Windows 7: TR/Crypt.Agent.gkqty Fund bei C:\Windows\debug\winlogons.exe

LeoWy · 18.09.2018, 13:56

Hi,

ich habe seit gestern immer wieder einen Trojaner Fund von Avira. Gefahrname: TR/Crypt.Agent.gkqty in C:\Windows\debug\winlogons.exe . Kann mir jemand bitte helfen den Trojaner zu entfernen?
Die FRST.txt und Addition.txt sind aufgrund von zu vielen Zeichen als .zip angehängt.

Viele Grüße und schon mal vielen Dank für Hilfe!

cosinus · 18.09.2018, 14:01

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

LeoWy · 18.09.2018, 14:03

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15.09.2018
durchgeführt von Leo (Administrator) auf LEO-PC (18-09-2018 14:41:47)
Gestartet von C:\Users\Leo\Desktop
Geladene Profile: Leo (Verfügbare Profile: Leo)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 8 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\Sades 7.1CH Gaming Headset\CPL\FaceLift_x64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Creative Technology Ltd) C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Riot Games\LeagueDisplays\assistant\LeagueDisplaysAssistant.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Macrovision Europe Ltd.) C:\Users\Leo\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
() C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(eVenture Limited) C:\Program Files (x86)\hide.me VPN\hidemesvc.exe
(Corel Corporation) C:\Program Files\WinZip\WinZip Smart Monitor\WinZipCompressionSmartMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Creative Labs) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Avira Operations Gmbh & Co. KG) C:\Program Files (x86)\Avira\Safe Shopping\Avira Safe Shopping.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10060832 2010-02-08] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation)
HKLM\...\Run: [Cm6620Sound] => C:\Program Files\Sades 7.1CH Gaming Headset\CPL\FaceLift_x64.exe [2250240 2014-04-11] ()
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-01-22] (Apple Inc.)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [117760 2017-11-02] (WinZip Computing, S.L.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CTSyncService] => C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [LeagueDisplays] => C:\Riot Games\LeagueDisplays\assistant\LeagueDisplaysAssistant.exe [408576 2017-12-04] ()
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-08-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [64096 2018-08-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\SysWOW64\launcher.scr [2371856 2017-12-04] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2018-07-12]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{8E583106-8522-4B9C-8B08-E0C03B75B32F}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{917EFDD9-DC5F-40D1-9E4E-C40805236251}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{C44554B8-2C24-4641-B508-5C276342B3D7}: [DhcpNameServer] 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.go-setting.com/
HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000 -> DefaultScope {7B2310C5-9F4D-4977-B2C3-78F94745EA38} URL = hxxp://www.go-setting.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000 -> {0DAD8927-BF05-4581-AFCB-80AB46632D59} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000 -> {7B2310C5-9F4D-4977-B2C3-78F94745EA38} URL = hxxp://www.go-setting.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-08-23] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2018-07-19] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-19] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-07-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-07] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2018-07-19] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2018-07-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-07] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-19] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-19] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-19] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-19] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: bf76oj5z.default
FF ProfilePath: C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default [2018-09-17]
FF Homepage: Mozilla\Firefox\Profiles\bf76oj5z.default -> hxxps://www.malwarebytes.org/restorebrowser/
FF Extension: (Avira Browser Safety) - C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\Extensions\abs@avira.com [2018-06-15]
FF Extension: (Search and New Tab by Yahoo) - C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\Extensions\jid1-16aeif9OQIRKxA@jetpack.xpi [2017-06-07] [Legacy]
FF Extension: (Avira Password Manager) - C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\Extensions\passwordmanager@avira.com [2018-06-15]
FF SearchPlugin: C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\searchplugins\bing-lavasoft.xml [2017-11-19]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-06] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-06] ()
FF Plugin-x32: @cambridgesoft.com/Chem3D,version=16.0 -> C:\Program Files (x86)\PerkinElmerInformatics\ChemOffice2016\Chem3D\npChem3DPlugin.dll [2017-01-06] (PerkinElmer)
FF Plugin-x32: @cambridgesoft.com/ChemDraw,version=16.0 -> C:\Program Files (x86)\PerkinElmerInformatics\ChemOffice2016\ChemDraw\npcdp32.dll [2017-01-06] (PerkinElmer)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-01-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-01-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-3494380360-4114429975-3830878526-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2018-06-16] ()

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.go-setting.com/
CHR Profile: C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default [2018-09-18]
CHR Extension: (Präsentationen) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (BetterTTV) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-04-04]
CHR Extension: (Docs) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Google Drive) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-08]
CHR Extension: (YouTube) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-08]
CHR Extension: (Chrome IG Story) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bojgejgifofondahckoaahkilneffhmf [2018-09-10]
CHR Extension: (Google-Suche) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-08]
CHR Extension: (Tabellen) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (Avira Browserschutz) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2018-06-15]
CHR Extension: (Google Docs Offline) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-14]
CHR Extension: (AdBlock) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-18]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Google Mail) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-08]
CHR Extension: (Chrome Media Router) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-02]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ibbfklbaljofpaanmpaeadejijfdddco] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [895056 2018-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [226000 2018-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [226000 2018-09-04] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1148568 2018-09-04] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-01-05] (Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [436848 2018-08-17] (Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2981360 2018-07-27] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [338888 2018-08-14] (Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [103728 2018-09-12] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7206312 2018-07-17] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8522912 2018-08-07] (Microsoft Corporation)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-05-23] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-05-23] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-03-17] (Digital Wave Ltd.) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-13] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-23] (NVIDIA Corporation)
R2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\hidemesvc.exe [138960 2017-04-30] (eVenture Limited)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [625640 2015-04-24] (Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2124296 2017-03-09] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2185232 2017-03-09] (Electronic Arts)
R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2015-05-23] (Creative Labs) [Datei ist nicht signiert]
S2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [25704 2017-11-19] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WinZip Compression Smart Monitor Service; C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe [495872 2017-09-01] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [73240 2018-08-09] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [199920 2018-07-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [153040 2018-07-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-21] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-21] (Avira Operations GmbH & Co. KG)
R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 CMUAC; C:\Windows\System32\DRIVERS\CMUAC.SYS [390656 2014-01-08] (C-Media Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152184 2018-04-26] (Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [190696 2018-09-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [112864 2018-09-18] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [44768 2018-09-18] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-09-18] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [94328 2018-09-18] (Malwarebytes)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2018-05-17] (The OpenVPN Project)
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-07-29] (Samsung Electronics)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2014-04-21] (Texas Instruments)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-09-18 14:39 - 2018-09-18 14:40 - 000084359 _____ C:\Users\Leo\Downloads\Addition.txt
2018-09-18 14:39 - 2018-09-18 14:40 - 000040517 _____ C:\Users\Leo\Downloads\FRST.txt
2018-09-18 14:38 - 2018-09-18 14:41 - 000000000 ____D C:\Users\Leo\Desktop\Biochemie
2018-09-18 14:33 - 2018-09-18 14:42 - 000028370 _____ C:\Users\Leo\Desktop\FRST.txt
2018-09-18 14:33 - 2018-09-18 14:41 - 000000000 ____D C:\FRST
2018-09-18 14:32 - 2018-09-18 14:32 - 002413568 _____ (Farbar) C:\Users\Leo\Desktop\FRST64.exe
2018-09-18 14:11 - 2018-09-18 14:11 - 000602112 _____ (OldTimer Tools) C:\Users\Leo\Desktop\OTL.exe
2018-09-17 16:21 - 2018-09-18 14:17 - 000094328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-09-15 21:45 - 2018-09-18 11:08 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-09-15 21:45 - 2018-09-18 11:08 - 000112864 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-09-15 21:45 - 2018-09-18 11:08 - 000044768 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-09-15 21:45 - 2018-09-15 21:45 - 000190696 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-09-15 21:45 - 2018-09-15 21:45 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-09-15 21:45 - 2018-09-15 21:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-09-15 21:44 - 2018-09-15 21:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-09-15 21:44 - 2018-09-15 21:44 - 000000000 ____D C:\Program Files\Malwarebytes
2018-09-15 21:44 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-09-15 11:07 - 2018-09-15 11:08 - 000000000 ____D C:\Users\Leo\Desktop\Analytik Klausuren
2018-09-13 11:02 - 2018-09-15 13:03 - 000000000 ____D C:\Users\Leo\Desktop\Housetime
2018-09-13 09:27 - 2018-09-13 09:27 - 000127634 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-09-12 at 16.41.40.jpeg
2018-09-13 09:27 - 2018-09-13 09:27 - 000121350 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-09-12 at 16.41.49.jpeg
2018-09-13 09:27 - 2018-09-13 09:27 - 000061094 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-09-12 at 16.41.59.jpeg
2018-09-03 15:23 - 2018-09-03 15:23 - 000016521 _____ C:\Users\Leo\Downloads\Daten LCMS (1).xlsx
2018-09-03 15:14 - 2018-09-03 15:14 - 000016495 _____ C:\Users\Leo\Downloads\Daten LCMS.xlsx
2018-09-03 11:50 - 2018-09-03 11:50 - 000008319 _____ C:\Users\Leo\Downloads\ergebnisse_LCMS.csv
2018-08-28 16:09 - 2018-08-28 16:24 - 000101696 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-08-28 at 11.54.54 (1).jpeg
2018-08-28 13:06 - 2018-08-28 16:20 - 000210518 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-08-28 at 12.10.53.jpeg
2018-08-28 11:55 - 2018-08-28 11:57 - 000101696 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-08-28 at 11.54.54.jpeg
2018-08-27 21:05 - 2018-08-27 21:09 - 000000000 ____D C:\Users\Leo\Documents\Black Desert
2018-08-27 19:24 - 2018-08-27 21:10 - 000000000 ____D C:\Users\Leo\AppData\Local\BlackDesertOnline
2018-08-27 19:23 - 2018-08-27 21:10 - 000000000 ____D C:\Program Files (x86)\Black Desert Online
2018-08-27 19:23 - 2018-08-27 19:23 - 000002014 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Black Desert Online.lnk
2018-08-27 19:23 - 2018-08-27 19:23 - 000002008 _____ C:\Users\Public\Desktop\Black Desert Online.lnk
2018-08-27 19:23 - 2018-08-27 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert Online
2018-08-27 19:22 - 2018-08-27 19:22 - 052395976 _____ (Kakao Games Europe B.V.) C:\Users\Leo\Downloads\BlackDesertOnlineSetup_20180524_10010.exe
2018-08-26 22:20 - 2018-08-26 22:20 - 000068191 _____ C:\Users\Leo\Downloads\TXRF Nick.pdf
2018-08-24 22:41 - 2018-08-24 22:41 - 000174380 _____ C:\Users\Leo\Downloads\cm._2018-08-23_1348387458515436562136442.pdf
2018-08-24 20:51 - 2018-08-24 21:39 - 000011126 _____ C:\Users\Leo\Downloads\Bauch Beine (1).xlsx
2018-08-24 20:51 - 2018-08-24 20:57 - 000011796 _____ C:\Users\Leo\Downloads\Rücken Bizeps (1).xlsx
2018-08-24 20:50 - 2018-08-24 21:42 - 000011924 _____ C:\Users\Leo\Downloads\Brust trizeps (1).xlsx
2018-08-22 19:37 - 2018-08-22 19:37 - 003232818 _____ C:\Users\Leo\Downloads\BCV1shomb04jkuer04korrigiert (1).pdf
2018-08-22 19:30 - 2018-08-22 19:30 - 000015068 _____ C:\Users\Leo\Downloads\Versuch 1.xlsx
2018-08-22 16:46 - 2018-08-22 16:46 - 000018210 _____ C:\Users\Leo\Downloads\Ca-2-37_38.ods
2018-08-22 16:46 - 2018-08-22 16:46 - 000016503 _____ C:\Users\Leo\Downloads\Mg-2_37_38.ods
2018-08-22 16:46 - 2018-08-22 16:46 - 000001776 _____ C:\Users\Leo\Downloads\Ca-2-37_38.txt
2018-08-22 15:37 - 2018-09-18 14:41 - 000000000 ____D C:\Users\Public\Speedup Sessions
2018-08-21 18:20 - 2018-08-21 18:20 - 003232818 _____ C:\Users\Leo\Downloads\BCV1shomb04jkuer04korrigiert.pdf
2018-08-21 17:39 - 2018-08-21 17:39 - 000018432 _____ C:\Users\Leo\Downloads\Agarosegel.xls
2018-08-20 16:40 - 2018-08-20 16:40 - 000042765 _____ C:\Users\Leo\Downloads\20180627-Versuche-Kurs2_Ubersicht (1).pdf
2018-08-20 16:39 - 2018-09-18 14:38 - 000000000 ____D C:\Users\Leo\Desktop\Analytik
2018-08-20 15:56 - 2018-08-20 15:56 - 002963040 _____ (BitTorrent Inc.) C:\Users\Leo\Downloads\uTorrent.exe
2018-08-19 19:49 - 2018-08-19 19:49 - 000441910 _____ C:\Users\Leo\Downloads\CK000527.BMP
2018-08-19 18:47 - 2018-08-19 18:47 - 000441910 _____ C:\Users\Leo\Downloads\CK000526.BMP
2018-08-19 18:11 - 2018-08-19 18:11 - 000288786 _____ C:\Users\Leo\Downloads\MAN0012994_pUC19_DNA_MspI_HpaII_Marker_23_RTU_UG.pdf
2018-08-19 18:10 - 2018-08-19 18:10 - 000441910 _____ C:\Users\Leo\Downloads\CK000525.BMP

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-09-18 14:13 - 2016-01-29 19:43 - 000000000 ____D C:\Users\Leo\AppData\Roaming\TS3Client
2018-09-18 13:13 - 2017-09-18 19:00 - 000003292 _____ C:\Windows\System32\Tasks\Avira_Antivirus_Systray
2018-09-18 12:22 - 2009-07-14 06:45 - 000016720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-09-18 12:22 - 2009-07-14 06:45 - 000016720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-09-18 11:01 - 2015-05-23 19:56 - 000000000 ____D C:\ProgramData\NVIDIA
2018-09-18 11:01 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-17 22:02 - 2015-08-31 23:12 - 000000000 ____D C:\Users\Leo\AppData\Local\Spotify
2018-09-17 21:37 - 2015-08-31 23:11 - 000000000 ____D C:\Users\Leo\AppData\Roaming\Spotify
2018-09-17 16:40 - 2015-05-23 23:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2018-09-17 08:51 - 2018-06-23 09:04 - 000007509 _____ C:\Windows\SysWOW64\Defrag.debuglog
2018-09-16 16:53 - 2015-12-03 17:44 - 000000000 ____D C:\Users\Leo\AppData\Roaming\Audacity
2018-09-05 13:27 - 2018-06-30 11:50 - 000003068 _____ C:\Windows\System32\Tasks\TNTClientUpdater
2018-09-05 13:27 - 2018-06-30 11:50 - 000000000 ____D C:\Program Files (x86)\GameforgeLogin
2018-09-05 13:27 - 2017-12-06 19:01 - 000000000 ____D C:\Program Files (x86)\Nostale_DE
2018-09-05 10:57 - 2016-02-09 15:34 - 000000000 ____D C:\Users\Leo\AppData\Local\CrashDumps
2018-09-05 10:56 - 2018-04-21 12:10 - 000000000 ____D C:\Program Files (x86)\NosTale Multiclient Creator
2018-09-05 09:11 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2018-08-30 17:42 - 2015-05-23 23:27 - 000000000 ____D C:\ProgramData\Package Cache
2018-08-27 19:25 - 2018-01-15 20:11 - 000000000 ____D C:\Program Files (x86)\Steam
2018-08-27 19:23 - 2015-05-23 19:34 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-08-27 14:48 - 2017-11-11 23:49 - 000000000 ____D C:\Users\Leo\AppData\Local\PokerStars.EU
2018-08-26 15:28 - 2016-01-10 00:31 - 000000000 ____D C:\Users\Leo\AppData\Roaming\vlc
2018-08-26 11:40 - 2017-03-20 15:27 - 000000000 ____D C:\Users\Leo\AppData\Local\TeamSpeak 3 Client
2018-08-23 22:58 - 2016-10-20 14:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-08-23 22:55 - 2016-10-20 14:45 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-08-22 15:37 - 2018-06-15 18:00 - 000003668 _____ C:\Windows\System32\Tasks\AviraSystemSpeedupUpdate
2018-08-21 17:10 - 2018-08-09 15:33 - 000000000 ____D C:\Users\Leo\AppData\Local\WallpaperHd
2018-08-20 15:58 - 2018-03-18 16:20 - 000000000 ____D C:\Users\Leo\AppData\Roaming\uTorrent

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-12-03 18:21 - 2015-12-03 18:21 - 000000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-05-27 18:41 - 2016-08-14 01:39 - 000000096 _____ () C:\Users\Leo\AppData\Roaming\Camdata.ini
2015-05-27 18:41 - 2016-08-14 01:39 - 000000408 _____ () C:\Users\Leo\AppData\Roaming\CamLayout.ini
2015-05-27 18:41 - 2016-08-14 01:39 - 000000408 _____ () C:\Users\Leo\AppData\Roaming\CamShapes.ini
2015-05-27 18:41 - 2016-08-14 01:39 - 000004545 _____ () C:\Users\Leo\AppData\Roaming\CamStudio.cfg
2017-05-13 19:51 - 2017-06-29 18:20 - 000002662 _____ () C:\Users\Leo\AppData\Roaming\SpeedRunnersLog.txt
2017-06-09 22:51 - 2017-06-09 22:51 - 000002624 _____ () C:\Users\Leo\AppData\Roaming\TargetInvocationLog.txt
2017-01-06 20:45 - 2017-01-06 20:45 - 000001181 _____ () C:\Users\Leo\AppData\Roaming\trace_FilterInstaller.txt
2017-01-06 20:45 - 2017-01-06 20:45 - 000000000 _____ () C:\Users\Leo\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2015-05-27 18:34 - 2016-08-14 01:38 - 000000096 _____ () C:\Users\Leo\AppData\Roaming\version2.xml
2018-08-11 21:09 - 2018-09-13 09:28 - 000019150 _____ () C:\Users\Leo\AppData\Local\CDXLExtendedShim.log
2018-08-17 16:04 - 2018-08-17 16:04 - 000000841 _____ () C:\Users\Leo\AppData\Local\recently-used.xbel
2015-08-04 17:31 - 2015-08-04 17:31 - 000007605 _____ () C:\Users\Leo\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
2015-05-23 23:27 - 2016-09-07 18:01 - 000000000 ____D () C:\Users\Leo\AppData\Local\Temp\avgnt.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-09-09 12:58

==================== Ende von FRST.txt ============================

--- --- ---

LeoWy · 18.09.2018, 14:04

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15.09.2018
durchgeführt von Leo (18-09-2018 14:42:21)
Gestartet von C:\Users\Leo\Desktop
Windows 7 Professional Service Pack 1 (X64) (2015-05-23 17:26:36)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3494380360-4114429975-3830878526-500 - Administrator - Disabled)
Gast (S-1-5-21-3494380360-4114429975-3830878526-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3494380360-4114429975-3830878526-1003 - Limited - Enabled)
Leo (S-1-5-21-3494380360-4114429975-3830878526-1000 - Administrator - Enabled) => C:\Users\Leo

