x86)\Integrated Camera\monitor.exe [1720696 2013-09-27] (SunplusIT, Inc.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2678784 2016-03-23] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3386576 2017-03-30] (COMODO)
HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-3668857010-2765377856-186715415-1000\...\Run: [f.lux] => C:\Users\Gloriaflyx\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2015-09-23] (Flux Software LLC)
HKU\S-1-5-21-3668857010-2765377856-186715415-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
GroupPolicy: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 172.16.60.1
Tcpip\..\Interfaces\{674872c8-8b5a-47c5-887a-2bfeff0d36c4}: [DhcpNameServer] 192.168.44.1 192.168.44.1
Tcpip\..\Interfaces\{bb538318-92b1-40b0-88af-d342e62259b8}: [DhcpNameServer] 172.16.60.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3668857010-2765377856-186715415-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3668857010-2765377856-186715415-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-05-26] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-26] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-05-26] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-26] (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-26] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-26] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-26] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-26] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Gloriaflyx\AppData\Roaming\Mozilla\Firefox\Profiles\j5h72v37.default [2017-05-27]
FF user.js: detected! => C:\Users\Gloriaflyx\AppData\Roaming\Mozilla\Firefox\Profiles\j5h72v37.default\user.js [2016-03-04]
FF Homepage: Mozilla\Firefox\Profiles\j5h72v37.default -> hxxps://webmailer.hosteurope.de/
FF NetworkProxy: Mozilla\Firefox\Profiles\j5h72v37.default -> type", 0
FF Extension: (Ghostery) - C:\Users\Gloriaflyx\AppData\Roaming\Mozilla\Firefox\Profiles\j5h72v37.default\Extensions\firefox@ghostery.com.xpi [2017-05-05]
FF Extension: (Personas Plus) - C:\Users\Gloriaflyx\AppData\Roaming\Mozilla\Firefox\Profiles\j5h72v37.default\Extensions\personas@christopher.beard.xpi [2017-05-18]
FF Extension: (uBlock Origin) - C:\Users\Gloriaflyx\AppData\Roaming\Mozilla\Firefox\Profiles\j5h72v37.default\Extensions\uBlock0@raymondhill.net.xpi [2017-05-15]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-10] ()
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-10] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3668857010-2765377856-186715415-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Gloriaflyx\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-14] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3668857010-2765377856-186715415-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-11-26] ()

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [lobonlhedgiilkfmbbbfhkaoefacipgj] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [249856 2016-03-23] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3971264 2017-05-14] (Microsoft Corporation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10512032 2017-04-23] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-04-23] (COMODO)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-03-20] (Digital Wave Ltd.)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373744 2016-11-03] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-15] ()
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [118480 2017-03-30] (COMODO)
R2 LPlatSvc; C:\WINDOWS\system32\LPlatSvc.exe [710144 2016-05-04] (Lenovo.)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2017-02-10] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1326408 2017-05-14] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-25] ()
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [259176 2016-11-05] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40960 2017-03-31] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831504 2017-03-31] (COMODO)
R1 cmdHlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50808 2017-03-31] (COMODO)
R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d62x64.sys [519680 2015-12-08] (Intel Corporation)
R3 ikbevent; C:\WINDOWS\System32\DRIVERS\ikbevent.sys [21048 2013-04-15] ()
R3 imsevent; C:\WINDOWS\System32\DRIVERS\imsevent.sys [21048 2013-04-15] ()
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [138560 2016-06-15] (COMODO)
R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [88256 2015-06-09] (Intel Corporation)
