Hallo zusammen. Zuerst muss ich sagen, dass ich nicht sonderlich bewandert in der Materie bin. Ich habe zwar ein Anti-Virus Programm auf dem Rechner (Kaspersky) und lasse auch immer mal den Scanner drüber laufen aber ansonsten nutze ich kaum Sicherheitsmaßnahmen. Normalerweise klicke ich aber nie auf irgendwas was mir auch nur entfernt merkwürdig erscheint. Diesmal dann leider schon. Ich habe auf meine Uni E-Mail Adresse eine Word Datei geschickt bekommen mit der Beschreibung "gescanntes Dokument". Diese Mail kam von einer offiziellen Uni E-Mail Adresse und ich habe dringend auf eine Antwort gewartet. Also habe ich unbedacht das Dokument angeklickt, doch dabei handelte es sich nur um eine Kopie des Textes aus der E-Mail. In der E-Mail selbst war auch noch ein Link den ich aber nicht angeklickt habe. Kurze Zeit später hat die Uni eine Rundmail rausgegeben, dass offizielle E-Mail Adressen benutzt werden würden, um anhand von Word Dokumenten Schadsoftware unter die Leute zu bringen. Heute konnte ich dann im Laufe des Tages mehrere Stunden lang nicht auf meine beiden web.de E-Mail Accounts zugreifen und es wurde mir immer wieder gesagt, dass das Passwort falsch wäre (was es nicht war). Inzwischen geht der Zugriff auf diese Konten wieder.
Anbei die Files der Scans von FRST und Malwarebytes. Der Log von AdwCleaner ist der erste von heute. Hab danach alles entfernt und der zweite hat nichts gefunden.

Bin für jede Hilfe dankbar!

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 03-10-2017 01
durchgeführt von Lasse (Administrator) auf LASSE-PC (05-10-2017 00:32:02)
Gestartet von C:\Users\Lasse\Desktop
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe" 
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1

Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-09-26]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default ->  Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-05]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-03]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-03]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-09-22]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1533448 2017-09-16] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186696 2017-10-05] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
S3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-05] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-05 00:21 - 2017-10-05 00:21 - 000055996 _____ C:\Users\Lasse\Desktop\Addition.txt
2017-10-05 00:20 - 2017-10-05 00:32 - 000025120 _____ C:\Users\Lasse\Desktop\FRST.txt
2017-10-05 00:20 - 2017-10-05 00:32 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-05 00:20 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-05 00:08 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-05 00:08 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-05 00:08 - 2017-09-27 09:37 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-05 00:06 - 2017-10-05 00:06 - 002399744 _____ (Farbar) C:\Users\Lasse\Desktop\FRST64.exe
2017-10-05 00:06 - 2017-10-05 00:03 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Desktop\AdwCleaner_7.0.3.1.exe
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasse****.zip
2017-09-26 04:58 - 2017-09-26 04:58 - 000290500 _____ C:\Users\Lasse\Desktop\bescheinigung_ausserfachliche_medienanalyse.pdf
2017-09-26 04:52 - 2017-09-26 04:50 - 000201219 _____ C:\Users\Lasse\Desktop\Die Auswirkungen von Premediation auf die Berichterstattung der Anschläge des 11. September 2001 - Lasse ****.pdf
2017-09-20 10:45 - 2017-09-20 10:45 - 001601996 _____ C:\Users\Lasse\Desktop\grusin-richard-premediation-affect-and-mediality-after-911.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:21 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-05 00:19 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:19 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-05 00:12 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-03 22:53 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-10-02 00:31 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-09-27 22:28 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-26 08:55 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-09-26 04:09 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-10 22:25 - 2017-09-03 21:12 - 000000000 ____D C:\Users\Lasse\Desktop\subs

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-10-04 23:57

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 03-10-2017 01
durchgeführt von Lasse (05-10-2017 00:32:21)
Gestartet von C:\Users\Lasse\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version:  - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version:  - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version:  - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version:  - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version:  - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version:  - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version:  - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version:  - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version:  - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version:  - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version:  - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version:  - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version:  - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version:  - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version:  - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version:  - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version:  - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version:  - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version:  - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite  (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version:  - Goldhawk Interactive)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-10-05 00:08 - 2017-09-27 09:37 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "XboxStat"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3524D57A-C4F3-4BA5-ACC3-4953B9C7E4CC}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{1DAD5E35-3E81-4B12-AD86-DFA84D8BF100}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{4AE4DBCB-745F-441A-8B57-9551B1B2C79B}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{9722A8B6-D401-4A0F-BC59-B705696159F0}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

18-09-2017 18:45:39 Geplanter Prüfpunkt
26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/05/2017 12:15:37 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/04/2017 11:58:08 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (10/04/2017 11:20:13 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/04/2017 12:23:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (10/03/2017 11:29:45 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/01/2017 11:35:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (10/01/2017 10:53:06 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/30/2017 07:51:37 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/29/2017 07:50:39 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/28/2017 09:14:51 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (10/05/2017 12:23:52 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/05/2017 12:18:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kaspersky Secure Connection Service 1.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BrYNSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberGhost 6 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "postgresql-8.4 - PostgreSQL Server 8.4" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2017-06-01 11:20:03.507
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-06-01 11:20:03.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.894
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.857
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 10:59:25.975
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-24 12:31:13.218
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-03-17 15:15:49.745
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.731
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.710
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.666
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 13314.24 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 29441.46 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.93 GB) (Free:62.04 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.92 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive i: () (Removable) (Total:28.64 GB) (Free:28.45 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 28.6 GB) (Disk ID: E9408431)
Partition 1: (Not Active) - (Size=28.6 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 05.10.17
Scan-Zeit: 00:08
Protokolldatei: 95726b86-a950-11e7-8a73-74d435fed1e4.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.207
Version des Aktualisierungspakets: 1.0.2899
Lizenz: Kostenlos

-Systemdaten-
Betriebssystem: Windows 10 (Build 14393.953)
CPU: x64
Dateisystem: NTFS
Benutzer: Lasse-PC\Lasse

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 492756
Erkannte Bedrohungen: 1
In die Quarantäne verschobene Bedrohungen: 1
Abgelaufene Zeit: 3 Min., 0 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 1
PUP.Optional.DownloadSponsor, C:\USERS\LASSE\DOWNLOADS\NETSPEEDMONITOR 64 BIT - CHIP-INSTALLER.EXE, In Quarantäne, [517], [413936],1.0.2899

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
         

# AdwCleaner 7.0.3.1 - Logfile created on Wed Oct 04 22:14:20 2017
# Updated on 2017/29/09 by Malwarebytes 
# Database: 09-29-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

PUP.Optional.Chip, chip1click


***** [ Folders ] *****

PUP.Optional.Legacy, C:\Users\Lasse\AppData\Local\StormFall
PUP.Optional.Chip, C:\Program Files (x86)\Chip Digital GmbH
PUP.Optional.Chip, C:\Users\Lasse\AppData\Local\Downloaded Installations\{DAD82379-C684-4D04-83D5-2B9934A9C362}
PUP.Optional.Chip, C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}


***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\Lasse\AppData\Local\Temp\Utils.dll


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Features\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
PUP.Optional.Vittalia, [Key] - HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Vittalia
PUP.Optional.Vittalia, [Key] - HKCU\Software\Vittalia
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
         

Mein Name ist Elisa und ich werde Dir bei Deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
• Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
• Poste die Logfiles direkt in deinen Thread in Code-Tags.
• Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Hast du die Passwörter von einem anderen Rechner geändert, wenn nicht, dann bitte nachholen. Hast du die .doc noch?


Schritt 1
Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers


Schritt 2
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Wurde bei beiden nichts gefunden.

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.10.08.03
  rootkit: v2017.09.13.01

Windows 10 x64 NTFS
Internet Explorer 11.953.14393.0
Lasse :: LASSE-PC [administrator]

08.10.2017 13:08:30
mbar-log-2017-10-08 (13-08-30).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 414137
Time elapsed: 13 minute(s), 24 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Muss den TDSSKiller Log in zwei Posts packen, weil er sonst zu lang ist.