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\uTorrent) (Version: 3.5.4.44520 - BitTorrent Inc.)
Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Application Support (32-Bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{19589375-5C58-4AFA-842F-8B34744CCEAD}) (Version: 2.5.0.1 - Apple Inc.)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
ATI Catalyst Install Manager (HKLM\...\{0C798FBB-2BA6-D113-C055-936965550F33}) (Version: 3.0.765.0 - ATI Technologies, Inc.)
Avira (HKLM-x32\...\{532da46c-2aa3-4588-a4a2-b02bc641bf95}) (Version: 1.2.119.17994 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{9620D4C2-CF5B-4DBE-8103-CC9DAB0871C6}) (Version: 1.2.119.17994 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.40.12 - Avira Operations GmbH & Co. KG)
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.15.2.28160 - Avira Operations GmbH & Co. KG)
Avira Privacy Pal (HKLM-x32\...\{F2BC8305-DFBE-4C02-A906-9BBD8EE299A3}_is1) (Version: 1.4.1.1351 - Avira Operations GmbH & Co. KG)
Avira Safe Shopping (HKLM-x32\...\{756F3F90-21CA-4BF5-B3B8-CB7DFFA0A146}) (Version: 1.0.72.2908 - Avira Operations Gmbh & Co. KG)
Avira Software Updater (HKLM-x32\...\{B15C979F-899C-44B6-8E87-5471CFB3A2C5}) (Version: 2.0.6.3008 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 4.13.0.7681 - Avira Operations GmbH & Co. KG)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.10 - Kakao Games Europe B.V.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BRAINYOO (HKLM-x32\...\BRAINYOO) (Version:  - BRAINYOO Mobile Learning GmbH)
capella reader 8 (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\{3b5152aa-0197-4ca1-bc48-1946ef28e9be}) (Version: 8 - capella-software AG)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dual Monitor 1.22 (HKLM-x32\...\{64AA3F94-ED4A-4A4B-B72C-B7A1481ED5D8}_is1) (Version: 1.22.021813 - Cristi Diaconu)
Epic Games Launcher (HKLM-x32\...\{86F434AF-1A92-4BDB-93CD-31BF0ED78C9C}) (Version: 1.1.144.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
FileZilla Client 3.25.1 (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse)
FLV and Media Player 4.2.1.1 (HKLM-x32\...\FLV and Media Player) (Version: 4.2.1.1 - Applian Technologies)
ForHonor (HKLM-x32\...\Uplay Install 569) (Version:  - Ubisoft)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Gameforge Login (HKLM-x32\...\{43792758-34f1-468f-9076-e574fedcf3dc}_is1) (Version: 1.2.0 - Gameforge)
GIMP 2.10.4 (HKLM\...\GIMP-2_is1) (Version: 2.10.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
GS Auto Clicker (HKLM-x32\...\GS Auto Clicker_is1) (Version: V3.1.2 - goldensoft.org)
iTunes (HKLM\...\{69D24652-4A1D-49C6-AA0C-573A38083F6C}) (Version: 12.7.3.46 - Apple Inc.)
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League Displays (HKLM-x32\...\LolScreenSaver) (Version: W1.0.854-beta - Riot Games)
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Malwarebytes Version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Build Tools 2015 (HKLM-x32\...\{d21da0dd-4ba4-4838-ba58-64cf7a77131a}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.9126.2275 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\OneDriveSetup.exe) (Version: 17.3.6281.1202 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{0E8D886F-3205-4472-848E-990F400FF218}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{46EA439E-2D16-49B6-AA80-00DE992FE7CE}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{5CBDF0C2-6FD1-4A32-9A0A-143D9AB91CCE}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{68ADAEAA-DABD-45C1-9CC2-F995407549CD}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{8DD62FB6-083D-40B9-9D7D-48449FDDDED5}) (Version: 7601 - Microsoft)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.19.0 - NEC Electronics Corporation) Hidden
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.19.0 - NEC Electronics Corporation)
NosTale (HKLM-x32\...\Nostale(DE)_is1) (Version:  - Gameforge 4D GmbH)
NosTale Multiclient Creator (HKLM-x32\...\{1B36C535-52F7-46ED-B9FA-A4386F8E89E0}) (Version: 1.0.0.0 - Pumba98)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.75 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.9.1.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.35 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.75 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.25153 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{667cb872-b83d-411a-b5fd-c66d4ea98867}) (Version: latest - ppy Pty Ltd)
PerkinElmer ChemDraw Professional 16.0 (HKLM-x32\...\{8A0B423C-0C04-4B45-8456-ABCE29A0E831}) (Version: 16.0 - PerkinElmer Informatics, Inc.)
PerkinElmer ChemOffice 64-bit Support 16.0 (HKLM\...\{BCE6E6EC-0D89-4BA9-AF5B-272D8F057411}) (Version: 16.0 - PerkinElmer Informatics, Inc.)
PerkinElmer ChemScript 16.0 (HKLM-x32\...\{6D9CF922-C5B2-4E47-9097-26FC925CE9C5}) (Version: 16.0 - PerkinElmer Informatics, Inc.)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
Project64 version 2.3.2.202 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.2.202 - )
Python 3.2.2 (HKLM-x32\...\{4CDE3168-D060-4b7c-BC74-4D8F9BB01AFD}) (Version: 3.2.2150 - Python Software Foundation)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6043 - Realtek Semiconductor Corp.)
Sades 7.1CH Gaming Headset (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006620}) (Version: 1.00.0010 - SHENZHEN SADES DIGITAL TECHNOLOGY CO.,LTD)
sciebo (HKLM-x32\...\sciebo) (Version: 2.2.4.840 - Sync and Share NRW )
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.1.0260 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.9.1.35 - NVIDIA Corporation) Hidden
Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.)
Sound Blaster X-Fi MB (HKLM-x32\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)
Spotify (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\Spotify) (Version: 1.0.88.353.g15c26ea1 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
TeX Live 2017 (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\TeXLive2017) (Version: 2017 - TeX Live)
TeXstudio 2.12.6 (HKLM-x32\...\TeXstudio_is1) (Version: 2.12.6 - Benito van der Zander)
TI-Nspire™ Computer Link (HKLM-x32\...\{6C5AC088-3136-4043-8985-8B0772A9580E}) (Version: 3.9.0.455 - Texas Instruments Inc.)
TI-Nspire™ CX Student Software (HKLM-x32\...\{99D1FC9E-5C33-4B49-ABA3-52D6CE943766}) (Version: 4.0.0.235 - Texas Instruments Inc.)
TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trackmania Turbo (HKLM-x32\...\Uplay Install 2070) (Version:  - Ubisoft)
Trials Evolution Gold Edition (HKLM-x32\...\{07D857B8-C956-401D-BC8F-EDA8459AF037}) (Version: 1.0.0.5 - Ubisoft) Hidden
Trials Evolution Gold Edition (HKLM-x32\...\InstallShield_{07D857B8-C956-401D-BC8F-EDA8459AF037}) (Version: 1.0.0.5 - Ubisoft)
Uplay (HKLM-x32\...\Uplay) (Version: 30.0 - Ubisoft)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version:  - )
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Wartung Samsung ML-1660 Series (HKLM-x32\...\Samsung ML-1660 Series) (Version:  - Samsung Electronics Co., Ltd.)
Web Companion (HKLM-x32\...\{5693a188-a289-4d47-a551-1f6aaa389cc8}) (Version: 4.0.1763.3314 - Lavasoft)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinZip 22.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C24115}) (Version: 22.0.12670 - Corel Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Leo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll ()
ShellIconOverlayIdentifiers: [  OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-08-12] (Lenovo)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-09-04] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {ef263503-8f0e-3e6a-ae2e-fe0b4b441d52} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-11-02] (WinZip Computing, S.L.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers3: [OCContextMenuHandler] -> {841A0AAD-AA11-4B50-84D9-7F8E727D77D7} => C:\Program Files (x86)\sciebo\shellext\OCContextMenu_x64.dll [2016-08-23] (ownCloud Inc.)
ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-08-12] (Lenovo)
ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {3d52b24d-33bb-3895-99ea-a0156f24a3f9} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-11-02] (WinZip Computing, S.L.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2016-01-23] (NVIDIA Corporation)
ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {cefaf456-bc17-3f4b-b7d9-75070925911b} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-09-04] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-11-02] (WinZip Computing, S.L.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {004FE99B-C0D4-4A25-B3D7-40A1145D058E} - System32\Tasks\Avira\Safe Shopping\Launch => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe [2018-07-20] (Avira Operations Gmbh & Co. KG)
Task: {13B10B19-B70A-4E54-B2E7-B66D08F80C80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-08] (Google Inc.)
Task: {1D209B1F-41E1-4EE4-8FC4-FEFA6D2DEAA1} - System32\Tasks\{EF178253-C20A-46F8-9CD6-33BB186C0CEC} => C:\Windows\system32\pcalua.exe -a C:\Users\Leo\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe -d C:\Windows\SysWOW64 -c /groupsextract:100;101;102; /out:"C:\Users\Leo\AppData\Roaming\Riot Games\League of Legends\prerequisites" /callbackid:3436
Task: {29307B37-93A1-4D49-A392-5ECDF08C05F6} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2018-09-04] (Avira Operations GmbH & Co. KG)
Task: {32D6D4B4-DEBF-45A0-937D-2C41965E90A6} - System32\Tasks\Avira\Safe Shopping\Update => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe [2018-07-20] (Avira Operations Gmbh & Co. KG)
Task: {4B7B4BA1-640F-4464-BFD2-CB5856E55758} - System32\Tasks\{13CF376B-4B53-4CA3-9D20-35FA84BE64D5} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {5AEC2434-EBBE-4842-A695-B321148288CC} - System32\Tasks\Avira\Safe Shopping\Check => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe [2018-07-20] (Avira Operations Gmbh & Co. KG)
Task: {6046924D-D9EB-4A54-AA22-12EE90ED8443} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-08-23] (Microsoft Corporation)
Task: {67382973-9823-4678-A7B4-B6C794E1336C} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2018-08-22] (Avira Operations GmbH & Co. KG )
Task: {70D054D5-4F09-405E-A0DE-CCD1C62F2187} - System32\Tasks\TNTClientUpdater => C:\Program Files (x86)\GameforgeLogin\updater.exe [2018-09-05] ()
Task: {7925B24C-C17B-4BF8-960D-9AB613FF0E27} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)
Task: {83DFFACD-1110-4025-BF63-AA2D8DFFDD05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-08-23] (Microsoft Corporation)
Task: {9DCC9074-4753-4F40-B3E2-16A03A86AF04} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-23] (Microsoft Corporation)
Task: {A9061F52-D2B5-4E15-AAE5-A838629245C6} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Command(1): %windir%\system32\rundll32.exe -> aepdu.dll,AePduRunUpdate -nolegacy
Task: {A9061F52-D2B5-4E15-AAE5-A838629245C6} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Command(2): %windir%\system32\rundll32.exe -> appraiser.dll,DoScheduledTelemetryRun
Task: {AE86D62D-387F-4B5A-B6C7-699FB5C4013C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-23] (Microsoft Corporation)
Task: {AF7536CB-603E-4C93-B297-1DCD1B5206B7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-07] (Microsoft Corporation)
Task: {B05A3AC3-1D21-4CAC-9086-DA12673D34AF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-07] (Microsoft Corporation)
Task: {E5498201-FB93-44E4-9146-60F56F4D657C} - System32\Tasks\{2E45EACC-B355-45C5-B251-4C5282C69D86} => C:\Windows\system32\pcalua.exe -a C:\Users\Leo\AppData\Local\Temp\jre-8u60-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {EB81786B-68E6-49D0-8C32-E4C3A09CBFC9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-08] (Google Inc.)
Task: {F1E9E87B-A830-40F6-B282-00456D211363} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {FE47115F-0E76-42E6-A362-151500C32464} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-08-23] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

WMI_ActiveScriptEventConsumer___gconsumer1: 

Shortcut: C:\Users\Leo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2017\TeX Live command-line.lnk -> C:\texlive\2017\tlpkg\installer\tl-cmd.bat ()
Shortcut: C:\Users\Leo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2017\Uninstall TeX Live.lnk -> C:\texlive\2017\tlpkg\installer\uninst.bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-05-23 19:56 - 2016-01-23 03:04 - 000133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-10-18 12:29 - 2009-08-10 09:08 - 000027648 _____ () C:\Windows\System32\ssp7ml6.dll
2016-08-23 14:42 - 2016-08-23 14:42 - 000059904 _____ () C:\Program Files (x86)\sciebo\shellext\OCUtil_x64.dll
2015-12-25 00:37 - 2014-04-11 06:31 - 002250240 ____N () C:\Program Files\Sades 7.1CH Gaming Headset\CPL\FaceLift_x64.exe
2018-01-22 04:15 - 2018-01-22 04:15 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll
2018-01-22 04:15 - 2018-01-22 04:15 - 000088888 _____ () C:\Program Files\iTunes\zlib1.dll
2018-07-12 19:37 - 2014-08-08 15:00 - 000844800 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2018-01-05 01:13 - 2018-01-05 01:13 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-01-05 01:14 - 2018-01-05 01:14 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-18 12:27 - 2010-06-07 12:35 - 000618496 _____ () C:\Windows\Samsung\PanelMgr\SSMMgr.exe
2017-12-04 11:54 - 2017-12-04 11:54 - 000408576 _____ () C:\Riot Games\LeagueDisplays\assistant\LeagueDisplaysAssistant.exe
2016-10-18 12:28 - 2009-07-29 12:13 - 000306688 _____ () C:\Windows\Samsung\PanelMgr\caller64.exe
2017-09-01 13:15 - 2017-09-01 13:15 - 000495872 _____ () C:\Program Files\WinZip\WinZip Smart Monitor\WinZip Compression Smart Monitor Service.exe
2018-09-15 21:44 - 2018-04-25 13:16 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-09-15 21:44 - 2018-04-30 12:54 - 002493648 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2018-08-08 21:52 - 2018-08-08 02:41 - 004855640 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libglesv2.dll
2018-08-08 21:52 - 2018-08-08 02:41 - 000115544 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libegl.dll
2016-02-08 17:14 - 2016-03-30 03:28 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2018-07-12 19:37 - 2014-08-08 15:02 - 001411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2018-07-12 19:37 - 2014-05-13 17:59 - 000195072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2018-07-12 19:37 - 2014-05-27 10:54 - 000194560 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJRa.dll
2018-07-12 19:37 - 2014-04-17 09:52 - 001206576 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\RaWLAPI.dll
2018-08-09 16:29 - 2018-08-09 16:29 - 001204472 _____ () C:\Program Files (x86)\Avira\Antivirus\crypto-42.dll
2018-08-09 16:29 - 2018-08-09 16:29 - 000243352 _____ () C:\Program Files (x86)\Avira\Antivirus\ssl-44.dll
2018-09-18 11:04 - 2018-09-18 11:04 - 000697884 _____ () C:\Users\Leo\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.1908\~df394b.tmp
2018-09-18 11:05 - 2018-09-18 11:05 - 000592896 _____ () C:\Users\Leo\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.1908\~de6248.tmp
2015-05-23 19:38 - 2009-02-06 18:52 - 000073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2015-05-23 19:38 - 2009-04-20 11:55 - 000148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2015-06-02 00:12 - 2016-03-17 21:53 - 000110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2018-07-20 13:14 - 2018-07-20 13:14 - 000078992 _____ () C:\Program Files (x86)\Avira\Safe Shopping\ScreenClick.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Public\AppData:CSM [484]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\samsungsetup.com -> hxxp://www.samsungsetup.com
IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\sharepoint.com -> hxxps://umuenster-files.sharepoint.com
IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-02-09 12:43 - 000000822 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Leo\AppData\Local\LolScreenSaver\wallpapers\c-o-champion-elise-victorious-splash.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: Web Companion => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{42DFC83F-0370-4CB6-BC6D-4102B22E4EB5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8B0B3679-229C-4883-B774-F47C05FF3A63}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{2DCD4EAE-BED1-410A-9108-8CE24F42EE54}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{F3D2AE20-CDC6-4F8E-BB76-17118CAB2764}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{A93A40C7-D914-4A92-B175-8F6F50FB26ED}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{B42AB724-7DDE-4CF3-AB98-772B4D66F736}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{C9336B1D-2372-4585-96BE-199E9D51D7C8}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [TCP Query User{D1F0B4A3-476B-44B7-BD8D-A002066442A3}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{3BBA4465-F175-4E24-9BE5-1FDC824DB4EB}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [TCP Query User{D9AC26FE-D517-41B4-B8B9-FA77D44504AD}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{14CEC4C6-88FB-4E44-92D6-B0E55BB45901}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{7D237021-F1E5-4241-BC9D-AF99F58B2C79}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3471C3D7-EAC1-45B9-8D1F-328080B11D70}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{25E17FE9-BC42-45A8-BBEA-3241D03584EA}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe
FirewallRules: [UDP Query User{6C8F0F13-76D4-4040-91AE-0C9FB69B3D4C}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe
FirewallRules: [TCP Query User{BEB35E24-65D1-4C21-A673-9B1A4481F0DF}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe
FirewallRules: [UDP Query User{C2CD0906-E4E5-4C9F-8CE7-E0B50796B225}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe
FirewallRules: [TCP Query User{BCB53A35-B2B6-4CDD-98E2-1AD999C61906}C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe
FirewallRules: [UDP Query User{9C8BC276-D55B-4CAE-AB77-B6A2F214DCA1}C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe
FirewallRules: [TCP Query User{0E752105-BE33-45A0-B54D-1F8C5CABFDE0}C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe
FirewallRules: [UDP Query User{889399C7-6C06-4E29-99CB-FC1D7549D5E6}C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe
FirewallRules: [TCP Query User{DB0618FE-4760-498B-92DA-0C963159DDEE}C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe
FirewallRules: [UDP Query User{4ED96070-A488-4F65-AFBB-3133FBDC616F}C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe
FirewallRules: [{7A1E6F8A-A2A1-4E29-B73D-149089915EDF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FB46234B-1B0E-446D-83CA-6B51EB4CAD71}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8A8BE830-C922-4FA3-9A42-03692956A0B5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C68F77F5-AB49-484C-A167-E88D4AE59069}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{74ECBD13-4A34-4F53-BF90-0538F7DA84B6}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{D56D60B7-F70A-443C-BECC-A7A0F37F75BB}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{B55B2F78-9BEB-4368-B668-87F54E620122}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3F77B1B1-8116-4049-9F77-F07643F60759}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{96EC1B13-996B-4A09-BF67-FB67659B73FE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DB76730C-1B5E-4311-AFF0-3867A0B4C92F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{44C217D5-C62B-416D-8FF1-A40643C8809A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0FBA1405-A0D8-43C6-94F9-47B0F3464B20}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2D15DDD0-A792-4AC9-A6BD-A23556449B41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HuniePop\HuniePop.exe
FirewallRules: [{51DF95B6-EC0A-4A0D-A536-DA921DE09515}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HuniePop\HuniePop.exe
FirewallRules: [{D2D27A18-7B0D-4545-8A53-7FE40E5D7CD8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D7A26C40-8125-4EB9-AE1A-DD38E1E81BC9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7825FABB-A745-4772-A47A-0D0DF71EFD3F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{96A63943-6E7B-4E03-998F-4A403889BF97}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{99A0E3DA-1B14-45E1-AA11-9EEF7B4C3FC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{76D78D17-3113-4DEB-B3F9-9736E593C8C0}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\datapack\trialsFMX.exe
FirewallRules: [{EB2B6B29-EEAB-4B79-86C0-CD234373E5D5}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\datapack\trialsFMX.exe
FirewallRules: [{E20DA59B-E6F5-4067-AEAA-B9CF69BAD9C9}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\Trials_launcher.exe
FirewallRules: [{3CDB6AFD-B7EA-470C-97EC-BEF9B6A3FD30}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\Trials_launcher.exe
FirewallRules: [{31DBB2D1-C782-4D82-8D8D-630B54576003}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{ADAC0F8C-6AA6-447C-BCCD-D9F6687ADD3F}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{C10B58BC-43A2-4C6E-9810-353641776D9B}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9932A0B3-DF5E-480F-9FE3-F859F3CD0B4D}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{9BA822B5-D51D-47A0-B635-9EAD35C96238}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{B2EB3902-3E98-4018-85F3-1F8ECD9523C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{491BFBAA-C827-4D77-B48B-797BD4A2BDEE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{17FE0309-8077-475E-885E-EDF725435B67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{06BC989E-3689-427D-B1C2-656257815E15}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{2C3571F6-C203-44AA-BECD-858F0941AC26}] => (Allow) C:\Users\Leo\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{75692843-6EA2-456E-AA27-DBC45CCA52E3}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{70F9F8B5-449D-4B3B-8395-ADE2839103F4}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{8B71111D-574F-411F-8BC6-18BD12DFF22C}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{F5C0DCD6-6F96-4142-BF0D-8D136ECD914D}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{89268DAD-5FB5-4756-946A-7F022B274728}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{780011C5-24BC-4657-AA95-23FAAC73244D}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{9DC7054A-D142-4CDC-875C-962582CF9E6E}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{5CD49F5C-97B5-47DA-8AA3-02D86E962510}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{169EE7DD-46C4-434E-9E31-642305CC2BD7}] => (Allow) C:\Users\Leo\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{4D972117-EB1B-4A2D-9CBA-ACE9ED108289}] => (Allow) C:\Users\Leo\AppData\Local\Temp\7zS0DDD\HP.EasyStart.exe
FirewallRules: [TCP Query User{9C73CB23-26E1-45FB-B152-88712097894D}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{EE44048F-B4BF-4EAC-9EA5-D18798705F6A}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{9C82811E-944C-42C0-BAAF-5664B54207BF}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{0EF59574-C697-4E5A-AA62-BF08CB31AC9C}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DB2C7BEA-F183-4DF2-B64F-9488F4DCA094}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{BC7A8F3A-F7B0-4E80-B543-33D6EE9743CC}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{FD930C9A-64B4-4490-96B0-48F713B9D513}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{66C211A8-1BFC-4596-82D7-2010C098D4E7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{4F360453-07DC-43B0-A79A-08612FFA7A59}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4F24502F-3144-40CF-BFB1-CFE1BAE5456A}] => (Allow) LPort=2869
FirewallRules: [{B3C55864-A0E4-4229-B3CD-63F4D85983CD}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{556B935B-1B34-43CC-B9FC-27031937D026}C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe] => (Block) C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe
FirewallRules: [UDP Query User{E53B53F6-83DA-42B8-8AFD-F9FD78187236}C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe] => (Block) C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe
FirewallRules: [{0DB78CE6-F837-49E2-BCBA-C9723DA55AA6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9BD56E60-1A4B-4F16-94E5-384545B98A02}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{A43CA6A6-5D38-4D35-849C-D0A671D1D94A}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{9E91F3F7-0187-4497-9EF4-C43E0BC68CF7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{DF4E0BC8-8398-481A-8D79-20A2FE75DCF4}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{252E879E-0306-407E-8DAC-5DC906461323}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{04A7B869-065C-4513-ACCF-19A6BF0ECDBA}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{A90CA517-CE6D-4EA0-842C-E04BF49BAFA7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{86F827AF-EDE0-493A-812B-892A220533EE}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{3AB71E98-A273-429D-9E49-EC51B2748C13}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{E3EDEB81-4BFB-48B0-B22C-41F60E432FE3}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{5069EC2F-0BCA-43EB-8AAF-478E87F31EE8}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{DA260CF0-DE30-4E64-AE4C-ED81F6955947}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{3CCD51BA-F321-4264-8EDB-8A47002AB2F6}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [{4F339903-431F-4C0F-96DA-8D6F209CBAA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hand Simulator\Hand Simulator.exe
FirewallRules: [{57E23D29-6E8D-4104-9032-0F9403C76E5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hand Simulator\Hand Simulator.exe
FirewallRules: [{F47D5B6D-6C98-46CF-BAF7-748F38B7591A}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{4F09F32E-8073-4836-9FF9-2F1D403134CB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{176045C4-69E8-4EE7-9B07-7A4EE390A826}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{873F8639-0DBD-45B7-AC54-81927F4C45FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{2BFC65AD-78A5-4067-86A3-6DC257500E13}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here.exe
FirewallRules: [{CFEC7BF9-38AD-468F-912B-54377491BEC4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here.exe
FirewallRules: [{E1342CC9-730E-4414-9F60-D1F0C18D53FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here VR.exe
FirewallRules: [{60B59461-6014-4D84-97B5-512CE7CBAF33}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here VR.exe
FirewallRules: [TCP Query User{340B70DF-AFBE-417A-9AFF-0FEE3680DF21}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [UDP Query User{20B0EA03-2C14-464C-88CE-D2BA8C7A9F0B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [{6EFEF49D-A379-4770-BCC1-F731AD9A5B42}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Seducer\SuperSeducer.exe
FirewallRules: [{1449702C-7AFA-48B5-A251-9E6FA3D15B41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Seducer\SuperSeducer.exe
FirewallRules: [TCP Query User{6290F06A-925C-4EBB-8764-7C1A14097F35}C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe] => (Block) C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe
FirewallRules: [UDP Query User{BEA035F4-3883-4678-934B-14B680686B85}C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe] => (Block) C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe
FirewallRules: [TCP Query User{92B72BCA-E90D-4618-8794-D39EB9E52630}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe
FirewallRules: [UDP Query User{F703DB1C-F1F5-49E8-9D30-8133C5324497}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe
FirewallRules: [TCP Query User{6F70D5F2-D00F-4928-A13F-6D49CDA10A51}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [UDP Query User{4A45F9F2-9520-43C8-951C-4C3874F2FE67}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [TCP Query User{26614AE2-C714-433A-9E22-BC0C8AF7DA82}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [UDP Query User{8359FEBC-2F8C-4EB9-82B9-6441AE03587D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [TCP Query User{D57D8BF0-96ED-4D89-9B59-01151674C769}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{803E939D-1300-4B1F-83A4-04DF4D362B76}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{90FD39F4-D0E6-4554-A0A9-F8367435BEB0}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{7B1ABC23-B328-4E75-A08A-F2FE988A2C97}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{1C1BB5F0-866D-4B97-A214-657A2F91238B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [UDP Query User{D641658D-96E6-4306-8EED-EF7B44BA4CC9}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [TCP Query User{A2580448-FEB4-48EA-AFEB-FFA681B3E75B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe
FirewallRules: [UDP Query User{0448E8D0-0770-42D1-9031-248964638533}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe
FirewallRules: [TCP Query User{A2334A5E-802D-46BE-B40E-558F4721EACD}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [UDP Query User{A1CECFCF-31EF-413D-90A9-E53232659882}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [TCP Query User{8F40D5EB-70E6-4644-84CB-FE7F97371049}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe
FirewallRules: [UDP Query User{AC03D841-9B43-4CF0-BC70-D13059FD9F6B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe
FirewallRules: [TCP Query User{EFC8A67E-6AC1-4CFA-93B5-1441B07185E8}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [UDP Query User{1C1BECC2-C6D7-4DD7-89B0-C3280F7D35A3}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [TCP Query User{F257CB9E-05BD-4B59-B8BC-37D2C96F9E39}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [UDP Query User{5B7AB340-1116-4B5E-BB4A-0E482BF34B23}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [TCP Query User{90C4E8C4-0D74-493F-BC34-26C03A648875}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe
FirewallRules: [UDP Query User{11466088-CDE2-49CB-AC3C-C1E6E4EA7878}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe
FirewallRules: [TCP Query User{93894878-FC6C-4EEE-8D8E-994E4402493D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe
FirewallRules: [UDP Query User{1DAFA9AF-1181-4EB5-A5F2-125FF6882300}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe
FirewallRules: [TCP Query User{2310FCEC-D79B-4AA7-A04A-222F6A4766FB}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [UDP Query User{417E7527-7F20-4F22-BDB1-F30EE52BB896}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [TCP Query User{0029F06A-8B84-4D8F-B1D9-61FC44F623EF}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [UDP Query User{AA23548E-EC8B-4434-B880-32EAEDECD14F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [TCP Query User{12FE443A-95A8-4A0A-BD2E-B36703EE3201}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe
FirewallRules: [UDP Query User{4D710707-C353-4922-A4D9-9452C912CD64}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe
FirewallRules: [TCP Query User{F860D5A0-B71B-4A99-B1D0-7DBD9AA5A346}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe
FirewallRules: [UDP Query User{A4F80771-9416-4BC6-8B03-5ABEF6D32CA1}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe
FirewallRules: [TCP Query User{3038D10A-C422-4AA0-999C-B7DBD186402E}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe
FirewallRules: [UDP Query User{BB856FE1-D7B8-42B4-9809-EC4F3731C42F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe
FirewallRules: [TCP Query User{4418D830-2263-44B8-8E62-4108AC2CA22E}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe
FirewallRules: [UDP Query User{5DE686EF-BEBB-46EC-BD87-E6735228E2FE}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe
FirewallRules: [TCP Query User{A58497A5-815C-4CFA-BA38-18DED7A5A5D3}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [UDP Query User{9281CE3F-AB4C-4A3E-8B80-8E40B6FD58F2}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [TCP Query User{FE5F9289-05F6-4C57-9B3A-69EEA8D13ABA}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe
FirewallRules: [UDP Query User{28F3CC13-27AA-4BB4-B62A-6F1FEDFB7AD6}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe
FirewallRules: [TCP Query User{E09D39A8-9915-4C15-BFB1-47978A58DF43}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe
FirewallRules: [UDP Query User{43BBDEDF-DA0E-4BC3-A5ED-0AAD9C5B09DE}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe
FirewallRules: [TCP Query User{F5728B1B-7080-45D3-A3FD-99A15CC4AE12}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [UDP Query User{A46BF4AD-18BE-4B3C-84FF-091CBAED2D1F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [TCP Query User{B8645648-EA6D-4063-B923-D56EC7FD3A45}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe
FirewallRules: [UDP Query User{66F04C7E-8F63-48C3-BB47-8B988C656E41}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe
FirewallRules: [{B5CAD5DF-73D7-4497-B9AE-ADBCDE4EFC5D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{B6F3B9A0-3FED-4A35-9728-60348C261F95}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [UDP Query User{02BDF1CD-E8AA-405E-84EA-03B7B43C246B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [TCP Query User{4CCCE919-1ACE-4C36-8D85-7AF0BB01D52F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [UDP Query User{FBB30B1B-F2B8-4059-9597-A873BD224448}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [TCP Query User{E5D52E58-7186-4D78-91A1-0B28AD89B9A5}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe
FirewallRules: [UDP Query User{5BA896FC-F7F2-4331-8E87-EFD5B298B045}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe
FirewallRules: [TCP Query User{AD88CB98-A5CF-45E7-9113-6BF44DDE78F6}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [UDP Query User{B5668BCB-FAC4-424C-A61A-E5A1BBAE6BA3}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [TCP Query User{897084D9-79BF-4738-A949-ABC303F3E852}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [UDP Query User{6C3C703B-84DB-41AE-A879-5A249E21E867}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [{5C846120-11E6-4B94-9DFE-0600BC5E9E37}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{B08578C9-7D2A-4344-83F9-490D935EFD66}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [UDP Query User{1B7B0F51-BCF3-4763-8C9F-62EE54B3011E}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [{41AB1233-487C-4877-9545-B92ED23A9E77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{6163D84B-A088-4FF4-BD1C-D8E4AD0E4DB5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [TCP Query User{91DCEA90-3E8F-4D9C-9B12-A6EE0A80AC40}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [UDP Query User{0998AE70-6486-4820-A86B-F48AA44CDD87}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [{258ED776-E0FB-4EB2-8FBE-E2B635175FF0}] => (Allow) C:\Users\Leo\Downloads\bin\BlackDesert32.exe
FirewallRules: [{6834DE94-A50A-4597-B09E-B50679CAA4A2}] => (Allow) C:\Users\Leo\Downloads\bin64\BlackDesert64.exe
FirewallRules: [{95B0233E-9804-4AB7-9231-E4B959061D03}] => (Allow) C:\Users\Leo\Downloads\BlackDesert_Launcher.exe
FirewallRules: [{4A07E485-817C-48DD-BEC7-174BF8AA00DE}] => (Allow) C:\Users\Leo\Downloads\BlackDesert_Downloader.exe
FirewallRules: [TCP Query User{FA120CB6-DF76-4412-B5F0-93EEC1A6A3B5}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [UDP Query User{0670D378-78AD-4DF0-87BA-80F387BF644F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [TCP Query User{56550F63-B9F1-4A40-8205-7F372160F6D5}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [UDP Query User{904AFBC8-E58D-41BA-9F3F-E7CBA5BDF818}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [TCP Query User{6835F648-B210-4C7D-91D9-04BD50BC1C00}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe
FirewallRules: [UDP Query User{64C48C5A-3D38-40FF-BE47-5A102A227C01}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe
FirewallRules: [TCP Query User{3EF18825-1447-46AE-B489-55449AB01C90}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe
FirewallRules: [UDP Query User{B01618DF-3973-4B90-B8DF-2470715DEE75}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe
FirewallRules: [TCP Query User{87291FF0-6517-48F6-B25F-45131EF81D12}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe
FirewallRules: [UDP Query User{FFC82CD5-BA75-476B-895D-33DB88B550C4}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe
FirewallRules: [TCP Query User{DE11093E-D8B1-4BD0-8F29-1E15F5DA31E8}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe
FirewallRules: [UDP Query User{E420733E-2F12-4AAA-982E-1FA13AA7EE7D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe

==================== Wiederherstellungspunkte =========================

05-09-2018 13:27:38 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
18-09-2018 14:20:51 OTL Restore Point - 18.09.2018 14:20:47

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Atheros AR922X-Drahtlosnetzwerkadapter
Description: Atheros AR922X-Drahtlosnetzwerkadapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/18/2018 02:20:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (09/18/2018 11:25:37 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/18/2018 11:10:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d186
ID des fehlerhaften Prozesses: 0x15e8
Startzeit der fehlerhaften Anwendung: 0x01d44f2f7b147566
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\sysmain.dll
Berichtskennung: baec0e5f-bb22-11e8-be33-00025b00a5a5

Error: (09/18/2018 11:10:22 AM) (Source: .NET Runtime Optimization Service) (EventID: 1111) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x8000ffff.

Error: (09/18/2018 11:09:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d186
ID des fehlerhaften Prozesses: 0x1fa8
Startzeit der fehlerhaften Anwendung: 0x01d44f2f5440c5cb
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\sysmain.dll
Berichtskennung: 94732a49-bb22-11e8-be33-00025b00a5a5

Error: (09/18/2018 11:08:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d186
ID des fehlerhaften Prozesses: 0x1004
Startzeit der fehlerhaften Anwendung: 0x01d44f2eb3677d9c
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\sysmain.dll
Berichtskennung: 6b5497b7-bb22-11e8-be33-00025b00a5a5

Error: (09/18/2018 12:31:10 AM) (Source: AviraOptimizerHost) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/17/2018 08:08:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2253856


Systemfehler:
=============
Error: (09/18/2018 01:14:31 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 01:14:30 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (09/18/2018 12:10:30 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 12:10:30 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (09/18/2018 11:38:28 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 11:38:28 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (09/18/2018 11:22:27 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 11:22:27 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.


Windows Defender:
===================================
Date: 2016-07-25 02:37:25.829
Description: 
Die Windows Defender-Überprüfung wurde vor Fertigstellung beendet.
Überprüfungs-ID:{4D1CC1CE-2952-4E3A-8F7E-CC9F9816551A}
Überprüfungstyp:AntiSpyware
Überprüfungsparameter:Schnellscan
Benutzer:NT-AUTORITÄT\NETZWERKDIENST

Date: 2016-09-02 19:10:36.961
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

Date: 2016-08-13 16:51:38.072
Description: 
Beim Laden der Signaturen wurde von Windows Defender ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen.
Versuchte Signaturen:Aktuell
Fehlercode:0x8050a004
Fehlerbeschreibung:Dieses Paket enthält keine aktuellen Definitionsdateien für das Programm. Weitere Informationen finden Sie in "Hilfe und Support". 
Signaturversion:1.225.3193.0
Modulversion:1.1.12902.0

Date: 2016-07-30 14:14:52.490
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

Date: 2016-07-08 14:20:11.877
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

Date: 2016-07-06 22:58:49.363
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

CodeIntegrity:
===================================

Date: 2018-08-21 19:18:59.850
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:56.922
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:38.593
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:38.580
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:32.565
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:32.555
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:09:04.036
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 18:59:03.968
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

==================== Speicherinformationen =========================== 

Prozessor: AMD Athlon(tm) II X4 645 Processor
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 8191.24 MB
Verfügbarer physikalischer RAM: 4622.42 MB
Summe virtueller Speicher: 16380.68 MB
Verfügbarer virtueller Speicher: 12527.44 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:635.52 GB) (Free:353.26 GB) NTFS
Drive d: () (Fixed) (Total:295.9 GB) (Free:261.14 GB) NTFS

\\?\Volume{f158a4fb-016f-11e5-8503-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FAA3FAA3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=635.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=295.9 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus · 18.09.2018, 14:13

Du hast Malwarebytes installiert. Hast du damit gescannt? Wenn ja bitte alle Logs davon posten.

Keinen neuen Scan machen, nur schon vorhandene Logfiles von Malwarebytes posten!

LeoWy · 18.09.2018, 14:17

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 17.09.18
Scan-Zeit: 20:22
Protokolldatei: b4d1ef66-baa6-11e8-8449-00025b00a5a5.json
Administrator: Ja

-Softwaredaten-
Version: 3.5.1.2522
Komponentenversion: 1.0.365
Version des Aktualisierungspakets: 1.0.6877
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Leo-PC\Leo

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 337676
Erkannte Bedrohungen: 0
(keine bösartigen Elemente erkannt)
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 1 Std., 18 Min., 53 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)

Malwarebytes hatte keine Bedrohung festgestellt.

cosinus · 18.09.2018, 14:22

ok danke.

Avira bitte komplett deinstallieren

Von Avira raten wir schon lange ab, außerdem will ich für eine Analyse und Bereinigung so wenig Störquellen wie nur möglich. Zum Abschluss gibt es Hinweise zur Absicherung deines Windows-Systems.

Wir deinstallieren dann am besten auch gleich weiteren unnötigen oder veralteten Krempel.

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Adobe AIR

Adobe Flash Player 19 ActiveX

Adobe Flash Player 20 NPAPI

Adobe Flash Player 27 PPAPI

Adobe Reader 9

Avira

Avira Antivirus

Avira Phantom VPN

Avira Privacy Pal

Avira Safe Shopping

Avira Software Updater

Avira System Speedup

FileZilla Client 3.25.1

Java 8 Update 131

OpenOffice 4.1.2

VLC media player

Web Companion

WinRAR 5.21 (64-Bit)

WinZip 22.0
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Gib Bescheid wenn das weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

LeoWy · 18.09.2018, 15:22

Alle aufgeführten Programme wurden deinstalliert.

cosinus · 18.09.2018, 20:12

Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

LeoWy · 18.09.2018, 20:26

Code:

ATTFilter


FireFox:
========
FF DefaultProfile: bf76oj5z.default
FF ProfilePath: C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default [2018-09-17]
FF Homepage: Mozilla\Firefox\Profiles\bf76oj5z.default -> hxxps://www.malwarebytes.org/restorebrowser/
FF Extension: (Avira Browser Safety) - C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\Extensions\abs@avira.com [2018-06-15]
FF Extension: (Search and New Tab by Yahoo) - C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\Extensions\jid1-16aeif9OQIRKxA@jetpack.xpi [2017-06-07] [Legacy]
FF Extension: (Avira Password Manager) - C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\Extensions\passwordmanager@avira.com [2018-06-15]
FF SearchPlugin: C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\searchplugins\bing-lavasoft.xml [2017-11-19]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [Keine Datei]
FF Plugin-x32: @cambridgesoft.com/Chem3D,version=16.0 -> C:\Program Files (x86)\PerkinElmerInformatics\ChemOffice2016\Chem3D\npChem3DPlugin.dll [2017-01-06] (PerkinElmer)
FF Plugin-x32: @cambridgesoft.com/ChemDraw,version=16.0 -> C:\Program Files (x86)\PerkinElmerInformatics\ChemOffice2016\ChemDraw\npcdp32.dll [2017-01-06] (PerkinElmer)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-01-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-01-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-3494380360-4114429975-3830878526-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2018-06-16] ()

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.go-setting.com/
CHR Profile: C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default [2018-09-18]
CHR Extension: (Präsentationen) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (BetterTTV) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-04-04]
CHR Extension: (Docs) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Google Drive) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-08]
CHR Extension: (YouTube) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-08]
CHR Extension: (Chrome IG Story) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bojgejgifofondahckoaahkilneffhmf [2018-09-10]
CHR Extension: (Google-Suche) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-08]
CHR Extension: (Tabellen) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (Avira Browserschutz) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2018-06-15]
CHR Extension: (Google Docs Offline) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-14]
CHR Extension: (AdBlock) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-18]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Google Mail) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-08]
CHR Extension: (Chrome Media Router) - C:\Users\Leo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-02]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ibbfklbaljofpaanmpaeadejijfdddco] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-01-05] (Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7206312 2018-07-17] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8522912 2018-08-07] (Microsoft Corporation)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-05-23] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-05-23] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-03-17] (Digital Wave Ltd.) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-13] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-23] (NVIDIA Corporation)
S2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\hidemesvc.exe [138960 2017-04-30] (eVenture Limited)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [625640 2015-04-24] (Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2124296 2017-03-09] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2185232 2017-03-09] (Electronic Arts)
R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2015-05-23] (Creative Labs) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 CMUAC; C:\Windows\System32\DRIVERS\CMUAC.SYS [390656 2014-01-08] (C-Media Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152184 2018-04-26] (Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [190696 2018-09-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [112864 2018-09-18] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [44768 2018-09-18] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-09-18] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [94328 2018-09-18] (Malwarebytes)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2018-05-17] (The OpenVPN Project)
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-07-29] (Samsung Electronics)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2014-04-21] (Texas Instruments)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-09-18 16:18 - 2018-09-18 16:18 - 000000000 ____D C:\Users\Leo\Documents\Add-in Express
2018-09-18 15:28 - 2018-09-18 15:28 - 007197480 _____ (VS Revo Group ) C:\Users\Leo\Downloads\revosetup205.exe
2018-09-18 15:28 - 2018-09-18 15:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-09-18 15:28 - 2018-09-18 15:28 - 000000000 ____D C:\Program Files\VS Revo Group
2018-09-18 15:15 - 2018-09-18 15:15 - 000001512 _____ C:\Users\Leo\Desktop\Malware.txt
2018-09-18 14:52 - 2018-09-18 14:52 - 000029825 _____ C:\Users\Leo\Desktop\Logfiles.zip
2018-09-18 14:39 - 2018-09-18 14:40 - 000084359 _____ C:\Users\Leo\Downloads\Addition.txt
2018-09-18 14:39 - 2018-09-18 14:40 - 000040517 _____ C:\Users\Leo\Downloads\FRST.txt
2018-09-18 14:38 - 2018-09-18 14:41 - 000000000 ____D C:\Users\Leo\Desktop\Biochemie
2018-09-18 14:33 - 2018-09-18 21:22 - 000010774 _____ C:\Users\Leo\Desktop\FRST.txt
2018-09-18 14:33 - 2018-09-18 21:21 - 000000000 ____D C:\FRST
2018-09-18 14:32 - 2018-09-18 14:32 - 002413568 _____ (Farbar) C:\Users\Leo\Desktop\FRST64.exe
2018-09-18 14:11 - 2018-09-18 14:11 - 000602112 _____ (OldTimer Tools) C:\Users\Leo\Desktop\OTL.exe
2018-09-17 16:21 - 2018-09-18 18:34 - 000094328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-09-15 21:45 - 2018-09-18 16:29 - 000112864 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-09-15 21:45 - 2018-09-18 16:29 - 000044768 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-09-15 21:45 - 2018-09-18 16:28 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-09-15 21:45 - 2018-09-15 21:45 - 000190696 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-09-15 21:45 - 2018-09-15 21:45 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-09-15 21:45 - 2018-09-15 21:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-09-15 21:44 - 2018-09-15 21:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-09-15 21:44 - 2018-09-15 21:44 - 000000000 ____D C:\Program Files\Malwarebytes
2018-09-15 21:44 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-09-15 11:07 - 2018-09-15 11:08 - 000000000 ____D C:\Users\Leo\Desktop\Analytik Klausuren
2018-09-13 11:02 - 2018-09-15 13:03 - 000000000 ____D C:\Users\Leo\Desktop\Housetime
2018-09-13 09:27 - 2018-09-13 09:27 - 000127634 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-09-12 at 16.41.40.jpeg
2018-09-13 09:27 - 2018-09-13 09:27 - 000121350 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-09-12 at 16.41.49.jpeg
2018-09-13 09:27 - 2018-09-13 09:27 - 000061094 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-09-12 at 16.41.59.jpeg
2018-09-03 15:23 - 2018-09-03 15:23 - 000016521 _____ C:\Users\Leo\Downloads\Daten LCMS (1).xlsx
2018-09-03 15:14 - 2018-09-03 15:14 - 000016495 _____ C:\Users\Leo\Downloads\Daten LCMS.xlsx
2018-09-03 11:50 - 2018-09-03 11:50 - 000008319 _____ C:\Users\Leo\Downloads\ergebnisse_LCMS.csv
2018-08-28 16:09 - 2018-08-28 16:24 - 000101696 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-08-28 at 11.54.54 (1).jpeg
2018-08-28 13:06 - 2018-08-28 16:20 - 000210518 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-08-28 at 12.10.53.jpeg
2018-08-28 11:55 - 2018-08-28 11:57 - 000101696 _____ C:\Users\Leo\Downloads\WhatsApp Image 2018-08-28 at 11.54.54.jpeg
2018-08-27 21:05 - 2018-08-27 21:09 - 000000000 ____D C:\Users\Leo\Documents\Black Desert
2018-08-27 19:24 - 2018-08-27 21:10 - 000000000 ____D C:\Users\Leo\AppData\Local\BlackDesertOnline
2018-08-27 19:23 - 2018-08-27 21:10 - 000000000 ____D C:\Program Files (x86)\Black Desert Online
2018-08-27 19:23 - 2018-08-27 19:23 - 000002014 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Black Desert Online.lnk
2018-08-27 19:23 - 2018-08-27 19:23 - 000002008 _____ C:\Users\Public\Desktop\Black Desert Online.lnk
2018-08-27 19:23 - 2018-08-27 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert Online
2018-08-27 19:22 - 2018-08-27 19:22 - 052395976 _____ (Kakao Games Europe B.V.) C:\Users\Leo\Downloads\BlackDesertOnlineSetup_20180524_10010.exe
2018-08-26 22:20 - 2018-08-26 22:20 - 000068191 _____ C:\Users\Leo\Downloads\TXRF Nick.pdf
2018-08-24 22:41 - 2018-08-24 22:41 - 000174380 _____ C:\Users\Leo\Downloads\cm._2018-08-23_1348387458515436562136442.pdf
2018-08-24 20:51 - 2018-08-24 21:39 - 000011126 _____ C:\Users\Leo\Downloads\Bauch Beine (1).xlsx
2018-08-24 20:51 - 2018-08-24 20:57 - 000011796 _____ C:\Users\Leo\Downloads\Rücken Bizeps (1).xlsx
2018-08-24 20:50 - 2018-08-24 21:42 - 000011924 _____ C:\Users\Leo\Downloads\Brust trizeps (1).xlsx
2018-08-22 19:37 - 2018-08-22 19:37 - 003232818 _____ C:\Users\Leo\Downloads\BCV1shomb04jkuer04korrigiert (1).pdf
2018-08-22 19:30 - 2018-08-22 19:30 - 000015068 _____ C:\Users\Leo\Downloads\Versuch 1.xlsx
2018-08-22 16:46 - 2018-08-22 16:46 - 000018210 _____ C:\Users\Leo\Downloads\Ca-2-37_38.ods
2018-08-22 16:46 - 2018-08-22 16:46 - 000016503 _____ C:\Users\Leo\Downloads\Mg-2_37_38.ods
2018-08-22 16:46 - 2018-08-22 16:46 - 000001776 _____ C:\Users\Leo\Downloads\Ca-2-37_38.txt
2018-08-21 18:20 - 2018-08-21 18:20 - 003232818 _____ C:\Users\Leo\Downloads\BCV1shomb04jkuer04korrigiert.pdf
2018-08-21 17:39 - 2018-08-21 17:39 - 000018432 _____ C:\Users\Leo\Downloads\Agarosegel.xls
2018-08-20 16:40 - 2018-08-20 16:40 - 000042765 _____ C:\Users\Leo\Downloads\20180627-Versuche-Kurs2_Ubersicht (1).pdf
2018-08-20 16:39 - 2018-09-18 14:38 - 000000000 ____D C:\Users\Leo\Desktop\Analytik
2018-08-20 15:56 - 2018-08-20 15:56 - 002963040 _____ (BitTorrent Inc.) C:\Users\Leo\Downloads\uTorrent.exe
2018-08-19 19:49 - 2018-08-19 19:49 - 000441910 _____ C:\Users\Leo\Downloads\CK000527.BMP
2018-08-19 18:47 - 2018-08-19 18:47 - 000441910 _____ C:\Users\Leo\Downloads\CK000526.BMP
2018-08-19 18:11 - 2018-08-19 18:11 - 000288786 _____ C:\Users\Leo\Downloads\MAN0012994_pUC19_DNA_MspI_HpaII_Marker_23_RTU_UG.pdf
2018-08-19 18:10 - 2018-08-19 18:10 - 000441910 _____ C:\Users\Leo\Downloads\CK000525.BMP

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-09-18 20:54 - 2015-08-31 23:11 - 000000000 ____D C:\Users\Leo\AppData\Roaming\Spotify
2018-09-18 20:33 - 2015-06-29 01:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-09-18 19:49 - 2018-01-15 20:11 - 000000000 ____D C:\Program Files (x86)\Steam
2018-09-18 17:57 - 2015-08-31 23:12 - 000000000 ____D C:\Users\Leo\AppData\Local\Spotify
2018-09-18 17:44 - 2009-07-14 06:45 - 000016720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-09-18 17:44 - 2009-07-14 06:45 - 000016720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-09-18 16:25 - 2009-07-14 06:45 - 000426288 _____ C:\Windows\system32\FNTCACHE.DAT
2018-09-18 16:24 - 2015-05-23 19:49 - 000111856 _____ C:\Users\Leo\AppData\Local\GDIPFONTCACHEV1.DAT
2018-09-18 16:23 - 2015-05-23 23:25 - 000000000 ____D C:\Program Files (x86)\Avira
2018-09-18 16:23 - 2015-05-23 19:56 - 000000000 ____D C:\ProgramData\NVIDIA
2018-09-18 16:23 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-18 16:04 - 2015-07-15 20:57 - 000000000 ____D C:\Program Files (x86)\Java
2018-09-18 15:58 - 2015-05-23 23:27 - 000000000 ____D C:\ProgramData\Package Cache
2018-09-18 15:40 - 2018-06-15 18:01 - 000000000 ____D C:\Windows\System32\Tasks\Avira
2018-09-18 15:37 - 2015-06-28 19:41 - 000000000 ____D C:\Users\Leo\AppData\Local\Adobe
2018-09-18 15:37 - 2015-05-23 19:36 - 000000000 ____D C:\ProgramData\Adobe
2018-09-18 15:37 - 2015-05-23 19:36 - 000000000 ____D C:\Program Files (x86)\Adobe
2018-09-18 14:13 - 2016-01-29 19:43 - 000000000 ____D C:\Users\Leo\AppData\Roaming\TS3Client
2018-09-17 08:51 - 2018-06-23 09:04 - 000007509 _____ C:\Windows\SysWOW64\Defrag.debuglog
2018-09-16 16:53 - 2015-12-03 17:44 - 000000000 ____D C:\Users\Leo\AppData\Roaming\Audacity
2018-09-05 13:27 - 2018-06-30 11:50 - 000003068 _____ C:\Windows\System32\Tasks\TNTClientUpdater
2018-09-05 13:27 - 2018-06-30 11:50 - 000000000 ____D C:\Program Files (x86)\GameforgeLogin
2018-09-05 13:27 - 2017-12-06 19:01 - 000000000 ____D C:\Program Files (x86)\Nostale_DE
2018-09-05 10:57 - 2016-02-09 15:34 - 000000000 ____D C:\Users\Leo\AppData\Local\CrashDumps
2018-09-05 10:56 - 2018-04-21 12:10 - 000000000 ____D C:\Program Files (x86)\NosTale Multiclient Creator
2018-09-05 09:11 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2018-08-27 19:23 - 2015-05-23 19:34 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-08-27 14:48 - 2017-11-11 23:49 - 000000000 ____D C:\Users\Leo\AppData\Local\PokerStars.EU
2018-08-26 11:40 - 2017-03-20 15:27 - 000000000 ____D C:\Users\Leo\AppData\Local\TeamSpeak 3 Client
2018-08-23 22:58 - 2016-10-20 14:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-08-23 22:55 - 2016-10-20 14:45 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-08-21 17:10 - 2018-08-09 15:33 - 000000000 ____D C:\Users\Leo\AppData\Local\WallpaperHd
2018-08-20 15:58 - 2018-03-18 16:20 - 000000000 ____D C:\Users\Leo\AppData\Roaming\uTorrent

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-12-03 18:21 - 2015-12-03 18:21 - 000000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-05-27 18:41 - 2016-08-14 01:39 - 000000096 _____ () C:\Users\Leo\AppData\Roaming\Camdata.ini
2015-05-27 18:41 - 2016-08-14 01:39 - 000000408 _____ () C:\Users\Leo\AppData\Roaming\CamLayout.ini
2015-05-27 18:41 - 2016-08-14 01:39 - 000000408 _____ () C:\Users\Leo\AppData\Roaming\CamShapes.ini
2015-05-27 18:41 - 2016-08-14 01:39 - 000004545 _____ () C:\Users\Leo\AppData\Roaming\CamStudio.cfg
2017-05-13 19:51 - 2017-06-29 18:20 - 000002662 _____ () C:\Users\Leo\AppData\Roaming\SpeedRunnersLog.txt
2017-06-09 22:51 - 2017-06-09 22:51 - 000002624 _____ () C:\Users\Leo\AppData\Roaming\TargetInvocationLog.txt
2017-01-06 20:45 - 2017-01-06 20:45 - 000001181 _____ () C:\Users\Leo\AppData\Roaming\trace_FilterInstaller.txt
2017-01-06 20:45 - 2017-01-06 20:45 - 000000000 _____ () C:\Users\Leo\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2015-05-27 18:34 - 2016-08-14 01:38 - 000000096 _____ () C:\Users\Leo\AppData\Roaming\version2.xml
2018-08-11 21:09 - 2018-09-13 09:28 - 000019150 _____ () C:\Users\Leo\AppData\Local\CDXLExtendedShim.log
2018-08-17 16:04 - 2018-08-17 16:04 - 000000841 _____ () C:\Users\Leo\AppData\Local\recently-used.xbel
2015-08-04 17:31 - 2015-08-04 17:31 - 000007605 _____ () C:\Users\Leo\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
2015-05-23 23:27 - 2016-09-07 18:01 - 000000000 ____D () C:\Users\Leo\AppData\Local\Temp\avgnt.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-09-09 12:58