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [46568 2013-04-15] ()
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R3 NETwNb64; C:\WINDOWS\System32\drivers\Netwbw02.sys [3485696 2017-03-18] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvlddmkm.sys [14190520 2017-02-10] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [761600 2015-06-15] (Realsil Semiconductor Corporation)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [51296 2016-11-05] (Synaptics Incorporated)
R3 SPUVCbv; C:\WINDOWS\System32\Drivers\SPUVCbv64.sys [735744 2016-03-11] (Sunplus)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WPRO_41_2001; C:\WINDOWS\System32\drivers\WPRO_41_2001.sys [34752 2017-05-26] ()
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-27 18:07 - 2017-05-27 18:07 - 00019773 _____ C:\Users\Gloriaflyx\Desktop\FRST.txt
2017-05-27 18:06 - 2017-05-27 18:07 - 00000000 ____D C:\FRST
2017-05-27 18:02 - 2017-05-27 18:02 - 02429952 _____ (Farbar) C:\Users\Gloriaflyx\Desktop\FRST64.exe
2017-05-27 16:21 - 2017-05-27 16:21 - 00000000 ____D C:\Program Files (x86)\ESET
2017-05-27 16:20 - 2017-05-27 16:20 - 02870984 _____ (ESET) C:\Users\Gloriaflyx\Desktop\esetsmartinstaller_deu.exe
2017-05-26 09:31 - 2017-05-26 19:35 - 00094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp
2017-05-24 12:06 - 2017-05-24 12:06 - 01147686 _____ C:\Users\Gloriaflyx\Desktop\2_-_Spark[1].pdf
2017-05-18 21:45 - 2017-05-18 21:45 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\DBG
2017-05-17 19:14 - 2017-05-17 19:14 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-17 19:13 - 2017-05-17 19:13 - 00000020 ___SH C:\Users\Gloriaflyx\ntuser.ini
2017-05-17 19:13 - 2017-05-17 19:13 - 00000000 ____D C:\ProgramData\USOShared
2017-05-17 18:52 - 2017-05-17 18:52 - 00000000 ____D C:\Windows.old
2017-05-17 18:51 - 2017-05-17 18:51 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-17 18:51 - 2017-05-17 18:51 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-17 18:51 - 2017-05-17 18:51 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-05-17 18:51 - 2017-05-17 18:51 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-05-17 18:51 - 2017-05-17 18:51 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-05-17 18:51 - 2017-05-17 18:51 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-17 18:51 - 2017-05-17 18:51 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-17 18:51 - 2017-05-17 18:51 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-05-17 18:51 - 2017-05-17 18:51 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-05-17 18:51 - 2017-05-17 18:51 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-05-17 18:51 - 2017-05-17 18:51 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-05-17 18:51 - 2017-05-17 18:51 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-05-17 18:49 - 2017-05-17 18:49 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-05-17 18:49 - 2017-05-17 17:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\WINDOWS\system32\msmq
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\Program Files\MSBuild
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-17 18:47 - 2017-05-17 18:47 - 00000000 ____D C:\inetpub
2017-05-17 18:47 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-17 18:47 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-17 18:47 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-17 18:47 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-05-17 18:47 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-05-17 18:47 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-05-17 18:05 - 2017-05-17 18:05 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-05-17 18:05 - 2017-05-17 18:05 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-05-17 18:03 - 2017-05-26 19:35 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-17 18:03 - 2017-05-17 19:15 - 00003286 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-17 18:03 - 2017-05-17 18:03 - 00003500 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-17 18:03 - 2017-05-17 18:03 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-05-17 18:03 - 2017-05-17 18:03 - 00002700 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task