13:22:17.0993 0x17a0  TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02
13:22:20.0948 0x17a0  ============================================================
13:22:20.0948 0x17a0  Current date / time: 2017/10/08 13:22:20.0948
13:22:20.0948 0x17a0  SystemInfo:
13:22:20.0948 0x17a0  
13:22:20.0948 0x17a0  OS Version: 10.0.14393 ServicePack: 0.0
13:22:20.0948 0x17a0  Product type: Workstation
13:22:20.0949 0x17a0  ComputerName: LASSE-PC
13:22:20.0949 0x17a0  UserName: Lasse
13:22:20.0949 0x17a0  Windows directory: C:\WINDOWS
13:22:20.0949 0x17a0  System windows directory: C:\WINDOWS
13:22:20.0949 0x17a0  Running under WOW64
13:22:20.0949 0x17a0  Processor architecture: Intel x64
13:22:20.0949 0x17a0  Number of processors: 8
13:22:20.0949 0x17a0  Page size: 0x1000
13:22:20.0949 0x17a0  Boot type: Normal boot
13:22:20.0949 0x17a0  CodeIntegrityOptions = 0x00000001
13:22:20.0949 0x17a0  ============================================================
13:22:21.0036 0x17a0  KLMD registered as C:\WINDOWS\system32\drivers\86543705.sys
13:22:21.0036 0x17a0  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.953, osProperties = 0x19
13:22:21.0206 0x17a0  System UUID: {77232110-8D79-4BBE-AF98-8E6241CA0269}
13:22:21.0552 0x17a0  Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:22:21.0552 0x17a0  Drive \Device\Harddisk1\DR1 - Size: 0x773C256000 ( 476.94 Gb ), SectorSize: 0x200, Cylinders: 0xF334, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:22:21.0574 0x17a0  Drive \Device\Harddisk3\DR3 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:22:25.0541 0x17a0  ============================================================
13:22:25.0541 0x17a0  \Device\Harddisk0\DR0:
13:22:25.0541 0x17a0  MBR partitions:
13:22:25.0541 0x17a0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
13:22:25.0541 0x17a0  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1DBDE800
13:22:25.0541 0x17a0  \Device\Harddisk1\DR1:
13:22:25.0542 0x17a0  MBR partitions:
13:22:25.0542 0x17a0  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3B9E0000
13:22:25.0542 0x17a0  \Device\Harddisk3\DR3:
13:22:25.0542 0x17a0  MBR partitions:
13:22:25.0542 0x17a0  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x2, BlocksNum 0x3A38602E
13:22:25.0542 0x17a0  ============================================================
13:22:25.0544 0x17a0  C: <-> \Device\Harddisk0\DR0\Partition2
13:22:25.0545 0x17a0  E: <-> \Device\Harddisk1\DR1\Partition1
13:22:25.0546 0x17a0  F: <-> \Device\Harddisk0\DR0\Partition1
13:22:25.0549 0x17a0  G: <-> \Device\Harddisk3\DR3\Partition1
13:22:25.0549 0x17a0  ============================================================
13:22:25.0550 0x17a0  Initialize success
13:22:25.0550 0x17a0  ============================================================
13:22:46.0683 0x3040  ============================================================
13:22:46.0683 0x3040  Scan started
13:22:46.0683 0x3040  Mode: Manual; SigCheck; TDLFS; 
13:22:46.0683 0x3040  ============================================================
13:22:46.0683 0x3040  KSN ping started
13:22:46.0803 0x3040  KSN ping finished: true
13:22:47.0987 0x3040  ================ Scan system memory ========================
13:22:47.0987 0x3040  System memory - ok
13:22:47.0987 0x3040  ================ Scan services =============================
13:22:48.0056 0x3040  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
13:22:48.0125 0x3040  1394ohci - ok
13:22:48.0136 0x3040  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
13:22:48.0146 0x3040  3ware - ok
13:22:48.0159 0x3040  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
13:22:48.0177 0x3040  ACPI - ok
13:22:48.0181 0x3040  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\WINDOWS\System32\drivers\AcpiDev.sys
13:22:48.0192 0x3040  AcpiDev - ok
13:22:48.0196 0x3040  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
13:22:48.0206 0x3040  acpiex - ok
13:22:48.0209 0x3040  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
13:22:48.0220 0x3040  acpipagr - ok
13:22:48.0223 0x3040  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
13:22:48.0234 0x3040  AcpiPmi - ok
13:22:48.0236 0x3040  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
13:22:48.0245 0x3040  acpitime - ok
13:22:48.0250 0x3040  [ 9B112FDA1D5FB7B75627461001AC692A, 2EDF7C8FD59CD5FCD19FA528F60CBD6DDB9A8076AE0280B11D8EA8EAF7D39958 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
13:22:48.0257 0x3040  AdobeARMservice - ok
13:22:48.0276 0x3040  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX         C:\WINDOWS\system32\drivers\ADP80XX.SYS
13:22:48.0301 0x3040  ADP80XX - ok
13:22:48.0313 0x3040  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD             C:\WINDOWS\system32\drivers\afd.sys
13:22:48.0330 0x3040  AFD - ok
13:22:48.0338 0x3040  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache         C:\WINDOWS\system32\DRIVERS\ahcache.sys
13:22:48.0354 0x3040  ahcache - ok
13:22:48.0357 0x3040  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\WINDOWS\System32\AJRouter.dll
13:22:48.0368 0x3040  AJRouter - ok
13:22:48.0372 0x3040  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\WINDOWS\System32\alg.exe
13:22:48.0385 0x3040  ALG - ok
13:22:48.0389 0x3040  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
13:22:48.0402 0x3040  AmdK8 - ok
13:22:48.0406 0x3040  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
13:22:48.0418 0x3040  AmdPPM - ok
13:22:48.0421 0x3040  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
13:22:48.0429 0x3040  amdsata - ok
13:22:48.0435 0x3040  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
13:22:48.0447 0x3040  amdsbs - ok
13:22:48.0450 0x3040  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
13:22:48.0458 0x3040  amdxata - ok
13:22:48.0461 0x3040  [ 5B0F4FB165256DE463A51E3A3127969E, 6751ADFFE95FA671C584427A9624EEB79518DE08132FD7A83148700B75487316 ] AppHostSvc      C:\WINDOWS\system32\inetsrv\apphostsvc.dll
13:22:48.0475 0x3040  AppHostSvc - ok
13:22:48.0480 0x3040  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\WINDOWS\system32\drivers\appid.sys
13:22:48.0489 0x3040  AppID - ok
13:22:48.0493 0x3040  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
13:22:48.0509 0x3040  AppIDSvc - ok
13:22:48.0513 0x3040  [ 79A87DD43331290A276C02DC396BF530, D0781DC027EE60C94831A2C9C3DD741F8F2100A253CD847E7FCFA59919014278 ] Appinfo         C:\WINDOWS\System32\appinfo.dll
13:22:48.0526 0x3040  Appinfo - ok
13:22:48.0529 0x3040  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr   C:\WINDOWS\system32\drivers\applockerfltr.sys
13:22:48.0541 0x3040  applockerfltr - ok
13:22:48.0552 0x3040  [ 32155E028491267CF2DB6085A0B7E359, 562831841293E4849CD01992DECE39B9B3C0835DCD352994CA2E2FE1C76A7CB3 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
13:22:48.0575 0x3040  AppReadiness - ok
13:22:48.0611 0x3040  [ 465CD915B245BB6B788A38BE19D47950, 36FA30C67D581FF158EF1D621938CF93102110635AC9298C6E002E7B87900EBD ] AppXSvc         C:\WINDOWS\system32\appxdeploymentserver.dll
13:22:48.0673 0x3040  AppXSvc - ok
13:22:48.0679 0x3040  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
13:22:48.0689 0x3040  arcsas - ok
13:22:48.0700 0x3040  [ 5EE26734A882478AF6696092E2E0F352, 6CACFF521B3B839F73EBEB6EFBFDCCA8A8BC319DDB254BE3EFE29A39040B2C26 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
13:22:48.0708 0x3040  aspnet_state - ok
13:22:48.0717 0x3040  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\WINDOWS\System32\drivers\asyncmac.sys
13:22:48.0729 0x3040  AsyncMac - ok
13:22:48.0732 0x3040  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
13:22:48.0739 0x3040  atapi - ok
13:22:48.0746 0x3040  [ 2DC3D53FFA0D10EB8C911AE2DB7BF4CF, 8E0A4B5D610D487A216E70396A99ACC1BEA12C46A6681B1A39CD0FD01EDD406A ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
13:22:48.0763 0x3040  AudioEndpointBuilder - ok
13:22:48.0779 0x3040  [ 7B993290E7691C446C16A56A431669BA, 004551934E27E9FC1A939C9BD1DEB850A216CBED9B18CB3317920F5656D9F6BF ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
13:22:48.0807 0x3040  Audiosrv - ok
13:22:48.0816 0x3040  [ 03B45C52179E8DAE51A0F685C30D06D6, E06F066B4BFE5344BBF5749B9B8B8CFBA0C02920FD2B9C73BDDA7E34F1785DA7 ] AVP17.0.0       C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
13:22:48.0827 0x3040  AVP17.0.0 - ok
13:22:48.0831 0x3040  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
13:22:48.0843 0x3040  AxInstSV - ok
13:22:48.0853 0x3040  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
13:22:48.0869 0x3040  b06bdrv - ok
13:22:48.0873 0x3040  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
13:22:48.0884 0x3040  BasicDisplay - ok
13:22:48.0887 0x3040  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
13:22:48.0900 0x3040  BasicRender - ok
13:22:48.0906 0x3040  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn           C:\WINDOWS\System32\drivers\bcmfn.sys
13:22:48.0923 0x3040  bcmfn - ok
13:22:48.0927 0x3040  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
13:22:48.0943 0x3040  bcmfn2 - ok
13:22:48.0957 0x3040  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
13:22:48.0980 0x3040  BDESVC - ok
13:22:48.0983 0x3040  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
13:22:48.0993 0x3040  Beep - ok
13:22:49.0019 0x3040  [ F2926650190022DB0700549B09FB7BD3, 70BDD5DCD7660436A413E3D41125DAA93A991058377DEE7C0028C2CFCB024C44 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
13:22:49.0059 0x3040  BEService - ok
13:22:49.0072 0x3040  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE             C:\WINDOWS\System32\bfe.dll
13:22:49.0099 0x3040  BFE - ok
13:22:49.0116 0x3040  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\WINDOWS\System32\qmgr.dll
13:22:49.0156 0x3040  BITS - ok
13:22:49.0161 0x3040  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
13:22:49.0173 0x3040  bowser - ok
13:22:49.0187 0x3040  [ 6A15C5140B6F7D9479A32276AC2BA108, 0A8C6DB88148C6DB61226DD2FF816BDF3FED9E7A60EF17CCA17FA7D9EEC01C71 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
13:22:49.0215 0x3040  BrokerInfrastructure - ok
13:22:49.0219 0x3040  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser         C:\WINDOWS\System32\browser.dll
13:22:49.0232 0x3040  Browser - ok
13:22:49.0238 0x3040  [ DB109DA005B6FE2A350C5DD7CA768DFD, 241A0BFAEFB1B165C00EE75E8CA382B5935F5DF447DAD5AE9022B2B78317668E ] BrYNSvc         C:\Program Files (x86)\Browny02\BrYNSvc.exe
13:22:49.0248 0x3040  BrYNSvc - detected UnsignedFile.Multi.Generic ( 1 )
13:22:49.0471 0x3040  Detect skipped due to KSN trusted
13:22:49.0471 0x3040  BrYNSvc - ok
13:22:49.0484 0x3040  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
13:22:49.0525 0x3040  BthAvrcpTg - ok
13:22:49.0531 0x3040  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
13:22:49.0549 0x3040  BthHFEnum - ok
13:22:49.0555 0x3040  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
13:22:49.0571 0x3040  bthhfhid - ok
13:22:49.0584 0x3040  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\WINDOWS\System32\BthHFSrv.dll
13:22:49.0614 0x3040  BthHFSrv - ok
13:22:49.0617 0x3040  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
13:22:49.0628 0x3040  BTHMODEM - ok
13:22:49.0634 0x3040  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv         C:\WINDOWS\system32\bthserv.dll
13:22:49.0648 0x3040  bthserv - ok
13:22:49.0651 0x3040  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
13:22:49.0663 0x3040  buttonconverter - ok
13:22:49.0667 0x3040  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys
13:22:49.0681 0x3040  CapImg - ok
13:22:49.0684 0x3040  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
13:22:49.0697 0x3040  cdfs - ok
13:22:49.0706 0x3040  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\WINDOWS\System32\CDPSvc.dll
13:22:49.0725 0x3040  CDPSvc - ok
13:22:49.0733 0x3040  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\WINDOWS\System32\CDPUserSvc.dll
13:22:49.0749 0x3040  CDPUserSvc - ok
13:22:49.0757 0x3040  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
13:22:49.0768 0x3040  cdrom - ok
13:22:49.0773 0x3040  [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
13:22:49.0786 0x3040  CertPropSvc - ok
13:22:49.0793 0x3040  [ 4DDD2AAF1814BE22C2305AED2EE91DB0, 5576A57CC661DDA2A816E613A2AA638140526FB2117C4EA0D7420525EC520DFA ] CG6Service      C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
13:22:49.0804 0x3040  CG6Service - ok
13:22:49.0811 0x3040  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi       C:\WINDOWS\system32\drivers\cht4sx64.sys
13:22:49.0823 0x3040  cht4iscsi - ok
13:22:49.0855 0x3040  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd         C:\WINDOWS\System32\drivers\cht4vx64.sys
13:22:49.0896 0x3040  cht4vbd - ok
13:22:49.0900 0x3040  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
13:22:49.0910 0x3040  circlass - ok
13:22:49.0917 0x3040  [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
13:22:49.0930 0x3040  CLFS - ok
13:22:49.0942 0x3040  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC         C:\WINDOWS\System32\ClipSVC.dll
13:22:49.0967 0x3040  ClipSVC - ok
13:22:49.0971 0x3040  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg           C:\WINDOWS\System32\drivers\registry.sys
13:22:49.0983 0x3040  clreg - ok
13:22:49.0989 0x3040  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
13:22:49.0997 0x3040  CmBatt - ok
13:22:50.0003 0x3040  [ B29A764A1E76473CD9D64C9438705C19, CD0497EB84DE60E1E491CA495AF981A8DFC4949BB373C1978CAF1BCF4321D30E ] cm_km           C:\WINDOWS\system32\DRIVERS\cm_km.sys
13:22:50.0011 0x3040  cm_km - ok
13:22:50.0023 0x3040  [ 43D1405674332A7883A68C27ACE08359, 789ACBF3A50904B47C847D9262F1BA00F837A7EF705BCC29EA85216DBC965288 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
13:22:50.0040 0x3040  CNG - ok
13:22:50.0043 0x3040  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist     C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
13:22:50.0050 0x3040  cnghwassist - ok
13:22:50.0065 0x3040  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
13:22:50.0073 0x3040  CompositeBus - ok
13:22:50.0075 0x3040  COMSysApp - ok
13:22:50.0078 0x3040  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
13:22:50.0086 0x3040  condrv - ok
13:22:50.0105 0x3040  [ 0E965F9D654C64EAA8970DE25AF32839, 91709A4561A9536B4A9B00BAB8D7B63D5B904065375AF37598C2B0A2C5A8E47C ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
13:22:50.0134 0x3040  CoreMessagingRegistrar - ok
13:22:50.0140 0x3040  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
13:22:50.0151 0x3040  CryptSvc - ok
13:22:50.0155 0x3040  [ 3BBD0073265DA6D3EFBA54B26E5D8236, 3C10C8BEC0D8AC41A3FBD589F41A83D6345C1FDD04B8B99063B2F5670CF10B18 ] dam             C:\WINDOWS\system32\drivers\dam.sys
13:22:50.0163 0x3040  dam - ok
13:22:50.0179 0x3040  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
13:22:50.0208 0x3040  DcomLaunch - ok
13:22:50.0213 0x3040  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\WINDOWS\system32\dcpsvc.dll
13:22:50.0228 0x3040  DcpSvc - ok
13:22:50.0238 0x3040  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
13:22:50.0261 0x3040  defragsvc - ok
13:22:50.0269 0x3040  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
13:22:50.0289 0x3040  DeviceAssociationService - ok
13:22:50.0293 0x3040  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
13:22:50.0307 0x3040  DeviceInstall - ok
13:22:50.0310 0x3040  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\WINDOWS\system32\DevQueryBroker.dll
13:22:50.0321 0x3040  DevQueryBroker - ok
13:22:50.0326 0x3040  [ 4BC21E937E9F9F408672D2C2CBE4A153, 2F27560D09D184ABB7B4415146F5B8DE56C84FF74A4042596635EF896E39CBC4 ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
13:22:50.0341 0x3040  Dfsc - ok
13:22:50.0346 0x3040  [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
13:22:50.0353 0x3040  dg_ssudbus - ok
13:22:50.0361 0x3040  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
13:22:50.0377 0x3040  Dhcp - ok
13:22:50.0382 0x3040  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
13:22:50.0394 0x3040  diagnosticshub.standardcollector.service - ok
13:22:50.0424 0x3040  [ A9122954D36E4EDFA3E3DB35DCA9E048, 350692BEE164CED1E0BD1A71D1BC90D5B6E0B0A5D1CB6633D115C58FF8A09B92 ] DiagTrack       C:\WINDOWS\system32\diagtrack.dll
13:22:50.0476 0x3040  DiagTrack - ok
13:22:50.0481 0x3040  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\WINDOWS\system32\drivers\disk.sys
13:22:50.0489 0x3040  disk - ok
13:22:50.0498 0x3040  [ 00DF9E7ACB0376294E3D602AB6625B3E, 1D53DF89826A71FEC48B7602DD2F3E3B09024782B3CC5C787517DC374CC586C8 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
13:22:50.0518 0x3040  DmEnrollmentSvc - ok
13:22:50.0521 0x3040  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
13:22:50.0532 0x3040  dmvsc - ok
13:22:50.0535 0x3040  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
13:22:50.0548 0x3040  dmwappushservice - ok
13:22:50.0555 0x3040  [ 86E507EE1457D7FA463BBF05BA76EB1E, 2D2D05CED57C22F41684DC6DD00ACECDF708407493286B2D4007068154E436FF ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
13:22:50.0569 0x3040  Dnscache - ok
13:22:50.0576 0x3040  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
13:22:50.0592 0x3040  dot3svc - ok
13:22:50.0597 0x3040  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS             C:\WINDOWS\system32\dps.dll
13:22:50.0611 0x3040  DPS - ok
13:22:50.0614 0x3040  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud         C:\WINDOWS\system32\DRIVERS\drmkaud.sys
13:22:50.0621 0x3040  drmkaud - ok
13:22:50.0626 0x3040  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
13:22:50.0644 0x3040  DsmSvc - ok
13:22:50.0648 0x3040  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc           C:\WINDOWS\System32\DsSvc.dll
13:22:50.0662 0x3040  DsSvc - ok
13:22:50.0698 0x3040  [ 928E2749E01AEB9948F5D548B1F0C116, FBBC525306E6CE387BAF3DDD8145FD8AADDEFB2DC93E5692A8ED7F116C3EDD08 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
13:22:50.0739 0x3040  DXGKrnl - ok