==================== Ende von FRST.txt ============================

LeoWy · 18.09.2018, 20:27

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15.09.2018
durchgeführt von Leo (18-09-2018 21:23:25)
Gestartet von C:\Users\Leo\Desktop
Windows 7 Professional Service Pack 1 (X64) (2015-05-23 17:26:36)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3494380360-4114429975-3830878526-500 - Administrator - Disabled)
Gast (S-1-5-21-3494380360-4114429975-3830878526-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3494380360-4114429975-3830878526-1003 - Limited - Enabled)
Leo (S-1-5-21-3494380360-4114429975-3830878526-1000 - Administrator - Enabled) => C:\Users\Leo

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\uTorrent) (Version: 3.5.4.44520 - BitTorrent Inc.)
Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Application Support (32-Bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{19589375-5C58-4AFA-842F-8B34744CCEAD}) (Version: 2.5.0.1 - Apple Inc.)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
ATI Catalyst Install Manager (HKLM\...\{0C798FBB-2BA6-D113-C055-936965550F33}) (Version: 3.0.765.0 - ATI Technologies, Inc.)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.10 - Kakao Games Europe B.V.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BRAINYOO (HKLM-x32\...\BRAINYOO) (Version:  - BRAINYOO Mobile Learning GmbH)
capella reader 8 (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\{3b5152aa-0197-4ca1-bc48-1946ef28e9be}) (Version: 8 - capella-software AG)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dual Monitor 1.22 (HKLM-x32\...\{64AA3F94-ED4A-4A4B-B72C-B7A1481ED5D8}_is1) (Version: 1.22.021813 - Cristi Diaconu)
Epic Games Launcher (HKLM-x32\...\{86F434AF-1A92-4BDB-93CD-31BF0ED78C9C}) (Version: 1.1.144.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
FLV and Media Player 4.2.1.1 (HKLM-x32\...\FLV and Media Player) (Version: 4.2.1.1 - Applian Technologies)
ForHonor (HKLM-x32\...\Uplay Install 569) (Version:  - Ubisoft)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Gameforge Login (HKLM-x32\...\{43792758-34f1-468f-9076-e574fedcf3dc}_is1) (Version: 1.2.0 - Gameforge)
GIMP 2.10.4 (HKLM\...\GIMP-2_is1) (Version: 2.10.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
GS Auto Clicker (HKLM-x32\...\GS Auto Clicker_is1) (Version: V3.1.2 - goldensoft.org)
iTunes (HKLM\...\{69D24652-4A1D-49C6-AA0C-573A38083F6C}) (Version: 12.7.3.46 - Apple Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League Displays (HKLM-x32\...\LolScreenSaver) (Version: W1.0.854-beta - Riot Games)
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Malwarebytes Version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Build Tools 2015 (HKLM-x32\...\{d21da0dd-4ba4-4838-ba58-64cf7a77131a}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.9126.2275 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\OneDriveSetup.exe) (Version: 17.3.6281.1202 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{0E8D886F-3205-4472-848E-990F400FF218}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{46EA439E-2D16-49B6-AA80-00DE992FE7CE}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{5CBDF0C2-6FD1-4A32-9A0A-143D9AB91CCE}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{68ADAEAA-DABD-45C1-9CC2-F995407549CD}) (Version: 7601 - Microsoft)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{8DD62FB6-083D-40B9-9D7D-48449FDDDED5}) (Version: 7601 - Microsoft)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.19.0 - NEC Electronics Corporation) Hidden
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.19.0 - NEC Electronics Corporation)
NosTale (HKLM-x32\...\Nostale(DE)_is1) (Version:  - Gameforge 4D GmbH)
NosTale Multiclient Creator (HKLM-x32\...\{1B36C535-52F7-46ED-B9FA-A4386F8E89E0}) (Version: 1.0.0.0 - Pumba98)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.75 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.9.1.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.35 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.75 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.25153 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{667cb872-b83d-411a-b5fd-c66d4ea98867}) (Version: latest - ppy Pty Ltd)
PerkinElmer ChemDraw Professional 16.0 (HKLM-x32\...\{8A0B423C-0C04-4B45-8456-ABCE29A0E831}) (Version: 16.0 - PerkinElmer Informatics, Inc.)
PerkinElmer ChemOffice 64-bit Support 16.0 (HKLM\...\{BCE6E6EC-0D89-4BA9-AF5B-272D8F057411}) (Version: 16.0 - PerkinElmer Informatics, Inc.)
PerkinElmer ChemScript 16.0 (HKLM-x32\...\{6D9CF922-C5B2-4E47-9097-26FC925CE9C5}) (Version: 16.0 - PerkinElmer Informatics, Inc.)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
Project64 version 2.3.2.202 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.2.202 - )
Python 3.2.2 (HKLM-x32\...\{4CDE3168-D060-4b7c-BC74-4D8F9BB01AFD}) (Version: 3.2.2150 - Python Software Foundation)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6043 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.5 - VS Revo Group, Ltd.)
Sades 7.1CH Gaming Headset (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006620}) (Version: 1.00.0010 - SHENZHEN SADES DIGITAL TECHNOLOGY CO.,LTD)
sciebo (HKLM-x32\...\sciebo) (Version: 2.2.4.840 - Sync and Share NRW )
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.1.0260 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.9.1.35 - NVIDIA Corporation) Hidden
Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.)
Sound Blaster X-Fi MB (HKLM-x32\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)
Spotify (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\Spotify) (Version: 1.0.89.313.g34a58dea - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
TeX Live 2017 (HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\TeXLive2017) (Version: 2017 - TeX Live)
TeXstudio 2.12.6 (HKLM-x32\...\TeXstudio_is1) (Version: 2.12.6 - Benito van der Zander)
TI-Nspire™ Computer Link (HKLM-x32\...\{6C5AC088-3136-4043-8985-8B0772A9580E}) (Version: 3.9.0.455 - Texas Instruments Inc.)
TI-Nspire™ CX Student Software (HKLM-x32\...\{99D1FC9E-5C33-4B49-ABA3-52D6CE943766}) (Version: 4.0.0.235 - Texas Instruments Inc.)
TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trackmania Turbo (HKLM-x32\...\Uplay Install 2070) (Version:  - Ubisoft)
Trials Evolution Gold Edition (HKLM-x32\...\{07D857B8-C956-401D-BC8F-EDA8459AF037}) (Version: 1.0.0.5 - Ubisoft) Hidden
Trials Evolution Gold Edition (HKLM-x32\...\InstallShield_{07D857B8-C956-401D-BC8F-EDA8459AF037}) (Version: 1.0.0.5 - Ubisoft)
Uplay (HKLM-x32\...\Uplay) (Version: 30.0 - Ubisoft)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version:  - )
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Wartung Samsung ML-1660 Series (HKLM-x32\...\Samsung ML-1660 Series) (Version:  - Samsung Electronics Co., Ltd.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Leo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileCoAuthLib64.dll ()
ShellIconOverlayIdentifiers: [  OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ShellIconOverlayIdentifiers: [  OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-08-23] (ownCloud Inc.)
ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-08-12] (Lenovo)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers3: [OCContextMenuHandler] -> {841A0AAD-AA11-4B50-84D9-7F8E727D77D7} => C:\Program Files (x86)\sciebo\shellext\OCContextMenu_x64.dll [2016-08-23] (ownCloud Inc.)
ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-08-12] (Lenovo)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2016-01-23] (NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {004FE99B-C0D4-4A25-B3D7-40A1145D058E} - System32\Tasks\Avira\Safe Shopping\Launch => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe
Task: {13B10B19-B70A-4E54-B2E7-B66D08F80C80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-08] (Google Inc.)
Task: {1D209B1F-41E1-4EE4-8FC4-FEFA6D2DEAA1} - System32\Tasks\{EF178253-C20A-46F8-9CD6-33BB186C0CEC} => C:\Windows\system32\pcalua.exe -a C:\Users\Leo\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe -d C:\Windows\SysWOW64 -c /groupsextract:100;101;102; /out:"C:\Users\Leo\AppData\Roaming\Riot Games\League of Legends\prerequisites" /callbackid:3436
Task: {32D6D4B4-DEBF-45A0-937D-2C41965E90A6} - System32\Tasks\Avira\Safe Shopping\Update => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe
Task: {4B7B4BA1-640F-4464-BFD2-CB5856E55758} - System32\Tasks\{13CF376B-4B53-4CA3-9D20-35FA84BE64D5} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {5AEC2434-EBBE-4842-A695-B321148288CC} - System32\Tasks\Avira\Safe Shopping\Check => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe
Task: {6046924D-D9EB-4A54-AA22-12EE90ED8443} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-08-23] (Microsoft Corporation)
Task: {70D054D5-4F09-405E-A0DE-CCD1C62F2187} - System32\Tasks\TNTClientUpdater => C:\Program Files (x86)\GameforgeLogin\updater.exe [2018-09-05] ()
Task: {7925B24C-C17B-4BF8-960D-9AB613FF0E27} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)
Task: {83DFFACD-1110-4025-BF63-AA2D8DFFDD05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-08-23] (Microsoft Corporation)
Task: {9DCC9074-4753-4F40-B3E2-16A03A86AF04} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-23] (Microsoft Corporation)
Task: {A9061F52-D2B5-4E15-AAE5-A838629245C6} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Command(1): %windir%\system32\rundll32.exe -> aepdu.dll,AePduRunUpdate -nolegacy
Task: {A9061F52-D2B5-4E15-AAE5-A838629245C6} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Command(2): %windir%\system32\rundll32.exe -> appraiser.dll,DoScheduledTelemetryRun
Task: {AE86D62D-387F-4B5A-B6C7-699FB5C4013C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-23] (Microsoft Corporation)
Task: {AF7536CB-603E-4C93-B297-1DCD1B5206B7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-07] (Microsoft Corporation)
Task: {B05A3AC3-1D21-4CAC-9086-DA12673D34AF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-07] (Microsoft Corporation)
Task: {E5498201-FB93-44E4-9146-60F56F4D657C} - System32\Tasks\{2E45EACC-B355-45C5-B251-4C5282C69D86} => C:\Windows\system32\pcalua.exe -a C:\Users\Leo\AppData\Local\Temp\jre-8u60-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {EB81786B-68E6-49D0-8C32-E4C3A09CBFC9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-08] (Google Inc.)
Task: {F1E9E87B-A830-40F6-B282-00456D211363} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {FE47115F-0E76-42E6-A362-151500C32464} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-08-23] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

WMI_ActiveScriptEventConsumer___gconsumer1: 