2017-05-17 18:03 - 2017-05-17 18:03 - 00002440 _____ C:\WINDOWS\System32\Tasks\{A77B8121-4DF6-4C06-AC86-940FC3B7AF54}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002432 _____ C:\WINDOWS\System32\Tasks\{3A39D014-2508-4DC8-8EED-5D3C5194CC6A}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002360 _____ C:\WINDOWS\System32\Tasks\{B4F731ED-C11E-4F9B-A092-6083F00D4F25}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002358 _____ C:\WINDOWS\System32\Tasks\{077EA0BA-9543-46EF-AA05-A3609078E68C}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002354 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_Dolby
2017-05-17 18:03 - 2017-05-17 18:03 - 00002352 _____ C:\WINDOWS\System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002342 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2017-05-17 18:03 - 2017-05-17 18:03 - 00002304 _____ C:\WINDOWS\System32\Tasks\{40397F46-4625-412F-9983-FCD60BC4A9E4}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002290 _____ C:\WINDOWS\System32\Tasks\{4428CE4F-B2B8-4E7A-802D-3985A4AE3A2E}
2017-05-17 18:03 - 2017-05-17 18:03 - 00002290 _____ C:\WINDOWS\System32\Tasks\{3C95CE29-D5CC-4534-842A-1D344CDA2CE7}
2017-05-17 18:03 - 2017-05-17 18:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-05-17 18:03 - 2017-05-17 18:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-05-17 18:03 - 2017-05-17 18:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-05-17 18:03 - 2017-05-17 18:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-05-17 18:00 - 2017-05-17 18:00 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-17 17:58 - 2017-05-17 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele
2017-05-17 17:58 - 2017-05-17 17:58 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-05-17 17:57 - 2017-05-26 23:20 - 00000000 ____D C:\Users\Gloriaflyx
2017-05-17 17:57 - 2017-05-17 18:02 - 00000000 ____D C:\Users\DefaultAppPool
2017-05-17 17:57 - 2017-05-17 18:01 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Vorlagen
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Startmenü
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Netzwerkumgebung
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Lokale Einstellungen
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Eigene Dateien
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Druckumgebung
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Documents\Eigene Videos
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Documents\Eigene Musik
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Documents\Eigene Bilder
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\AppData\Local\Verlauf
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\AppData\Local\Anwendungsdaten
2017-05-17 17:57 - 2017-05-17 17:57 - 00000000 _SHDL C:\Users\Gloriaflyx\Anwendungsdaten
2017-05-17 17:56 - 2017-05-27 16:19 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-05-17 17:56 - 2017-05-26 19:41 - 02729236 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-17 17:56 - 2017-05-17 17:58 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-05-17 17:56 - 2017-05-17 17:58 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-05-17 17:56 - 2017-05-17 17:58 - 00000000 ____D C:\Program Files\Intel
2017-05-17 17:56 - 2017-05-17 17:56 - 02011386 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-05-17 17:56 - 2017-05-17 17:56 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____D C:\Program Files\Synaptics
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____D C:\Program Files\Realtek
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 ____D C:\Program Files (x86)\SunplusIT Integrated Camera
2017-05-17 17:56 - 2017-05-17 17:56 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-05-17 17:56 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 00147000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-05-17 17:56 - 2016-12-29 15:16 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-05-17 17:56 - 2016-12-22 01:59 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-05-17 17:56 - 2016-11-03 16:32 - 00099848 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-05-17 17:55 - 2017-05-27 17:41 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-05-17 17:55 - 2017-05-26 19:35 - 00506712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-12 11:35 - 2017-05-12 11:35 - 00060895 _____ C:\Users\Gloriaflyx\Desktop\Info Exk. 10 Eltville.pdf
2017-05-12 11:34 - 2017-05-12 11:34 - 00155883 _____ C:\Users\Gloriaflyx\Desktop\Info Exk. 8 Gewässerexkursion.pdf
2017-05-11 14:13 - 2017-05-17 19:13 - 00000000 ___DC C:\WINDOWS\Panther
2017-05-11 13:51 - 2017-05-11 13:51 - 00001258 _____ C:\Users\Gloriaflyx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk
2017-05-11 13:51 - 2017-05-11 13:51 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\UNP
2017-05-10 18:28 - 2017-05-17 18:01 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-05-10 18:28 - 2017-05-10 18:29 - 00000000 ____D C:\Program Files\UNP
2017-05-10 10:46 - 2017-03-04 08:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-05-03 18:21 - 2017-05-03 18:21 - 00063161 _____ C:\Users\Gloriaflyx\Desktop\Konto_133301317-Auszug_2017_005.PDF
2017-05-03 10:27 - 2017-05-03 10:27 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\PDFCreator
2017-05-02 21:10 - 2017-05-17 19:15 - 00002448 _____ C:\Users\Gloriaflyx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-05-02 21:07 - 2017-05-02 21:08 - 06100264 _____ (Microsoft Corporation) C:\Users\Gloriaflyx\Downloads\setuplanguagepack.x64.en-us_.exe
2017-05-02 21:05 - 2017-05-02 21:06 - 05897000 _____ (Microsoft Corporation) C:\Users\Gloriaflyx\Downloads\setuplanguagepack.x64.de-de_.exe
2017-05-01 17:16 - 2017-05-01 17:16 - 08408221 _____ C:\Users\Gloriaflyx\Desktop\Insecta.pdf
2017-05-01 17:16 - 2017-05-01 17:16 - 07676452 _____ C:\Users\Gloriaflyx\Desktop\Intro and Molluscs.pdf
2017-05-01 17:15 - 2017-05-01 17:15 - 02090938 _____ C:\Users\Gloriaflyx\Desktop\Artenkenntnis einheimischer Tierarten.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-27 18:04 - 2014-01-17 18:49 - 01474832 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-05-27 18:02 - 2014-04-02 20:05 - 01374040 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-05-27 17:56 - 2014-01-17 19:41 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Roaming\Skype
2017-05-27 17:55 - 2016-11-19 11:26 - 00000000 ____D C:\Users\Gloriaflyx\AppData\LocalLow\Mozilla
2017-05-27 17:54 - 2016-06-19 12:39 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\ClassicShell
2017-05-27 16:19 - 2016-06-19 12:32 - 00000000 __SHD C:\Users\Gloriaflyx\IntelGraphicsProfiles
2017-05-26 22:02 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-05-26 22:02 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-26 21:11 - 2014-07-01 13:19 - 00000000 ____D C:\Program Files (x86)\Steam
2017-05-26 20:56 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-05-26 20:55 - 2014-01-17 19:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-05-26 19:43 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-26 19:43 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-05-26 19:41 - 2017-03-20 06:41 - 01236610 _____ C:\WINDOWS\system32\perfh007.dat
2017-05-26 19:41 - 2017-03-20 06:41 - 00294824 _____ C:\WINDOWS\system32\perfc007.dat
2017-05-26 19:35 - 2016-08-16 20:50 - 00000000 ____D C:\ProgramData\NVIDIA
2017-05-26 19:35 - 2014-01-18 11:54 - 00034752 _____ C:\WINDOWS\system32\Drivers\WPRO_41_2001.sys
2017-05-26 12:43 - 2017-03-18 13:40 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-05-26 11:11 - 2015-08-31 10:32 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Roaming\Ahnenblatt
2017-05-26 11:02 - 2017-03-29 13:14 - 00000000 ____D C:\Users\Gloriaflyx\Documents\Ahnenblatt
2017-05-26 09:32 - 2016-12-29 14:16 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-05-25 22:03 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\L2Schemas
2017-05-25 20:42 - 2014-02-03 22:35 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Roaming\Audacity
2017-05-25 12:49 - 2014-01-17 19:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-23 21:48 - 2017-03-20 22:36 - 00000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2017-05-23 21:48 - 2016-11-06 12:13 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Roaming\DVDVideoSoft
2017-05-23 19:58 - 2014-01-17 18:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-23 19:57 - 2014-01-17 18:51 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-23 18:53 - 2017-03-25 11:36 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-05-23 18:53 - 2014-01-17 19:39 - 00000000 ____D C:\ProgramData\Skype
2017-05-22 22:06 - 2017-02-08 20:46 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-05-21 17:02 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-05-21 15:58 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-05-20 16:42 - 2015-09-13 16:42 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-05-19 14:30 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-05-19 11:34 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-05-18 22:52 - 2014-04-02 20:05 - 00000000 ___HD C:\VTRoot
