Wenn wir hier eine Analyse machen geht es nicht, dass du hier zwischendurch arbeitest als wenn nicht gewesen sei. Während der Analyse und Bereinigung passiert alles so, wie es es oder ein anderer Helfer instruiere. Wir wollen und auf Sicherheit konzentrieren, das Schließen von Sicherheitslücken und Entfernen von Malware. Alles in Funktion kann du bringen wenn wir hier durch sind.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-05-2020
durchgeführt von KKaSo (Administrator) auf DESKTOP-9D3QBDC (Acer Aspire GX-781) (09-05-2020 23:56:50)
Gestartet von C:\Users\KKaSo\Desktop
Geladene Profile: KKaSo (Verfügbare Profile: defaultuser0 & KKaSo)
Platform: Windows 10 Home Version 1903 18362.778 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atiesrxx.exe
(Gameforge 4D GmbH -> ) C:\Program Files (x86)\GameforgeClient\gfclient.exe
(Gameforge 4D GmbH -> ) C:\Program Files (x86)\GameforgeClient\gfservice.exe
(Gameforge 4D GmbH -> ) C:\Program Files (x86)\GameforgeClient\SparkWebHelper.exe <2>
(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12624.20368.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12624.20368.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.772_none_5f13f94c58ff41d3\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\NisSrv.exe
(Microsoft) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe
(Microsoft) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\68.0.3618.63\opera.exe <23>
(Opera Software AS -> Opera Software) C:\Program Files\Opera\68.0.3618.63\opera_crashreporter.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TeamViewer GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(WEBZEN Inc. -> ) C:\Program Files (x86)\Metin2\metin2client.exe
(Wondershare software CO., LIMITED -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18723976 2018-08-08] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [585336 2019-02-01] (Acronis International GmbH -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16709128 2016-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [3004440 2020-04-29] (Opera Software AS -> Opera Software)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare software CO., LIMITED -> Wondershare)
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Run: [Discord] => C:\Users\KKaSo\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3148576 2019-06-18] (Valve -> Valve Corporation)
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe [851704 2018-11-13] (MAGIX Software GmbH -> MAGIX)
GroupPolicy: Beschränkung ? <==== ACHTUNG
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0BAA15FC-2D92-4F64-B90C-CEF92FFEEBCA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {111E17C9-5A2F-45AA-8E2F-D46721E0B12B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124760 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {12F5F713-3828-4311-87D7-56F190EB3156} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61112 2019-11-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {17172F1E-BE45-4A71-B255-5F88E186CE31} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {1B1F7CEF-21D2-4D8F-9BB5-6956FA8178B1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124760 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {1C019796-7385-468E-8D96-E5FF707C6366} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772528 2020-04-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {2803B117-EBCF-4263-930B-53EB6E96D72E} - System32\Tasks\MAGIX PC Check & Tuning 2019 => C:\Program Files (x86)\MAGIX\MAGIX PC Check & Tuning 2019\PCCT.exe [2467912 2018-06-01] (MAGIX Software GmbH -> MAGIX Software GmbH)
Task: {38BE3E87-E2C6-4C03-B002-DFC47EA83637} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-11-27] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
Task: {3B99BDC3-F468-4493-A92C-CD553C47BAB0} - System32\Tasks\MAGIX PC Check & Tuning 2019 (Autopilot.exe) => C:\Program Files (x86)\MAGIX\MAGIX PC Check & Tuning 2019\Autopilot.exe [1743944 2018-06-01] (MAGIX Software GmbH -> MAGIX Software GmbH)
Task: {3EB42681-8D82-4C40-9BBE-F217099703F4} - System32\Tasks\Opera scheduled assistant Autoupdate 1581166179 => C:\Program Files\Opera\launcher.exe [1517592 2020-04-29] (Opera Software AS -> Opera Software)
Task: {3F1C1ADE-5261-4558-AD5D-07F65A15A6C6} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-11-27] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
Task: {46E7BF54-66A7-4365-AFD9-A221F9448643} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {960DD0A6-04A3-435B-8DBC-467B8A55852D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B1AA0DC8-097B-4D48-A697-65B97672B711} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68280 2019-11-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {B3C4678E-7E01-445A-B633-FF307C3FCFD3} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65752 2017-03-20] (Acer Incorporated -> Acer Incorporated)