13:22:50.0751 0x3040  [ 83E4A14F851341C933C3235BFB882ECA, 152EDEF6B566D010FE519FE4B046050A5281069B48AFF8A2395D7D2BD0519701 ] e1iexpress      C:\WINDOWS\System32\drivers\e1i63x64.sys
13:22:50.0772 0x3040  e1iexpress - ok
13:22:50.0776 0x3040  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost         C:\WINDOWS\System32\eapsvc.dll
13:22:50.0790 0x3040  EapHost - ok
13:22:50.0857 0x3040  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
13:22:50.0918 0x3040  ebdrv - ok
13:22:50.0924 0x3040  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS             C:\WINDOWS\System32\lsass.exe
13:22:50.0932 0x3040  EFS - ok
13:22:50.0935 0x3040  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
13:22:50.0944 0x3040  EhStorClass - ok
13:22:50.0948 0x3040  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
13:22:50.0957 0x3040  EhStorTcgDrv - ok
13:22:50.0961 0x3040  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\WINDOWS\System32\embeddedmodesvc.dll
13:22:50.0974 0x3040  embeddedmode - ok
13:22:50.0981 0x3040  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc       C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
13:22:50.0998 0x3040  EntAppSvc - ok
13:22:51.0003 0x3040  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
13:22:51.0025 0x3040  ErrDev - ok
13:22:51.0040 0x3040  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem     C:\WINDOWS\system32\es.dll
13:22:51.0067 0x3040  EventSystem - ok
13:22:51.0076 0x3040  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
13:22:51.0095 0x3040  exfat - ok
13:22:51.0103 0x3040  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
13:22:51.0115 0x3040  fastfat - ok
13:22:51.0126 0x3040  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax             C:\WINDOWS\system32\fxssvc.exe
13:22:51.0150 0x3040  Fax - ok
13:22:51.0154 0x3040  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
13:22:51.0163 0x3040  fdc - ok
13:22:51.0165 0x3040  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
13:22:51.0177 0x3040  fdPHost - ok
13:22:51.0180 0x3040  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
13:22:51.0191 0x3040  FDResPub - ok
13:22:51.0196 0x3040  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
13:22:51.0209 0x3040  fhsvc - ok
13:22:51.0214 0x3040  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt       C:\WINDOWS\system32\drivers\filecrypt.sys
13:22:51.0226 0x3040  FileCrypt - ok
13:22:51.0229 0x3040  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
13:22:51.0237 0x3040  FileInfo - ok
13:22:51.0240 0x3040  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
13:22:51.0251 0x3040  Filetrace - ok
13:22:51.0254 0x3040  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
13:22:51.0263 0x3040  flpydisk - ok
13:22:51.0271 0x3040  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
13:22:51.0283 0x3040  FltMgr - ok
13:22:51.0311 0x3040  [ 2E193D24CE8460A9C703D0F193192BEF, CD95928BC240D556DFEA265A09A655FFE157A36D2230CD10BBAD4CA15CB98412 ] FontCache       C:\WINDOWS\system32\FntCache.dll
13:22:51.0360 0x3040  FontCache - ok
13:22:51.0365 0x3040  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
13:22:51.0372 0x3040  FontCache3.0.0.0 - ok
13:22:51.0385 0x3040  [ CD7CD19E72EA2F597D01FC68ECD2F28E, 4E8BAA4AEF28B043780E2FEFFEB5E4DF4E2FB3211CE617D2DBAFB6C7B7DBBDFD ] FrameServer     C:\WINDOWS\system32\FrameServer.dll
13:22:51.0412 0x3040  FrameServer - ok
13:22:51.0417 0x3040  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
13:22:51.0424 0x3040  FsDepends - ok
13:22:51.0427 0x3040  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:22:51.0434 0x3040  Fs_Rec - ok
13:22:51.0445 0x3040  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
13:22:51.0463 0x3040  fvevol - ok
13:22:51.0466 0x3040  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
13:22:51.0476 0x3040  gencounter - ok
13:22:51.0479 0x3040  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\WINDOWS\System32\drivers\genericusbfn.sys
13:22:51.0489 0x3040  genericusbfn - ok
13:22:51.0494 0x3040  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
13:22:51.0503 0x3040  GPIOClx0101 - ok
13:22:51.0524 0x3040  [ 8997353398C8466ECD183942D5FCC65B, C73FD5FFD71003F7FDDC17F59812BD6860992FA35EC0ECC8DE37D935606B485B ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
13:22:51.0569 0x3040  gpsvc - ok
13:22:51.0572 0x3040  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\WINDOWS\system32\drivers\gpuenergydrv.sys
13:22:51.0582 0x3040  GpuEnergyDrv - ok
13:22:51.0586 0x3040  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:22:51.0606 0x3040  gupdate - ok
13:22:51.0609 0x3040  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:22:51.0613 0x3040  gupdatem - ok
13:22:51.0617 0x3040  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
13:22:51.0629 0x3040  HDAudBus - ok
13:22:51.0631 0x3040  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
13:22:51.0638 0x3040  HidBatt - ok
13:22:51.0642 0x3040  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
13:22:51.0652 0x3040  HidBth - ok
13:22:51.0655 0x3040  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
13:22:51.0665 0x3040  hidi2c - ok
13:22:51.0668 0x3040  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\WINDOWS\System32\drivers\hidinterrupt.sys
13:22:51.0675 0x3040  hidinterrupt - ok
13:22:51.0680 0x3040  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
13:22:51.0689 0x3040  HidIr - ok
13:22:51.0693 0x3040  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv         C:\WINDOWS\system32\hidserv.dll
13:22:51.0704 0x3040  hidserv - ok
13:22:51.0707 0x3040  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
13:22:51.0718 0x3040  HidUsb - ok
13:22:51.0725 0x3040  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
13:22:51.0741 0x3040  HomeGroupListener - ok
13:22:51.0750 0x3040  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
13:22:51.0771 0x3040  HomeGroupProvider - ok
13:22:51.0774 0x3040  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
13:22:51.0782 0x3040  HpSAMD - ok
13:22:51.0800 0x3040  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
13:22:51.0824 0x3040  HTTP - ok
13:22:51.0828 0x3040  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\WINDOWS\System32\hvhostsvc.dll
13:22:51.0840 0x3040  HvHost - ok
13:22:51.0843 0x3040  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice       C:\WINDOWS\system32\drivers\hvservice.sys
13:22:51.0852 0x3040  hvservice - ok
13:22:51.0854 0x3040  [ EF558A02D734A1403583E95CCEEC2487, F0D052DAF48A62E4A90D067BFCB5EE9563804DE68D0EA82E0E11C8D16AD19D29 ] HWiNFO32        C:\WINDOWS\system32\drivers\HWiNFO64A.SYS
13:22:51.0861 0x3040  HWiNFO32 - ok
13:22:51.0864 0x3040  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
13:22:51.0871 0x3040  hwpolicy - ok
13:22:51.0873 0x3040  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
13:22:51.0881 0x3040  hyperkbd - ok
13:22:51.0885 0x3040  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
13:22:51.0899 0x3040  i8042prt - ok
13:22:51.0902 0x3040  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\WINDOWS\System32\drivers\iagpio.sys
13:22:51.0911 0x3040  iagpio - ok
13:22:51.0915 0x3040  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c           C:\WINDOWS\System32\drivers\iai2c.sys
13:22:51.0925 0x3040  iai2c - ok
13:22:51.0928 0x3040  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
13:22:51.0938 0x3040  iaLPSS2i_GPIO2 - ok
13:22:51.0943 0x3040  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
13:22:51.0952 0x3040  iaLPSS2i_I2C - ok
13:22:51.0956 0x3040  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
13:22:51.0962 0x3040  iaLPSSi_GPIO - ok
13:22:51.0966 0x3040  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
13:22:51.0977 0x3040  iaLPSSi_I2C - ok
13:22:51.0989 0x3040  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
13:22:52.0007 0x3040  iaStorAV - ok
13:22:52.0015 0x3040  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
13:22:52.0028 0x3040  iaStorV - ok
13:22:52.0039 0x3040  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus           C:\WINDOWS\System32\drivers\ibbus.sys
13:22:52.0054 0x3040  ibbus - ok
13:22:52.0059 0x3040  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\WINDOWS\System32\tetheringservice.dll
13:22:52.0075 0x3040  icssvc - ok
13:22:52.0092 0x3040  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
13:22:52.0120 0x3040  IKEEXT - ok
13:22:52.0124 0x3040  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd     C:\WINDOWS\System32\drivers\IndirectKmd.sys
13:22:52.0135 0x3040  IndirectKmd - ok
13:22:52.0194 0x3040  [ 1747CAA9AB414DEC0FF38CDEBD3A7418, 0B647EF6FFF1E02DAD8B4C764A4A00430898BD089304D52BC05E0D99E80F1236 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
13:22:52.0253 0x3040  IntcAzAudAddService - ok
13:22:52.0271 0x3040  [ 5E7F2CE9E9BF48521298D1C6729145C5, 0FD2350D5A26EDEA4F83F2E3D22FD0047AEA4623096C6FF7A70F8248B185FBC8 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
13:22:52.0288 0x3040  Intel(R) Capability Licensing Service TCP IP Interface - ok
13:22:52.0295 0x3040  [ FA6094444A7DC90449800F964E0A8668, A6DCF395649FA185596D55713888922BA2A61D96AD0D5E7860FD47EE30B7E4CF ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
13:22:52.0303 0x3040  Intel(R) PROSet Monitoring Service - ok
13:22:52.0306 0x3040  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
13:22:52.0313 0x3040  intelide - ok
13:22:52.0316 0x3040  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
13:22:52.0324 0x3040  intelpep - ok
13:22:52.0328 0x3040  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
13:22:52.0339 0x3040  intelppm - ok
13:22:52.0342 0x3040  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\WINDOWS\system32\drivers\iorate.sys
13:22:52.0350 0x3040  iorate - ok
13:22:52.0353 0x3040  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:22:52.0364 0x3040  IpFilterDriver - ok
13:22:52.0380 0x3040  [ 68C50E8E4265698BE6835156F4DD5008, 5B9CBBCE99315E5569E6733F13E91A687A36F536A68A2B670CC24C4BCC4EAFF4 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
13:22:52.0412 0x3040  iphlpsvc - ok
13:22:52.0417 0x3040  [ 10D01A3657AC8E8004C83D613163DE1E, F9389F1BF87A2D28899F50D270DA6F48B0912CFAF06CEE566697B041DBE92F9C ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
13:22:52.0426 0x3040  IPMIDRV - ok
13:22:52.0432 0x3040  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
13:22:52.0446 0x3040  IPNAT - ok
13:22:52.0451 0x3040  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\WINDOWS\system32\drivers\irda.sys
13:22:52.0465 0x3040  irda - ok
13:22:52.0468 0x3040  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
13:22:52.0476 0x3040  IRENUM - ok
13:22:52.0479 0x3040  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon           C:\WINDOWS\System32\irmon.dll
13:22:52.0489 0x3040  irmon - ok
13:22:52.0492 0x3040  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
13:22:52.0500 0x3040  isapnp - ok
13:22:52.0506 0x3040  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
13:22:52.0517 0x3040  iScsiPrt - ok
13:22:52.0522 0x3040  [ 1C3EF75B521DB60E951711440648B0D5, 95F594ADB6CCDE5CB7E0601B90A611D3A39485419D078CEB6DB84FFC0AC7E6A7 ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
13:22:52.0529 0x3040  jhi_service - ok
13:22:52.0533 0x3040  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
13:22:52.0540 0x3040  kbdclass - ok
13:22:52.0543 0x3040  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
13:22:52.0555 0x3040  kbdhid - ok
13:22:52.0558 0x3040  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic           C:\WINDOWS\System32\drivers\kdnic.sys
13:22:52.0568 0x3040  kdnic - ok
13:22:52.0571 0x3040  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\WINDOWS\system32\lsass.exe
13:22:52.0579 0x3040  KeyIso - ok
13:22:52.0589 0x3040  [ 97E3E8F35632EECD0ABD2DE6519A9666, ABE96FDEB1076E380D7FB4975C020B43ED4E821097EFC6AFE8C75D764167D6E8 ] kl1             C:\WINDOWS\system32\DRIVERS\kl1.sys
13:22:52.0602 0x3040  kl1 - ok
13:22:52.0606 0x3040  [ B01AD8DA034EE42D4C2282F77FDB03AE, 3FF55F3CEE4A0E5D559F04F5A639297EA0F36580720E94CF9DD56DEBF2E98F39 ] klbackupdisk    C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys
13:22:52.0612 0x3040  klbackupdisk - ok
13:22:52.0616 0x3040  [ 10549B5BFD9A3DCF4FFA6287236FA959, 6BDFA335A8E3A69425CB23230660D3168CB82911ACB3AAAF85C19263511EAF51 ] klbackupflt     C:\WINDOWS\system32\DRIVERS\klbackupflt.sys
13:22:52.0622 0x3040  klbackupflt - ok
13:22:52.0625 0x3040  [ 7DAA9047F50BF5A3F8C147719FC520AF, 0740387075AF46DB1E9AEE3B12C65A06EDFE58EADB8B562C36CB1FEFF9905C26 ] kldisk          C:\WINDOWS\system32\DRIVERS\kldisk.sys
13:22:52.0631 0x3040  kldisk - ok
13:22:52.0634 0x3040  [ 5766A27C85EE813029831D125D2EFB45, BB5BAFD5A58E80C7F0B8D24121352E0386B3422FFC16B56F1D1B1C6A482AC9F0 ] klelam          C:\WINDOWS\system32\DRIVERS\klelam.sys
13:22:52.0643 0x3040  klelam - ok
13:22:52.0648 0x3040  [ 10F22365381D41EBD3BB08A7BEA15CDD, 02ACFF8E88307076AB97B937081296ABCDEF05BB1AEAA359E60148BA70B4A0BB ] klflt           C:\WINDOWS\system32\DRIVERS\klflt.sys
13:22:52.0656 0x3040  klflt - ok
13:22:52.0667 0x3040  [ 368E5BE52E16307F41C014EE850EE67F, 89125F851D75779535CAE46C9985FDA4AA23E6C5A1CA485A6195F950E730A018 ] klhk            C:\WINDOWS\System32\drivers\klhk.sys
13:22:52.0679 0x3040  klhk - ok
13:22:52.0687 0x3040  [ BD140112BE2AE22B9912206407AD76A4, 63BC0ADFE54BF101DC197C95168980E7E79C5280CB112400C5BD60DA904D7A10 ] klids           C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys
13:22:52.0695 0x3040  klids - ok
13:22:52.0712 0x3040  [ A1DF9BDEDC9105F6085751CC2168F664, 61DC8F730A3721D5B5EF9440FED4E43EC651AB1D051535D9A2C960DD420B3C8A ] KLIF            C:\WINDOWS\system32\DRIVERS\klif.sys
13:22:52.0731 0x3040  KLIF - ok
13:22:52.0735 0x3040  [ 6357C533C30650361110DBAF59A25DF8, FA8CF6292CCBC7E23527D968E54CD773706CF091E35563B0CF9F8A1DF0B724B9 ] KLIM6           C:\WINDOWS\system32\DRIVERS\klim6.sys
13:22:52.0741 0x3040  KLIM6 - ok
13:22:52.0744 0x3040  [ 5480CC93737F48282552C84FA7EBA59B, B7D92424399B647132F6B9409FE75EAA310C984F796FC0B65BBE2EA180110968 ] klkbdflt        C:\WINDOWS\system32\DRIVERS\klkbdflt.sys
13:22:52.0750 0x3040  klkbdflt - ok
13:22:52.0753 0x3040  [ FD47C92A63B6EADEA830BFA96C06EAEE, C15C39B6FA53CBD01A2F95243845C4B706B4229F8FFB75C7128819B9CEE5B2CB ] klmouflt        C:\WINDOWS\system32\DRIVERS\klmouflt.sys
13:22:52.0759 0x3040  klmouflt - ok
13:22:52.0763 0x3040  [ 6B0C605591C892CBB683F63EA47822DC, E74C0A0501A1B4B56B417402108521F34DA6A23FCD1C05E4E524E41EBA0906FF ] klpd            C:\WINDOWS\system32\DRIVERS\klpd.sys
13:22:52.0768 0x3040  klpd - ok
13:22:52.0771 0x3040  [ 828B042A95F055648DA190DF6C7AB1B6, 0457B0EF03BCB4CC1297EB25A25C162937F456BF406EC7B1A5E9A0AA13A9BCD7 ] kltap           C:\WINDOWS\System32\drivers\kltap.sys
13:22:52.0777 0x3040  kltap - ok
13:22:52.0783 0x3040  [ 097D722294B9C1FA6E514A088F2E6B6E, FB0492CAF45FDF7F656CFF6662309435679C946269577ECF76A3077B7D7F940B ] klupd_klif_arkmon C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
13:22:52.0791 0x3040  klupd_klif_arkmon - ok
13:22:52.0795 0x3040  [ A7E26109DE0E310EEE5CFEEA9E821DCA, D81C23CA254F9B96AF59A719BE8F7FB822D6272CF9A8DADACAC39C24008FDC00 ] klupd_klif_kimul C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
13:22:52.0801 0x3040  klupd_klif_kimul - ok
13:22:52.0806 0x3040  [ 6A80ECDC10138AC34E48A4BE684E06F9, DF8BD9139B82614614D9E1B5DAEA74E4DF4D5CE95F11ED503FD3B8E07722A1CA ] klupd_klif_klark C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
13:22:52.0815 0x3040  klupd_klif_klark - ok
13:22:52.0819 0x3040  [ EBC5ACF5F373981161752650BC17DD4E, 892A6758F5C7589D38A6A01D08F7B3F6D144591E0D3337C0E4B2CA9B66C70C37 ] klupd_klif_klbg C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
13:22:52.0826 0x3040  klupd_klif_klbg - ok
13:22:52.0830 0x3040  [ D0B29808F37C6F6373AB16B716D9A1F8, 82E5760F0A313E43E3B9AF44E2A811021B84E7954CB5DC1462C7033AAEA8AF4B ] klupd_klif_mark C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
13:22:52.0838 0x3040  klupd_klif_mark - ok
13:22:52.0845 0x3040  [ D7F0B46844565E2ED68AC99AF0F4263F, AB419CBC29F96703237127AC4178A5365D4CCA010BAB1BD66D100D635E6E89B8 ] klvssbrigde64   C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe
13:22:52.0851 0x3040  klvssbrigde64 - ok
13:22:52.0855 0x3040  [ 4C5305295B51BA72FC9C8CDAB32F95C3, 0E5850AC4CA14D971E7B04FED23CB2F6CEEE2796E905AADA0104677982ECD58A ] klwfp           C:\WINDOWS\system32\DRIVERS\klwfp.sys
13:22:52.0862 0x3040  klwfp - ok
13:22:52.0866 0x3040  [ 4799405773BB400A2FF96663CF0EE4A2, F7650B80AC388675724D9A43D709FF9CCDE99374D7C5E3B900F61FC61D6816D2 ] Klwtp           C:\WINDOWS\system32\DRIVERS\klwtp.sys
13:22:52.0873 0x3040  Klwtp - ok
13:22:52.0878 0x3040  [ 2426B9215884C60F7E021AA94827DC57, 7030B40B3AD6012CB4B6B42D36F5A69C146A7A4B948FB2D29E9AFF6DF46202CA ] kneps           C:\WINDOWS\system32\DRIVERS\kneps.sys
13:22:52.0886 0x3040  kneps - ok
13:22:52.0892 0x3040  [ EFF5EA6088DB81C6EF6EDCDA5EE79909, 4D364B0BF012C335FA3B25BDF042D4AF672D961B9B48CB7C5BE34FCFD1D64979 ] KSDE1.0.0       C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
13:22:52.0900 0x3040  KSDE1.0.0 - ok
13:22:52.0904 0x3040  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
13:22:52.0913 0x3040  KSecDD - ok
13:22:52.0918 0x3040  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
13:22:52.0928 0x3040  KSecPkg - ok
13:22:52.0930 0x3040  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
13:22:52.0943 0x3040  ksthunk - ok
13:22:52.0951 0x3040  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
13:22:52.0970 0x3040  KtmRm - ok
13:22:52.0976 0x3040  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
13:22:52.0992 0x3040  LanmanServer - ok
13:22:52.0999 0x3040  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
13:22:53.0014 0x3040  LanmanWorkstation - ok
13:22:53.0018 0x3040  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc           C:\WINDOWS\System32\lfsvc.dll
13:22:53.0029 0x3040  lfsvc - ok
13:22:53.0031 0x3040  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\WINDOWS\system32\LicenseManagerSvc.dll