2017-05-17 21:19 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-05-17 19:17 - 2016-06-19 12:32 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\Packages
2017-05-17 19:15 - 2016-06-19 12:34 - 00000000 __RHD C:\Users\Gloriaflyx\OneDrive
2017-05-17 19:13 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-05-17 19:13 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-05-17 19:13 - 2016-04-27 07:55 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-17 18:55 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-05-17 18:52 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-05-17 18:52 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-05-17 18:52 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-05-17 18:47 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-05-17 18:47 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-05-17 18:47 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2017-05-17 18:47 - 2017-03-18 22:59 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2017-05-17 18:47 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2017-05-17 18:47 - 2017-03-18 22:59 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2017-05-17 18:47 - 2017-03-18 22:59 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2017-05-17 18:47 - 2017-03-18 22:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-05-17 18:47 - 2017-03-18 22:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2017-05-17 18:47 - 2017-03-18 22:59 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2017-05-17 18:47 - 2017-03-18 22:59 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2017-05-17 18:47 - 2017-03-18 22:56 - 01380352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-05-17 18:47 - 2017-03-18 22:56 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-05-17 18:47 - 2017-03-18 22:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-05-17 18:47 - 2017-03-18 22:56 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-05-17 18:47 - 2017-03-18 22:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-05-17 18:47 - 2017-03-18 22:56 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-05-17 18:47 - 2017-03-18 22:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2017-05-17 18:47 - 2017-03-18 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-05-17 18:47 - 2017-03-18 22:56 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2017-05-17 18:47 - 2017-03-18 22:56 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2017-05-17 18:47 - 2017-03-18 22:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-05-17 18:47 - 2017-03-18 22:56 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2017-05-17 18:47 - 2017-03-18 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2017-05-17 18:07 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-05-17 18:07 - 2016-12-27 17:25 - 00000460 __RSH C:\ProgramData\ntuser.pol
2017-05-17 18:06 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-05-17 18:05 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-05-17 18:04 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration
2017-05-17 18:03 - 2017-03-20 06:43 - 00000000 ____D C:\WINDOWS\HoloShell
2017-05-17 18:03 - 2017-03-18 23:03 - 00000000 __RSD C:\WINDOWS\Media
2017-05-17 18:03 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-17 18:03 - 2016-06-19 12:23 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-05-17 18:01 - 2017-04-26 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2017-05-17 18:01 - 2017-04-26 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-17 18:01 - 2015-06-10 22:28 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office
2017-05-17 18:01 - 2014-10-23 21:45 - 00000000 ____D C:\WINDOWS\de
2017-05-17 18:01 - 2014-03-27 11:48 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spiele
2017-05-17 17:58 - 2017-03-25 11:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-05-17 17:58 - 2017-03-20 06:41 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\IME
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Cursors
2017-05-17 17:58 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-05-17 17:58 - 2014-07-19 18:43 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2017-05-17 17:58 - 2014-01-17 18:31 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2017-05-17 17:57 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-05-17 17:57 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-05-17 17:56 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help