Task: {CB00CED8-5731-461B-9820-293A6DD72BEE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772528 2020-04-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {D39CEC84-D511-4C46-8892-7FB56AD2E55D} - System32\Tasks\PCMeter\Startup => C:\Users\KKaSo\Downloads\PCMeter\PCMeterV4\PCMeterV0.4.exe
Task: {DD663E53-405A-4581-B941-998916120DB0} - System32\Tasks\Opera GX scheduled Autoupdate 1584031787 => C:\Users\KKaSo\AppData\Local\Programs\Opera GX\launcher.exe [1480216 2020-04-02] (Opera Software AS -> Opera Software)
Task: {DE43D125-7AAC-4FBA-B2E2-0C61B1699248} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [126152 2020-04-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {EAD4ECCE-8458-461E-8E75-186293D62691} - System32\Tasks\Opera scheduled Autoupdate 1524327143 => C:\Program Files\Opera\launcher.exe [1517592 2020-04-29] (Opera Software AS -> Opera Software)
Task: {F6715EBD-7D73-47B0-B92E-1D54E14F9FA0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [472992 2016-06-17] (Acer Incorporated -> Acer Incorporated)
Task: {F8F09A7F-B395-481B-979B-FA6001DAB253} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDD7308D-8022-44E3-BCD8-DABD6EE43180} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\MAGIX PC Check & Tuning 2019 (Autopilot.exe).job => C:\Program Files (x86)\MAGIX\MAGIX PC Check & Tuning 2019\Autopilot.exe C:\Program Files (x86)\MAGIX\MAGIX PC Check & Tuning 2019\DESKTOP-9D3QBDC\KKaSo-MAGIX PC Check & Tuning 2019 (Autopilot.exe
Task: C:\WINDOWS\Tasks\MAGIX PC Check & Tuning 2019.job => C:\Program Files (x86)\MAGIX\MAGIX PC Check & Tuning 2019\PCCT.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4b180d20-a2c2-489c-980a-37167ccc12db}: [DhcpNameServer] 172.20.0.1
Tcpip\..\Interfaces\{da7b4a71-fe5a-46a3-b109-fb6328d4ff7b}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-841053766-362285273-718638101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-841053766-362285273-718638101-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-841053766-362285273-718638101-1001 -> DefaultScope {4B40680C-09D5-4181-BB17-88FB09364F48} URL = 
SearchScopes: HKU\S-1-5-21-841053766-362285273-718638101-1001 -> {4B40680C-09D5-4181-BB17-88FB09364F48} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
======
DownloadDir: C:\Users\KKaSo\Downloads

FireFox:
========
FF DefaultProfile: i2d5qi1s.default
FF ProfilePath: C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\d53oewcb.default-release-1570648074959 [2020-04-21]
FF ProfilePath: C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default [2019-12-08]
FF Extension: (Amazon Assistant for Firefox) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\abb-acer@amazon.com [2018-04-21] []
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\langpack-de@firefox.mozilla.org [2018-04-21] []
FF Extension: (Mozilla Partner Defaults) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\partnerdefaults@mozilla.com [2018-04-21] []
FF Extension: (Avast Online Security) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\wrc@avast.com.xpi [2018-08-10]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-14] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default [2020-05-08]
CHR Notifications: Default -> hxxps://community.woltlab.com; hxxps://www.xhilfe-board.de
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.bing.com/?FORM=SLBRDF&PC=SL09"
CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?FORM=SLBRDF&PC=SL10&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Präsentationen) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-05-02]
CHR Extension: (Docs) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-05-02]
CHR Extension: (Google Drive) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-05-02]
CHR Extension: (YouTube) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-05-02]
CHR Extension: (Norton Security Toolbar) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2019-04-26]
CHR Extension: (Tabellen) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-05-02]
CHR Extension: (Google Docs Offline) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-21]
CHR Extension: (Avast Online Security) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-02-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-22]
CHR Extension: (Amazon Assistant for Chrome) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2020-04-08]
CHR Extension: (Google Mail) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-02]
CHR Extension: (Chrome Media Router) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam]

Opera: 
=======
OPR Notifications: hxxps://breadfish.de; hxxps://sponsor-universe.eu; hxxps://www.babyclub.de; hxxps://www.burningboards.de; hxxps://www.cls-design.com; hxxps://www.compiware-forum.de; hxxps://www.extrem-bodybuilding.de; hxxps://www.modanisa.com; hxxps://www.reddit.com