Shortcut: C:\Users\Leo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2017\TeX Live command-line.lnk -> C:\texlive\2017\tlpkg\installer\tl-cmd.bat ()
Shortcut: C:\Users\Leo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2017\Uninstall TeX Live.lnk -> C:\texlive\2017\tlpkg\installer\uninst.bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-05-23 19:56 - 2016-01-23 03:04 - 000133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-10-18 12:29 - 2009-08-10 09:08 - 000027648 _____ () C:\Windows\System32\ssp7ml6.dll
2016-08-23 14:42 - 2016-08-23 14:42 - 000059904 _____ () C:\Program Files (x86)\sciebo\shellext\OCUtil_x64.dll
2018-01-05 01:13 - 2018-01-05 01:13 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-01-05 01:14 - 2018-01-05 01:14 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-25 00:37 - 2014-04-11 06:31 - 002250240 ____N () C:\Program Files\Sades 7.1CH Gaming Headset\CPL\FaceLift_x64.exe
2018-01-22 04:15 - 2018-01-22 04:15 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll
2018-01-22 04:15 - 2018-01-22 04:15 - 000088888 _____ () C:\Program Files\iTunes\zlib1.dll
2018-07-12 19:37 - 2014-08-08 15:00 - 000844800 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2016-10-18 12:27 - 2010-06-07 12:35 - 000618496 _____ () C:\Windows\Samsung\PanelMgr\SSMMgr.exe
2017-12-04 11:54 - 2017-12-04 11:54 - 000408576 _____ () C:\Riot Games\LeagueDisplays\assistant\LeagueDisplaysAssistant.exe
2016-10-18 12:28 - 2009-07-29 12:13 - 000306688 _____ () C:\Windows\Samsung\PanelMgr\caller64.exe
2018-09-15 21:44 - 2018-04-25 13:16 - 002297040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-09-15 21:44 - 2018-04-30 12:54 - 002493648 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2018-08-08 21:52 - 2018-08-08 02:41 - 004855640 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libglesv2.dll
2018-08-08 21:52 - 2018-08-08 02:41 - 000115544 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libegl.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 003524736 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\LeagueClient.exe
2018-09-14 15:18 - 2018-09-12 15:50 - 001748440 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\LeagueClientUx.exe
2018-09-14 15:18 - 2018-09-12 15:50 - 000916608 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\LeagueClientUxRender.exe
2015-06-02 00:12 - 2016-03-17 21:53 - 000110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-06-02 00:12 - 2016-03-17 21:53 - 000044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-02-08 17:14 - 2016-03-30 03:28 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2018-07-12 19:37 - 2014-08-08 15:02 - 001411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2018-07-12 19:37 - 2014-05-13 17:59 - 000195072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2018-07-12 19:37 - 2014-05-27 10:54 - 000194560 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJRa.dll
2018-07-12 19:37 - 2014-04-17 09:52 - 001206576 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\RaWLAPI.dll
2018-09-18 16:26 - 2018-09-18 16:26 - 000697884 _____ () C:\Users\Leo\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.1909\~df394b.tmp
2018-09-18 16:28 - 2018-09-18 16:28 - 000592896 _____ () C:\Users\Leo\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.1909\~de6248.tmp
2015-05-23 19:38 - 2009-02-06 18:52 - 000073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2015-05-23 19:38 - 2009-04-20 11:55 - 000148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2015-08-31 23:12 - 2018-09-18 17:13 - 085627280 _____ () C:\Users\Leo\AppData\Roaming\Spotify\libcef.dll
2015-08-31 23:12 - 2018-09-18 17:13 - 003867536 _____ () C:\Users\Leo\AppData\Roaming\Spotify\libglesv2.dll
2015-08-31 23:12 - 2018-09-18 17:13 - 000088464 _____ () C:\Users\Leo\AppData\Roaming\Spotify\libegl.dll
2018-01-15 20:14 - 2018-07-21 23:07 - 000854304 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2018-01-15 20:14 - 2016-09-01 03:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2018-01-15 20:14 - 2016-09-01 03:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2018-01-15 20:14 - 2016-09-01 03:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2018-01-15 20:14 - 2018-08-09 00:43 - 002644768 _____ () C:\Program Files (x86)\Steam\video.dll
2018-01-15 20:13 - 2017-12-20 03:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2018-01-15 20:13 - 2017-12-20 03:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2018-01-15 20:13 - 2017-12-20 03:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2018-01-15 20:13 - 2017-12-20 03:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2018-01-15 20:13 - 2017-12-20 03:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2018-01-15 20:14 - 2018-08-09 00:43 - 001015072 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2018-01-15 20:13 - 2016-07-05 00:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2018-01-15 20:16 - 2018-07-21 23:07 - 000854304 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2018-01-15 20:16 - 2018-07-21 00:24 - 083524896 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2018-01-15 20:16 - 2018-07-21 00:24 - 003732256 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libglesv2.dll
2018-01-15 20:16 - 2018-07-21 00:24 - 000086304 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libegl.dll
2018-01-15 20:13 - 2018-07-03 23:58 - 000137504 _____ () C:\Program Files (x86)\Steam\winh264.dll
2018-09-14 15:18 - 2018-09-12 15:51 - 000113792 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\zlib.dll
2018-09-14 15:18 - 2018-09-12 15:51 - 000128640 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\yaml.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 001975936 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-patch\rcp-be-patch.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000614528 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-rso-auth\rcp-be-rso-auth.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000550528 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-riot-messaging-service\rcp-be-riot-messaging-service.dll
2018-09-14 15:18 - 2018-03-22 12:37 - 000492160 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-entitlements\rcp-be-entitlements.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 001463424 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-patch\rcp-be-lol-patch.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 001392600 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-patcher\rcp-be-patcher.dll
2018-09-14 15:18 - 2018-08-01 20:15 - 000999040 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-login\rcp-be-lol-login.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000522368 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-platform-config\rcp-be-lol-platform-config.dll
2018-09-14 15:18 - 2018-08-01 20:15 - 000733824 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-summoner\rcp-be-lol-summoner.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000523392 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-ranked-stats\rcp-be-lol-ranked-stats.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000452224 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-maps\rcp-be-lol-maps.dll
2018-09-14 15:18 - 2018-08-01 20:15 - 000610944 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-game-queues\rcp-be-lol-game-queues.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000539264 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-player-preferences\rcp-be-lol-player-preferences.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000587736 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-game-settings\rcp-be-lol-game-settings.dll
2018-09-14 15:18 - 2018-07-18 16:57 - 000535168 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-settings\rcp-be-lol-settings.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000770688 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-gameflow\rcp-be-lol-gameflow.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000479360 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-pre-end-of-game\rcp-be-lol-pre-end-of-game.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000761472 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-sanitizer\rcp-be-sanitizer.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000444544 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-riot-messaging-service\rcp-be-lol-riot-messaging-service.dll
2018-09-14 15:18 - 2018-05-16 16:05 - 000501888 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-acs\rcp-be-lol-acs.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000481920 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-player-notifications\rcp-be-player-notifications.dll
2018-09-14 15:18 - 2018-08-01 20:15 - 000443008 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-loyalty\rcp-be-lol-loyalty.dll
2018-09-14 15:18 - 2018-05-31 08:50 - 000778368 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-collections\rcp-be-lol-collections.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000641152 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-champions\rcp-be-lol-champions.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000446592 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-kr-shutdown-law\rcp-be-lol-kr-shutdown-law.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000841856 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-leagues\rcp-be-lol-leagues.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000691328 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-store\rcp-be-lol-store.dll
2018-09-14 15:18 - 2018-09-14 15:18 - 000649176 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-inventory\rcp-be-lol-inventory.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000899712 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-lobby-team-builder\rcp-be-lol-lobby-team-builder.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000567424 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-queue-eligibility\rcp-be-lol-queue-eligibility.dll
2018-09-14 15:18 - 2018-04-18 14:58 - 000645248 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-matchmaking\rcp-be-lol-matchmaking.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000518272 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-spectator\rcp-be-lol-spectator.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 001578112 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-chat\rcp-be-lol-chat.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 001691776 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-lobby\rcp-be-lol-lobby.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000740992 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-champ-select-legacy\rcp-be-lol-champ-select-legacy.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000563840 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-champ-select\rcp-be-lol-champ-select.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000609752 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-loadouts\rcp-be-lol-loadouts.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000493696 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-heartbeat\rcp-be-lol-heartbeat.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000518272 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-shutdown\rcp-be-lol-shutdown.dll
2018-09-14 15:18 - 2018-06-29 15:32 - 000923264 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-loot\rcp-be-lol-loot.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000472704 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-kickout\rcp-be-lol-kickout.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000432256 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-license-agreement\rcp-be-lol-license-agreement.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000479360 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-kr-playtime-reminder\rcp-be-lol-kr-playtime-reminder.dll
2018-09-14 15:18 - 2018-03-01 19:21 - 000439936 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-game-client-chat\rcp-be-lol-game-client-chat.dll
2018-09-14 15:18 - 2018-04-18 14:57 - 000662656 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-end-of-game\rcp-be-lol-end-of-game.dll
2018-09-14 15:18 - 2018-03-01 19:21 - 000522368 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-active-boosts\rcp-be-lol-active-boosts.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000594560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-pft\rcp-be-lol-pft.dll
2018-09-14 15:18 - 2018-05-02 15:42 - 000598656 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-player-behavior\rcp-be-lol-player-behavior.dll
2018-09-14 15:18 - 2018-06-26 18:01 - 000485504 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-suggested-players\rcp-be-lol-suggested-players.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000530560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-service-status\rcp-be-lol-service-status.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000558720 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-leaver-buster\rcp-be-lol-leaver-buster.dll
2018-09-14 15:18 - 2018-08-01 20:15 - 000562816 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-match-history\rcp-be-lol-match-history.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000715392 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-recofriender\rcp-be-recofriender.dll
2018-09-14 15:18 - 2018-05-31 08:50 - 000716928 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-clubs\rcp-be-lol-clubs.dll
2018-09-14 15:18 - 2018-03-01 19:21 - 000530560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-clubs-public\rcp-be-lol-clubs-public.dll
2018-09-14 15:18 - 2018-03-01 19:21 - 000574080 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-esport-stream-notifications\rcp-be-lol-esport-stream-notifications.dll
2018-09-14 15:18 - 2018-05-02 15:42 - 000451200 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-player-level-up\rcp-be-lol-player-level-up.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000487040 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-tencent-qt\rcp-be-lol-tencent-qt.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000546432 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-player-messaging\rcp-be-lol-player-messaging.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000484992 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-purchase-widget\rcp-be-lol-purchase-widget.dll
2018-09-14 15:18 - 2018-05-31 08:50 - 000546432 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-personalized-offers\rcp-be-lol-personalized-offers.dll
2018-09-14 15:18 - 2018-07-18 16:57 - 000618624 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-recommendations\rcp-be-lol-recommendations.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000469632 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-user-experience\rcp-be-lol-user-experience.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000542848 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-simple-dialog-messages\rcp-be-lol-simple-dialog-messages.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000610944 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-highlights\rcp-be-lol-highlights.dll
2018-09-14 15:18 - 2018-06-29 15:32 - 000627840 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-honor-v2\rcp-be-lol-honor-v2.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000465024 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-network-testing\rcp-be-network-testing.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000632448 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-missions\rcp-be-lol-missions.dll
2018-09-14 15:18 - 2018-03-01 19:32 - 000584832 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-item-sets\rcp-be-lol-item-sets.dll
2018-09-14 15:18 - 2018-03-01 19:21 - 000500352 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-email-verification\rcp-be-lol-email-verification.dll
2018-09-14 15:18 - 2018-07-18 16:57 - 000471680 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-geoinfo\rcp-be-lol-geoinfo.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000489088 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-content-targeting\rcp-be-lol-content-targeting.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 001309824 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-clash\rcp-be-lol-clash.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000658560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-replays\rcp-be-lol-replays.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000750208 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-voice-chat\rcp-be-voice-chat.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000664704 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-gcloud-voice-chat\rcp-be-gcloud-voice-chat.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000635008 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-premade-voice\rcp-be-lol-premade-voice.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000511104 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-featured-modes\rcp-be-lol-featured-modes.dll
2018-09-14 15:18 - 2018-07-18 16:57 - 000606336 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-npe-tutorial-path\rcp-be-lol-npe-tutorial-path.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000486016 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-catalog\rcp-be-lol-catalog.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000556160 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-regalia\rcp-be-lol-regalia.dll
2018-09-14 15:18 - 2018-03-01 19:33 - 000451712 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-payments\rcp-be-payments.dll
2018-09-14 15:18 - 2018-05-16 16:05 - 000566400 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-banners\rcp-be-lol-banners.dll
2018-09-14 15:18 - 2018-05-16 16:05 - 000484480 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-trophies\rcp-be-lol-trophies.dll
2018-09-14 15:18 - 2018-08-29 18:01 - 000766080 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-perks\rcp-be-lol-perks.dll
2018-09-14 15:18 - 2018-05-16 16:05 - 000455296 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-discord-rp\rcp-be-lol-discord-rp.dll
2018-09-14 15:18 - 2018-03-01 19:21 - 000530560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-account-verification\rcp-be-lol-account-verification.dll
2018-09-14 15:18 - 2018-08-27 17:26 - 000567936 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\Plugins\rcp-be-lol-career-stats\rcp-be-lol-career-stats.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 055045760 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\libcef.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000832640 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\ffmpeg.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 001801344 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\libglesv2.dll
2018-09-14 15:18 - 2018-09-12 15:50 - 000022144 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.163\deploy\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Public\AppData:CSM [484]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\samsungsetup.com -> hxxp://www.samsungsetup.com
IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\sharepoint.com -> hxxps://umuenster-files.sharepoint.com
IE trusted site: HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-02-09 12:43 - 000000822 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3494380360-4114429975-3830878526-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Leo\AppData\Local\LolScreenSaver\wallpapers\c-o-champion-shyvana-icedrake-splash.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: Web Companion => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{42DFC83F-0370-4CB6-BC6D-4102B22E4EB5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8B0B3679-229C-4883-B774-F47C05FF3A63}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{2DCD4EAE-BED1-410A-9108-8CE24F42EE54}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{F3D2AE20-CDC6-4F8E-BB76-17118CAB2764}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{A93A40C7-D914-4A92-B175-8F6F50FB26ED}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{B42AB724-7DDE-4CF3-AB98-772B4D66F736}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [{C9336B1D-2372-4585-96BE-199E9D51D7C8}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
FirewallRules: [TCP Query User{D1F0B4A3-476B-44B7-BD8D-A002066442A3}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{3BBA4465-F175-4E24-9BE5-1FDC824DB4EB}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [TCP Query User{D9AC26FE-D517-41B4-B8B9-FA77D44504AD}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{14CEC4C6-88FB-4E44-92D6-B0E55BB45901}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{7D237021-F1E5-4241-BC9D-AF99F58B2C79}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3471C3D7-EAC1-45B9-8D1F-328080B11D70}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{25E17FE9-BC42-45A8-BBEA-3241D03584EA}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe
FirewallRules: [UDP Query User{6C8F0F13-76D4-4040-91AE-0C9FB69B3D4C}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe
FirewallRules: [TCP Query User{BEB35E24-65D1-4C21-A673-9B1A4481F0DF}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe
FirewallRules: [UDP Query User{C2CD0906-E4E5-4C9F-8CE7-E0B50796B225}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Block) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe
FirewallRules: [TCP Query User{BCB53A35-B2B6-4CDD-98E2-1AD999C61906}C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe
FirewallRules: [UDP Query User{9C8BC276-D55B-4CAE-AB77-B6A2F214DCA1}C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-diagnostics\ti-diagnostic.exe
FirewallRules: [TCP Query User{0E752105-BE33-45A0-B54D-1F8C5CABFDE0}C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe
FirewallRules: [UDP Query User{889399C7-6C06-4E29-99CB-FC1D7549D5E6}C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\ti-nspire cx student software.exe
FirewallRules: [TCP Query User{DB0618FE-4760-498B-92DA-0C963159DDEE}C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe
FirewallRules: [UDP Query User{4ED96070-A488-4F65-AFBB-3133FBDC616F}C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire cx student software\jre\bin\java.exe
FirewallRules: [{7A1E6F8A-A2A1-4E29-B73D-149089915EDF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FB46234B-1B0E-446D-83CA-6B51EB4CAD71}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8A8BE830-C922-4FA3-9A42-03692956A0B5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C68F77F5-AB49-484C-A167-E88D4AE59069}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{74ECBD13-4A34-4F53-BF90-0538F7DA84B6}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{D56D60B7-F70A-443C-BECC-A7A0F37F75BB}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{B55B2F78-9BEB-4368-B668-87F54E620122}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3F77B1B1-8116-4049-9F77-F07643F60759}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{96EC1B13-996B-4A09-BF67-FB67659B73FE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DB76730C-1B5E-4311-AFF0-3867A0B4C92F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{44C217D5-C62B-416D-8FF1-A40643C8809A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0FBA1405-A0D8-43C6-94F9-47B0F3464B20}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2D15DDD0-A792-4AC9-A6BD-A23556449B41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HuniePop\HuniePop.exe
FirewallRules: [{51DF95B6-EC0A-4A0D-A536-DA921DE09515}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HuniePop\HuniePop.exe
FirewallRules: [{D2D27A18-7B0D-4545-8A53-7FE40E5D7CD8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D7A26C40-8125-4EB9-AE1A-DD38E1E81BC9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7825FABB-A745-4772-A47A-0D0DF71EFD3F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{96A63943-6E7B-4E03-998F-4A403889BF97}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{99A0E3DA-1B14-45E1-AA11-9EEF7B4C3FC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{76D78D17-3113-4DEB-B3F9-9736E593C8C0}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\datapack\trialsFMX.exe
FirewallRules: [{EB2B6B29-EEAB-4B79-86C0-CD234373E5D5}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\datapack\trialsFMX.exe
FirewallRules: [{E20DA59B-E6F5-4067-AEAA-B9CF69BAD9C9}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\Trials_launcher.exe
FirewallRules: [{3CDB6AFD-B7EA-470C-97EC-BEF9B6A3FD30}] => (Allow) C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\Trials_launcher.exe
FirewallRules: [{31DBB2D1-C782-4D82-8D8D-630B54576003}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{ADAC0F8C-6AA6-447C-BCCD-D9F6687ADD3F}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{C10B58BC-43A2-4C6E-9810-353641776D9B}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9932A0B3-DF5E-480F-9FE3-F859F3CD0B4D}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{9BA822B5-D51D-47A0-B635-9EAD35C96238}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{B2EB3902-3E98-4018-85F3-1F8ECD9523C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{491BFBAA-C827-4D77-B48B-797BD4A2BDEE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\YoutubersLife\YoutubersLife.exe
FirewallRules: [{17FE0309-8077-475E-885E-EDF725435B67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{06BC989E-3689-427D-B1C2-656257815E15}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{2C3571F6-C203-44AA-BECD-858F0941AC26}] => (Allow) C:\Users\Leo\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{75692843-6EA2-456E-AA27-DBC45CCA52E3}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{70F9F8B5-449D-4B3B-8395-ADE2839103F4}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{8B71111D-574F-411F-8BC6-18BD12DFF22C}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{F5C0DCD6-6F96-4142-BF0D-8D136ECD914D}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{89268DAD-5FB5-4756-946A-7F022B274728}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{780011C5-24BC-4657-AA95-23FAAC73244D}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{9DC7054A-D142-4CDC-875C-962582CF9E6E}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{5CD49F5C-97B5-47DA-8AA3-02D86E962510}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{169EE7DD-46C4-434E-9E31-642305CC2BD7}] => (Allow) C:\Users\Leo\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{4D972117-EB1B-4A2D-9CBA-ACE9ED108289}] => (Allow) C:\Users\Leo\AppData\Local\Temp\7zS0DDD\HP.EasyStart.exe
FirewallRules: [TCP Query User{9C73CB23-26E1-45FB-B152-88712097894D}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{EE44048F-B4BF-4EAC-9EA5-D18798705F6A}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leo\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{9C82811E-944C-42C0-BAAF-5664B54207BF}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{0EF59574-C697-4E5A-AA62-BF08CB31AC9C}C:\users\leo\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\leo\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DB2C7BEA-F183-4DF2-B64F-9488F4DCA094}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{BC7A8F3A-F7B0-4E80-B543-33D6EE9743CC}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{FD930C9A-64B4-4490-96B0-48F713B9D513}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{66C211A8-1BFC-4596-82D7-2010C098D4E7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{4F360453-07DC-43B0-A79A-08612FFA7A59}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4F24502F-3144-40CF-BFB1-CFE1BAE5456A}] => (Allow) LPort=2869
FirewallRules: [{B3C55864-A0E4-4229-B3CD-63F4D85983CD}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{556B935B-1B34-43CC-B9FC-27031937D026}C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe] => (Block) C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe
FirewallRules: [UDP Query User{E53B53F6-83DA-42B8-8AFD-F9FD78187236}C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe] => (Block) C:\program files\farming simulator 15\x64\farmingsimulator2015game.exe
FirewallRules: [{0DB78CE6-F837-49E2-BCBA-C9723DA55AA6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9BD56E60-1A4B-4F16-94E5-384545B98A02}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{A43CA6A6-5D38-4D35-849C-D0A671D1D94A}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{9E91F3F7-0187-4497-9EF4-C43E0BC68CF7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{DF4E0BC8-8398-481A-8D79-20A2FE75DCF4}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{252E879E-0306-407E-8DAC-5DC906461323}C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\users\leo\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{04A7B869-065C-4513-ACCF-19A6BF0ECDBA}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{A90CA517-CE6D-4EA0-842C-E04BF49BAFA7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{86F827AF-EDE0-493A-812B-892A220533EE}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{3AB71E98-A273-429D-9E49-EC51B2748C13}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{E3EDEB81-4BFB-48B0-B22C-41F60E432FE3}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{5069EC2F-0BCA-43EB-8AAF-478E87F31EE8}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{DA260CF0-DE30-4E64-AE4C-ED81F6955947}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{3CCD51BA-F321-4264-8EDB-8A47002AB2F6}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [{4F339903-431F-4C0F-96DA-8D6F209CBAA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hand Simulator\Hand Simulator.exe
FirewallRules: [{57E23D29-6E8D-4104-9032-0F9403C76E5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hand Simulator\Hand Simulator.exe
FirewallRules: [{F47D5B6D-6C98-46CF-BAF7-748F38B7591A}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{4F09F32E-8073-4836-9FF9-2F1D403134CB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{176045C4-69E8-4EE7-9B07-7A4EE390A826}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{873F8639-0DBD-45B7-AC54-81927F4C45FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{2BFC65AD-78A5-4067-86A3-6DC257500E13}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here.exe
FirewallRules: [{CFEC7BF9-38AD-468F-912B-54377491BEC4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here.exe
FirewallRules: [{E1342CC9-730E-4414-9F60-D1F0C18D53FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here VR.exe
FirewallRules: [{60B59461-6014-4D84-97B5-512CE7CBAF33}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\We Were Here\We Were Here VR.exe
FirewallRules: [TCP Query User{340B70DF-AFBE-417A-9AFF-0FEE3680DF21}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [UDP Query User{20B0EA03-2C14-464C-88CE-D2BA8C7A9F0B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe
FirewallRules: [{6EFEF49D-A379-4770-BCC1-F731AD9A5B42}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Seducer\SuperSeducer.exe
FirewallRules: [{1449702C-7AFA-48B5-A251-9E6FA3D15B41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Seducer\SuperSeducer.exe
FirewallRules: [TCP Query User{6290F06A-925C-4EBB-8764-7C1A14097F35}C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe] => (Block) C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe
FirewallRules: [UDP Query User{BEA035F4-3883-4678-934B-14B680686B85}C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe] => (Block) C:\users\leo\desktop\another.brick.in.the.mall.v0.10.2.1\launch.exe
FirewallRules: [TCP Query User{92B72BCA-E90D-4618-8794-D39EB9E52630}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe
FirewallRules: [UDP Query User{F703DB1C-F1F5-49E8-9D30-8133C5324497}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.133\deploy\leagueclient.exe
FirewallRules: [TCP Query User{6F70D5F2-D00F-4928-A13F-6D49CDA10A51}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [UDP Query User{4A45F9F2-9520-43C8-951C-4C3874F2FE67}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [TCP Query User{26614AE2-C714-433A-9E22-BC0C8AF7DA82}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [UDP Query User{8359FEBC-2F8C-4EB9-82B9-6441AE03587D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe
FirewallRules: [TCP Query User{D57D8BF0-96ED-4D89-9B59-01151674C769}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{803E939D-1300-4B1F-83A4-04DF4D362B76}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{90FD39F4-D0E6-4554-A0A9-F8367435BEB0}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{7B1ABC23-B328-4E75-A08A-F2FE988A2C97}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{1C1BB5F0-866D-4B97-A214-657A2F91238B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [UDP Query User{D641658D-96E6-4306-8EED-EF7B44BA4CC9}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [TCP Query User{A2580448-FEB4-48EA-AFEB-FFA681B3E75B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe
FirewallRules: [UDP Query User{0448E8D0-0770-42D1-9031-248964638533}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.139\deploy\leagueclient.exe
FirewallRules: [TCP Query User{A2334A5E-802D-46BE-B40E-558F4721EACD}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [UDP Query User{A1CECFCF-31EF-413D-90A9-E53232659882}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe
FirewallRules: [TCP Query User{8F40D5EB-70E6-4644-84CB-FE7F97371049}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe
FirewallRules: [UDP Query User{AC03D841-9B43-4CF0-BC70-D13059FD9F6B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe
FirewallRules: [TCP Query User{EFC8A67E-6AC1-4CFA-93B5-1441B07185E8}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [UDP Query User{1C1BECC2-C6D7-4DD7-89B0-C3280F7D35A3}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [TCP Query User{F257CB9E-05BD-4B59-B8BC-37D2C96F9E39}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [UDP Query User{5B7AB340-1116-4B5E-BB4A-0E482BF34B23}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.141\deploy\leagueclient.exe
FirewallRules: [TCP Query User{90C4E8C4-0D74-493F-BC34-26C03A648875}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe
FirewallRules: [UDP Query User{11466088-CDE2-49CB-AC3C-C1E6E4EA7878}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.143\deploy\leagueclient.exe
FirewallRules: [TCP Query User{93894878-FC6C-4EEE-8D8E-994E4402493D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe
FirewallRules: [UDP Query User{1DAFA9AF-1181-4EB5-A5F2-125FF6882300}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.144\deploy\leagueclient.exe
FirewallRules: [TCP Query User{2310FCEC-D79B-4AA7-A04A-222F6A4766FB}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [UDP Query User{417E7527-7F20-4F22-BDB1-F30EE52BB896}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [TCP Query User{0029F06A-8B84-4D8F-B1D9-61FC44F623EF}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [UDP Query User{AA23548E-EC8B-4434-B880-32EAEDECD14F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe
FirewallRules: [TCP Query User{12FE443A-95A8-4A0A-BD2E-B36703EE3201}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe
FirewallRules: [UDP Query User{4D710707-C353-4922-A4D9-9452C912CD64}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe
FirewallRules: [TCP Query User{F860D5A0-B71B-4A99-B1D0-7DBD9AA5A346}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe
FirewallRules: [UDP Query User{A4F80771-9416-4BC6-8B03-5ABEF6D32CA1}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe
FirewallRules: [TCP Query User{3038D10A-C422-4AA0-999C-B7DBD186402E}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe
FirewallRules: [UDP Query User{BB856FE1-D7B8-42B4-9809-EC4F3731C42F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe
FirewallRules: [TCP Query User{4418D830-2263-44B8-8E62-4108AC2CA22E}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe
FirewallRules: [UDP Query User{5DE686EF-BEBB-46EC-BD87-E6735228E2FE}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.153\deploy\leagueclient.exe
FirewallRules: [TCP Query User{A58497A5-815C-4CFA-BA38-18DED7A5A5D3}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [UDP Query User{9281CE3F-AB4C-4A3E-8B80-8E40B6FD58F2}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [TCP Query User{FE5F9289-05F6-4C57-9B3A-69EEA8D13ABA}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe
FirewallRules: [UDP Query User{28F3CC13-27AA-4BB4-B62A-6F1FEDFB7AD6}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chem3d\chem3d.exe
FirewallRules: [TCP Query User{E09D39A8-9915-4C15-BFB1-47978A58DF43}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe
FirewallRules: [UDP Query User{43BBDEDF-DA0E-4BC3-A5ED-0AAD9C5B09DE}C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe] => (Allow) C:\program files (x86)\perkinelmerinformatics\chemoffice2016\chemdraw\chemdraw.exe
FirewallRules: [TCP Query User{F5728B1B-7080-45D3-A3FD-99A15CC4AE12}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [UDP Query User{A46BF4AD-18BE-4B3C-84FF-091CBAED2D1F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe
FirewallRules: [TCP Query User{B8645648-EA6D-4063-B923-D56EC7FD3A45}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe
FirewallRules: [UDP Query User{66F04C7E-8F63-48C3-BB47-8B988C656E41}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe
FirewallRules: [{B5CAD5DF-73D7-4497-B9AE-ADBCDE4EFC5D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{B6F3B9A0-3FED-4A35-9728-60348C261F95}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [UDP Query User{02BDF1CD-E8AA-405E-84EA-03B7B43C246B}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [TCP Query User{4CCCE919-1ACE-4C36-8D85-7AF0BB01D52F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [UDP Query User{FBB30B1B-F2B8-4059-9597-A873BD224448}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe
FirewallRules: [TCP Query User{E5D52E58-7186-4D78-91A1-0B28AD89B9A5}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe
FirewallRules: [UDP Query User{5BA896FC-F7F2-4331-8E87-EFD5B298B045}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe
FirewallRules: [TCP Query User{AD88CB98-A5CF-45E7-9113-6BF44DDE78F6}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [UDP Query User{B5668BCB-FAC4-424C-A61A-E5A1BBAE6BA3}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [TCP Query User{897084D9-79BF-4738-A949-ABC303F3E852}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [UDP Query User{6C3C703B-84DB-41AE-A879-5A249E21E867}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe
FirewallRules: [{5C846120-11E6-4B94-9DFE-0600BC5E9E37}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{B08578C9-7D2A-4344-83F9-490D935EFD66}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [UDP Query User{1B7B0F51-BCF3-4763-8C9F-62EE54B3011E}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [{41AB1233-487C-4877-9545-B92ED23A9E77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{6163D84B-A088-4FF4-BD1C-D8E4AD0E4DB5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [TCP Query User{91DCEA90-3E8F-4D9C-9B12-A6EE0A80AC40}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [UDP Query User{0998AE70-6486-4820-A86B-F48AA44CDD87}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe
FirewallRules: [{258ED776-E0FB-4EB2-8FBE-E2B635175FF0}] => (Allow) C:\Users\Leo\Downloads\bin\BlackDesert32.exe
FirewallRules: [{6834DE94-A50A-4597-B09E-B50679CAA4A2}] => (Allow) C:\Users\Leo\Downloads\bin64\BlackDesert64.exe
FirewallRules: [{95B0233E-9804-4AB7-9231-E4B959061D03}] => (Allow) C:\Users\Leo\Downloads\BlackDesert_Launcher.exe
FirewallRules: [{4A07E485-817C-48DD-BEC7-174BF8AA00DE}] => (Allow) C:\Users\Leo\Downloads\BlackDesert_Downloader.exe
FirewallRules: [TCP Query User{FA120CB6-DF76-4412-B5F0-93EEC1A6A3B5}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [UDP Query User{0670D378-78AD-4DF0-87BA-80F387BF644F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [TCP Query User{56550F63-B9F1-4A40-8205-7F372160F6D5}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [UDP Query User{904AFBC8-E58D-41BA-9F3F-E7CBA5BDF818}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe
FirewallRules: [TCP Query User{6835F648-B210-4C7D-91D9-04BD50BC1C00}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe
FirewallRules: [UDP Query User{64C48C5A-3D38-40FF-BE47-5A102A227C01}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.161\deploy\leagueclient.exe
FirewallRules: [TCP Query User{3EF18825-1447-46AE-B489-55449AB01C90}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe
FirewallRules: [UDP Query User{B01618DF-3973-4B90-B8DF-2470715DEE75}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.162\deploy\leagueclient.exe
FirewallRules: [TCP Query User{87291FF0-6517-48F6-B25F-45131EF81D12}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe
FirewallRules: [UDP Query User{FFC82CD5-BA75-476B-895D-33DB88B550C4}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe
FirewallRules: [TCP Query User{DE11093E-D8B1-4BD0-8F29-1E15F5DA31E8}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe
FirewallRules: [UDP Query User{E420733E-2F12-4AAA-982E-1FA13AA7EE7D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Block) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe

==================== Wiederherstellungspunkte =========================

18-09-2018 14:20:51 OTL Restore Point - 18.09.2018 14:20:47
18-09-2018 15:29:59 Revo Uninstaller's restore point - Adobe AIR
18-09-2018 15:32:19 Revo Uninstaller's restore point - Adobe Flash Player 19 ActiveX
18-09-2018 15:35:54 Revo Uninstaller's restore point - Adobe Reader 9
18-09-2018 15:36:54 Removed Adobe Reader 9.
18-09-2018 15:38:19 Revo Uninstaller's restore point - Avira
18-09-2018 15:40:33 Revo Uninstaller's restore point - Avira System Speedup
18-09-2018 15:44:03 Revo Uninstaller's restore point - Avira Software Updater
18-09-2018 15:45:14 Removed Avira Software Updater
18-09-2018 15:48:02 Revo Uninstaller's restore point - Avira Safe Shopping
18-09-2018 15:50:27 Revo Uninstaller's restore point - Avira Privacy Pal
18-09-2018 15:52:07 Revo Uninstaller's restore point - Avira Phantom VPN
18-09-2018 15:53:43 Revo Uninstaller's restore point - Avira Antivirus
18-09-2018 15:56:52 Revo Uninstaller's restore point - Avira
18-09-2018 15:59:40 Revo Uninstaller's restore point - FileZilla Client 3.25.1
18-09-2018 16:01:07 Revo Uninstaller's restore point - Java 8 Update 131
18-09-2018 16:03:27 Removed Java 8 Update 131
18-09-2018 16:05:02 Revo Uninstaller's restore point - OpenOffice 4.1.2
18-09-2018 16:08:41 Revo Uninstaller's restore point - VLC media player
18-09-2018 16:10:19 Revo Uninstaller's restore point - Web Companion
18-09-2018 16:14:02 Revo Uninstaller's restore point - WinRAR 5.21 (64-Bit)
18-09-2018 16:15:26 Revo Uninstaller's restore point - WinZip 22.0
18-09-2018 16:17:34 Removed WinZip 22.0.

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Atheros AR922X-Drahtlosnetzwerkadapter
Description: Atheros AR922X-Drahtlosnetzwerkadapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/18/2018 04:31:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d186
ID des fehlerhaften Prozesses: 0x1204
Startzeit der fehlerhaften Anwendung: 0x01d44f5c37aecf0a
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\sysmain.dll
Berichtskennung: 778d6cfd-bb4f-11e8-84e7-00025b00a5a5

Error: (09/18/2018 04:29:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d186
ID des fehlerhaften Prozesses: 0x169c
Startzeit der fehlerhaften Anwendung: 0x01d44f5c1379059e
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\sysmain.dll
Berichtskennung: 5172fdf9-bb4f-11e8-84e7-00025b00a5a5

Error: (09/18/2018 04:29:57 PM) (Source: .NET Runtime Optimization Service) (EventID: 1111) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x8000ffff.

Error: (09/18/2018 04:28:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001d186
ID des fehlerhaften Prozesses: 0xe20
Startzeit der fehlerhaften Anwendung: 0x01d44f5b6ed5fd0c
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: c:\windows\system32\sysmain.dll
Berichtskennung: 1282028b-bb4f-11e8-84e7-00025b00a5a5

Error: (09/18/2018 04:17:34 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (09/18/2018 04:17:29 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (09/18/2018 04:15:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (09/18/2018 04:15:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {8fd2465c-b1a0-4d0a-b75c-761b90887ba9}


Systemfehler:
=============
Error: (09/18/2018 08:43:11 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 08:43:11 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (09/18/2018 06:35:10 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 06:35:10 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (09/18/2018 05:31:10 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 05:31:09 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (09/18/2018 04:59:09 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (09/18/2018 04:59:08 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.