2017-05-17 17:56 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-05-17 17:41 - 2014-01-17 17:39 - 00008192 __RSH C:\BOOTSECT.BAK
2017-05-17 17:36 - 2017-03-20 07:06 - 00000000 ___HD C:\$WINDOWS.~BT
2017-05-10 10:48 - 2014-07-10 22:11 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\Adobe
2017-05-03 22:34 - 2014-07-02 21:00 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Roaming\vlc
2017-05-03 10:27 - 2015-02-03 10:16 - 00000000 ____D C:\Program Files\PDFCreator
2017-04-29 14:47 - 2014-03-10 16:37 - 00000000 ____D C:\Users\Gloriaflyx\AppData\Local\CrashDumps
2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-10-22 13:22 - 2015-10-22 13:22 - 0159657 _____ () C:\Program Files (x86)\changelog.txt
2015-10-22 13:22 - 2015-11-07 18:45 - 0375544 _____ () C:\Program Files (x86)\createfileassoc.exe
2015-10-22 13:22 - 2015-11-07 18:45 - 0447464 _____ (TeamSpeak Systems GmbH) C:\Program Files (x86)\error_report.exe
2015-09-21 16:24 - 2015-09-21 16:24 - 1709056 _____ () C:\Program Files (x86)\libeay32.dll
2013-10-05 00:58 - 2013-10-05 00:58 - 0660128 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp120.dll
2013-10-05 00:58 - 2013-10-05 00:58 - 0963232 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr120.dll
2015-08-27 10:07 - 2015-11-07 18:45 - 1704176 _____ (Overwolf) C:\Program Files (x86)\OverwolfTeamSpeakInstaller.exe
2015-10-22 13:22 - 2015-11-07 18:45 - 0475112 _____ (TeamSpeak Systems GmbH) C:\Program Files (x86)\package_inst.exe
2015-10-22 11:20 - 2015-10-22 11:20 - 0000321 _____ () C:\Program Files (x86)\plugin_sdk.html
2015-09-21 16:47 - 2015-09-21 16:47 - 5626368 _____ (The Qt Company Ltd) C:\Program Files (x86)\Qt5Core.dll
2015-09-21 16:48 - 2015-09-21 16:48 - 3937280 _____ (The Qt Company Ltd) C:\Program Files (x86)\Qt5Gui.dll
2015-09-21 16:48 - 2015-09-21 16:48 - 1092608 _____ (The Qt Company Ltd) C:\Program Files (x86)\Qt5Network.dll
2015-09-21 16:47 - 2015-09-21 16:47 - 0216576 _____ (The Qt Company Ltd) C:\Program Files (x86)\Qt5Sql.dll
2015-09-21 16:50 - 2015-09-21 16:50 - 5424128 _____ (The Qt Company Ltd) C:\Program Files (x86)\Qt5Widgets.dll
2015-10-22 13:22 - 2015-10-22 13:22 - 0175080 _____ () C:\Program Files (x86)\quazip.dll
2015-09-21 16:24 - 2015-09-21 16:24 - 0317440 _____ () C:\Program Files (x86)\ssleay32.dll
2015-10-22 13:21 - 2015-11-07 18:45 - 11544552 _____ (TeamSpeak Systems GmbH) C:\Program Files (x86)\ts3client_win64.exe
2015-09-13 16:41 - 2015-11-07 18:45 - 0390800 _____ (TeamSpeak Systems GmbH) C:\Program Files (x86)\Uninstall.exe
2015-10-22 13:22 - 2015-11-07 18:45 - 1514984 _____ (TeamSpeak Systems GmbH) C:\Program Files (x86)\update.exe
2015-10-22 11:20 - 2015-10-22 11:20 - 0520934 _____ () C:\Program Files (x86)\usb.ids
2015-11-08 20:24 - 2015-11-08 20:24 - 0000000 ____H () C:\Users\Gloriaflyx\AppData\Local\BITEEB2.tmp
2015-12-07 14:05 - 2015-12-07 14:05 - 0000000 ____H () C:\Users\Gloriaflyx\AppData\Local\BITF863.tmp
2014-03-24 11:50 - 2015-11-05 12:49 - 0010752 _____ () C:\Users\Gloriaflyx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-13 22:52 - 2014-03-13 22:52 - 0001434 _____ () C:\Users\Gloriaflyx\AppData\Local\RecConfig.xml
2016-05-01 21:51 - 2016-05-01 21:52 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{0B179D57-EBA9-4D85-B0A3-C14982A9ED52}
2015-10-26 15:04 - 2015-10-26 15:04 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{309B8B15-3C7F-4F34-B3F6-0066EA01FC36}
2016-05-11 20:19 - 2016-05-11 20:19 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{3CF62346-6D52-4520-A926-FB0B6E652FF3}
2016-04-22 14:12 - 2016-04-22 14:12 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{B01DDBE6-2D6A-4727-B346-D57950EA3E3A}
2015-11-08 20:23 - 2015-11-08 20:24 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{BAE73680-28A1-4D05-AD07-486B48904EAC}
2015-12-07 14:04 - 2015-12-07 14:05 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{D054697A-BAC1-4993-959D-79690D24E3EF}
2016-01-26 20:38 - 2016-01-26 20:38 - 0000000 _____ () C:\Users\Gloriaflyx\AppData\Local\{F1079BA0-943D-4D61-A261-CEFBF1919D56}
2017-05-17 17:56 - 2017-05-17 17:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-09-22 22:02 - 2015-09-22 22:02 - 0000106 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
2017-03-22 17:45 - 2017-03-22 17:45 - 0000016 _____ () C:\ProgramData\mntemp
2017-03-22 17:45 - 2017-03-22 17:45 - 0005041 _____ () C:\ProgramData\mudtcpaz.vzs

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-05-17 17:55

==================== Ende von FRST.txt ============================