13:22:53.0043 0x3040  LicenseManager - ok
13:22:53.0046 0x3040  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\WINDOWS\system32\drivers\lltdio.sys
13:22:53.0059 0x3040  lltdio - ok
13:22:53.0065 0x3040  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
13:22:53.0079 0x3040  lltdsvc - ok
13:22:53.0082 0x3040  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
13:22:53.0092 0x3040  lmhosts - ok
13:22:53.0100 0x3040  [ 631ABC3E8FF50F9B70B9A52568B1F5F6, 9F3286C95A2D2BFA0D7082F648E2FBBA339C06188F950AE1FE3A797B644AD813 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
13:22:53.0111 0x3040  LMS - ok
13:22:53.0116 0x3040  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
13:22:53.0125 0x3040  LSI_SAS - ok
13:22:53.0129 0x3040  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i       C:\WINDOWS\system32\drivers\lsi_sas2i.sys
13:22:53.0137 0x3040  LSI_SAS2i - ok
13:22:53.0141 0x3040  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i       C:\WINDOWS\system32\drivers\lsi_sas3i.sys
13:22:53.0149 0x3040  LSI_SAS3i - ok
13:22:53.0153 0x3040  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
13:22:53.0162 0x3040  LSI_SSS - ok
13:22:53.0174 0x3040  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM             C:\WINDOWS\System32\lsm.dll
13:22:53.0198 0x3040  LSM - ok
13:22:53.0203 0x3040  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
13:22:53.0216 0x3040  luafv - ok
13:22:53.0219 0x3040  [ 9F699136FA1A8A170C2C05D7790A5FC0, 4363C527BD2FC9FD8937E9866CA200809AC87B64EA57084491BAB6DEB8ED9E87 ] MapsBroker      C:\WINDOWS\System32\moshost.dll
13:22:53.0232 0x3040  MapsBroker - ok
13:22:53.0339 0x3040  [ FEAF4E98C93BC3512B8108D2F534A3BA, 6D93EF21DB9BFFACC1241E823F9BB7719B9395D64BBF952874CFF015B7930D92 ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
13:22:53.0427 0x3040  MBAMService - ok
13:22:53.0438 0x3040  [ EAC1189D80DE42C84066BA51DAC1A3C0, FA6E28AEE1DF43D4276461A91DEA8BE6937F07C818EA015594911CE5FB393808 ] MBAMSwissArmy   C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
13:22:53.0447 0x3040  MBAMSwissArmy - ok
13:22:53.0450 0x3040  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
13:22:53.0458 0x3040  megasas - ok
13:22:53.0461 0x3040  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\WINDOWS\system32\drivers\MegaSas2i.sys
13:22:53.0469 0x3040  megasas2i - ok
13:22:53.0479 0x3040  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
13:22:53.0509 0x3040  megasr - ok
13:22:53.0515 0x3040  [ 1BC9159CF58BABD89419072EA180A8F6, 6C9AB779C2355A341800A8F93AAAF9B19FAFF444CD6A7BD27C63D53F379A75EF ] MEIx64          C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys
13:22:53.0522 0x3040  MEIx64 - ok
13:22:53.0525 0x3040  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
13:22:53.0536 0x3040  MessagingService - ok
13:22:53.0551 0x3040  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\WINDOWS\System32\drivers\mlx4_bus.sys
13:22:53.0571 0x3040  mlx4_bus - ok
13:22:53.0575 0x3040  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS           C:\WINDOWS\system32\drivers\mmcss.sys
13:22:53.0586 0x3040  MMCSS - ok
13:22:53.0589 0x3040  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem           C:\WINDOWS\system32\drivers\modem.sys
13:22:53.0601 0x3040  Modem - ok
13:22:53.0604 0x3040  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
13:22:53.0613 0x3040  monitor - ok
13:22:53.0616 0x3040  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
13:22:53.0624 0x3040  mouclass - ok
13:22:53.0627 0x3040  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
13:22:53.0638 0x3040  mouhid - ok
13:22:53.0641 0x3040  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
13:22:53.0650 0x3040  mountmgr - ok
13:22:53.0654 0x3040  [ D57B7C101A8216E7769B14645AFEB276, 38BF427F81589173D3CD823A7BD3CA84B0FADD6747467E7AEADB72D1F4E1404B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
13:22:53.0662 0x3040  MozillaMaintenance - ok
13:22:53.0666 0x3040  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
13:22:53.0677 0x3040  mpsdrv - ok
13:22:53.0693 0x3040  [ A231E1861F7AA9CCC24B97176BBA838D, CDAB9A25CC55B71E8A83E50504B12E948D7A88F035918E4F94E3624E4AA0A28D ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
13:22:53.0721 0x3040  MpsSvc - ok
13:22:53.0727 0x3040  [ 4FC62380457DE25B69011D3542E954AC, D212DDD2446618A6215CF9FC370FA2634F027BC92D1D4999E019BEF8A86AA6EB ] MQAC            C:\WINDOWS\system32\drivers\mqac.sys
13:22:53.0742 0x3040  MQAC - ok
13:22:53.0746 0x3040  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
13:22:53.0760 0x3040  MRxDAV - ok
13:22:53.0769 0x3040  [ D559FF28B1AD9B1E15A4186E785E61F6, 4B22A740E86CA10B1B43E36CBE9A50B53D1E5504C25694C8FF3A514DF699E99C ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:22:53.0783 0x3040  mrxsmb - ok
13:22:53.0789 0x3040  [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
13:22:53.0806 0x3040  mrxsmb10 - ok
13:22:53.0811 0x3040  [ 0698B15E21EA1B8742F2E7BB3142B754, 0DB79841E863F08452F895DA47CEEF6CA4D527A616EB616FDFF5F7431487E5F7 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
13:22:53.0822 0x3040  mrxsmb20 - ok
13:22:53.0831 0x3040  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\WINDOWS\system32\drivers\bridge.sys
13:22:53.0842 0x3040  MsBridge - ok
13:22:53.0846 0x3040  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
13:22:53.0858 0x3040  MSDTC - ok
13:22:53.0863 0x3040  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
13:22:53.0872 0x3040  Msfs - ok
13:22:53.0875 0x3040  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
13:22:53.0883 0x3040  msgpiowin32 - ok
13:22:53.0885 0x3040  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
13:22:53.0894 0x3040  mshidkmdf - ok
13:22:53.0897 0x3040  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
13:22:53.0907 0x3040  mshidumdf - ok
13:22:53.0910 0x3040  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
13:22:53.0917 0x3040  msisadrv - ok
13:22:53.0921 0x3040  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
13:22:53.0936 0x3040  MSiSCSI - ok
13:22:53.0938 0x3040  msiserver - ok
13:22:53.0941 0x3040  [ 4586CDA25B7866DD9505CEECF9DB3C74, B94CE1A7C1B6FFEF7AA33AEC30C27E01E44E6E56A4274705684BFBB738F95BCF ] MSKSSRV         C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
13:22:53.0952 0x3040  MSKSSRV - ok
13:22:53.0955 0x3040  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\WINDOWS\system32\drivers\mslldp.sys
13:22:53.0967 0x3040  MsLldp - ok
13:22:53.0970 0x3040  [ F3EF38D07A4ADCDF922EEEAF0FED7D4D, B9D436BFA29AA0A7B00889D96C4F8BC33C1809E19B7A71A69AB2E534E9794BF0 ] MSMQ            C:\WINDOWS\system32\mqsvc.exe
13:22:53.0979 0x3040  MSMQ - ok
13:22:53.0982 0x3040  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
13:22:53.0994 0x3040  MSPCLOCK - ok
13:22:53.0997 0x3040  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM           C:\WINDOWS\system32\DRIVERS\MSPQM.sys
13:22:54.0009 0x3040  MSPQM - ok
13:22:54.0016 0x3040  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
13:22:54.0029 0x3040  MsRPC - ok
13:22:54.0033 0x3040  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
13:22:54.0041 0x3040  mssmbios - ok
13:22:54.0043 0x3040  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE           C:\WINDOWS\system32\DRIVERS\MSTEE.sys
13:22:54.0056 0x3040  MSTEE - ok
13:22:54.0059 0x3040  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
13:22:54.0068 0x3040  MTConfig - ok
13:22:54.0072 0x3040  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
13:22:54.0080 0x3040  Mup - ok
13:22:54.0084 0x3040  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
13:22:54.0092 0x3040  mvumis - ok
13:22:54.0103 0x3040  [ A5FA29F748BBF38FC3FAE4B54FA20A93, 8912F08967CFDD2A74593C9D23F43D6487D1920969C380B39BA8EA4672B24C3B ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
13:22:54.0123 0x3040  NativeWifiP - ok
13:22:54.0137 0x3040  [ 4DF6F43F761A600208F90A55D05F9B7E, AC93B4497FB428F7EC42DCF5956A2A61B951394E555BF6C89E55943E0B681586 ] NAUpdate        C:\Program Files (x86)\Nero\Update\NASvc.exe
13:22:54.0151 0x3040  NAUpdate - ok
13:22:54.0157 0x3040  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
13:22:54.0171 0x3040  NcaSvc - ok
13:22:54.0178 0x3040  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
13:22:54.0195 0x3040  NcbService - ok
13:22:54.0199 0x3040  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
13:22:54.0215 0x3040  NcdAutoSetup - ok
13:22:54.0219 0x3040  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\WINDOWS\System32\drivers\ndfltr.sys
13:22:54.0227 0x3040  ndfltr - ok
13:22:54.0247 0x3040  [ 3B41B4CF8F3F7C4041AC516830561533, 1EA616164AF9EA6B5DEC569DD255CB81C9EC3D4288E214CD8EE72C334ADEA3B8 ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
13:22:54.0273 0x3040  NDIS - ok
13:22:54.0277 0x3040  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap         C:\WINDOWS\system32\drivers\ndiscap.sys
13:22:54.0287 0x3040  NdisCap - ok
13:22:54.0292 0x3040  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\WINDOWS\system32\drivers\NdisImPlatform.sys
13:22:54.0303 0x3040  NdisImPlatform - ok
13:22:54.0306 0x3040  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:22:54.0318 0x3040  NdisTapi - ok
13:22:54.0321 0x3040  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio         C:\WINDOWS\system32\drivers\ndisuio.sys
13:22:54.0332 0x3040  Ndisuio - ok
13:22:54.0335 0x3040  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
13:22:54.0353 0x3040  NdisVirtualBus - ok
13:22:54.0358 0x3040  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan         C:\WINDOWS\System32\drivers\ndiswan.sys
13:22:54.0374 0x3040  NdisWan - ok
13:22:54.0379 0x3040  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:22:54.0394 0x3040  ndiswanlegacy - ok
13:22:54.0397 0x3040  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy         C:\WINDOWS\system32\DRIVERS\NDProxy.sys
13:22:54.0410 0x3040  ndproxy - ok
13:22:54.0414 0x3040  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
13:22:54.0430 0x3040  Ndu - ok
13:22:54.0433 0x3040  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\WINDOWS\system32\drivers\NetAdapterCx.sys
13:22:54.0446 0x3040  NetAdapterCx - ok
13:22:54.0449 0x3040  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS         C:\WINDOWS\system32\drivers\netbios.sys
13:22:54.0457 0x3040  NetBIOS - ok
13:22:54.0464 0x3040  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
13:22:54.0480 0x3040  NetBT - ok
13:22:54.0483 0x3040  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\WINDOWS\system32\lsass.exe
13:22:54.0491 0x3040  Netlogon - ok
13:22:54.0497 0x3040  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\WINDOWS\System32\netman.dll
13:22:54.0512 0x3040  Netman - ok
13:22:54.0520 0x3040  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0529 0x3040  NetMsmqActivator - ok
13:22:54.0533 0x3040  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0540 0x3040  NetPipeActivator - ok
13:22:54.0550 0x3040  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
13:22:54.0572 0x3040  netprofm - ok
13:22:54.0578 0x3040  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc     C:\WINDOWS\System32\NetSetupSvc.dll
13:22:54.0595 0x3040  NetSetupSvc - ok
13:22:54.0599 0x3040  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0606 0x3040  NetTcpActivator - ok
13:22:54.0610 0x3040  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0617 0x3040  NetTcpPortSharing - ok
13:22:54.0625 0x3040  [ E79E364AF827EB1F141BE000ABB8727D, 96218EB8B7C9E0F614AB9EAEAEC41BD4DB0E9EFE5C1D87EC749B9CB71653CEB1 ] NgcCtnrSvc      C:\WINDOWS\System32\NgcCtnrSvc.dll
13:22:54.0643 0x3040  NgcCtnrSvc - ok
13:22:54.0659 0x3040  [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc          C:\WINDOWS\system32\ngcsvc.dll
13:22:54.0688 0x3040  NgcSvc - ok
13:22:54.0697 0x3040  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
13:22:54.0714 0x3040  NlaSvc - ok
13:22:54.0717 0x3040  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
13:22:54.0727 0x3040  Npfs - ok
13:22:54.0730 0x3040  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
13:22:54.0741 0x3040  npsvctrig - ok
13:22:54.0744 0x3040  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi             C:\WINDOWS\system32\nsisvc.dll
13:22:54.0754 0x3040  nsi - ok
13:22:54.0757 0x3040  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
13:22:54.0766 0x3040  nsiproxy - ok
13:22:54.0802 0x3040  [ 98BBD81DC481E9D58EEB31C81EBDEFF5, 28FAAFCB90721C557C37D18533681C274428BC97AB3C3AAFCC75212074E9F2CA ] NTFS            C:\WINDOWS\system32\drivers\NTFS.sys
13:22:54.0846 0x3040  NTFS - ok
13:22:54.0850 0x3040  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\WINDOWS\system32\drivers\Null.sys
13:22:54.0859 0x3040  Null - ok
13:22:54.0866 0x3040  [ 302A57479E9A2A95CE723521A7ED1BD0, CEF8E26DBCA2E840ED32378193127FDC321828D28941AE42C5AA800613A85E91 ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys
13:22:54.0874 0x3040  NVHDA - ok
13:22:55.0133 0x3040  [ E0854DA823FBC14F750BFD46E690F60F, BAACD13006B7EA377BC57CA502D342097E327486957F905DD720C870C1B4C67C ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys
13:22:55.0334 0x3040  nvlddmkm - ok
13:22:55.0350 0x3040  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
13:22:55.0359 0x3040  nvraid - ok
13:22:55.0363 0x3040  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
13:22:55.0373 0x3040  nvstor - ok
13:22:55.0380 0x3040  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\WINDOWS\System32\APHostService.dll
13:22:55.0398 0x3040  OneSyncSvc - ok
13:22:55.0431 0x3040  [ 7D006FC340B301A1DEAFB5878C078A12, 245A4647DEB2CD5D0C3FF07B45D50D6EE039733000C7F7FEC0A1B58162594B9D ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
13:22:55.0465 0x3040  Origin Client Service - ok
13:22:55.0472 0x3040  [ 11E0B35479C895888BA3D7F619DCFFF3, 6ED82C19898101EC00BD64A9F90595C3D20AD2D2902AA8765B740FB3B9312DDF ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:22:55.0480 0x3040  ose64 - ok
13:22:55.0557 0x3040  [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
13:22:55.0633 0x3040  osppsvc - ok
13:22:55.0661 0x3040  [ 62C94E9FE432791CDBB516BEE6198FA2, E9DDFC36243F0B6197C75349D4C03D318F415E9E1D904CE17698F71647EB3415 ] OverwolfUpdater C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
13:22:55.0692 0x3040  OverwolfUpdater - ok
13:22:55.0701 0x3040  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
13:22:55.0721 0x3040  p2pimsvc - ok
13:22:55.0730 0x3040  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
13:22:55.0750 0x3040  p2psvc - ok
13:22:55.0754 0x3040  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport         C:\WINDOWS\System32\drivers\parport.sys
13:22:55.0766 0x3040  Parport - ok
13:22:55.0771 0x3040  [ 0553ECB742278C8F4CFA28B43FF20EAD, ACD7F5BC36573BCEC2C3413DEA687034ECC101EDD3C1544B264BBA29EFCE3425 ] partmgr         C:\WINDOWS\system32\drivers\partmgr.sys
13:22:55.0780 0x3040  partmgr - ok
13:22:55.0790 0x3040  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
13:22:55.0807 0x3040  PcaSvc - ok
13:22:55.0814 0x3040  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci             C:\WINDOWS\system32\drivers\pci.sys
13:22:55.0827 0x3040  pci - ok
13:22:55.0830 0x3040  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
13:22:55.0838 0x3040  pciide - ok
13:22:55.0843 0x3040  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
13:22:55.0852 0x3040  pcmcia - ok
13:22:55.0856 0x3040  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw             C:\WINDOWS\system32\drivers\pcw.sys
13:22:55.0863 0x3040  pcw - ok
13:22:55.0867 0x3040  [ CA979960D3A580C78EDB4BBD6BD3ABCC, 2A136BC562235D26F6421027B158D406FB1D08FE7D70A50DD3E4D344B0E27205 ] pdc             C:\WINDOWS\system32\drivers\pdc.sys
13:22:55.0876 0x3040  pdc - ok
13:22:55.0881 0x3040  [ 1A0E9F4E16BD62779CECA24110804DEB, A18065DF92B8CD34637D3D6D791E07EF053F5BEFEFFCDE00ACA5BD429028E6EF ] PDF24           C:\Program Files (x86)\PDF24\pdf24.exe
13:22:55.0889 0x3040  PDF24 - ok
13:22:55.0902 0x3040  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
13:22:55.0928 0x3040  PEAUTH - ok
13:22:55.0932 0x3040  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i       C:\WINDOWS\system32\drivers\percsas2i.sys
13:22:55.0939 0x3040  percsas2i - ok
13:22:55.0943 0x3040  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i       C:\WINDOWS\system32\drivers\percsas3i.sys
13:22:55.0951 0x3040  percsas3i - ok
13:22:55.0971 0x3040  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
13:22:55.0982 0x3040  PerfHost - ok
13:22:55.0999 0x3040  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\WINDOWS\System32\PhoneService.dll
13:22:56.0024 0x3040  PhoneSvc - ok
13:22:56.0030 0x3040  [ C7A94D99CDF054248EFBD9B93D096DA6, F59F0EB5B17DC078E47D044B1126A786D67DC149AC9614CDA6AA1226EEE3EF55 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
13:22:56.0045 0x3040  PimIndexMaintenanceSvc - ok
13:22:56.0068 0x3040  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla             C:\WINDOWS\system32\pla.dll
13:22:56.0111 0x3040  pla - ok
13:22:56.0116 0x3040  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
13:22:56.0130 0x3040  PlugPlay - ok
13:22:56.0133 0x3040  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll
13:22:56.0142 0x3040  PNRPAutoReg - ok
13:22:56.0149 0x3040  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll
13:22:56.0165 0x3040  PNRPsvc - ok
13:22:56.0173 0x3040  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent     C:\WINDOWS\System32\ipsecsvc.dll
13:22:56.0190 0x3040  PolicyAgent - ok
13:22:56.0199 0x3040  [ 4671F353D0DF74C3B0D2D00DE676F56C, 0F75009DD36B2E18212CE855FB7CA7D273E5749D8F2F451655ED81AA5E86BA9F ] postgresql-8.4  c:\postgreSQL\bin\pg_ctl.exe
13:22:56.0204 0x3040  postgresql-8.4 - detected UnsignedFile.Multi.Generic ( 1 )
13:22:56.0381 0x3040  Detect skipped due to KSN trusted
13:22:56.0381 0x3040  postgresql-8.4 - ok
13:22:56.0396 0x3040  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power           C:\WINDOWS\system32\umpo.dll
13:22:56.0435 0x3040  Power - ok
         