Windows Defender:
===================================
Date: 2016-07-25 02:37:25.829
Description: 
Die Windows Defender-Überprüfung wurde vor Fertigstellung beendet.
Überprüfungs-ID:{4D1CC1CE-2952-4E3A-8F7E-CC9F9816551A}
Überprüfungstyp:AntiSpyware
Überprüfungsparameter:Schnellscan
Benutzer:NT-AUTORITÄT\NETZWERKDIENST

Date: 2016-09-02 19:10:36.961
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

Date: 2016-08-13 16:51:38.072
Description: 
Beim Laden der Signaturen wurde von Windows Defender ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen.
Versuchte Signaturen:Aktuell
Fehlercode:0x8050a004
Fehlerbeschreibung:Dieses Paket enthält keine aktuellen Definitionsdateien für das Programm. Weitere Informationen finden Sie in "Hilfe und Support". 
Signaturversion:1.225.3193.0
Modulversion:1.1.12902.0

Date: 2016-07-30 14:14:52.490
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

Date: 2016-07-08 14:20:11.877
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

Date: 2016-07-06 22:58:49.363
Description: 
Das %1-Modul wurde aufgrund eines unerwarteten Fehlers beendet.
Fehlertyp:%5
Ausnahmecode:%6
Ressource:%3

CodeIntegrity:
===================================

Date: 2018-08-21 19:18:59.850
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:56.922
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:38.593
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:38.580
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:32.565
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:18:32.555
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 19:09:04.036
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2018-08-21 18:59:03.968
Description: 
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

==================== Speicherinformationen =========================== 

Prozessor: AMD Athlon(tm) II X4 645 Processor
Prozentuale Nutzung des RAM: 58%
Installierter physikalischer RAM: 8191.24 MB
Verfügbarer physikalischer RAM: 3391.21 MB
Summe virtueller Speicher: 16380.68 MB
Verfügbarer virtueller Speicher: 10694.8 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:635.52 GB) (Free:354.68 GB) NTFS
Drive d: () (Fixed) (Total:295.9 GB) (Free:261.14 GB) NTFS

\\?\Volume{f158a4fb-016f-11e5-8503-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FAA3FAA3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=635.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=295.9 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus · 18.09.2018, 21:04

Schädlinge suchen mit Kaspersky TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

LeoWy · 18.09.2018, 21:09

Code:

ATTFilter

22:05:57.0810 0x3f64  TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
22:06:03.0089 0x3f64  ============================================================
22:06:03.0089 0x3f64  Current date / time: 2018/09/18 22:06:03.0089
22:06:03.0089 0x3f64  SystemInfo:
22:06:03.0089 0x3f64  
22:06:03.0089 0x3f64  OS Version: 6.1.7601 ServicePack: 1.0
22:06:03.0089 0x3f64  Product type: Workstation
22:06:03.0089 0x3f64  ComputerName: LEO-PC
22:06:03.0089 0x3f64  UserName: Leo
22:06:03.0089 0x3f64  Windows directory: C:\Windows
22:06:03.0089 0x3f64  System windows directory: C:\Windows
22:06:03.0089 0x3f64  Running under WOW64
22:06:03.0089 0x3f64  Processor architecture: Intel x64
22:06:03.0089 0x3f64  Number of processors: 4
22:06:03.0089 0x3f64  Page size: 0x1000
22:06:03.0089 0x3f64  Boot type: Normal boot
22:06:03.0089 0x3f64  CodeIntegrityOptions = 0x00000001
22:06:03.0089 0x3f64  ============================================================
22:06:05.0523 0x3f64  KLMD registered as C:\Windows\system32\drivers\07940827.sys
22:06:05.0523 0x3f64  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.18798, osProperties = 0x1
22:06:05.0766 0x3f64  System UUID: {28E7A725-1E4A-54EE-D78B-2D5E31955315}
22:06:06.0416 0x3f64  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:06:06.0427 0x3f64  ============================================================
22:06:06.0430 0x3f64  \Device\Harddisk0\DR0:
22:06:06.0434 0x3f64  MBR partitions:
22:06:06.0434 0x3f64  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
22:06:06.0434 0x3f64  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x4F708000
22:06:06.0434 0x3f64  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x4F73A800, BlocksNum 0x24FCB800
22:06:06.0434 0x3f64  ============================================================
22:06:06.0481 0x3f64  C: <-> \Device\Harddisk0\DR0\Partition2
22:06:06.0549 0x3f64  D: <-> \Device\Harddisk0\DR0\Partition3
22:06:06.0549 0x3f64  ============================================================
22:06:06.0549 0x3f64  Initialize success
22:06:06.0549 0x3f64  ============================================================
22:06:51.0164 0x3250  ============================================================
22:06:51.0164 0x3250  Scan started
22:06:51.0164 0x3250  Mode: Manual; SigCheck; TDLFS; 
22:06:51.0164 0x3250  ============================================================
22:06:51.0164 0x3250  KSN ping started
22:06:54.0322 0x3250  KSN ping finished: true
22:06:55.0849 0x3250  ================ Scan system memory ========================
22:06:55.0849 0x3250  System memory - ok
22:06:55.0850 0x3250  ================ Scan services =============================
22:06:55.0990 0x3250  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
22:06:56.0060 0x3250  1394ohci - ok
22:06:56.0157 0x3250  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
22:06:56.0191 0x3250  ACPI - ok
22:06:56.0212 0x3250  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
22:06:56.0239 0x3250  AcpiPmi - ok
22:06:56.0318 0x3250  [ 429052DAECD6BF6CCD462B22858B3D2A, 40F3EDE23332CCBEE8A637D099B71C0F41D328B864C8D3A7EA672E58B8069E06 ] acsock          C:\Windows\system32\DRIVERS\acsock64.sys
22:06:56.0375 0x3250  acsock - ok
22:06:56.0420 0x3250  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
22:06:56.0443 0x3250  adp94xx - ok
22:06:56.0463 0x3250  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
22:06:56.0482 0x3250  adpahci - ok
22:06:56.0497 0x3250  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
22:06:56.0513 0x3250  adpu320 - ok
22:06:56.0542 0x3250  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
22:06:56.0558 0x3250  AeLookupSvc - ok
22:06:56.0606 0x3250  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
22:06:56.0632 0x3250  AFD - ok
22:06:56.0648 0x3250  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
22:06:56.0661 0x3250  agp440 - ok
22:06:56.0680 0x3250  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
22:06:56.0697 0x3250  ALG - ok
22:06:56.0733 0x3250  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
22:06:56.0769 0x3250  aliide - ok
22:06:56.0774 0x3250  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
22:06:56.0793 0x3250  amdide - ok
22:06:56.0809 0x3250  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
22:06:56.0825 0x3250  AmdK8 - ok
22:06:56.0842 0x3250  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
22:06:56.0858 0x3250  AmdPPM - ok
22:06:56.0882 0x3250  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
22:06:56.0896 0x3250  amdsata - ok
22:06:56.0914 0x3250  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
22:06:56.0930 0x3250  amdsbs - ok
22:06:56.0941 0x3250  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
22:06:56.0954 0x3250  amdxata - ok
22:06:56.0970 0x3250  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys
22:06:57.0001 0x3250  AppID - ok
22:06:57.0015 0x3250  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
22:06:57.0046 0x3250  AppIDSvc - ok
22:06:57.0061 0x3250  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
22:06:57.0078 0x3250  Appinfo - ok
22:06:57.0164 0x3250  [ 7EB4548BA1B9ECD1D77A7512E4C3777F, CCCF4B4BC5526A3256C6E3D7FE4592B623FD2C05DD90CEBC0300A1245A9C68B0 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
22:06:57.0197 0x3250  Apple Mobile Device Service - ok
22:06:57.0226 0x3250  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll
22:06:57.0245 0x3250  AppMgmt - ok
22:06:57.0257 0x3250  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
22:06:57.0271 0x3250  arc - ok
22:06:57.0276 0x3250  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
22:06:57.0291 0x3250  arcsas - ok
22:06:57.0379 0x3250  [ 7F89AB51F8E9F734B27904F3285DE719, 29FDEA00AE0F82CAABE43D0FA8CB7E58C76902DB97D1611F325F25C3629D8F96 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
22:06:57.0469 0x3250  aspnet_state - ok
22:06:57.0485 0x3250  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
22:06:57.0517 0x3250  AsyncMac - ok
22:06:57.0525 0x3250  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
22:06:57.0537 0x3250  atapi - ok
22:06:57.0601 0x3250  [ E857EEE6B92AAA473EBB3465ADD8F7E7, 1C7E4737E649A025B3C4974A4F7D1353EAB85561FC8ED54E5C22A777E1A189B3 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
22:06:57.0660 0x3250  athr - ok
22:06:57.0691 0x3250  [ 7C5D273E29DCC5505469B299C6F29163, 206CAB85CE12A3953F0861C811575DC7FD000147436219EEE334584A33370B3A ] AtiPcie         C:\Windows\system32\DRIVERS\AtiPcie.sys
22:06:57.0703 0x3250  AtiPcie - ok
22:06:57.0743 0x3250  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
22:06:57.0774 0x3250  AudioEndpointBuilder - ok
22:06:57.0802 0x3250  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv        C:\Windows\System32\Audiosrv.dll
22:06:57.0838 0x3250  AudioSrv - ok
22:06:57.0861 0x3250  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
22:06:57.0881 0x3250  AxInstSV - ok
22:06:57.0902 0x3250  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
22:06:57.0927 0x3250  b06bdrv - ok
22:06:57.0937 0x3250  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
22:06:57.0957 0x3250  b57nd60a - ok
22:06:57.0974 0x3250  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
22:06:57.0991 0x3250  BDESVC - ok
22:06:58.0004 0x3250  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
22:06:58.0035 0x3250  Beep - ok
22:06:58.0276 0x3250  [ 616F766180269AEFCB3A91044B087A8C, 90120F7235026BCADE703DADF3E4E5A5663C850FE0B2036E0557A371F991D3A7 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
22:06:58.0452 0x3250  BEService - ok
22:06:58.0562 0x3250  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
22:06:58.0599 0x3250  BFE - ok
22:06:58.0635 0x3250  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
22:06:58.0685 0x3250  BITS - ok
22:06:58.0702 0x3250  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
22:06:58.0717 0x3250  blbdrive - ok
22:06:58.0752 0x3250  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
22:06:58.0772 0x3250  Bonjour Service - ok
22:06:58.0794 0x3250  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
22:06:58.0810 0x3250  bowser - ok
22:06:58.0814 0x3250  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:06:58.0830 0x3250  BrFiltLo - ok
22:06:58.0840 0x3250  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:06:58.0857 0x3250  BrFiltUp - ok
22:06:58.0876 0x3250  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
22:06:58.0893 0x3250  Browser - ok
22:06:58.0923 0x3250  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
22:06:58.0943 0x3250  Brserid - ok
22:06:58.0948 0x3250  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
22:06:58.0965 0x3250  BrSerWdm - ok
22:06:58.0969 0x3250  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
22:06:58.0985 0x3250  BrUsbMdm - ok
22:06:58.0989 0x3250  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
22:06:59.0004 0x3250  BrUsbSer - ok
22:06:59.0028 0x3250  [ 07DCB3C254D584E3949FE2C0EE3963F2, DDA9E174D23E41676094C135ED6C5B6D2C44C693172A43E5BF90A1C3F4359A64 ] BthAudioHF      C:\Windows\system32\DRIVERS\BthAudioHF.sys
22:06:59.0043 0x3250  BthAudioHF - ok
22:06:59.0056 0x3250  [ 832B121E4532919CC49F2438F1DCAA21, 70FFDD505A64D3CF03220D6422EDD47CA2E0DF711BBF2ED057F32A688CB2E2E8 ] BthAvrcp        C:\Windows\system32\DRIVERS\BthAvrcp.sys
22:06:59.0069 0x3250  BthAvrcp - ok
22:06:59.0146 0x3250  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys
22:06:59.0169 0x3250  BthEnum - ok
22:06:59.0176 0x3250  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
22:06:59.0199 0x3250  BTHMODEM - ok
22:06:59.0224 0x3250  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
22:06:59.0243 0x3250  BthPan - ok
22:06:59.0267 0x3250  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys
22:06:59.0294 0x3250  BTHPORT - ok
22:06:59.0306 0x3250  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
22:06:59.0339 0x3250  bthserv - ok
22:06:59.0360 0x3250  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
22:06:59.0375 0x3250  BTHUSB - ok
22:06:59.0381 0x3250  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
22:06:59.0414 0x3250  cdfs - ok
22:06:59.0441 0x3250  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
22:06:59.0459 0x3250  cdrom - ok
22:06:59.0473 0x3250  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
22:06:59.0504 0x3250  CertPropSvc - ok
22:06:59.0509 0x3250  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
22:06:59.0526 0x3250  circlass - ok
22:06:59.0558 0x3250  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
22:06:59.0578 0x3250  CLFS - ok
22:06:59.0870 0x3250  [ EEECA45184EB244B3C15688A2CF24991, D0F84F24D3FA83B2BA09C100312150E3882DCC96D633E4D392372B817675C26F ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
22:07:00.0057 0x3250  ClickToRunSvc - ok
22:07:00.0120 0x3250  [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:07:00.0134 0x3250  clr_optimization_v2.0.50727_32 - ok
22:07:00.0144 0x3250  [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:07:00.0158 0x3250  clr_optimization_v2.0.50727_64 - ok
22:07:00.0208 0x3250  [ A62340CFB72ABD711558D32748F3887A, 8E5F833292747A7BDC484DAAB654AD933503D9442A907EBE2A4BA021EFEBBAC1 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:07:00.0373 0x3250  clr_optimization_v4.0.30319_32 - ok
22:07:00.0394 0x3250  [ E138C3087248C804251BAE6A1138F3BD, E773D8AB9F504F69A103EDC9EB4367DB9F8723F2E5C4D690DE2DCB5E9F51B282 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:07:00.0438 0x3250  clr_optimization_v4.0.30319_64 - ok
22:07:00.0461 0x3250  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
22:07:00.0483 0x3250  CmBatt - ok
22:07:00.0505 0x3250  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
22:07:00.0517 0x3250  cmdide - ok
22:07:00.0558 0x3250  [ 1CDDC5080B1ADD0FAD798B5293340540, C249A2B4D529C6B5A354A49BF1D08AB2D915E5006876CD0E833F41C4A3F4ACDD ] CMUAC           C:\Windows\system32\DRIVERS\CMUAC.SYS
22:07:00.0580 0x3250  CMUAC - ok
22:07:00.0614 0x3250  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
22:07:00.0641 0x3250  CNG - ok
22:07:00.0651 0x3250  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
22:07:00.0663 0x3250  Compbatt - ok
22:07:00.0684 0x3250  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
22:07:00.0700 0x3250  CompositeBus - ok
22:07:00.0704 0x3250  COMSysApp - ok
22:07:00.0710 0x3250  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
22:07:00.0722 0x3250  crcdisk - ok
22:07:00.0761 0x3250  [ C8BD651E13895B93ED9EC5B4F1DF42BC, D86D6BF0BA3C09B49B3A52C86A7F3B3856A27F79EDD86A8FFA469D9A5F196E8D ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
22:07:00.0767 0x3250  Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
22:07:03.0857 0x3250  Detect skipped due to KSN trusted
22:07:03.0857 0x3250  Creative ALchemy AL6 Licensing Service - ok
22:07:03.0879 0x3250  [ C0EAD9F8AB83D41FF07303C75589C2B8, C89CAC39BCD2FA2DCC56D7EE84FF66127BCECCAE400E119FE41BF4C4D769504B ] Creative Audio Engine Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
22:07:03.0899 0x3250  Creative Audio Engine Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
22:07:06.0953 0x3250  Detect skipped due to KSN trusted
22:07:06.0953 0x3250  Creative Audio Engine Licensing Service - ok
22:07:06.0999 0x3250  [ D8129C49798CBBFB2E4351D4B7B8EF9C, 7C125DBA3F88E7C6D98AE0869EDB7995360904A913923528ABD0429B2608C313 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
22:07:07.0041 0x3250  CryptSvc - ok
22:07:07.0079 0x3250  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys
22:07:07.0105 0x3250  CSC - ok
22:07:07.0134 0x3250  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
22:07:07.0164 0x3250  CscService - ok
22:07:07.0186 0x3250  [ DF07C6D98BA7F81D0571E366B1CD6672, 1E544237ACB354F67EAA4D805EB5D82F25CBD6F0D6D886DAFA04FC3F168A2FD3 ] csr_a2dp        C:\Windows\system32\drivers\bthav.sys
22:07:07.0200 0x3250  csr_a2dp - ok
22:07:07.0237 0x3250  [ 07BA6D17E66879018B30B6C3F976EBED, 1759CE25519358A47E1B1FA02A415DB5D3F6B511AD3820D0AE8A1533B5DC83CD ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
22:07:07.0270 0x3250  CTAudSvcService - detected UnsignedFile.Multi.Generic ( 1 )
22:07:10.0733 0x3250  Detect skipped due to KSN trusted
22:07:10.0733 0x3250  CTAudSvcService - ok
22:07:10.0798 0x3250  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
22:07:10.0867 0x3250  DcomLaunch - ok
22:07:10.0890 0x3250  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
22:07:10.0928 0x3250  defragsvc - ok
22:07:10.0947 0x3250  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
22:07:10.0979 0x3250  DfsC - ok
22:07:10.0989 0x3250  DgiVecp - ok
22:07:11.0011 0x3250  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
22:07:11.0032 0x3250  Dhcp - ok
22:07:11.0157 0x3250  [ E0707D9C2431733712CE1A5FD17A4D26, D3E52484B2BF34C5AF61CEEA5ACF4AD5797F681E81B0788D19E3ACA795520B36 ] DigitalWave.Update.Service C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
22:07:11.0198 0x3250  DigitalWave.Update.Service - detected UnsignedFile.Multi.Generic ( 1 )
22:07:14.0213 0x3250  Detect skipped due to KSN trusted
22:07:14.0214 0x3250  DigitalWave.Update.Service - ok
22:07:14.0236 0x3250  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
22:07:14.0291 0x3250  discache - ok
22:07:14.0313 0x3250  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
22:07:14.0326 0x3250  Disk - ok
22:07:14.0355 0x3250  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
22:07:14.0373 0x3250  Dnscache - ok
22:07:14.0405 0x3250  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
22:07:14.0441 0x3250  dot3svc - ok
22:07:14.0458 0x3250  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
22:07:14.0492 0x3250  DPS - ok
22:07:14.0515 0x3250  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
22:07:14.0529 0x3250  drmkaud - ok
22:07:14.0574 0x3250  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
22:07:14.0606 0x3250  DXGKrnl - ok
22:07:14.0637 0x3250  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
22:07:14.0671 0x3250  EapHost - ok
22:07:14.0745 0x3250  [ 5B08D98CCDECE597D686C9A85A334FFC, A428C0613072FCA56A4DFA32709355E265FAA148D1AE15B5A063094703EF1A8C ] EasyAntiCheat   C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
22:07:14.0797 0x3250  EasyAntiCheat - ok
22:07:14.0892 0x3250  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
22:07:14.0982 0x3250  ebdrv - ok
22:07:15.0057 0x3250  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] EFS             C:\Windows\System32\lsass.exe
22:07:15.0101 0x3250  EFS - ok
22:07:15.0187 0x3250  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
22:07:15.0222 0x3250  ehRecvr - ok
22:07:15.0242 0x3250  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
22:07:15.0259 0x3250  ehSched - ok
22:07:15.0284 0x3250  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
22:07:15.0307 0x3250  elxstor - ok
22:07:15.0331 0x3250  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
22:07:15.0345 0x3250  ErrDev - ok
22:07:15.0386 0x3250  [ 1E01F509048BEF78831AC89401B172BD, 34558F56D9AEA8527B84B2BE2A752D181A5D825622EB4B90D454F6D4F971BFED ] ESProtectionDriver C:\Windows\system32\drivers\mbae64.sys
22:07:15.0403 0x3250  ESProtectionDriver - ok
22:07:15.0472 0x3250  [ 932C05033053ADA2404FD836C9AB2C70, 39E3C40DDDCA475F55CD6A044E8CF35A1C25A776B79204CBF76D0DD5D89568D8 ] EuMusDesignVirtualAudioCableWdm C:\Windows\system32\DRIVERS\vrtaucbl.sys
22:07:15.0515 0x3250  EuMusDesignVirtualAudioCableWdm - ok
22:07:15.0551 0x3250  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
22:07:15.0599 0x3250  EventSystem - ok
22:07:15.0607 0x3250  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
22:07:15.0643 0x3250  exfat - ok
22:07:15.0650 0x3250  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
22:07:15.0686 0x3250  fastfat - ok
22:07:15.0716 0x3250  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
22:07:15.0746 0x3250  Fax - ok
22:07:15.0752 0x3250  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
22:07:15.0767 0x3250  fdc - ok
22:07:15.0771 0x3250  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
22:07:15.0803 0x3250  fdPHost - ok
22:07:15.0817 0x3250  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
22:07:15.0849 0x3250  FDResPub - ok
22:07:15.0863 0x3250  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
22:07:15.0876 0x3250  FileInfo - ok
22:07:15.0884 0x3250  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
22:07:15.0915 0x3250  Filetrace - ok
22:07:15.0920 0x3250  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
22:07:15.0934 0x3250  flpydisk - ok
22:07:15.0954 0x3250  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
22:07:15.0972 0x3250  FltMgr - ok
22:07:16.0019 0x3250  [ B4447F606BB19FD8AD0BAFB59B90F5D9, 043E686029DE2710305852E3A416176E400F9FD5FB98E4F2A6F14C060FAABED5 ] FontCache       C:\Windows\system32\FntCache.dll
22:07:16.0076 0x3250  FontCache - ok
22:07:16.0111 0x3250  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:07:16.0146 0x3250  FontCache3.0.0.0 - ok
22:07:16.0159 0x3250  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
22:07:16.0177 0x3250  FsDepends - ok
22:07:16.0202 0x3250  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
22:07:16.0215 0x3250  Fs_Rec - ok
22:07:16.0243 0x3250  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
22:07:16.0262 0x3250  fvevol - ok
22:07:16.0267 0x3250  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
22:07:16.0281 0x3250  gagp30kx - ok
22:07:16.0412 0x3250  [ CBD39E74C61C3A3EF695DB25792F32E6, 95454F245DB818227BFE92EBA927A68FA78FB87E7BF5C28761046FF36C56CF32 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
22:07:16.0461 0x3250  GfExperienceService - ok
22:07:16.0497 0x3250  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
22:07:16.0545 0x3250  gpsvc - ok
22:07:16.0587 0x3250  [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:07:16.0602 0x3250  gupdate - ok
22:07:16.0618 0x3250  [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
22:07:16.0633 0x3250  gupdatem - ok
22:07:16.0652 0x3250  [ 38F981F035E4B4C8881BAAF98A7A99D9, 0551B8EF0F70F1581C2F735EEAB3B6D1D4331AFB38A325E14E4B380585170CC1 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys
22:07:16.0670 0x3250  hamachi - ok
22:07:16.0682 0x3250  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
22:07:16.0697 0x3250  hcw85cir - ok
22:07:16.0740 0x3250  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
22:07:16.0764 0x3250  HdAudAddService - ok
22:07:16.0778 0x3250  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
22:07:16.0797 0x3250  HDAudBus - ok
22:07:16.0863 0x3250  [ EE8C05F926521A0E24EDAF40F45D01E6, 70398043773455654F3A6AE982DF05779D67A55FB634D70702BFEA1EA303A422 ] HFGService      C:\Windows\System32\HFGService.dll
22:07:16.0895 0x3250  HFGService - ok
22:07:16.0900 0x3250  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
22:07:16.0914 0x3250  HidBatt - ok
22:07:16.0920 0x3250  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
22:07:16.0938 0x3250  HidBth - ok
22:07:16.0956 0x3250  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
22:07:16.0972 0x3250  HidIr - ok
22:07:16.0984 0x3250  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
22:07:17.0016 0x3250  hidserv - ok
22:07:17.0048 0x3250  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
22:07:17.0062 0x3250  HidUsb - ok
22:07:17.0084 0x3250  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
22:07:17.0116 0x3250  hkmsvc - ok
22:07:17.0191 0x3250  [ E1C43C08A9650F2DB2E1048AC68BE7AE, B8DF9B2464B5A374C5CE7F05AEF506AB1568A707EB4A5850F41FA9D338B4C2A1 ] hmevpnsvc       C:\Program Files (x86)\hide.me VPN\hidemesvc.exe
22:07:17.0231 0x3250  hmevpnsvc - ok
22:07:17.0265 0x3250  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
22:07:17.0291 0x3250  HomeGroupListener - ok
22:07:17.0310 0x3250  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
22:07:17.0329 0x3250  HomeGroupProvider - ok
22:07:17.0345 0x3250  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
22:07:17.0358 0x3250  HpSAMD - ok
22:07:17.0390 0x3250  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
22:07:17.0422 0x3250  HTTP - ok
22:07:17.0443 0x3250  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
22:07:17.0455 0x3250  hwpolicy - ok
22:07:17.0467 0x3250  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
22:07:17.0484 0x3250  i8042prt - ok
22:07:17.0520 0x3250  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
22:07:17.0540 0x3250  iaStorV - ok
22:07:17.0590 0x3250  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:07:17.0620 0x3250  idsvc - ok
22:07:17.0635 0x3250  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
22:07:17.0647 0x3250  iirsp - ok
22:07:17.0681 0x3250  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
22:07:17.0715 0x3250  IKEEXT - ok
22:07:17.0833 0x3250  [ E9BEFD8C6A1DB3B544B61647DDA35F62, 815CD7DD6FBC7766AE85F87A416C178D1EA31A137130813AC2A9EB81F44BDD44 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
22:07:17.0894 0x3250  IntcAzAudAddService - ok
22:07:17.0906 0x3250  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
22:07:17.0918 0x3250  intelide - ok
22:07:17.0923 0x3250  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
22:07:17.0939 0x3250  intelppm - ok
22:07:17.0951 0x3250  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
22:07:17.0984 0x3250  IPBusEnum - ok
22:07:17.0999 0x3250  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:07:18.0030 0x3250  IpFilterDriver - ok
22:07:18.0091 0x3250  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
22:07:18.0126 0x3250  iphlpsvc - ok
22:07:18.0141 0x3250  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
22:07:18.0157 0x3250  IPMIDRV - ok
22:07:18.0163 0x3250  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
22:07:18.0197 0x3250  IPNAT - ok
22:07:18.0276 0x3250  [ 8A640C05C43A9EB5DCAD2259578A39AF, 10FB01E5DEBAA1502C818EF3758EB3FB5836FB4AE25DDBE959619BCBE20E52C4 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
22:07:18.0307 0x3250  iPod Service - ok
22:07:18.0322 0x3250  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
22:07:18.0339 0x3250  IRENUM - ok
22:07:18.0351 0x3250  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
22:07:18.0364 0x3250  isapnp - ok
22:07:18.0386 0x3250  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
22:07:18.0403 0x3250  iScsiPrt - ok
22:07:18.0408 0x3250  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
22:07:18.0421 0x3250  kbdclass - ok
22:07:18.0462 0x3250  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
22:07:18.0477 0x3250  kbdhid - ok
22:07:18.0482 0x3250  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] KeyIso          C:\Windows\system32\lsass.exe
22:07:18.0497 0x3250  KeyIso - ok
22:07:18.0528 0x3250  [ 063C09DB965E3DFD6F4F08416F6DB8F5, 0BE015C59288397536B3941BA55EFE0CF06714BC43FF3A33A1D844B4E0F16097 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
22:07:18.0541 0x3250  KSecDD - ok
22:07:18.0569 0x3250  [ 1FA627E63195BF3BF636BFEF0D7190D4, 794456605303F4916E81BE899E0B05CB070094E719ADA8BE8072A761E35CA8E9 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
22:07:18.0584 0x3250  KSecPkg - ok
22:07:18.0600 0x3250  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
22:07:18.0631 0x3250  ksthunk - ok
22:07:18.0660 0x3250  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
22:07:18.0700 0x3250  KtmRm - ok
22:07:18.0737 0x3250  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
22:07:18.0773 0x3250  LanmanServer - ok
22:07:18.0817 0x3250  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
22:07:18.0851 0x3250  LanmanWorkstation - ok
22:07:18.0899 0x3250  [ 466D09ACE5DC75439A00AD19618B2306, E7E2A19547B5E9A8CC890A36EA2998286A79CC1449F2EDDE52A57AE531A8B341 ] Lenovo EasyPlus Hotspot C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
22:07:18.0924 0x3250  Lenovo EasyPlus Hotspot - ok
22:07:18.0942 0x3250  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
22:07:18.0974 0x3250  lltdio - ok
22:07:19.0001 0x3250  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
22:07:19.0039 0x3250  lltdsvc - ok
22:07:19.0053 0x3250  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
22:07:19.0085 0x3250  lmhosts - ok
22:07:19.0095 0x3250  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
22:07:19.0109 0x3250  LSI_FC - ok
22:07:19.0124 0x3250  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
22:07:19.0138 0x3250  LSI_SAS - ok
22:07:19.0151 0x3250  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:07:19.0164 0x3250  LSI_SAS2 - ok
22:07:19.0179 0x3250  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:07:19.0193 0x3250  LSI_SCSI - ok
22:07:19.0209 0x3250  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
22:07:19.0242 0x3250  luafv - ok
22:07:19.0406 0x3250  [ FF3A488924B0032B1A9CA6948C1FA9E8, 6F05852B75498210926F5CDF49D2A6DD97C39CD93D32E3200D7240AADA3E7BEE ] LVUVC64         C:\Windows\system32\DRIVERS\lvuvc64.sys
22:07:19.0516 0x3250  LVUVC64 - ok
22:07:19.0561 0x3250  [ 0B4A62420642B842DF8656DBFF663B0C, ACB7961ECA32A50FCBD51B194488DDF40E610C2384EDFD06235AE427BCB80C96 ] MBAMChameleon   C:\Windows\System32\Drivers\MbamChameleon.sys
22:07:19.0578 0x3250  MBAMChameleon - ok
22:07:19.0615 0x3250  [ 30531264292DBC7507AA1FF4123F1F39, AD27317BFAB1D5C1B332000DF51336424B4B80AF725392EB4A0FE53DC0695C41 ] MBAMFarflt      C:\Windows\system32\DRIVERS\farflt.sys
22:07:19.0631 0x3250  MBAMFarflt - ok
22:07:19.0672 0x3250  [ 0987B4BB03FA1F3C0C7D37347B707D4E, EDEA667695A680B955F42024AD349A9B795A2365C59312EDCC3FE5BF362F59E6 ] MBAMProtection  C:\Windows\system32\DRIVERS\mbam.sys
22:07:19.0686 0x3250  MBAMProtection - ok
22:07:19.0963 0x3250  [ F7265B7490428499F2FE409FA9247866, 43A406C74689B72020E4669B45F19D377A5FF3EFE79B03AF58C2679D14405E9D ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
22:07:20.0107 0x3250  MBAMService - ok
22:07:20.0165 0x3250  [ 351BF8F77B0A15A7B5A2AE098C52A387, A84330DF5C4F0E5D6251D311B5DC78722D7724E87DAF5DE5A11EB73BB3502E26 ] MBAMSwissArmy   C:\Windows\System32\Drivers\mbamswissarmy.sys
22:07:20.0184 0x3250  MBAMSwissArmy - ok
22:07:20.0257 0x3250  [ BB59E29ADA772551DAE87B980DC1425C, BBC24338AF20AC0DC0AAC87F96E1BE8E8CDB1DD8E2F43108C3DD4D915FB8E6CB ] MBAMWebProtection C:\Windows\system32\DRIVERS\mwac.sys
22:07:20.0293 0x3250  MBAMWebProtection - ok
22:07:20.0317 0x3250  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
22:07:20.0344 0x3250  Mcx2Svc - ok
22:07:20.0348 0x3250  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
22:07:20.0361 0x3250  megasas - ok
22:07:20.0381 0x3250  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
22:07:20.0399 0x3250  MegaSR - ok
22:07:20.0410 0x3250  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
22:07:20.0444 0x3250  MMCSS - ok
22:07:20.0461 0x3250  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
22:07:20.0493 0x3250  Modem - ok
22:07:20.0509 0x3250  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
22:07:20.0526 0x3250  monitor - ok
22:07:20.0531 0x3250  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
22:07:20.0544 0x3250  mouclass - ok
22:07:20.0551 0x3250  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
22:07:20.0566 0x3250  mouhid - ok
22:07:20.0588 0x3250  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
22:07:20.0602 0x3250  mountmgr - ok
22:07:20.0650 0x3250  [ D6F67A73E6557578B755F7B534E00F47, 769F3D6CB86B2DC4065BDE4CE39139879B7D96F455A3BE80C7ECEAD5494E8B79 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:07:20.0686 0x3250  MozillaMaintenance - ok
22:07:20.0704 0x3250  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
22:07:20.0719 0x3250  mpio - ok
22:07:20.0727 0x3250  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
22:07:20.0759 0x3250  mpsdrv - ok
22:07:20.0795 0x3250  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
22:07:20.0845 0x3250  MpsSvc - ok
22:07:20.0867 0x3250  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
22:07:20.0884 0x3250  MRxDAV - ok
22:07:20.0902 0x3250  [ C2B4651001A867FF3F8865863B592991, 251CAAF0F8CE94318532CB0CEF32A065BE321469D8B577F699E2B11EEFDD941A ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
22:07:20.0920 0x3250  mrxsmb - ok
22:07:20.0947 0x3250  [ 7E79946AFC5F799AB62982282BE5AC13, A2A95F4C7BC970FA61FCF58F1118FA3D6806A85BC8735936196CD15538FB3080 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:07:20.0968 0x3250  mrxsmb10 - ok
22:07:20.0984 0x3250  [ 5FB954100CEA2BFEC6446FBBECAA3F79, 305F04F22E6632731E5A8C0E4BEE731DB5D0A3D1A0639C04C6575D36BFC90B5B ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:07:21.0001 0x3250  mrxsmb20 - ok
22:07:21.0016 0x3250  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
22:07:21.0028 0x3250  msahci - ok
22:07:21.0052 0x3250  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
22:07:21.0067 0x3250  msdsm - ok
22:07:21.0088 0x3250  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
22:07:21.0107 0x3250  MSDTC - ok
22:07:21.0123 0x3250  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
22:07:21.0156 0x3250  Msfs - ok
22:07:21.0163 0x3250  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
22:07:21.0194 0x3250  mshidkmdf - ok
22:07:21.0207 0x3250  MSICDSetup - ok
22:07:21.0223 0x3250  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
22:07:21.0235 0x3250  msisadrv - ok
22:07:21.0263 0x3250  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
22:07:21.0298 0x3250  MSiSCSI - ok
22:07:21.0302 0x3250  msiserver - ok
22:07:21.0311 0x3250  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
22:07:21.0342 0x3250  MSKSSRV - ok
22:07:21.0354 0x3250  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
22:07:21.0385 0x3250  MSPCLOCK - ok
22:07:21.0395 0x3250  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
22:07:21.0427 0x3250  MSPQM - ok
22:07:21.0450 0x3250  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
22:07:21.0470 0x3250  MsRPC - ok
22:07:21.0477 0x3250  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
22:07:21.0491 0x3250  mssmbios - ok
22:07:21.0495 0x3250  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
22:07:21.0527 0x3250  MSTEE - ok
22:07:21.0537 0x3250  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
22:07:21.0552 0x3250  MTConfig - ok
22:07:21.0560 0x3250  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
22:07:21.0574 0x3250  Mup - ok
22:07:21.0596 0x3250  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
22:07:21.0639 0x3250  napagent - ok
22:07:21.0661 0x3250  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
22:07:21.0687 0x3250  NativeWifiP - ok
22:07:21.0762 0x3250  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
22:07:21.0804 0x3250  NDIS - ok
22:07:21.0820 0x3250  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
22:07:21.0852 0x3250  NdisCap - ok
22:07:21.0865 0x3250  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
22:07:21.0897 0x3250  NdisTapi - ok
22:07:21.0914 0x3250  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
22:07:21.0946 0x3250  Ndisuio - ok
22:07:21.0970 0x3250  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
22:07:22.0005 0x3250  NdisWan - ok
22:07:22.0025 0x3250  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
22:07:22.0056 0x3250  NDProxy - ok
22:07:22.0066 0x3250  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
22:07:22.0098 0x3250  NetBIOS - ok
22:07:22.0115 0x3250  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
22:07:22.0150 0x3250  NetBT - ok
22:07:22.0164 0x3250  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] Netlogon        C:\Windows\system32\lsass.exe
22:07:22.0179 0x3250  Netlogon - ok
22:07:22.0205 0x3250  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
22:07:22.0246 0x3250  Netman - ok
22:07:22.0276 0x3250  [ 6B3E96661F73E0003840F4601330008D, 85B927F98D9F75122B72E9146F0CD8666097B3B03FE8274B84870BCE75F27A94 ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:07:22.0357 0x3250  NetMsmqActivator - ok
22:07:22.0377 0x3250  [ 6B3E96661F73E0003840F4601330008D, 85B927F98D9F75122B72E9146F0CD8666097B3B03FE8274B84870BCE75F27A94 ] NetPipeActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:07:22.0404 0x3250  NetPipeActivator - ok
22:07:22.0428 0x3250  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
22:07:22.0471 0x3250  netprofm - ok
22:07:22.0559 0x3250  [ B7053DF2D07413727B9A3AC195172364, 97B7B02B3B578F054EEA1CCC6A318F91288F9E2B0644DE45D5CDCF1326EC014A ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys
22:07:22.0615 0x3250  netr28ux - ok
22:07:22.0635 0x3250  [ 6B3E96661F73E0003840F4601330008D, 85B927F98D9F75122B72E9146F0CD8666097B3B03FE8274B84870BCE75F27A94 ] NetTcpActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:07:22.0652 0x3250  NetTcpActivator - ok
22:07:22.0658 0x3250  [ 6B3E96661F73E0003840F4601330008D, 85B927F98D9F75122B72E9146F0CD8666097B3B03FE8274B84870BCE75F27A94 ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:07:22.0675 0x3250  NetTcpPortSharing - ok
22:07:22.0683 0x3250  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
22:07:22.0696 0x3250  nfrd960 - ok
22:07:22.0733 0x3250  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
22:07:22.0755 0x3250  NlaSvc - ok
22:07:22.0760 0x3250  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
22:07:22.0791 0x3250  Npfs - ok
22:07:22.0813 0x3250  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
22:07:22.0845 0x3250  nsi - ok
22:07:22.0857 0x3250  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
22:07:22.0888 0x3250  nsiproxy - ok
22:07:22.0946 0x3250  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
22:07:23.0006 0x3250  Ntfs - ok
22:07:23.0016 0x3250  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
22:07:23.0047 0x3250  Null - ok
22:07:23.0075 0x3250  [ 8EBCB9165EE7F1571842F4D9D624A74C, 115F46B8391866762AD41B299F0670D8735D124BD518A53EC73DCDBFCA9C28F9 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys
22:07:23.0089 0x3250  nusb3hub - ok
22:07:23.0116 0x3250  [ 5D54DBB12BBFE07CC283FD39F2CD6D63, 3DC3F9121F8892EDABD07ACDE45DB025BA2FC4245A8D3EE343F1FDF7189B391F ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys
22:07:23.0133 0x3250  nusb3xhc - ok
22:07:23.0149 0x3250  [ D812362E8AF615B521AD4DF19A93BD5A, B1F04122DFE9FCC3FC56BE327D86912D624C89F2EFB9684BE66FC22115D0E19F ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
22:07:23.0167 0x3250  NVHDA - ok
22:07:23.0537 0x3250  [ DA35308DEDB50C91EFD46B42F991DE26, 86E72D446014ED655E3DD2BB85A1A21BF0BF3C0EE5266E8E3D893FCDE25F9BE4 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
22:07:23.0800 0x3250  nvlddmkm - ok
22:07:23.0919 0x3250  [ AF9BDCDDDDDDF7D99F821E1F96AA5C6A, 1FCF538F7B08BABD8AB8545C1868CA791F3641E69CB28D98209A17D03D836892 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
22:07:23.0970 0x3250  NvNetworkService - ok
22:07:24.0009 0x3250  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
22:07:24.0024 0x3250  nvraid - ok
22:07:24.0052 0x3250  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
22:07:24.0068 0x3250  nvstor - ok
22:07:24.0209 0x3250  [ C2E5FC52454CD0FB19426632A491C34D, 29462AE92824718C061C215BF4DC584D4BA7F0E18DD44E0F9162F93014E5B537 ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
22:07:24.0295 0x3250  NvStreamNetworkSvc - ok
22:07:24.0426 0x3250  [ 40BA84AD3348573609095D8F3FD2DA9F, FF68F2352AFCB8C278A2E704F3E9DCC4393299DEAECD9ACF96F2D7FD9830EDF1 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
22:07:24.0537 0x3250  NvStreamSvc - ok
22:07:24.0597 0x3250  [ A9FE27CA00E66C455520E8B75883B630, D2FEFC75C0881ECC0A80EA2DD92DD9D2A28EB26F81085F8C17DCEA3F717D86E9 ] nvsvc           C:\Windows\system32\nvvsvc.exe
22:07:24.0636 0x3250  nvsvc - ok
22:07:24.0651 0x3250  [ 0BAF8B3DF77EFF04CC0BEA5F2C3657F9, 8E7A542E20416835F31B8648B5724446A78609C0ACC26FCC20E885CF83BE9CB2 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
22:07:24.0668 0x3250  nvvad_WaveExtensible - ok
22:07:24.0691 0x3250  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
22:07:24.0705 0x3250  nv_agp - ok
22:07:24.0714 0x3250  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
22:07:24.0729 0x3250  ohci1394 - ok
22:07:24.0842 0x3250  [ 241B7F92346973C10195AD7861596709, E0972047D202F539A8367E50DE278AF6103FA72C8E61F6D5B0DC1EA8FD338355 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
22:07:24.0897 0x3250  Origin Client Service - ok
22:07:24.0976 0x3250  [ 685176200A9246175FB8EF95F6FF9EAF, 93A5F307B1DF545CA5334BBB81E5E388A3E7911A9FF6ECBC066A3A5E11300AE4 ] Origin Web Helper Service C:\Program Files (x86)\Origin\OriginWebHelperService.exe
22:07:25.0038 0x3250  Origin Web Helper Service - ok
22:07:25.0083 0x3250  [ 69C27C9398031B5C90F8A772154161FB, A38EAE0ED71B136FD1F52C6C7FC878080B80F6A0478970768FDFFE548BBF5CD0 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:07:25.0129 0x3250  ose - ok
22:07:25.0340 0x3250  [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
22:07:25.0456 0x3250  osppsvc - ok
22:07:25.0495 0x3250  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
22:07:25.0518 0x3250  p2pimsvc - ok
22:07:25.0544 0x3250  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
22:07:25.0568 0x3250  p2psvc - ok
22:07:25.0589 0x3250  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
22:07:25.0605 0x3250  Parport - ok
22:07:25.0621 0x3250  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
22:07:25.0634 0x3250  partmgr - ok
22:07:25.0645 0x3250  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll
22:07:25.0667 0x3250  PcaSvc - ok
22:07:25.0674 0x3250  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
22:07:25.0690 0x3250  pci - ok
22:07:25.0720 0x3250  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
22:07:25.0732 0x3250  pciide - ok
22:07:25.0749 0x3250  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
22:07:25.0766 0x3250  pcmcia - ok
22:07:25.0776 0x3250  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
22:07:25.0789 0x3250  pcw - ok
22:07:25.0812 0x3250  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
22:07:25.0858 0x3250  PEAUTH - ok
22:07:25.0910 0x3250  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
22:07:25.0957 0x3250  PeerDistSvc - ok
22:07:26.0009 0x3250  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
22:07:26.0024 0x3250  PerfHost - ok
22:07:26.0062 0x3250  [ 007FD8D68E4D691DD4AEDD6F39B41B2C, 649D8A3EAF4A0FCC77974B829966815F6E4A50395AF10835A91CB5D698DAA8E1 ] phantomtap      C:\Windows\system32\DRIVERS\phantomtap.sys
22:07:26.0075 0x3250  phantomtap - ok
22:07:26.0128 0x3250  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
22:07:26.0191 0x3250  pla - ok
22:07:26.0220 0x3250  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
22:07:26.0245 0x3250  PlugPlay - ok
22:07:26.0252 0x3250  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
22:07:26.0267 0x3250  PNRPAutoReg - ok
22:07:26.0287 0x3250  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
22:07:26.0309 0x3250  PNRPsvc - ok
22:07:26.0333 0x3250  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
22:07:26.0375 0x3250  PolicyAgent - ok
22:07:26.0391 0x3250  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
22:07:26.0427 0x3250  Power - ok
22:07:26.0462 0x3250  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
22:07:26.0494 0x3250  PptpMiniport - ok
22:07:26.0515 0x3250  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
22:07:26.0530 0x3250  Processor - ok
22:07:26.0543 0x3250  [ 5C78838B4D166D1A27DB3A8A820C799A, BBF7E1D0B6754CF06BF3936671FDF5BF6E845CA5678D0940EA54E9212B539B7F ] ProfSvc         C:\Windows\system32\profsvc.dll
22:07:26.0579 0x3250  ProfSvc - ok
22:07:26.0624 0x3250  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] ProtectedStorage C:\Windows\system32\lsass.exe
22:07:26.0657 0x3250  ProtectedStorage - ok
22:07:26.0707 0x3250  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
22:07:26.0749 0x3250  Psched - ok
22:07:26.0807 0x3250  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
22:07:26.0850 0x3250  ql2300 - ok
22:07:26.0873 0x3250  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
22:07:26.0888 0x3250  ql40xx - ok
22:07:26.0901 0x3250  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
22:07:26.0924 0x3250  QWAVE - ok
22:07:26.0932 0x3250  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
22:07:26.0950 0x3250  QWAVEdrv - ok
22:07:26.0974 0x3250  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
22:07:27.0006 0x3250  RasAcd - ok
22:07:27.0029 0x3250  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
22:07:27.0061 0x3250  RasAgileVpn - ok
22:07:27.0078 0x3250  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
22:07:27.0112 0x3250  RasAuto - ok
22:07:27.0124 0x3250  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
22:07:27.0157 0x3250  Rasl2tp - ok
22:07:27.0167 0x3250  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
22:07:27.0206 0x3250  RasMan - ok
22:07:27.0212 0x3250  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
22:07:27.0245 0x3250  RasPppoe - ok
22:07:27.0260 0x3250  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
22:07:27.0293 0x3250  RasSstp - ok
22:07:27.0307 0x3250  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
22:07:27.0345 0x3250  rdbss - ok
22:07:27.0360 0x3250  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
22:07:27.0376 0x3250  rdpbus - ok
22:07:27.0394 0x3250  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
22:07:27.0425 0x3250  RDPCDD - ok
22:07:27.0458 0x3250  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
22:07:27.0476 0x3250  RDPDR - ok
22:07:27.0532 0x3250  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
22:07:27.0602 0x3250  RDPENCDD - ok
22:07:27.0608 0x3250  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
22:07:27.0640 0x3250  RDPREFMP - ok
22:07:27.0668 0x3250  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
22:07:27.0687 0x3250  RDPWD - ok
22:07:27.0706 0x3250  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
22:07:27.0722 0x3250  rdyboost - ok
22:07:27.0739 0x3250  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
22:07:27.0774 0x3250  RemoteAccess - ok
22:07:27.0784 0x3250  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
22:07:27.0820 0x3250  RemoteRegistry - ok
22:07:27.0849 0x3250  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
22:07:27.0869 0x3250  RFCOMM - ok
22:07:27.0886 0x3250  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
22:07:27.0920 0x3250  RpcEptMapper - ok
22:07:27.0937 0x3250  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
22:07:27.0952 0x3250  RpcLocator - ok
22:07:27.0985 0x3250  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
22:07:28.0028 0x3250  RpcSs - ok
22:07:28.0041 0x3250  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
22:07:28.0073 0x3250  rspndr - ok
22:07:28.0114 0x3250  [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A, 9F6CFBE7E64A63E0AFEF546C4B8D889657B2055CE80279EA1B63EB5650E730F8 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
22:07:28.0132 0x3250  RTL8167 - ok
22:07:28.0146 0x3250  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
22:07:28.0160 0x3250  s3cap - ok
22:07:28.0173 0x3250  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] SamSs           C:\Windows\system32\lsass.exe
22:07:28.0188 0x3250  SamSs - ok
22:07:28.0201 0x3250  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
22:07:28.0215 0x3250  sbp2port - ok
22:07:28.0229 0x3250  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
22:07:28.0266 0x3250  SCardSvr - ok
22:07:28.0279 0x3250  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
22:07:28.0310 0x3250  scfilter - ok
22:07:28.0350 0x3250  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
22:07:28.0408 0x3250  Schedule - ok
22:07:28.0427 0x3250  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
22:07:28.0460 0x3250  SCPolicySvc - ok
22:07:28.0489 0x3250  [ 4102D7BFF6F852E5B1C3E0FBD91C7C6E, E2E5CE25D7365A9533F2217147A8D950A147DCE78159AF462D10E282AC10A8C6 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys
22:07:28.0504 0x3250  ScreamBAudioSvc - ok
22:07:28.0524 0x3250  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
22:07:28.0543 0x3250  SDRSVC - ok
22:07:28.0554 0x3250  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
22:07:28.0585 0x3250  secdrv - ok
22:07:28.0604 0x3250  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
22:07:28.0636 0x3250  seclogon - ok
22:07:28.0646 0x3250  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
22:07:28.0679 0x3250  SENS - ok
22:07:28.0684 0x3250  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
22:07:28.0699 0x3250  SensrSvc - ok
22:07:28.0712 0x3250  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
22:07:28.0727 0x3250  Serenum - ok
22:07:28.0748 0x3250  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
22:07:28.0765 0x3250  Serial - ok
22:07:28.0782 0x3250  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
22:07:28.0797 0x3250  sermouse - ok
22:07:28.0825 0x3250  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
22:07:28.0859 0x3250  SessionEnv - ok
22:07:28.0869 0x3250  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
22:07:28.0885 0x3250  sffdisk - ok
22:07:28.0892 0x3250  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
22:07:28.0909 0x3250  sffp_mmc - ok
22:07:28.0919 0x3250  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
22:07:28.0935 0x3250  sffp_sd - ok
22:07:28.0948 0x3250  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
22:07:28.0962 0x3250  sfloppy - ok
22:07:28.0993 0x3250  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
22:07:29.0033 0x3250  SharedAccess - ok
22:07:29.0060 0x3250  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
22:07:29.0100 0x3250  ShellHWDetection - ok
22:07:29.0113 0x3250  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:07:29.0126 0x3250  SiSRaid2 - ok
22:07:29.0136 0x3250  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
22:07:29.0150 0x3250  SiSRaid4 - ok
22:07:29.0204 0x3250  [ F3AAB7DF6408431C762D8721B68F46E4, 56ED764AA660955B8B06322703D086B3A52106625A83CCAF195B08BCBDEDA88F ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
22:07:29.0225 0x3250  SkypeUpdate - ok
22:07:29.0236 0x3250  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
22:07:29.0269 0x3250  Smb - ok
22:07:29.0281 0x3250  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
22:07:29.0298 0x3250  SNMPTRAP - ok
22:07:29.0315 0x3250  [ FFC5F7ED77AA59AA0A6B70F3D7A22A93, F0EF3A1A8C74CDD9EE0EF585F0489385573D764DE75E14FA8ADFEA05112935DA ] Sound Blaster X-Fi MB Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
22:07:29.0321 0x3250  Sound Blaster X-Fi MB Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
22:07:32.0309 0x3250  Detect skipped due to KSN trusted
22:07:32.0310 0x3250  Sound Blaster X-Fi MB Licensing Service - ok
22:07:32.0330 0x3250  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
22:07:32.0357 0x3250  spldr - ok
22:07:32.0390 0x3250  [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler         C:\Windows\System32\spoolsv.exe
22:07:32.0439 0x3250  Spooler - ok
22:07:32.0577 0x3250  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
22:07:32.0689 0x3250  sppsvc - ok
22:07:32.0706 0x3250  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
22:07:32.0739 0x3250  sppuinotify - ok
22:07:32.0762 0x3250  [ 2098B8556D1CEC2ACA9A29CD479E3692, D5826407C64F18C16EB36E6F00787CFAFCD9B24B5BD8AD126AD01E6E4134966F ] srv             C:\Windows\system32\DRIVERS\srv.sys
22:07:32.0803 0x3250  srv - ok
22:07:32.0822 0x3250  [ D0F73A42040F21F92FD314B42AC5C9E7, A021C4318C9CFA594305458B2643BB0C22DDE1F3D51C93C9F3E7F7AB75B31278 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
22:07:32.0861 0x3250  srv2 - ok
22:07:32.0875 0x3250  [ 2BA8F3250828CCDB4204ECF2C6F40B6A, 22C4FBF9A87C46E69C48B681FF733D68D9CB7B7D73FB14C8C2A06E9009F9860E ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
22:07:32.0909 0x3250  srvnet - ok
22:07:32.0931 0x3250  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
22:07:32.0968 0x3250  SSDPSRV - ok
22:07:32.0971 0x3250  SSPORT - ok
22:07:32.0980 0x3250  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
22:07:33.0013 0x3250  SstpSvc - ok
22:07:33.0128 0x3250  [ 95B08615120CE1353EA4ED2C174E5A9F, C18E665D385D327FC3CFBA41582C7763996143054280157EA840EAFA1F5F26CF ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
22:07:33.0181 0x3250  Steam Client Service - ok
22:07:33.0269 0x3250  [ 3937935B645A23D443FB24D48AAC49E8, 1B8D8259908635B950352E461D1026F59C5F5D8FF4E640EF76D5241F0F250F94 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
22:07:33.0304 0x3250  Stereo Service - ok
22:07:33.0318 0x3250  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
22:07:33.0331 0x3250  stexstor - ok
22:07:33.0353 0x3250  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
22:07:33.0386 0x3250  stisvc - ok
22:07:33.0402 0x3250  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
22:07:33.0415 0x3250  storflt - ok
22:07:33.0431 0x3250  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll
22:07:33.0446 0x3250  StorSvc - ok
22:07:33.0455 0x3250  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
22:07:33.0468 0x3250  storvsc - ok
22:07:33.0479 0x3250  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
22:07:33.0491 0x3250  swenum - ok
22:07:33.0511 0x3250  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
22:07:33.0555 0x3250  swprv - ok
22:07:33.0613 0x3250  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
22:07:33.0678 0x3250  SysMain - ok
22:07:33.0694 0x3250  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
22:07:33.0715 0x3250  TabletInputService - ok
22:07:33.0735 0x3250  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
22:07:33.0773 0x3250  TapiSrv - ok
22:07:33.0785 0x3250  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
22:07:33.0819 0x3250  TBS - ok
22:07:33.0878 0x3250  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
22:07:33.0930 0x3250  Tcpip - ok
22:07:34.0012 0x3250  [ 40AF23633D197905F03AB5628C558C51, 644656A15236E964E4BE57B42225EAA5643C4CF1FFF6D306813A000716F9D72C ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
22:07:34.0063 0x3250  TCPIP6 - ok
22:07:34.0094 0x3250  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
22:07:34.0109 0x3250  tcpipreg - ok
22:07:34.0122 0x3250  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
22:07:34.0136 0x3250  TDPIPE - ok
22:07:34.0160 0x3250  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
22:07:34.0175 0x3250  TDTCP - ok
22:07:34.0185 0x3250  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
22:07:34.0202 0x3250  tdx - ok
22:07:34.0215 0x3250  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
22:07:34.0228 0x3250  TermDD - ok
22:07:34.0268 0x3250  [ 4FC4C50985E5B840F4D72E57286887B8, 0BCBB4A938803AE3A3532B6D8FFC85594AA9AEF5D8F9792684841BEA8780AE9E ] TermService     C:\Windows\System32\termsrv.dll
22:07:34.0299 0x3250  TermService - ok
22:07:34.0313 0x3250  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
22:07:34.0333 0x3250  Themes - ok
22:07:34.0352 0x3250  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
22:07:34.0384 0x3250  THREADORDER - ok
22:07:34.0422 0x3250  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
22:07:34.0457 0x3250  TrkWks - ok
22:07:34.0491 0x3250  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
22:07:34.0525 0x3250  TrustedInstaller - ok
22:07:34.0556 0x3250  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
22:07:34.0571 0x3250  tssecsrv - ok
22:07:34.0602 0x3250  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
22:07:34.0617 0x3250  TsUsbFlt - ok
22:07:34.0650 0x3250  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
22:07:34.0682 0x3250  tunnel - ok
22:07:34.0687 0x3250  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
22:07:34.0701 0x3250  uagp35 - ok
22:07:34.0725 0x3250  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
22:07:34.0763 0x3250  udfs - ok
22:07:34.0772 0x3250  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
22:07:34.0789 0x3250  UI0Detect - ok
22:07:34.0810 0x3250  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
22:07:34.0823 0x3250  uliagpkx - ok
22:07:34.0846 0x3250  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
22:07:34.0861 0x3250  umbus - ok
22:07:34.0874 0x3250  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
22:07:34.0889 0x3250  UmPass - ok
22:07:34.0911 0x3250  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
22:07:34.0931 0x3250  UmRdpService - ok
22:07:34.0949 0x3250  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
22:07:34.0989 0x3250  upnphost - ok
22:07:35.0015 0x3250  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
22:07:35.0031 0x3250  USBAAPL64 - ok
22:07:35.0063 0x3250  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
22:07:35.0079 0x3250  usbaudio - ok
22:07:35.0092 0x3250  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
22:07:35.0108 0x3250  usbccgp - ok
22:07:35.0133 0x3250  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
22:07:35.0149 0x3250  usbcir - ok
22:07:35.0164 0x3250  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
22:07:35.0179 0x3250  usbehci - ok
22:07:35.0201 0x3250  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys
22:07:35.0213 0x3250  usbfilter - ok
22:07:35.0228 0x3250  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
22:07:35.0250 0x3250  usbhub - ok
22:07:35.0255 0x3250  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
22:07:35.0269 0x3250  usbohci - ok
22:07:35.0282 0x3250  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
22:07:35.0298 0x3250  usbprint - ok
22:07:35.0329 0x3250  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:07:35.0345 0x3250  USBSTOR - ok
22:07:35.0368 0x3250  [ C44D96B1CDDE705B23F55AB423CCA73D, AB9842E90DD3D686E66BDBE043EB0068272B611D6F63C818EB9D1B6FE2FE23BD ] USBTINSP        C:\Windows\system32\DRIVERS\tinspusb.sys
22:07:35.0383 0x3250  USBTINSP - ok
22:07:35.0394 0x3250  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
22:07:35.0409 0x3250  usbuhci - ok
22:07:35.0429 0x3250  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
22:07:35.0447 0x3250  usbvideo - ok
22:07:35.0459 0x3250  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
22:07:35.0491 0x3250  UxSms - ok
22:07:35.0498 0x3250  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] VaultSvc        C:\Windows\system32\lsass.exe
22:07:35.0512 0x3250  VaultSvc - ok
22:07:35.0521 0x3250  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
22:07:35.0534 0x3250  vdrvroot - ok
22:07:35.0559 0x3250  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
22:07:35.0602 0x3250  vds - ok
22:07:35.0615 0x3250  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
22:07:35.0632 0x3250  vga - ok
22:07:35.0636 0x3250  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
22:07:35.0667 0x3250  VgaSave - ok
22:07:35.0685 0x3250  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
22:07:35.0701 0x3250  vhdmp - ok
22:07:35.0706 0x3250  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
22:07:35.0718 0x3250  viaide - ok
22:07:35.0737 0x3250  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
22:07:35.0763 0x3250  vmbus - ok
22:07:35.0777 0x3250  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
22:07:35.0793 0x3250  VMBusHID - ok
22:07:35.0807 0x3250  vmci - ok
22:07:35.0816 0x3250  VMnetAdapter - ok
22:07:35.0830 0x3250  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
22:07:35.0844 0x3250  volmgr - ok
22:07:35.0867 0x3250  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
22:07:35.0887 0x3250  volmgrx - ok
22:07:35.0900 0x3250  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
22:07:35.0918 0x3250  volsnap - ok
22:07:35.0928 0x3250  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
22:07:35.0943 0x3250  vsmraid - ok
22:07:35.0999 0x3250  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
22:07:36.0068 0x3250  VSS - ok
22:07:36.0077 0x3250  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
22:07:36.0093 0x3250  vwifibus - ok
22:07:36.0099 0x3250  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
22:07:36.0117 0x3250  vwififlt - ok
22:07:36.0121 0x3250  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
22:07:36.0139 0x3250  vwifimp - ok
22:07:36.0161 0x3250  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
22:07:36.0203 0x3250  W32Time - ok
22:07:36.0210 0x3250  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
22:07:36.0225 0x3250  WacomPen - ok
22:07:36.0242 0x3250  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
22:07:36.0274 0x3250  WANARP - ok
22:07:36.0279 0x3250  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
22:07:36.0310 0x3250  Wanarpv6 - ok
22:07:36.0369 0x3250  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
22:07:36.0419 0x3250  wbengine - ok
22:07:36.0442 0x3250  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
22:07:36.0465 0x3250  WbioSrvc - ok
22:07:36.0489 0x3250  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
22:07:36.0516 0x3250  wcncsvc - ok
22:07:36.0533 0x3250  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
22:07:36.0549 0x3250  WcsPlugInService - ok
22:07:36.0563 0x3250  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
22:07:36.0575 0x3250  Wd - ok
22:07:36.0619 0x3250  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
22:07:36.0649 0x3250  Wdf01000 - ok
22:07:36.0663 0x3250  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
22:07:36.0680 0x3250  WdiServiceHost - ok
22:07:36.0685 0x3250  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
22:07:36.0702 0x3250  WdiSystemHost - ok
22:07:36.0734 0x3250  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
22:07:36.0755 0x3250  WebClient - ok
22:07:36.0766 0x3250  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
22:07:36.0804 0x3250  Wecsvc - ok
22:07:36.0817 0x3250  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
22:07:36.0851 0x3250  wercplsupport - ok
22:07:36.0865 0x3250  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
22:07:36.0900 0x3250  WerSvc - ok
22:07:36.0908 0x3250  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
22:07:36.0940 0x3250  WfpLwf - ok
22:07:36.0951 0x3250  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
22:07:36.0964 0x3250  WIMMount - ok
22:07:36.0980 0x3250  WinDefend - ok
22:07:36.0986 0x3250  WinHttpAutoProxySvc - ok
22:07:37.0041 0x3250  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
22:07:37.0098 0x3250  Winmgmt - ok
22:07:37.0159 0x3250  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
22:07:37.0222 0x3250  WinRM - ok
22:07:37.0266 0x3250  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
22:07:37.0307 0x3250  WinUsb - ok
22:07:37.0343 0x3250  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
22:07:37.0382 0x3250  Wlansvc - ok
22:07:37.0517 0x3250  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:07:37.0575 0x3250  wlidsvc - ok
22:07:37.0588 0x3250  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
22:07:37.0602 0x3250  WmiAcpi - ok
22:07:37.0613 0x3250  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
22:07:37.0632 0x3250  wmiApSrv - ok
22:07:37.0645 0x3250  WMPNetworkSvc - ok
22:07:37.0649 0x3250  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
22:07:37.0665 0x3250  WPCSvc - ok
22:07:37.0682 0x3250  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
22:07:37.0701 0x3250  WPDBusEnum - ok
22:07:37.0706 0x3250  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
22:07:37.0738 0x3250  ws2ifsl - ok
22:07:37.0753 0x3250  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
22:07:37.0774 0x3250  wscsvc - ok
22:07:37.0778 0x3250  WSearch - ok
22:07:37.0901 0x3250  [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\Windows\system32\wuaueng.dll
22:07:37.0975 0x3250  wuauserv - ok
22:07:37.0999 0x3250  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
22:07:38.0015 0x3250  WudfPf - ok
22:07:38.0046 0x3250  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
22:07:38.0065 0x3250  WUDFRd - ok
22:07:38.0091 0x3250  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
22:07:38.0108 0x3250  wudfsvc - ok
22:07:38.0126 0x3250  [ 9A3452B3C2A46C073166C5CF49FAD1AE, D6F95F51D8E37BA4CF403965EC08CCFEEA9EEFDBFC7752432EAEC19925BDA115 ] WwanSvc         C:\Windows\System32\wwansvc.dll
22:07:38.0150 0x3250  WwanSvc - ok
22:07:38.0167 0x3250  xhunter1 - ok
22:07:38.0196 0x3250  [ 2C6BC21B2D5B58D8B1D638C1704CB494, 0AABCEB627E274E338DDD9BA664BAA128D7C00AF04C95C776C2AFFA6BB17F680 ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys
22:07:38.0208 0x3250  xusb21 - ok
22:07:38.0243 0x3250  ================ Scan global ===============================
22:07:38.0265 0x3250  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
22:07:38.0297 0x3250  [ EA32F4EA3AE06EDD122FBCD5A489E457, C6E464170121D1714A367CFC80C5EA15D42AD34909039FDB114EAD3B878A47F6 ] C:\Windows\system32\winsrv.dll
22:07:38.0309 0x3250  [ EA32F4EA3AE06EDD122FBCD5A489E457, C6E464170121D1714A367CFC80C5EA15D42AD34909039FDB114EAD3B878A47F6 ] C:\Windows\system32\winsrv.dll
22:07:38.0336 0x3250  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
22:07:38.0367 0x3250  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
22:07:38.0374 0x3250  [ Global ] - ok
22:07:38.0374 0x3250  ================ Scan MBR ==================================
22:07:38.0383 0x3250  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
22:07:38.0685 0x3250  \Device\Harddisk0\DR0 - ok
22:07:38.0686 0x3250  ================ Scan VBR ==================================
22:07:38.0691 0x3250  [ 5F4F20DFD74AF32ACFB0B67555798C09 ] \Device\Harddisk0\DR0\Partition1
22:07:38.0695 0x3250  \Device\Harddisk0\DR0\Partition1 - ok
22:07:38.0703 0x3250  [ 41E3709F40AA8C074CE879A28B12F4A4 ] \Device\Harddisk0\DR0\Partition2
22:07:38.0705 0x3250  \Device\Harddisk0\DR0\Partition2 - ok
22:07:38.0709 0x3250  [ D578380D708B50AD58AC0DC4B4E24185 ] \Device\Harddisk0\DR0\Partition3
22:07:38.0711 0x3250  \Device\Harddisk0\DR0\Partition3 - ok
22:07:38.0712 0x3250  ================ Scan generic autorun ======================
22:07:39.0012 0x3250  [ 3CBECBC83287258DC78B7D2F2821F7E5, 5B1D21ED9FAE4A2B3B9AF010FA9DBC6930EF5C8489FB46FBA27F1BC9AB449062 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
22:07:39.0229 0x3250  RtHDVCpl - ok
22:07:39.0324 0x3250  [ EEE565252F4585B2DD840C8CE871C6C0, AF1FBA9CBBA218F1C511282242A647AC3462D1D83FA9209F1FEBFBD39E68FC2F ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
22:07:39.0384 0x3250  NvBackend - ok
22:07:39.0515 0x3250  [ B86C5B5318EC946C38871824205B2C5B, 34B6322B182EA2B28C775179F70B0912F8FCC792626A87047CDF1B69C497019C ] C:\Program Files\Sades 7.1CH Gaming Headset\CPL\FaceLift_x64.exe
22:07:39.0646 0x3250  Cm6620Sound - detected UnsignedFile.Multi.Generic ( 1 )
22:07:42.0843 0x3250  Detect skipped due to KSN trusted
22:07:42.0844 0x3250  Cm6620Sound - ok
22:07:42.0936 0x3250  [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
22:07:42.0968 0x3250  XboxStat - ok
22:07:43.0013 0x3250  [ 4B6E5E5810D06E94C552AEB76B4D954C, 1B40233357A2AB589C82AD99369411004C899DEBFFCB0A3F399FD5CF12F1CD6B ] C:\Program Files\iTunes\iTunesHelper.exe
22:07:43.0031 0x3250  iTunesHelper - ok
22:07:43.0066 0x3250  [ 358C81ADA09E0B6906DB82EA75B836D5, B0F0FAB3D6A3541010D3CF810D6C0005E9C5556F226A71AFA2AEB22C981EC0F3 ] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
22:07:43.0073 0x3250  NUSB3MON - detected UnsignedFile.Multi.Generic ( 1 )
22:07:46.0731 0x3250  Detect skipped due to KSN trusted
22:07:46.0731 0x3250  NUSB3MON - ok
22:07:46.0796 0x3250  [ 629B12D94C228F8C59AD15EB76F02A6E, 2A447A955829CCBBA181205D908166BBAD9993B40EC0B9A5FA0D28334A49B0F6 ] C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
22:07:46.0832 0x3250  CTSyncService - detected UnsignedFile.Multi.Generic ( 1 )
22:07:49.0955 0x3250  Detect skipped due to KSN trusted
22:07:49.0955 0x3250  CTSyncService - ok
22:07:50.0006 0x3250  [ 43A4F52F7A38ED9EE0AACA36FE6DAC5D, 1701C050E18E98BB9AD29568B8A50D1F907E6F6EF53520D53EF281B847C5B0C9 ] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
22:07:50.0027 0x3250  VolPanel - detected UnsignedFile.Multi.Generic ( 1 )
22:07:53.0419 0x3250  Detect skipped due to KSN trusted
22:07:53.0419 0x3250  VolPanel - ok
22:07:53.0439 0x3250  [ C419DF63E0121D72411285780C2FC6CC, F47F854D327C589D174D3BB5B55D5C05F5ACA73DF52A6BEF47596B9010190291 ] C:\Windows\UpdReg.EXE
22:07:53.0448 0x3250  UpdReg - detected UnsignedFile.Multi.Generic ( 1 )
22:07:56.0641 0x3250  Detect skipped due to KSN trusted
22:07:56.0641 0x3250  UpdReg - ok
22:07:56.0700 0x3250  [ 2C3730308A91BF77F239551C7E53E39D, 4B3411CD039EAE62BED22387DB8969400521C7A04A04BAABC988B6AFACA7FA04 ] C:\Windows\Samsung\PanelMgr\ssmmgr.exe
22:07:56.0758 0x3250  Samsung PanelMgr - detected UnsignedFile.Multi.Generic ( 1 )
22:07:59.0846 0x3250  Detect skipped due to KSN trusted
22:07:59.0846 0x3250  Samsung PanelMgr - ok
22:07:59.0933 0x3250  [ A5BE8A1B7679AE8E18E191B5CDD5C828, DB75AF4F1546A24E0980F18F3569D214399BFC0A298797CB76B57DC495A28112 ] C:\Riot Games\LeagueDisplays\assistant\LeagueDisplaysAssistant.exe
22:07:59.0965 0x3250  LeagueDisplays - detected UnsignedFile.Multi.Generic ( 1 )
22:08:03.0076 0x3250  Detect skipped due to KSN trusted
22:08:03.0076 0x3250  LeagueDisplays - ok
22:08:03.0174 0x3250  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
22:08:03.0231 0x3250  Sidebar - ok
22:08:03.0257 0x3250  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
22:08:03.0292 0x3250  mctadmin - ok
22:08:03.0319 0x3250  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
22:08:03.0360 0x3250  Sidebar - ok
22:08:03.0366 0x3250  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
22:08:03.0386 0x3250  mctadmin - ok
22:08:03.0392 0x3250  Waiting for KSN requests completion. In queue: 4
22:08:04.0392 0x3250  Waiting for KSN requests completion. In queue: 4
22:08:05.0392 0x3250  Waiting for KSN requests completion. In queue: 4
22:08:06.0392 0x3250  Waiting for KSN requests completion. In queue: 4
22:08:07.0470 0x3250  AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.167 ), 0x61000 ( enabled : updated )
22:08:07.0480 0x3250  Win FW state via NFP2: enabled ( trusted )
22:08:11.0053 0x3250  ============================================================
22:08:11.0053 0x3250  Scan finished
22:08:11.0053 0x3250  ============================================================
22:08:11.0079 0x3248  Detected object count: 0
22:08:11.0080 0x3248  Actual detected object count: 0