13:22:56.0442 0x3040  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\WINDOWS\System32\drivers\raspptp.sys
13:22:56.0470 0x3040  PptpMiniport - ok
13:22:56.0530 0x3040  [ 77ABF70C71922873BC160933571B3F83, 7FCFBB4B42E7A92FCF11388CD5B600EA79A7C134F13A8A88CF8DCD3DB96C3F5A ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
13:22:56.0617 0x3040  PrintNotify - ok
13:22:56.0624 0x3040  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor       C:\WINDOWS\System32\drivers\processr.sys
13:22:56.0635 0x3040  Processor - ok
13:22:56.0644 0x3040  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc         C:\WINDOWS\system32\profsvc.dll
13:22:56.0662 0x3040  ProfSvc - ok
13:22:56.0667 0x3040  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\WINDOWS\system32\drivers\pacer.sys
13:22:56.0677 0x3040  Psched - ok
13:22:56.0683 0x3040  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE           C:\WINDOWS\system32\qwave.dll
13:22:56.0700 0x3040  QWAVE - ok
13:22:56.0703 0x3040  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
13:22:56.0712 0x3040  QWAVEdrv - ok
13:22:56.0714 0x3040  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:22:56.0723 0x3040  RasAcd - ok
13:22:56.0727 0x3040  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn     C:\WINDOWS\System32\drivers\AgileVpn.sys
13:22:56.0740 0x3040  RasAgileVpn - ok
13:22:56.0744 0x3040  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
13:22:56.0755 0x3040  RasAuto - ok
13:22:56.0758 0x3040  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp         C:\WINDOWS\System32\drivers\rasl2tp.sys
13:22:56.0773 0x3040  Rasl2tp - ok
13:22:56.0784 0x3040  [ 989DBF4805124A31610947E502501696, BCB73879AEC0588D0BFAB915D1F6EB637333A24D2030ED6572B3A3C03865AE93 ] RasMan          C:\WINDOWS\System32\rasmans.dll
13:22:56.0809 0x3040  RasMan - ok
13:22:56.0812 0x3040  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:22:56.0823 0x3040  RasPppoe - ok
13:22:56.0826 0x3040  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp         C:\WINDOWS\System32\drivers\rassstp.sys
13:22:56.0840 0x3040  RasSstp - ok
13:22:56.0850 0x3040  [ 6132B142C5A1FA4C05F06FE43DE5E55E, CCF64C9A778501635B8B5E20BB617D39D0298329FD6911DC125FC8B31FEFEDE1 ] rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:22:56.0863 0x3040  rdbss - ok
13:22:56.0867 0x3040  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
13:22:56.0877 0x3040  rdpbus - ok
13:22:56.0882 0x3040  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys
13:22:56.0894 0x3040  RDPDR - ok
13:22:56.0898 0x3040  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
13:22:56.0906 0x3040  RdpVideoMiniport - ok
13:22:56.0912 0x3040  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
13:22:56.0924 0x3040  rdyboost - ok
13:22:56.0939 0x3040  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\WINDOWS\system32\drivers\ReFSv1.sys
13:22:56.0962 0x3040  ReFSv1 - ok
13:22:56.0972 0x3040  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
13:22:56.0998 0x3040  RemoteAccess - ok
13:22:57.0003 0x3040  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
13:22:57.0019 0x3040  RemoteRegistry - ok
13:22:57.0031 0x3040  [ CE44FB62412C9B78008BE740B0E16D11, 4FA01F54EE3924EEE0953FB27336FFB01069F2248859B4984030E5D364807335 ] RetailDemo      C:\WINDOWS\system32\RDXService.dll
13:22:57.0055 0x3040  RetailDemo - ok
13:22:57.0060 0x3040  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc           C:\WINDOWS\System32\RMapi.dll
13:22:57.0072 0x3040  RmSvc - ok
13:22:57.0076 0x3040  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
13:22:57.0087 0x3040  RpcEptMapper - ok
13:22:57.0089 0x3040  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\WINDOWS\system32\locator.exe
13:22:57.0098 0x3040  RpcLocator - ok
13:22:57.0113 0x3040  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
13:22:57.0141 0x3040  RpcSs - ok
13:22:57.0146 0x3040  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\WINDOWS\system32\drivers\rspndr.sys
13:22:57.0156 0x3040  rspndr - ok
13:22:57.0159 0x3040  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys
13:22:57.0167 0x3040  s3cap - ok
13:22:57.0171 0x3040  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs           C:\WINDOWS\system32\lsass.exe
13:22:57.0179 0x3040  SamSs - ok
13:22:57.0183 0x3040  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
13:22:57.0192 0x3040  sbp2port - ok
13:22:57.0198 0x3040  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
13:22:57.0213 0x3040  SCardSvr - ok
13:22:57.0218 0x3040  [ 5E8ECCE130A72107B6DFDBE26185A7FB, 811E2CE485BC14161FF629069BCCF53B2B8C6F8B1E1A6B3A3C86DBE4F85A5577 ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
13:22:57.0231 0x3040  ScDeviceEnum - ok
13:22:57.0235 0x3040  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
13:22:57.0244 0x3040  scfilter - ok
13:22:57.0261 0x3040  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
13:22:57.0294 0x3040  Schedule - ok
13:22:57.0299 0x3040  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\WINDOWS\system32\drivers\scmbus.sys
13:22:57.0307 0x3040  scmbus - ok
13:22:57.0311 0x3040  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101     C:\WINDOWS\System32\drivers\scmdisk0101.sys
13:22:57.0323 0x3040  scmdisk0101 - ok
13:22:57.0328 0x3040  [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll
13:22:57.0340 0x3040  SCPolicySvc - ok
13:22:57.0343 0x3040  [ 0447065A6E10774EFCECFDD0EB970A79, 384A9AC72E756F96D43EE4B144A466564476AFD8778092C979116BB29A514433 ] ScpVBus         C:\WINDOWS\System32\drivers\ScpVBus.sys
13:22:57.0348 0x3040  ScpVBus - ok
13:22:57.0354 0x3040  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys
13:22:57.0366 0x3040  sdbus - ok
13:22:57.0370 0x3040  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
13:22:57.0384 0x3040  SDRSVC - ok
13:22:57.0412 0x3040  [ B4337BA6754438CD2699D8A17DD8A359, 48A2F020D8DE2CC97CB7C69FCCFD36EDE66D291A9EFCEF83521EF5BE6AEA4BCE ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
13:22:57.0442 0x3040  SDScannerService - ok
13:22:57.0448 0x3040  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
13:22:57.0456 0x3040  sdstor - ok
13:22:57.0488 0x3040  [ 30696A220D11270F4FC65C2D74CEE4D1, DDA8AFFFB20702C7FDAFA01B2EF8931AD098D97710421B880F2169CD4BCF62D3 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
13:22:57.0523 0x3040  SDUpdateService - ok
13:22:57.0530 0x3040  [ FDEF8DC6871B96BBBD39A648994F60D1, 86CDB6D102CD67E3BC378D7F00C27B6A8C171E60D576D77DDA9F4B67C45D906D ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
13:22:57.0538 0x3040  SDWSCService - ok
13:22:57.0541 0x3040  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\WINDOWS\system32\seclogon.dll
13:22:57.0554 0x3040  seclogon - ok
13:22:57.0558 0x3040  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\WINDOWS\System32\sens.dll
13:22:57.0569 0x3040  SENS - ok
13:22:57.0591 0x3040  [ CF2AEB951CFC56D4F6CF2D66218B673C, CEA0B0E0251EA198893830080EE4CB8A9F18ADBF1F6FEFFC9C7E8AB4588D0639 ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
13:22:57.0628 0x3040  SensorDataService - ok
13:22:57.0637 0x3040  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService   C:\WINDOWS\system32\SensorService.dll
13:22:57.0658 0x3040  SensorService - ok
13:22:57.0662 0x3040  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
13:22:57.0677 0x3040  SensrSvc - ok
13:22:57.0680 0x3040  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx           C:\WINDOWS\system32\drivers\SerCx.sys
13:22:57.0688 0x3040  SerCx - ok
13:22:57.0693 0x3040  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
13:22:57.0702 0x3040  SerCx2 - ok
13:22:57.0705 0x3040  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum         C:\WINDOWS\System32\drivers\serenum.sys
13:22:57.0713 0x3040  Serenum - ok
13:22:57.0717 0x3040  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
13:22:57.0726 0x3040  Serial - ok
13:22:57.0729 0x3040  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
13:22:57.0738 0x3040  sermouse - ok
13:22:57.0749 0x3040  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
13:22:57.0767 0x3040  SessionEnv - ok
13:22:57.0771 0x3040  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy         C:\WINDOWS\System32\drivers\sfloppy.sys
13:22:57.0780 0x3040  sfloppy - ok
13:22:57.0790 0x3040  [ E38BE81F0F6D9C74E420A82BC6A02AFE, 25D7594FD1BE0B303F9777ACBA702ACD0C27B00D21F82659989C40636851A330 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
13:22:57.0812 0x3040  SharedAccess - ok
13:22:57.0823 0x3040  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:22:57.0862 0x3040  ShellHWDetection - ok
13:22:57.0868 0x3040  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
13:22:57.0882 0x3040  shpamsvc - ok
13:22:57.0885 0x3040  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
13:22:57.0892 0x3040  SiSRaid2 - ok
13:22:57.0896 0x3040  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
13:22:57.0904 0x3040  SiSRaid4 - ok
13:22:57.0911 0x3040  [ B72B80E6FF423C5011E745CB76DA9A08, 18A6B9D46E91AD4D463EB5CB832702392D2E162577F90C328B515FCE69FABD15 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
13:22:57.0925 0x3040  SkypeUpdate - ok
13:22:57.0928 0x3040  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost         C:\WINDOWS\System32\smphost.dll
13:22:57.0939 0x3040  smphost - ok
13:22:57.0951 0x3040  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter       C:\WINDOWS\system32\SmsRouterSvc.dll
13:22:57.0973 0x3040  SmsRouter - ok
13:22:57.0980 0x3040  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
13:22:57.0989 0x3040  SNMPTRAP - ok
13:22:58.0000 0x3040  [ 8BDB9E47D84144110F05AB757E630374, 8A49004895B8AD17C877AA8E7B6A0F14936BDDCBB88F0E5FB880DD0D816AEAB4 ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys
13:22:58.0017 0x3040  spaceport - ok
13:22:58.0021 0x3040  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx           C:\WINDOWS\system32\drivers\SpbCx.sys
13:22:58.0029 0x3040  SpbCx - ok
13:22:58.0044 0x3040  [ 1DFE222F8D6A422B7ADC909E0C8840DA, 96761691CF4447710D65573044A1005F2F0F89443DF581A30B97D7944940BB70 ] Spooler         C:\WINDOWS\System32\spoolsv.exe
13:22:58.0071 0x3040  Spooler - ok
13:22:58.0171 0x3040  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
13:22:58.0269 0x3040  sppsvc - ok
13:22:58.0281 0x3040  [ FD3C05C412BE1C9FA477AD9CF9B2AADB, 19BEF5B3A0DAF8227200C2294547A497021F0B2558211345BFFFD13678522592 ] srv             C:\WINDOWS\system32\DRIVERS\srv.sys
13:22:58.0297 0x3040  srv - ok
13:22:58.0310 0x3040  [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
13:22:58.0335 0x3040  srv2 - ok
13:22:58.0342 0x3040  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
13:22:58.0354 0x3040  srvnet - ok
13:22:58.0357 0x3040  [ 7E3B28642700820E782818918E7B0B03, 0F099B2AF504D84AA62669F77462374CC206F6A31E8D80116FCC3C42DD97B08B ] ssdevfactory    C:\WINDOWS\System32\drivers\ssdevfactory.sys
13:22:58.0364 0x3040  ssdevfactory - ok
13:22:58.0369 0x3040  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
13:22:58.0385 0x3040  SSDPSRV - ok
13:22:58.0388 0x3040  [ 392BB410D26B66CBBE4D702AEF755351, 83762BBF1111FACFDE42087E641301A8C154943CE7C1C0F40CBCFD813E10CF83 ] sshid           C:\WINDOWS\System32\drivers\sshid.sys
13:22:58.0394 0x3040  sshid - ok
13:22:58.0401 0x3040  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc         C:\WINDOWS\system32\sstpsvc.dll
13:22:58.0415 0x3040  SstpSvc - ok
13:22:58.0420 0x3040  [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
13:22:58.0427 0x3040  ssudmdm - ok
13:22:58.0487 0x3040  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
13:22:58.0585 0x3040  StateRepository - ok
13:22:58.0612 0x3040  [ 84C35116595C43487B9B4FA5BF8D3524, 0F741A14A9CDD1B5A9FABF05D65615FE8ECD0199A84396AEC5723A9F28C21CDA ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
13:22:58.0657 0x3040  Steam Client Service - ok
13:22:58.0660 0x3040  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
13:22:58.0668 0x3040  stexstor - ok
13:22:58.0680 0x3040  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
13:22:58.0705 0x3040  stisvc - ok
13:22:58.0710 0x3040  [ 6BC6023E866489D22CE30E18846B80D9, FD0D13332F3E267524A9FA7FEC128298D4905722807C172AE8E3DFE445C28DB1 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
13:22:58.0718 0x3040  storahci - ok
13:22:58.0722 0x3040  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt         C:\WINDOWS\system32\drivers\vmstorfl.sys
13:22:58.0729 0x3040  storflt - ok
13:22:58.0733 0x3040  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
13:22:58.0742 0x3040  stornvme - ok
13:22:58.0745 0x3040  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\WINDOWS\system32\drivers\storqosflt.sys
13:22:58.0757 0x3040  storqosflt - ok
13:22:58.0765 0x3040  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc         C:\WINDOWS\system32\storsvc.dll
13:22:58.0785 0x3040  StorSvc - ok
13:22:58.0788 0x3040  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs         C:\WINDOWS\system32\drivers\storufs.sys
13:22:58.0795 0x3040  storufs - ok
13:22:58.0798 0x3040  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc         C:\WINDOWS\system32\drivers\storvsc.sys
13:22:58.0805 0x3040  storvsc - ok
13:22:58.0808 0x3040  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc           C:\WINDOWS\system32\svsvc.dll
13:22:58.0819 0x3040  svsvc - ok
13:22:58.0822 0x3040  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
13:22:58.0829 0x3040  swenum - ok
13:22:58.0838 0x3040  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv           C:\WINDOWS\System32\swprv.dll
13:22:58.0859 0x3040  swprv - ok
13:22:58.0862 0x3040  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\WINDOWS\System32\drivers\Synth3dVsc.sys
13:22:58.0873 0x3040  Synth3dVsc - ok
13:22:58.0890 0x3040  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain         C:\WINDOWS\system32\sysmain.dll
13:22:58.0921 0x3040  SysMain - ok
13:22:58.0930 0x3040  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
13:22:58.0947 0x3040  SystemEventsBroker - ok
13:22:58.0953 0x3040  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
13:22:58.0965 0x3040  TabletInputService - ok
13:22:58.0968 0x3040  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901         C:\WINDOWS\System32\drivers\tap0901.sys
13:22:58.0974 0x3040  tap0901 - ok
13:22:58.0981 0x3040  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
13:22:58.0997 0x3040  TapiSrv - ok
13:22:59.0035 0x3040  [ 2011413864620317C8F931219CAF09C3, 640B39A8F355145CFA8174A1767B7DFCCF6DDC6A03AE0D54E346D8EEA9039415 ] Tcpip           C:\WINDOWS\system32\drivers\tcpip.sys
13:22:59.0084 0x3040  Tcpip - ok
13:22:59.0123 0x3040  [ 2011413864620317C8F931219CAF09C3, 640B39A8F355145CFA8174A1767B7DFCCF6DDC6A03AE0D54E346D8EEA9039415 ] Tcpip6          C:\WINDOWS\system32\drivers\tcpip.sys
13:22:59.0169 0x3040  Tcpip6 - ok
13:22:59.0175 0x3040  [ EC9450227A4C661513661F1F9C1F7DD6, 4DB122DECEA7C76BD20A6682958609A40CA2C9EDD236DFA19E9B31C57114DA3A ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
13:22:59.0187 0x3040  tcpipreg - ok
13:22:59.0192 0x3040  [ 0B237F8A96952BF95A14865030E131F2, 263089672218D3A768A6FC9D28DBEFE113D6757A9ECBAB4D364A62AC5DDA8AAE ] tdx             C:\WINDOWS\system32\DRIVERS\tdx.sys
13:22:59.0201 0x3040  tdx - ok
13:22:59.0204 0x3040  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
13:22:59.0212 0x3040  terminpt - ok
13:22:59.0228 0x3040  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService     C:\WINDOWS\System32\termsrv.dll
13:22:59.0259 0x3040  TermService - ok
13:22:59.0263 0x3040  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\WINDOWS\system32\themeservice.dll
13:22:59.0278 0x3040  Themes - ok
13:22:59.0284 0x3040  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
13:22:59.0301 0x3040  TieringEngineService - ok
13:22:59.0312 0x3040  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
13:22:59.0335 0x3040  tiledatamodelsvc - ok
13:22:59.0341 0x3040  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc   C:\WINDOWS\System32\TimeBrokerServer.dll
13:22:59.0353 0x3040  TimeBrokerSvc - ok
13:22:59.0359 0x3040  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\WINDOWS\System32\drivers\tpm.sys
13:22:59.0369 0x3040  TPM - ok
13:22:59.0373 0x3040  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
13:22:59.0386 0x3040  TrkWks - ok
13:22:59.0389 0x3040  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
13:22:59.0402 0x3040  TrustedInstaller - ok
13:22:59.0406 0x3040  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\WINDOWS\system32\drivers\TsUsbFlt.sys
13:22:59.0417 0x3040  tsusbflt - ok
13:22:59.0420 0x3040  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys
13:22:59.0429 0x3040  TsUsbGD - ok
13:22:59.0433 0x3040  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\WINDOWS\System32\drivers\tunnel.sys
13:22:59.0447 0x3040  tunnel - ok
13:22:59.0451 0x3040  [ 13781908186770ABE9F8EBCC2B45B138, 4BEC8466254E0C6492CC55CE344A6173878CFA040238C6BE5842E5209F066DEE ] tzautoupdate    C:\WINDOWS\system32\tzautoupdate.dll
13:22:59.0464 0x3040  tzautoupdate - ok
13:22:59.0468 0x3040  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
13:22:59.0478 0x3040  UASPStor - ok
13:22:59.0481 0x3040  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101       C:\WINDOWS\system32\Drivers\UcmCx.sys
13:22:59.0493 0x3040  UcmCx0101 - ok
13:22:59.0497 0x3040  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
13:22:59.0507 0x3040  UcmTcpciCx0101 - ok
13:22:59.0510 0x3040  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi         C:\WINDOWS\System32\drivers\UcmUcsi.sys
13:22:59.0519 0x3040  UcmUcsi - ok
13:22:59.0525 0x3040  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\WINDOWS\system32\drivers\ucx01000.sys
13:22:59.0535 0x3040  Ucx01000 - ok
13:22:59.0538 0x3040  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx           C:\WINDOWS\system32\drivers\udecx.sys
13:22:59.0549 0x3040  UdeCx - ok
13:22:59.0555 0x3040  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
13:22:59.0573 0x3040  udfs - ok
13:22:59.0576 0x3040  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
13:22:59.0583 0x3040  UEFI - ok
13:22:59.0589 0x3040  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\WINDOWS\system32\drivers\ufx01000.sys
13:22:59.0600 0x3040  Ufx01000 - ok
13:22:59.0603 0x3040  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea     C:\WINDOWS\System32\drivers\UfxChipidea.sys
13:22:59.0612 0x3040  UfxChipidea - ok
13:22:59.0616 0x3040  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys     C:\WINDOWS\System32\drivers\ufxsynopsys.sys
13:22:59.0625 0x3040  ufxsynopsys - ok
13:22:59.0630 0x3040  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect       C:\WINDOWS\system32\UI0Detect.exe
13:22:59.0641 0x3040  UI0Detect - ok
13:22:59.0644 0x3040  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus           C:\WINDOWS\System32\drivers\umbus.sys
13:22:59.0654 0x3040  umbus - ok
13:22:59.0659 0x3040  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
13:22:59.0668 0x3040  UmPass - ok
13:22:59.0675 0x3040  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
13:22:59.0690 0x3040  UmRdpService - ok
13:22:59.0711 0x3040  [ 4B956444AF2A352366CF59C3A4A87C64, B5FFAF5908DCF78DDA27EA1ABF2AFDD2BDD43FFC0259D847A7107B1597E22BD6 ] UnistoreSvc     C:\WINDOWS\System32\unistore.dll
13:22:59.0744 0x3040  UnistoreSvc - ok
13:22:59.0755 0x3040  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\WINDOWS\System32\upnphost.dll
13:22:59.0777 0x3040  upnphost - ok
13:22:59.0780 0x3040  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea     C:\WINDOWS\System32\drivers\urschipidea.sys
13:22:59.0788 0x3040  UrsChipidea - ok
13:22:59.0791 0x3040  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\WINDOWS\system32\drivers\urscx01000.sys
13:22:59.0798 0x3040  UrsCx01000 - ok
13:22:59.0801 0x3040  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys     C:\WINDOWS\System32\drivers\urssynopsys.sys
13:22:59.0808 0x3040  UrsSynopsys - ok
13:22:59.0813 0x3040  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp         C:\WINDOWS\System32\drivers\usbccgp.sys
13:22:59.0822 0x3040  usbccgp - ok
13:22:59.0826 0x3040  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
13:22:59.0836 0x3040  usbcir - ok
13:22:59.0840 0x3040  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci         C:\WINDOWS\System32\drivers\usbehci.sys
13:22:59.0848 0x3040  usbehci - ok
13:22:59.0857 0x3040  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
13:22:59.0872 0x3040  usbhub - ok
13:22:59.0883 0x3040  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3         C:\WINDOWS\System32\drivers\UsbHub3.sys
13:22:59.0899 0x3040  USBHUB3 - ok
13:22:59.0902 0x3040  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci         C:\WINDOWS\System32\drivers\usbohci.sys
13:22:59.0912 0x3040  usbohci - ok
13:22:59.0915 0x3040  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
13:22:59.0926 0x3040  usbprint - ok
13:22:59.0930 0x3040  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
13:22:59.0943 0x3040  usbser - ok
13:22:59.0948 0x3040  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR         C:\WINDOWS\System32\drivers\USBSTOR.SYS
13:22:59.0957 0x3040  USBSTOR - ok
13:22:59.0960 0x3040  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci         C:\WINDOWS\System32\drivers\usbuhci.sys
13:22:59.0968 0x3040  usbuhci - ok
13:22:59.0977 0x3040  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI         C:\WINDOWS\System32\drivers\USBXHCI.SYS
13:22:59.0989 0x3040  USBXHCI - ok
13:22:59.0993 0x3040  [ 836828E40B9EEFBC77B3032DB677555C, 8AC045B43086E800B03412895D4DBCF506D1B729791CF24EB2ECA3F0F1C9BDEB ] usb_rndisx      C:\WINDOWS\System32\drivers\usb8023x.sys
13:23:00.0003 0x3040  usb_rndisx - ok
13:23:00.0027 0x3040  [ A39AFDD26E6F2E5595FF2D3997D7E1FE, 30DE54033DE437C16A069602529E63FF971AF0ABB383885E47B4DF5E0F8483AE ] UserDataSvc     C:\WINDOWS\System32\userdataservice.dll
13:23:00.0068 0x3040  UserDataSvc - ok
13:23:00.0087 0x3040  [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager     C:\WINDOWS\System32\usermgr.dll
13:23:00.0119 0x3040  UserManager - ok
13:23:00.0130 0x3040  [ B6911F3CBA01ECC637B3891DFE5099DC, E3ECF7BE729E38C236716B4A4147A29CA7B2CD7CEC17AE50E18437E995D30781 ] UsoSvc          C:\WINDOWS\system32\usocore.dll
13:23:00.0166 0x3040  UsoSvc - ok
13:23:00.0170 0x3040  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
13:23:00.0178 0x3040  VaultSvc - ok
13:23:00.0181 0x3040  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
13:23:00.0189 0x3040  vdrvroot - ok
13:23:00.0200 0x3040  [ 2C5D96D0BB7EDEF9F2F8966A31007CCE, A8FB02E9E1B8ED5F2026534360C229DA7FC11BA209DE9C3222C65D0A9652FD3C ] vds             C:\WINDOWS\System32\vds.exe
13:23:00.0225 0x3040  vds - ok
13:23:00.0230 0x3040  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt     C:\WINDOWS\system32\drivers\VerifierExt.sys
13:23:00.0240 0x3040  VerifierExt - ok
13:23:00.0253 0x3040  [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys
13:23:00.0272 0x3040  vhdmp - ok
13:23:00.0275 0x3040  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf             C:\WINDOWS\System32\drivers\vhf.sys
13:23:00.0284 0x3040  vhf - ok
13:23:00.0288 0x3040  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus           C:\WINDOWS\system32\drivers\vmbus.sys
13:23:00.0296 0x3040  vmbus - ok
13:23:00.0299 0x3040  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
13:23:00.0307 0x3040  VMBusHID - ok
13:23:00.0310 0x3040  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid           C:\WINDOWS\System32\drivers\vmgid.sys
13:23:00.0319 0x3040  vmgid - ok
13:23:00.0326 0x3040  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
13:23:00.0344 0x3040  vmicguestinterface - ok
13:23:00.0350 0x3040  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat   C:\WINDOWS\System32\icsvc.dll
13:23:00.0364 0x3040  vmicheartbeat - ok
13:23:00.0370 0x3040  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
13:23:00.0384 0x3040  vmickvpexchange - ok
13:23:00.0392 0x3040  [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicrdv         C:\WINDOWS\System32\icsvcext.dll
13:23:00.0410 0x3040  vmicrdv - ok
13:23:00.0416 0x3040  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\WINDOWS\System32\icsvc.dll
13:23:00.0431 0x3040  vmicshutdown - ok
13:23:00.0437 0x3040  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\WINDOWS\System32\icsvc.dll
13:23:00.0451 0x3040  vmictimesync - ok
13:23:00.0458 0x3040  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession   C:\WINDOWS\System32\icsvc.dll
13:23:00.0472 0x3040  vmicvmsession - ok
13:23:00.0480 0x3040  [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicvss         C:\WINDOWS\System32\icsvcext.dll
13:23:00.0495 0x3040  vmicvss - ok
13:23:00.0499 0x3040  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
13:23:00.0507 0x3040  volmgr - ok
13:23:00.0514 0x3040  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx         C:\WINDOWS\system32\drivers\volmgrx.sys
13:23:00.0527 0x3040  volmgrx - ok
13:23:00.0535 0x3040  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap         C:\WINDOWS\system32\drivers\volsnap.sys
13:23:00.0548 0x3040  volsnap - ok
13:23:00.0551 0x3040  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\WINDOWS\system32\drivers\volume.sys
13:23:00.0558 0x3040  volume - ok
13:23:00.0561 0x3040  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
13:23:00.0569 0x3040  vpci - ok
13:23:00.0572 0x3040  [ 0F42C39016F82F345C0F2DB2D5B90EB4, 2E957E72BB8D0293F61FA7385BA9400DF7759E1E3D35FE24F3877A6460988F4D ] vpnva           C:\WINDOWS\system32\DRIVERS\vpnva64-6.sys
13:23:00.0578 0x3040  vpnva - ok
13:23:00.0583 0x3040  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid         C:\WINDOWS\system32\drivers\vsmraid.sys
13:23:00.0593 0x3040  vsmraid - ok
13:23:00.0616 0x3040  [ 6DBB20053A67EFE5D8114CE93D12BEB3, B48997FADA4A600FEBFE36B249684E9CAF01570BAD36ED1FC9DA99F2D100638E ] VSS             C:\WINDOWS\system32\vssvc.exe
13:23:00.0656 0x3040  VSS - ok
13:23:00.0665 0x3040  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
13:23:00.0677 0x3040  VSTXRAID - ok
13:23:00.0680 0x3040  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
13:23:00.0691 0x3040  vwifibus - ok
13:23:00.0694 0x3040  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\WINDOWS\system32\drivers\vwififlt.sys
13:23:00.0703 0x3040  vwififlt - ok
13:23:00.0713 0x3040  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time         C:\WINDOWS\system32\w32time.dll
13:23:00.0736 0x3040  W32Time - ok
13:23:00.0741 0x3040  [ 4053FB949F48647A327BC18DFEEA4374, 52511C35854A673ADCD9084FEF9BC6A339BCA0290374B81140A371D67B13A8FB ] w3logsvc        C:\WINDOWS\system32\inetsrv\w3logsvc.dll
13:23:00.0752 0x3040  w3logsvc - ok
13:23:00.0762 0x3040  [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] W3SVC           C:\WINDOWS\system32\inetsrv\iisw3adm.dll
13:23:00.0782 0x3040  W3SVC - ok
13:23:00.0786 0x3040  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
13:23:00.0794 0x3040  WacomPen - ok
13:23:00.0803 0x3040  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService   C:\WINDOWS\system32\WalletService.dll
13:23:00.0823 0x3040  WalletService - ok
13:23:00.0826 0x3040  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:23:00.0840 0x3040  wanarp - ok
13:23:00.0843 0x3040  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:23:00.0856 0x3040  wanarpv6 - ok
13:23:00.0867 0x3040  [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] WAS             C:\WINDOWS\system32\inetsrv\iisw3adm.dll
13:23:00.0887 0x3040  WAS - ok
13:23:00.0911 0x3040  [ 68CC5E83B6F220F5BD7B5BC394917505, 24A793E1293608D1D1DB9396627DBF5FE66C9EFD1D49CCCD832CF1762B4E0E7D ] wbengine        C:\WINDOWS\system32\wbengine.exe
13:23:00.0954 0x3040  wbengine - ok
13:23:00.0970 0x3040  [ 8C521D161445C3E1F38A494E7649E70D, F00990B2FE1FB52C74A2057E6480C5EBF2BDBC32955CC03C6B63360F20A49A18 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
13:23:00.0999 0x3040  WbioSrvc - ok
13:23:01.0003 0x3040  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs           C:\WINDOWS\system32\drivers\wcifs.sys
13:23:01.0012 0x3040  wcifs - ok
13:23:01.0025 0x3040  [ CA10C91D802ABE6E5136E2168C2CD2B4, 5979FF9ED783ED3154257ED0507C7BBAF8C77C081CC30AE835EA8AF7508AAD08 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
13:23:01.0050 0x3040  Wcmsvc - ok
13:23:01.0060 0x3040  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc         C:\WINDOWS\System32\wcncsvc.dll
13:23:01.0082 0x3040  wcncsvc - ok
13:23:01.0085 0x3040  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs           C:\WINDOWS\system32\drivers\wcnfs.sys
13:23:01.0095 0x3040  wcnfs - ok
13:23:01.0098 0x3040  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
13:23:01.0106 0x3040  WdBoot - ok
13:23:01.0120 0x3040  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
13:23:01.0139 0x3040  Wdf01000 - ok
13:23:01.0146 0x3040  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
13:23:01.0157 0x3040  WdFilter - ok
13:23:01.0161 0x3040  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
13:23:01.0182 0x3040  WdiServiceHost - ok
13:23:01.0185 0x3040  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll
13:23:01.0197 0x3040  WdiSystemHost - ok
13:23:01.0209 0x3040  [ EDC08B8D3E67F96688774841C247B82A, DB5AFAF87C74431B8EB5420DBF5428691F291B63C2FDE8282EE2E399C76F63F3 ] wdiwifi         C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
13:23:01.0232 0x3040  wdiwifi - ok
13:23:01.0237 0x3040  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
13:23:01.0246 0x3040  WdNisDrv - ok
13:23:01.0248 0x3040  WdNisSvc - ok
13:23:01.0254 0x3040  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient       C:\WINDOWS\System32\webclnt.dll
13:23:01.0270 0x3040  WebClient - ok
13:23:01.0275 0x3040  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
13:23:01.0293 0x3040  Wecsvc - ok
13:23:01.0296 0x3040  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
13:23:01.0307 0x3040  WEPHOSTSVC - ok
13:23:01.0310 0x3040  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll
13:23:01.0323 0x3040  wercplsupport - ok
13:23:01.0328 0x3040  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
13:23:01.0342 0x3040  WerSvc - ok
13:23:01.0346 0x3040  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS         C:\WINDOWS\system32\drivers\wfplwfs.sys
13:23:01.0356 0x3040  WFPLWFS - ok
13:23:01.0360 0x3040  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
13:23:01.0371 0x3040  WiaRpc - ok
13:23:01.0374 0x3040  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
13:23:01.0383 0x3040  WIMMount - ok
13:23:01.0384 0x3040  WinDefend - ok
13:23:01.0391 0x3040  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
13:23:01.0399 0x3040  WindowsTrustedRT - ok
13:23:01.0402 0x3040  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
13:23:01.0409 0x3040  WindowsTrustedRTProxy - ok
13:23:01.0424 0x3040  [ 4AB1AC1E60118443A14C241F91AC8FC9, 2B9237AC124874664E31B4F313BAAF8059BD0749653496784B4B89B4B7F66784 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
13:23:01.0450 0x3040  WinHttpAutoProxySvc - ok
13:23:01.0454 0x3040  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\WINDOWS\System32\drivers\winmad.sys
13:23:01.0461 0x3040  WinMad - ok
13:23:01.0471 0x3040  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
13:23:01.0486 0x3040  Winmgmt - ok
13:23:01.0526 0x3040  [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
13:23:01.0596 0x3040  WinRM - ok
13:23:01.0605 0x3040  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\WINDOWS\System32\drivers\WinUSB.SYS
13:23:01.0615 0x3040  WINUSB - ok
13:23:01.0618 0x3040  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\WINDOWS\System32\drivers\winverbs.sys
13:23:01.0626 0x3040  WinVerbs - ok
13:23:01.0638 0x3040  [ 78EA65739A50969CD5FC2E71B9B7697A, C442BE91CE5D4F301368915CFBE055233DD1FB8BDBEBD51CD00DC2C7770C8EE3 ] wisvc           C:\WINDOWS\system32\flightsettings.dll
13:23:01.0669 0x3040  wisvc - ok
13:23:01.0706 0x3040  [ 5A7AA8198156DC2BFF9F064E29D11AF5, 9CBAF1B99B54CDE087E0FC0A2601B3F056F81F2F5AF63B5BB71C7389247E496A ] WlanSvc         C:\WINDOWS\System32\wlansvc.dll
13:23:01.0765 0x3040  WlanSvc - ok
13:23:01.0798 0x3040  [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll
13:23:01.0853 0x3040  wlidsvc - ok
13:23:01.0858 0x3040  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi         C:\WINDOWS\System32\drivers\wmiacpi.sys
13:23:01.0866 0x3040  WmiAcpi - ok
13:23:01.0873 0x3040  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
13:23:01.0885 0x3040  wmiApSrv - ok
13:23:01.0887 0x3040  WMPNetworkSvc - ok
13:23:01.0893 0x3040  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof             C:\WINDOWS\system32\drivers\Wof.sys
13:23:01.0903 0x3040  Wof - ok
13:23:01.0933 0x3040  [ 5820CC51AB1C368F29ECCA713397D006, AA0CC2BC4DF7DBFB144FF47C3508BEEF00467C9D312C135AFB3406E42C6CD821 ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
13:23:01.0982 0x3040  workfolderssvc - ok
13:23:01.0987 0x3040  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
13:23:02.0349 0x3040  WPDBusEnum - ok
13:23:02.0361 0x3040  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys
13:23:02.0377 0x3040  WpdUpFltr - ok
13:23:02.0388 0x3040  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\WINDOWS\system32\WpnService.dll
13:23:02.0407 0x3040  WpnService - ok
13:23:02.0411 0x3040  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\WINDOWS\System32\WpnUserService.dll
13:23:02.0422 0x3040  WpnUserService - ok
13:23:02.0426 0x3040  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl         C:\WINDOWS\system32\drivers\ws2ifsl.sys
13:23:02.0436 0x3040  ws2ifsl - ok
13:23:02.0441 0x3040  [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
13:23:02.0456 0x3040  wscsvc - ok
13:23:02.0459 0x3040  [ 696EC2EAA2A42A137CCBB9A84D6917C0, 424089F4F373962AF8357C5D4D43F35948989BE3F58EAD3690F565F4C1BBC66F ] WSDPrintDevice  C:\WINDOWS\System32\drivers\WSDPrint.sys
13:23:02.0467 0x3040  WSDPrintDevice - ok
13:23:02.0470 0x3040  [ 46E4A69825A7554A5DB784A55F8AD203, 7F347054FCDD5DEF93083D420E56EBE5EEBBAE2BD2FED9B2E75E85149DE52780 ] WSDScan         C:\WINDOWS\system32\DRIVERS\WSDScan.sys
13:23:02.0479 0x3040  WSDScan - ok
13:23:02.0481 0x3040  WSearch - ok
13:23:02.0518 0x3040  [ 10C4A0CDACAD054C90288D718615B4BA, 76CD5BF3B97DC306B17AB65E1CD841180C6FD147F2CC9EE6A757C27E3AB2D231 ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
13:23:02.0587 0x3040  wuauserv - ok
13:23:02.0593 0x3040  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
13:23:02.0604 0x3040  WudfPf - ok
13:23:02.0609 0x3040  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\WINDOWS\system32\drivers\WudfRd.sys
13:23:02.0622 0x3040  WUDFRd - ok
13:23:02.0627 0x3040  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc         C:\WINDOWS\System32\WUDFSvc.dll
13:23:02.0638 0x3040  wudfsvc - ok
13:23:02.0644 0x3040  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
13:23:02.0656 0x3040  WUDFWpdFs - ok
13:23:02.0661 0x3040  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
13:23:02.0673 0x3040  WUDFWpdMtp - ok
13:23:02.0694 0x3040  [ D313FF382A26D1295B212A66EE3E52A8, 59FEF2AF611507BCB6FE036A7D4F1595F3449B76F9B055CDC67DC1BE1D90EEB8 ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll
13:23:02.0732 0x3040  WwanSvc - ok
13:23:02.0750 0x3040  [ 7EF75102A793AAA6AAA45A4F7C15FF4D, A3FB68905F3E3A7DE52B85FAD966ABCB787FAC7E709964CE9BF2A4F9AC8B0653 ] XblAuthManager  C:\WINDOWS\System32\XblAuthManager.dll
13:23:02.0781 0x3040  XblAuthManager - ok
13:23:02.0802 0x3040  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave     C:\WINDOWS\System32\XblGameSave.dll
13:23:02.0838 0x3040  XblGameSave - ok
13:23:02.0845 0x3040  [ DB77764B46D02DCB9777D9E00A3F7D63, 469491E3A57FBB0CB0482A2493823B57410E24A5BD4C1C96D79FE9888F7827BB ] xboxgip         C:\WINDOWS\System32\drivers\xboxgip.sys
13:23:02.0860 0x3040  xboxgip - ok
13:23:02.0877 0x3040  [ 1A8D9EA4DD1A3E276B85EDB05B42BEC7, 23FC10AC29BDF917AEDB3AAF82537EC2C72453E52B41836FD83643054FA4F0BE ] XboxNetApiSvc   C:\WINDOWS\system32\XboxNetApiSvc.dll
13:23:02.0910 0x3040  XboxNetApiSvc - ok
13:23:02.0915 0x3040  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\WINDOWS\System32\drivers\xinputhid.sys
13:23:02.0923 0x3040  xinputhid - ok
13:23:02.0928 0x3040  [ 80D89A9C089F1FADCDFD3C593B67E9EF, 88E0C708C0BFCC140AD7763F6BE586EFEF1CADDDAD7850A4065AF6507CD7A672 ] xusb22          C:\WINDOWS\System32\drivers\xusb22.sys
13:23:02.0940 0x3040  xusb22 - ok
13:23:02.0941 0x3040  ================ Scan global ===============================
13:23:02.0944 0x3040  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\WINDOWS\system32\basesrv.dll
13:23:02.0949 0x3040  [ 1429740F64D4B84EC4F81C07F21EB3C6, CAD89934800F011736BB964126EFB75169B64AD6349859C3009F35C13371C44D ] C:\WINDOWS\system32\winsrv.dll
13:23:02.0955 0x3040  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\WINDOWS\system32\sxssrv.dll
13:23:02.0964 0x3040  [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\WINDOWS\system32\services.exe
13:23:02.0970 0x3040  [ Global ] - ok
13:23:02.0970 0x3040  ================ Scan MBR ==================================
13:23:02.0971 0x3040  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:23:03.0083 0x3040  \Device\Harddisk0\DR0 - ok
13:23:03.0090 0x3040  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
13:23:03.0122 0x3040  \Device\Harddisk1\DR1 - ok
13:23:03.0429 0x3040  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk3\DR3
13:23:03.0526 0x3040  \Device\Harddisk3\DR3 - ok
13:23:03.0527 0x3040  ================ Scan VBR ==================================
13:23:03.0532 0x3040  [ 1E2F45C9B0DA8DC01A959E217FD59CD8 ] \Device\Harddisk0\DR0\Partition1
13:23:03.0535 0x3040  \Device\Harddisk0\DR0\Partition1 - ok
13:23:03.0540 0x3040  [ B244F314F06281C047B521D92BA14696 ] \Device\Harddisk0\DR0\Partition2
13:23:03.0543 0x3040  \Device\Harddisk0\DR0\Partition2 - ok
13:23:03.0548 0x3040  [ 57F6D4FD6D165F9B97B188CB9361F03D ] \Device\Harddisk1\DR1\Partition1
13:23:03.0552 0x3040  \Device\Harddisk1\DR1\Partition1 - ok
13:23:03.0557 0x3040  [ 02D76FEC0638AD86D9520FDF63F8DFB1 ] \Device\Harddisk3\DR3\Partition1
13:23:03.0560 0x3040  \Device\Harddisk3\DR3\Partition1 - ok
13:23:03.0561 0x3040  ================ Scan generic autorun ======================
13:23:03.0710 0x3040  [ FEFB41BB37B9C41F8AD9CB07533C43EF, E7D78E186E6C1FCD144ABA986EEDB06FB700D9A5C4666A090DE6CF48B748855D ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
13:23:03.0815 0x3040  RTHDVCPL - ok
13:23:03.0833 0x3040  [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
13:23:03.0849 0x3040  XboxStat - ok
13:23:03.0851 0x3040  USB3MON - ok
13:23:03.0855 0x3040  [ 1DF3DCE54EDF5E85D15BA381ED98FAC3, 91CDEC8ADD48A40AB4D4E49B5AF0CEB01AA7A063B6C2103E16038D46C417868F ] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe
13:23:03.0861 0x3040  ControlCenter4 - detected UnsignedFile.Multi.Generic ( 1 )
13:23:04.0061 0x3040  Detect skipped due to KSN trusted
13:23:04.0061 0x3040  ControlCenter4 - ok
13:23:04.0146 0x3040  [ 63E9C23A386FFFA84B5E03BFF9B628F0, A370962791EFC4B10548AAD31F89A2B288FBD5BDBF5749323C2D98C14DFB8B49 ] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
13:23:04.0215 0x3040  BrStsMon00 - detected UnsignedFile.Multi.Generic ( 1 )
13:23:04.0404 0x3040  Detect skipped due to KSN trusted
13:23:04.0404 0x3040  BrStsMon00 - ok
13:23:04.0435 0x3040  [ F8CF642281FD012EB0631645A09FC4A1, B94E800CAAE16F8F8521664FD3D2E66C7D99AC3755D269EA60EBFA321BC2D451 ] C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
13:23:04.0461 0x3040  CheckNDISPort54ac04 - ok
13:23:04.0471 0x3040  [ 5ABC6113AB85DFE1D40C643064B9B2E4, 12F6336A2E0FF8714FB4C93D0C0023D25A6C5C71F0F4289E0B45AC6A5ADA4A06 ] C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
13:23:04.0481 0x3040  CancelAutoPlay_df - ok
13:23:04.0486 0x3040  [ 1A0E9F4E16BD62779CECA24110804DEB, A18065DF92B8CD34637D3D6D791E07EF053F5BEFEFFCDE00ACA5BD429028E6EF ] C:\Program Files (x86)\PDF24\pdf24.exe
13:23:04.0494 0x3040  PDFPrint - ok
13:23:04.0503 0x3040  [ 9CE467BFF974344FB989F83D600B0A80, 40AEBDFEB9380ED5F3A6995F108C9D8D3D1433778C835B75FAE3B1A3534794DF ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
13:23:04.0515 0x3040  SunJavaUpdateSched - ok
13:23:04.0575 0x3040  [ 0EB54CE79A43ECFF46B6DAF7743E56F1, 9F06EFCC5B364463716616F28C52731A92BE4E0DD4D6202D6DAAAED2367FD850 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
13:23:04.0638 0x3040  SDTray - ok
13:23:04.0805 0x3040  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:04.0929 0x3040  OneDriveSetup - ok
13:23:05.0087 0x3040  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:05.0211 0x3040  OneDriveSetup - ok
13:23:05.0228 0x3040  [ 614FEE71F590258B37787E264CD52013, 61B401518CB92F43D76DE72C928005A7E3233FF26406E073313BA0753CF4C31E ] C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
13:23:05.0239 0x3040  Octoshape Streaming Services - ok
13:23:05.0264 0x3040  [ EE2826CAAF139688445D93C7C6613EE3, A343D94D748F8A2C06EA45566ECCCE1FCDC7660E0A2DBFF92E9741904FE0D559 ] C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\OneDrive.exe
13:23:05.0292 0x3040  OneDrive - ok
13:23:05.0615 0x3040  [ 1BE084E0E6E7B2E826F6B2A85909688B, 026BF182F148F4E994F8ABB06002D141007B80E58F23DBCDCA397EFC4D0F7D0E ] C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe
13:23:05.0907 0x3040  Spotify - ok
13:23:05.0932 0x3040  [ DCE78713EC70B718AB6BB44A0385D903, EB7ABD0EBF7F4D1BBBA5EDF0DCDDAA3288AA9BA01F5527815B83FCB58BB662D9 ] C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
13:23:05.0948 0x3040  Spotify Web Helper - ok
13:23:06.0072 0x3040  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:06.0197 0x3040  OneDriveSetup - ok
13:23:06.0211 0x3040  [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
13:23:06.0233 0x3040  WAB Migrate - ok
13:23:06.0377 0x3040  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:06.0500 0x3040  OneDriveSetup - ok
13:23:06.0514 0x3040  [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
13:23:06.0532 0x3040  WAB Migrate - ok
13:23:06.0537 0x3040  Waiting for KSN requests completion. In queue: 257
13:23:07.0571 0x3040  AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.817 ), 0x41000 ( enabled : updated )
13:23:07.0574 0x3040  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
13:23:07.0577 0x3040  FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.817 ), 0x41010 ( enabled )
13:23:07.0729 0x3040  ============================================================
13:23:07.0729 0x3040  Scan finished
13:23:07.0729 0x3040  ============================================================
13:23:07.0749 0x32d0  Detected object count: 0
13:23:07.0749 0x32d0  Actual detected object count: 0
         