cosinus · 18.09.2018, 21:16

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

adwCleaner v7.x

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Einstellungen, scrolle nach unten und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- Tracing Schlüssel löschen
- Prefetch-Dateien löschen
- Proxy wiederherstellen
- IE-Policies wiederherstellen
- Chrome-Policies wiederherstellen
- Winsock wiederherstellen
Klicke nun auf Dashboard, dann auf Jetzt scannen und warte bis der Suchlauf abgeschlossen ist.
Klicke nun auf Bereinigen & Reparieren und bestätige mit Jetzt bereinigen.

WICHTIG:
Sollte AdwCleaner nichts finden, klicke auf Grundlegende Reparatur ausführen und anschließend auf Jetzt bereinigen.
Nach dem Neustart öffnet sich AdwCleaner automatisch. Klicke auf Log-Datei ansehen.
Poste mir deren Inhalt der Log-Datei mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt. (xx = fortlaufende Nummer).

LeoWy · 18.09.2018, 21:28

Code:

ATTFilter

# -------------------------------
# Malwarebytes AdwCleaner 7.2.3.1
# -------------------------------
# Build:    09-03-2018
# Database: 2018-09-17.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    09-18-2018
# Duration: 00:00:03
# OS:       Windows 7 Professional
# Cleaned:  41
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Users\Leo\AppData\Local\Temp\DMR
Deleted       C:\Program Files (x86)\Applian Technologies\FLV and Media Player
Deleted       C:\Users\Leo\AppData\Roaming\RPEng
Deleted       C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
Deleted       C:\Users\Leo\AppData\Local\YSearchUtil
Deleted       C:\Users\Leo\AppData\Roaming\FLV and Media Player

***** [ Files ] *****

Deleted       C:\Users\Leo\AppData\Roaming\Mozilla\Firefox\Profiles\bf76oj5z.default\searchplugins\bing-lavasoft.xml
Deleted       C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKLM\Software\Wow6432Node\Applian Technologies
Deleted       HKLM\SOFTWARE\Classes\DVD\shell\PlayWithApplianMP
Deleted       HKLM\SOFTWARE\Classes\AudioCD\shell\PlayWithApplianMP
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayCDAudioOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayCDAudioOnArrival
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDMovieOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDMovieOnArrival
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVideoFilesOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVideoFilesOnArrival
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlaySVCDMovieOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlaySVCDMovieOnArrival
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVCDMovieOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVCDMovieOnArrival
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayMusicFilesOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayMusicFilesOnArrival
Deleted       HKLM\Software\Wow6432Node\Clients\Media\ApplianMP
Deleted       HKLM\SOFTWARE\Clients\Media\ApplianMP
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDAudioOnArrival
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDAudioOnArrival
Deleted       HKLM\Software\Wow6432Node\RegisteredApplications|FLV and Media Player
Deleted       HKLM\SOFTWARE\RegisteredApplications|FLV and Media Player
Deleted       HKLM\SOFTWARE\Classes\Applications\amp.exe
Deleted       HKCU\Software\csastats
Deleted       HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Web Companion
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FLV and Media Player
Deleted       HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
Deleted       HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Deleted       HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

Deleted       GreatDealz
Deleted       Avira SafeSearch Plus
Deleted       Suchen und neue Registerkarte von Yahoo

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

Deleted       Search and New Tab by Yahoo

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Proxy Settings
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5568 octets] - [18/09/2018 22:21:13]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

18.09.2018, 20:12	#9
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$Windows 7: TR/Crypt.Agent.gkqty Fund bei C:\Windows\debug\winlogons.exe - Standard$ Windows 7: TR/Crypt.Agent.gkqty Fund bei C:\Windows\debug\winlogons.exe Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken. __________________ Logfiles bitte immer in CODE-Tags posten

Windows 7: TR/Crypt.Agent.gkqty Fund bei C:\Windows\debug\winlogons.exe

Log-Analyse und Auswertung: Windows 7: TR/Crypt.Agent.gkqty Fund bei C:\Windows\debug\winlogons.exe