Hallo,

gut. Nichts gefunden.

Was ist mit den Passwörtern?

Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3Starte noch einmal FRST.

• Setze den Haken bei addition.txt und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
• Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

# AdwCleaner 7.0.3.1 - Logfile created on Sun Oct 08 18:57:21 2017
# Updated on 2017/29/09 by Malwarebytes 
# Database: 10-04-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [2588 B] - [2017/10/4 22:18:28]
C:/AdwCleaner/AdwCleaner[S0].txt - [2636 B] - [2017/10/4 22:14:20]
C:/AdwCleaner/AdwCleaner[S1].txt - [1081 B] - [2017/10/4 22:20:9]
C:/AdwCleaner/AdwCleaner[S2].txt - [1148 B] - [2017/10/6 21:18:42]


########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt ##########
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 08.10.17
Scan-Zeit: 21:09
Protokolldatei: 3d289770-ac5c-11e7-90f9-74d435fed1e4.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.207
Version des Aktualisierungspakets: 1.0.2976
Lizenz: Kostenlos

-Systemdaten-
Betriebssystem: Windows 10 (Build 14393.953)
CPU: x64
Dateisystem: NTFS
Benutzer: Lasse-PC\Lasse

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 495124
Erkannte Bedrohungen: 0
(keine bösartigen Elemente erkannt)
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 3 Min., 16 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-10-2017
durchgeführt von Lasse (Administrator) auf LASSE-PC (08-10-2017 21:14:55)
Gestartet von C:\Users\Lasse\Downloads
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 14393.953.amd64fre.rs1_release_inmarket.170303-1614 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4174464 2017-05-23] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-23] (Adobe Systems Incorporated)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe" 
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1

Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-10-08]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default ->  Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-08]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-08]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-06]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-10-06]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1533448 2017-09-16] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864 2017-05-23] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760 2017-05-23] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936 2017-05-23] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186696 2017-10-05] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-05] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-08 21:14 - 2017-10-08 21:15 - 000026233 _____ C:\Users\Lasse\Downloads\FRST.txt
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64.exe
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64 (1).exe
2017-10-08 21:13 - 2017-10-08 21:13 - 001797632 _____ (Farbar) C:\Users\Lasse\Downloads\FRST.exe
2017-10-08 20:54 - 2017-10-08 20:54 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Downloads\AdwCleaner_7.0.3.1.exe
2017-10-08 18:53 - 2017-10-08 18:58 - 336529408 _____ C:\Users\Lasse\Downloads\kav_rescue_10.iso
2017-10-08 16:47 - 2017-10-08 16:47 - 3646816256 _____ C:\Users\Lasse\Desktop\Windows.iso
2017-10-08 16:00 - 2017-10-08 17:14 - 000000000 ____D C:\ESD
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ___HD C:\$Windows.~WS
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ____D C:\$WINDOWS.~BT
2017-10-08 14:03 - 2017-10-08 14:04 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool (1).exe
2017-10-08 13:22 - 2017-10-08 14:28 - 000278182 _____ C:\TDSSKiller.3.1.0.15_08.10.2017_13.22.17_log.txt
2017-10-08 13:12 - 2017-10-08 13:12 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Lasse\Downloads\tdsskiller.exe
2017-10-08 13:08 - 2017-10-08 13:22 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-10-08 13:08 - 2017-10-08 13:08 - 000109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-10-08 13:07 - 2017-10-08 13:22 - 000000000 ____D C:\Users\Lasse\Desktop\mbar
2017-10-08 13:07 - 2017-10-08 13:07 - 016563352 _____ (Malwarebytes Corp.) C:\Users\Lasse\Downloads\mbar-1.09.3.1001.exe
2017-10-06 23:15 - 2017-10-06 23:15 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool.exe
2017-10-06 23:03 - 2017-10-06 23:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-10-06 23:03 - 000001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-05-23 09:22 - 000032240 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2017-10-06 22:56 - 2017-10-06 22:57 - 051725936 _____ (Safer-Networking Ltd. ) C:\Users\Lasse\Downloads\spybotsd-2.6.46.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000928176 _____ (Magical Jelly Bean ) C:\Users\Lasse\Downloads\KeyFinderInstaller.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyFinder
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\Program Files (x86)\Magical Jelly Bean
2017-10-05 00:20 - 2017-10-08 21:14 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-08 20:57 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-08 13:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-05 00:08 - 2017-09-27 09:37 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasse****.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-08 19:16 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-08 19:08 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-10-08 18:48 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-08 17:14 - 2016-09-23 19:34 - 000000000 ___DC C:\WINDOWS\Panther
2017-10-08 16:02 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-10-08 14:33 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-10-08 12:54 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-08 00:53 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-07 23:54 - 2017-04-12 15:40 - 000000000 ____D C:\Users\Lasse\Documents\Bewerbungen
2017-10-07 23:54 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-10-07 23:54 - 2015-06-10 06:19 - 000000000 ____D C:\Users\Lasse\Documents\Sicherheit
2017-10-07 23:51 - 2015-06-10 06:16 - 000000000 ____D C:\Users\Lasse\Documents\FFS
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-06 22:45 - 2016-05-03 13:23 - 000000000 ____D C:\Users\Lasse\AppData\Local\Packages
2017-10-05 09:07 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-10-04 23:57

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-10-2017
durchgeführt von Lasse (08-10-2017 21:15:17)
Gestartet von C:\Users\Lasse\Downloads
Windows 10 Home Version 1607 14393.953.amd64fre.rs1_release_inmarket.170303-1614 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version:  - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version:  - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version:  - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version:  - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version:  - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version:  - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.12 - Magical Jelly Bean)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version:  - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version:  - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version:  - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version:  - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version:  - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version:  - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version:  - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version:  - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.6.46 - Safer-Networking Ltd.)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version:  - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version:  - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version:  - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version:  - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version:  - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite  (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version:  - Goldhawk Interactive)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {672CBA70-B858-497D-8199-09B86CE1EAA4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D8A1940-66E8-4227-BECD-673D47C32407} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {7DD14D66-8EA0-4B48-BC7B-C3E965279DF5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-10-05 00:08 - 2017-09-27 09:37 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 000222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-04-04 06:54 - 2017-04-04 06:55 - 022723584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000448512 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 005427200 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2016-06-03 08:38 - 2016-06-03 08:38 - 000680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000435712 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 001062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-05-03 13:48 - 2016-05-03 13:48 - 000291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-03-14 11:35 - 2017-03-14 11:35 - 003879424 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
2017-03-15 08:17 - 2017-03-04 08:04 - 000114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-10-06 23:03 - 2016-09-13 14:00 - 000109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-10-06 23:03 - 2017-05-12 11:36 - 000507464 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "XboxStat"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0F2C788C-80BD-41BC-B2E2-CFD86DA18444}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{95476250-87A8-4FC0-9957-C37277752147}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{ECF5E114-4D40-4339-B42E-9B0B854912A8}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{CC130A07-29A0-4281-AC98-57CB7848095E}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

18-09-2017 18:45:39 Geplanter Prüfpunkt
26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/08/2017 12:58:42 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\System32\sdnclean64.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\System32\sdnclean64.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.


Systemfehler:
=============
Error: (10/08/2017 02:30:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (10/08/2017 02:30:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (10/08/2017 12:54:34 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/07/2017 10:23:25 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/06/2017 09:50:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/06/2017 08:14:23 AM) (Source: DCOM) (EventID: 10010) (User: Lasse-PC)
Description: Der Server "App.AppXryc2qd338f5728r9gzzazav8206ba77s.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/06/2017 08:12:02 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/05/2017 10:01:24 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/05/2017 09:11:36 AM) (Source: DCOM) (EventID: 10010) (User: Lasse-PC)
Description: Der Server "App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/05/2017 09:11:36 AM) (Source: DCOM) (EventID: 10010) (User: Lasse-PC)
Description: Der Server "App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


CodeIntegrity:
===================================
  Date: 2017-06-01 11:20:03.507
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-06-01 11:20:03.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.894
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.857
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 10:59:25.975
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-24 12:31:13.218
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-03-17 15:15:49.745
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.731
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.710
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.666
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 22%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 12572.31 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 28515.1 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.93 GB) (Free:59.44 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.87 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (BFG) (Fixed) (Total:465.75 GB) (Free:217.07 GB) exFAT

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 465.8 GB) (Disk ID: A86C4D51)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Ich frage dich jetzt bereits zum dritten Mal nach den Passwörtern! Was ist damit?

Sorry, das schein ich jedes Mal überlesen zu haben.

Ja, ich habe die Passwörter am Abend an dem ich tagsüber nicht in meine Accounts reinkam alle von einem dritten Rechner geändert. Die Datei habe ich noch in dem Papierkorb meines Unimail Accounts.

Ah, ok, das war mir wirklich wichtig, das zu wissen.

Gut, gibt es denn Probleme?

Schritt 1
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 2
Starte noch einmal FRST.

• Setze den Haken bei addition.txt und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
• Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Nein, seit dem Ändern der Passwörter am selben Abend keinerlei Probleme.

Da der ESET Scan mehrere Stunden dauert, kann ich diesen leider erst frühestens morgen Abend, vielleicht erst Donnerstag durchführen. Ich poste dann hier die Logs sobald ich den Scan beendet habe.

Vielen Dank schon mal für die Hilfe!

Alles klar, bis dahin.
Und bitte, sehr gerne.

ESET hat 17 infizierte Dateien gefunden.

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e13da5883c47f24b8d6441f768bc24a2
# end=init
# utc_time=2017-10-12 09:09:56
# local_time=2017-10-12 11:09:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=41221
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Init
Update Download
Update Finalize
Updated modules version: 35037
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e13da5883c47f24b8d6441f768bc24a2
# end=updated
# utc_time=2017-10-12 09:52:30
# local_time=2017-10-12 11:52:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=e13da5883c47f24b8d6441f768bc24a2
# engine=35037
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-10-12 11:43:40
# local_time=2017-10-12 01:43:40 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1313 16777213 100 100 9435 40742754 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 11506413 39139234 0 0
# scanned=798854
# found=17
# cleaned=0
# scan_time=6669
sh=A03235A9C4A36444BD8F256B0354995F4F35A2E6 ft=1 fh=5f27f88a2b2ca712 vn="Variante von Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe"
sh=449E318D1DDA81355DCC2FE29DD2E0CA067FCB1E ft=1 fh=a0c5b07652b48850 vn="Variante von Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe"
sh=A09D2624D8DD1872B9A723F4EB11837C7E667ED7 ft=1 fh=64c97ace1b9f3668 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe"
sh=DD74FF46C5F39AA6C601668A4B45ABDE2B7E69C2 ft=1 fh=8152e1469a5cb1f9 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe"
sh=8EAE9D820DB63EF3F0490E2B1ACF19E1A36ADD3C ft=1 fh=502ecb1bb3a155fa vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe"
sh=A78C022F18456728C8038990A4DD11DC671D0E73 ft=1 fh=0dc4886b25645ca6 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe"
sh=6C436F353C8B059F3CFE970FF4D30B47B472E941 ft=1 fh=807ecb843ae99813 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\SetupPoker.exe"
sh=D27731D0B5535AE44064F8B7DFD8283A7D56A889 ft=1 fh=67c99e8768efa646 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\SetupPoker_407fae.exe"
sh=48F424070CCD3DA3FAD3767EFF405244CE5C62D6 ft=1 fh=c1b54205dc4a3f79 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe"
sh=A56663828E9F70E08DE2442CD0025C3E94975BD8 ft=1 fh=a3f30eff576d0b85 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
sh=DD74FF46C5F39AA6C601668A4B45ABDE2B7E69C2 ft=1 fh=8152e1469a5cb1f9 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\Notepad - CHIP-Installer.exe"
sh=8EAE9D820DB63EF3F0490E2B1ACF19E1A36ADD3C ft=1 fh=502ecb1bb3a155fa vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\OpenOffice - CHIP-Installer.exe"
sh=A78C022F18456728C8038990A4DD11DC671D0E73 ft=1 fh=0dc4886b25645ca6 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\PDF24 Creator - CHIP-Installer.exe"
sh=6C436F353C8B059F3CFE970FF4D30B47B472E941 ft=1 fh=807ecb843ae99813 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\SetupPoker.exe"
sh=D27731D0B5535AE44064F8B7DFD8283A7D56A889 ft=1 fh=67c99e8768efa646 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\SetupPoker_407fae.exe"
sh=48F424070CCD3DA3FAD3767EFF405244CE5C62D6 ft=1 fh=c1b54205dc4a3f79 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe"
sh=A56663828E9F70E08DE2442CD0025C3E94975BD8 ft=1 fh=a3f30eff576d0b85 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11-10-2017
durchgeführt von Lasse (Administrator) auf LASSE-PC (12-10-2017 14:05:18)
Gestartet von C:\Users\Lasse\Downloads
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 170303-1614 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\Teamspeak 3\ts3client_win64.exe
(Valve Corporation) E:\Spiele\Steam\Steam.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(BattlEye Innovations) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
() C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
(Bluehole GinnoGames, Inc.) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame.exe
(Valve Corporation) E:\Spiele\Steam\GameOverlayUI.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Lasse\Downloads\FRST64 (2).exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4174464 2017-05-23] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe" 
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1

Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-10-09]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default ->  Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-12]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-08]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-10]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-10-06]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1548808 2017-10-11] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864 2017-05-23] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760 2017-05-23] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936 2017-05-23] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [401896 2017-10-12] ()
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186184 2017-10-10] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-10] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-12 14:05 - 2017-10-12 14:05 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64 (2).exe
2017-10-12 11:08 - 2017-10-12 11:09 - 002870984 _____ (ESET) C:\Users\Lasse\Downloads\esetsmartinstaller_deu.exe
2017-10-08 21:15 - 2017-10-08 21:15 - 000064297 _____ C:\Users\Lasse\Downloads\Addition.txt
2017-10-08 21:14 - 2017-10-12 14:05 - 000027480 _____ C:\Users\Lasse\Downloads\FRST.txt
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64.exe
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64 (1).exe
2017-10-08 21:13 - 2017-10-08 21:13 - 001797632 _____ (Farbar) C:\Users\Lasse\Downloads\FRST.exe
2017-10-08 20:54 - 2017-10-08 20:54 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Downloads\AdwCleaner_7.0.3.1.exe
2017-10-08 18:53 - 2017-10-08 18:58 - 336529408 _____ C:\Users\Lasse\Downloads\kav_rescue_10.iso
2017-10-08 16:47 - 2017-10-08 16:47 - 3646816256 _____ C:\Users\Lasse\Desktop\Windows.iso
2017-10-08 16:00 - 2017-10-08 17:14 - 000000000 ____D C:\ESD
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ___HD C:\$Windows.~WS
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ____D C:\$WINDOWS.~BT
2017-10-08 14:03 - 2017-10-08 14:04 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool (1).exe
2017-10-08 13:22 - 2017-10-08 14:28 - 000278182 _____ C:\TDSSKiller.3.1.0.15_08.10.2017_13.22.17_log.txt
2017-10-08 13:12 - 2017-10-08 13:12 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Lasse\Downloads\tdsskiller.exe
2017-10-08 13:08 - 2017-10-08 13:22 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-10-08 13:08 - 2017-10-08 13:08 - 000109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-10-08 13:07 - 2017-10-08 13:22 - 000000000 ____D C:\Users\Lasse\Desktop\mbar
2017-10-08 13:07 - 2017-10-08 13:07 - 016563352 _____ (Malwarebytes Corp.) C:\Users\Lasse\Downloads\mbar-1.09.3.1001.exe
2017-10-06 23:15 - 2017-10-06 23:15 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool.exe
2017-10-06 23:03 - 2017-10-06 23:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-10-06 23:03 - 000001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-05-23 09:22 - 000032240 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2017-10-06 22:56 - 2017-10-06 22:57 - 051725936 _____ (Safer-Networking Ltd. ) C:\Users\Lasse\Downloads\spybotsd-2.6.46.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000928176 _____ (Magical Jelly Bean ) C:\Users\Lasse\Downloads\KeyFinderInstaller.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyFinder
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\Program Files (x86)\Magical Jelly Bean
2017-10-05 00:20 - 2017-10-12 14:05 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-08 20:57 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-10 09:25 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-10 09:25 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-05 00:08 - 2017-10-08 13:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasseKonz.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-12 14:05 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-12 13:38 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-12 11:06 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-12 00:42 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-10 00:53 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-10-09 23:50 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-10-08 17:14 - 2016-09-23 19:34 - 000000000 ___DC C:\WINDOWS\Panther
2017-10-08 16:02 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-10-07 23:54 - 2017-04-12 15:40 - 000000000 ____D C:\Users\Lasse\Documents\Bewerbungen
2017-10-07 23:54 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-10-07 23:54 - 2015-06-10 06:19 - 000000000 ____D C:\Users\Lasse\Documents\Sicherheit
2017-10-07 23:51 - 2015-06-10 06:16 - 000000000 ____D C:\Users\Lasse\Documents\FFS
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-06 22:45 - 2016-05-03 13:23 - 000000000 ____D C:\Users\Lasse\AppData\Local\Packages
2017-10-05 09:07 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-10-04 23:57

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 11-10-2017
durchgeführt von Lasse (12-10-2017 14:05:51)
Gestartet von C:\Users\Lasse\Downloads
Windows 10 Home Version 1607 170303-1614 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version:  - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version:  - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version:  - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version:  - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version:  - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version:  - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.12 - Magical Jelly Bean)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version:  - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version:  - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version:  - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version:  - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version:  - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version:  - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version:  - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version:  - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.6.46 - Safer-Networking Ltd.)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version:  - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version:  - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version:  - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version:  - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version:  - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite  (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version:  - Goldhawk Interactive)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {672CBA70-B858-497D-8199-09B86CE1EAA4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D8A1940-66E8-4227-BECD-673D47C32407} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {7DD14D66-8EA0-4B48-BC7B-C3E965279DF5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-10-05 00:08 - 2017-10-10 09:25 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-04-04 06:54 - 2017-04-04 06:55 - 022723584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000448512 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 005427200 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2016-06-03 08:38 - 2016-06-03 08:38 - 000680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000435712 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 001062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-05-03 13:48 - 2016-05-03 13:48 - 000291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-03-14 11:35 - 2017-03-14 11:35 - 003879424 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
2014-02-28 11:14 - 2017-08-23 20:41 - 000173848 _____ () C:\Program Files (x86)\Teamspeak 3\quazip.dll
2017-01-24 12:48 - 2017-07-20 22:05 - 000019736 _____ () C:\Program Files (x86)\Teamspeak 3\libEGL.DLL
2017-01-24 12:48 - 2017-07-20 22:05 - 001980696 _____ () C:\Program Files (x86)\Teamspeak 3\libGLESv2.dll
2014-08-04 15:43 - 2017-08-23 20:41 - 000124696 _____ () C:\Program Files (x86)\Teamspeak 3\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2017-08-23 20:41 - 000149784 _____ () C:\Program Files (x86)\Teamspeak 3\soundbackends\windowsaudiosession_win64.dll
2017-03-14 12:19 - 2017-07-18 15:18 - 000157696 _____ () C:\Users\Lasse\AppData\Roaming\TS3Client\plugins\gamepad_joystick_win64.dll
2017-03-29 10:36 - 2017-07-23 00:39 - 000345880 _____ () C:\Users\Lasse\AppData\Roaming\TS3Client\plugins\clientquery_plugin_win64.dll
2015-09-01 23:33 - 2017-10-11 20:01 - 001548808 _____ () C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-03-15 08:17 - 2017-03-04 08:04 - 000114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-10-06 23:03 - 2016-09-13 14:00 - 000109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-10-06 23:03 - 2017-05-12 11:36 - 000507464 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-04-13 18:02 - 2017-08-04 23:19 - 000678176 _____ () E:\Spiele\Steam\SDL2.dll
2015-04-13 18:02 - 2016-09-01 03:02 - 004969248 _____ () E:\Spiele\Steam\v8.dll
2015-04-13 18:02 - 2017-10-05 01:49 - 002507552 _____ () E:\Spiele\Steam\video.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 002549760 _____ () E:\Spiele\Steam\libavcodec-56.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000491008 _____ () E:\Spiele\Steam\libavformat-56.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000332800 _____ () E:\Spiele\Steam\libavresample-2.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000442880 _____ () E:\Spiele\Steam\libavutil-54.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000485888 _____ () E:\Spiele\Steam\libswscale-3.dll
2015-04-13 18:02 - 2016-09-01 03:02 - 001563936 _____ () E:\Spiele\Steam\icui18n.dll
2015-04-13 18:02 - 2016-09-01 03:02 - 001195296 _____ () E:\Spiele\Steam\icuuc.dll
2015-04-13 18:02 - 2017-10-05 01:49 - 000885024 _____ () E:\Spiele\Steam\bin\chromehtml.DLL
2016-03-09 10:12 - 2016-07-05 00:17 - 000266560 _____ () E:\Spiele\Steam\openvr_api.dll
2016-12-13 09:18 - 2017-07-18 00:50 - 073115424 _____ () E:\Spiele\Steam\bin\cef\cef.win7\libcef.dll
2017-06-09 12:44 - 2017-05-17 03:54 - 000678176 _____ () E:\Spiele\Steam\bin\cef\cef.win7\SDL2.dll
2015-04-13 18:02 - 2015-09-25 01:52 - 000119208 _____ () E:\Spiele\Steam\winh264.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "XboxStat"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0F2C788C-80BD-41BC-B2E2-CFD86DA18444}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{95476250-87A8-4FC0-9957-C37277752147}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{ECF5E114-4D40-4339-B42E-9B0B854912A8}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{CC130A07-29A0-4281-AC98-57CB7848095E}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt
12-10-2017 11:16:35 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\System32\sdnclean64.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\System32\sdnclean64.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.


Systemfehler:
=============
Error: (10/12/2017 11:52:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/12/2017 11:52:23 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys

Error: (10/12/2017 11:52:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/12/2017 11:52:22 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys

Error: (10/12/2017 11:52:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/12/2017 11:52:22 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys

Error: (10/12/2017 11:33:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/12/2017 11:33:09 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys

Error: (10/12/2017 11:33:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/12/2017 11:33:08 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2017-06-01 11:20:03.507
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-06-01 11:20:03.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.894
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.857
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 10:59:25.975
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-24 12:31:13.218
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-03-17 15:15:49.745
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.731
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.710
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.666
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 9200.59 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 22185.04 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.93 GB) (Free:59.61 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.77 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (BFG) (Fixed) (Total:465.75 GB) (Free:217.07 GB) exFAT

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 465.8 GB) (Disk ID: A86C4D51)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Hallo,

ja das sind allesamt Dateien von Chip.

Dazu folgendes:
Chip installiert gerne mit seinen Downloadern andere Programme. Wenn du dazu noch was lesen möchtest:
Hier
Hier
Hier
Auch versuchen sich immer mehr Programme durch Installationsroutinen auf den PC "durchzumogeln". Das klappt ganz gut, weil viele Anwender sich diese nicht genau durchlesen und schnell durchklicken. Manchmal steht auch in den Lizenzvereinbarungen, dass ein Programm, was eigentlich als Freeware angepriesen wird, nur genutzt werden kann, wenn man sich bestimmte Toolbars oder andere Programme mitinstallieren lässt.
Da hilft es nur aufmerksam zu sein.

Bitte verschiebe FRST aus dem Downloadordner auf den Desktop, ansonsten funktioniert der Fix nicht.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe
C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe
C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe
C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe
C:\Users\Lasse\Downloads\SetupPoker.exe
C:\Users\Lasse\Downloads\SetupPoker_407fae.exe
C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
G:\Downloads\Notepad - CHIP-Installer.exe
G:\Downloads\OpenOffice - CHIP-Installer.exe
G:\Downloads\PDF24 Creator - CHIP-Installer.exe
G:\Downloads\SetupPoker.exe
G:\Downloads\SetupPoker_407fae.exe
G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

OK
So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.

Schritt 1

Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Updates / Programme aktualisieren

• FlashPlayer

Deine FlashPlayer für Firefox und den Internet Explorer sind nicht mehr aktuell.

• Deinstalliere die alten Versionen.
• Öffne nacheinander mit beiden Browsern folgenden Link Adobe - Adobe Flash Player installieren und lade Dir von dort die neueste Version herunter.
• Falls sich dort etwas anderes als der FlashPlayer noch zusätzlich mitinstallieren möchte, entferne den Haken dort.

Aktualisierung einstellen
Stelle sicher, dass dein FlashPlayer nach Updates sucht. Den FlashPlayer kann man direkt bei der Installation so konfigurieren, dass er nach Updates automatisch sucht, nachträglich kann man das über folgenden Link machen:
Adobe - Flash Player: Einstellungsmanager - Globale Benachrichtigungseinstellungen

• Mozilla Firefox
  Lade dir bitte von hier den aktuellen Firefox herunter.

Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür

• verwende für jede Anwendung und jeden Account ein anderes Passwort
• ändere regelmäßig dein Passwort, vor allem bei Onlinebanking oder deinem Emailpostfach ist dieses sehr wichtig
• speichere keine Passwörter auf deinem PC, gib diese nicht an dritte weiter
• ein sicheres Passwort besteht aus mindestens 8 Zeichen und beinhaltet Groß- und Kleinbuchstaben, Zahlen, und Sonderzeichen
• benutze keine Zahlen- oder Buchstabenkombinationen, ( zB 12345678, qwertzui) auch keine Zahlen oder Buchstabenmuster
• verwende keine Passwörter die einen Bezug zu dir, deinem Wohnort, Familienmitglied oder Haustier (Geburtsdatum, Postleitzahl, Adresse, Name)

Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.

• Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.

• Java

Java ist eine große Sicherheitslücke auf deinem System, es werden immer wieder neue Schwachstellen entdeckt, die ausgenutzt werden um Rechner zu infizieren.
Sofern du Java nicht zwingend benötigst, solltest du es komplett deinstallieren.

Windows Vista
Gehe auf:
Start --> Systemsteuerung -- > Programme --> Programme deinstallieren --> Javaversionen suchen --> entfernen
Windows 7
Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen
Windows 8
Dazu drücke auf:
Windowstaste und X
dann:
Programme und Funktionen -->Javaversionen auswählen --> entfernen

Falls du Java doch unbedingt benötigst, dann

• Downloade dir bitte die neueste Java-Version von hier
• Speichere die jxpiinstall.exe
• Schließe alle laufenden Programme. Speziell deinen Browser.
• Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 8 Update 40 ) herunter laden.
• Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.

und sorge dafür, dass Java automatisch updated.
Dazu:

• öffne Java
• klicke auf den Reiter Update
• klicke auf: Benachrichtung ausgeben: Vor dem Download setze den Haken bei Automatisch nach Updates suchen
• klicke auf Erweitert
• ändere das Intervall mindestens auf wöchentlich

und schalte das Browser-Plugin aus.
Hier findest du eine Anleitung dazu.

Antivirensoftware

• Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz

• MalwareBytes Anti-Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
  Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu die Datenträgerbereinigung von Windows.
Windows Vista

• Klicke unten links auf das Vistasymbol
• Gehe auf Programme -> Zubehör -> Systemprogramme -> Datenträgerbereinigung
• Wähle nun Dateien von allen Benutzern des Computers aus und bestätige mit OK
• Setze den Haken bei den zu löschenden Dateien zusätzlich bei Temporäre Dateien
• Bestätige mit OK
• Bestätige dass du die Dateien unwiderruflich löschen möchtest

Windows 7

• Gehe auf das Windowsstartsymbol
• Gebe im Suchfeld Datenträgerrereinigung ein
• Setze den Haken zusätzlich bei Temporäre Dateien
• Bestätige mit OK

Windows 8

• Rechtsklicke in die untere linke Ecke deines Bildschirms
• Klicke auf Suchen
• Klicke auf Einstellungen
• Gebe im Suchfeld Datenträgerbereinigung ein
• Klicke in den Einstellungen auf der linken Seite nun auf Speicherplatz durch Löschen nicht erforderlicher Dateien freigeben
• Setze den Haken zusätzlich bei Temporäre Dateien
• Bestätige mit OK
• Bestätige dass du die Dateien unwiderruflich löschen möchtest

Windows 10

• gebe im Cortana Suchfeld Datenträgerbereinigung ein
• wähle dort die Desktop-App Datenträgerbereinigung aus
• Klicke in den Einstellungen auf der linken Seite nun auf Speicherplatz durch Löschen nicht erforderlicher Dateien freigeben
• Setze den Haken zusätzlich bei Temporäre Dateien
• Bestätige mit OK
• Bestätige dass du die Dateien unwiderruflich löschen möchtest

Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
• Achte besonders bei der Installation von Programmen darauf, ob sich weitere Software mitinstallieren möchte, wähle wo immer es geht die benutzerdefinierte Installation und wähle alles ab, was nichts mit dem Programm zu tun hat, welches du dir installieren möchtest.

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-10-2017
durchgeführt von Lasse (15-10-2017 23:43:42) Run:1
Gestartet von C:\Users\Lasse\Desktop
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe
C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe
C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe
C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe
C:\Users\Lasse\Downloads\SetupPoker.exe
C:\Users\Lasse\Downloads\SetupPoker_407fae.exe
C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
G:\Downloads\Notepad - CHIP-Installer.exe%
G:\Downloads\OpenOffice - CHIP-Installer.exe
G:\Downloads\PDF24 Creator - CHIP-Installer.exe
G:\Downloads\SetupPoker.exe
G:\Downloads\SetupPoker_407fae.exe
G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
*****************

Chrome HomePage => erfolgreich entfernt
C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe => erfolgreich verschoben
C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe => erfolgreich verschoben
C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\SetupPoker.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\SetupPoker_407fae.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\Notepad - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\OpenOffice - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\PDF24 Creator - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\SetupPoker.exe => erfolgreich verschoben
G:\Downloads\SetupPoker_407fae.exe => erfolgreich verschoben
G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe => erfolgreich verschoben

==== Ende von Fixlog 23:43:52 ====
         

Wenn ich versuche Windows zu updaten bekomme ich immer folgende Nachricht:
"Beim Installieren von Updates sind Probleme aufgetreten. Wir versuchen es allerdings später noch einmal. Falls dieser Fehler weiterhin auftritt und Sie Informationen im Web suchen oder sich an den Support wenden möchten, kann dieser Fehlercode hilfreich sein: (0x80070422)."

Warte noch auf eine Antwort, ob das Normal ist bzw. wie man das ändern kann. Danke