OPR Extension: (ColorPicker Eyedropper) - C:\Users\KKaSo\AppData\Roaming\Opera Software\Opera Stable\Extensions\cipppkeobpmlmliibpodfhifcanklcog [2018-11-17]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\KKaSo\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2020-04-03]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2725920 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2019-04-29] (Adobe Systems) [Datei ist nicht signiert]
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atiesrxx.exe [509144 2019-12-02] (Advanced Micro Devices, Inc. -> AMD)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [298496 2017-03-22] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10610544 2020-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [775296 2018-04-29] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R3 GameforgeClientService; C:\Program Files (x86)\GameforgeClient\gfservice.exe [529568 2020-04-03] (Gameforge 4D GmbH -> )
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [529696 2019-04-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-09-14] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-08-08] (Logitech Inc -> Logitech Inc.)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1745344 2019-02-01] (Acronis International GmbH -> )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-05-03] (Intel Corporation-Wireless Connectivity Solutions -> )
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\RpcAgentSrv.exe [136712 2020-01-30] (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12097024 2019-11-06] (TeamViewer GmbH -> TeamViewer Germany GmbH)
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [12288 2019-04-16] (Microsoft) [Datei ist nicht signiert]
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [694016 2019-10-10] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\NisSrv.exe [3304992 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MsMpEng.exe [103376 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [20480 2019-04-16] (Microsoft) [Datei ist nicht signiert]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-05-03] (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atikmdag.sys [60671704 2019-12-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atikmpag.sys [598232 2019-12-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [103664 2019-12-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-07-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-10-30] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 fiddrv64; kein ImagePath
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [569392 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [191992 2019-04-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-08-08] (Logitech Inc -> Logitech Inc.)
R3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2018-08-08] (Logitech -> Logitech Inc.)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7708160 2019-03-19] (Microsoft Windows -> Intel Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-01] (Realtek Semiconductor Corp. -> Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [418784 2016-08-05] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware Ltd -> SiSoftware)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [237376 2019-10-11] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [248464 2019-10-11] (Oracle Corporation -> Oracle Corporation)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-05-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [394680 2020-05-01] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64944 2020-05-01] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; kein ImagePath
S3 EverestDriver; \??\C:\Users\KKaSo\AppData\Local\Temp\EverestDriver.sys [X] <==== ACHTUNG

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-05-09 23:48 - 2020-05-09 23:48 - 000000337 _____ C:\UBT_UninstallLog.txt
2020-05-09 23:47 - 2020-05-09 23:47 - 000001132 _____ C:\Users\Public\Desktop\OpenOffice 4.1.7.lnk
2020-05-09 23:47 - 2020-05-09 23:47 - 000001132 _____ C:\ProgramData\Desktop\OpenOffice 4.1.7.lnk
2020-05-09 23:47 - 2020-05-09 23:47 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.7
2020-05-09 23:46 - 2020-05-09 23:46 - 001224264 _____ (Adobe Inc) C:\Users\KKaSo\Downloads\flashplayer32pp_a_install.exe
2020-05-09 23:44 - 2020-05-09 23:44 - 008148680 _____ (Tim Kosse) C:\Users\KKaSo\Downloads\FileZilla_3.48.0_win64-setup.exe
2020-05-09 23:43 - 2020-05-09 23:44 - 175255024 _____ C:\Users\KKaSo\Downloads\Apache_OpenOffice_4.1.7_Win_x86_install_de.exe
2020-05-09 14:30 - 2020-05-09 14:36 - 000069528 ____C C:\Users\KKaSo\Desktop\Addition.txt
2020-05-09 14:28 - 2020-05-09 23:58 - 000027394 ____C C:\Users\KKaSo\Desktop\FRST.txt
2020-05-09 14:27 - 2020-05-09 23:57 - 000000000 ____D C:\FRST
2020-05-09 14:27 - 2020-05-09 14:27 - 002283520 _____ (Farbar) C:\Users\KKaSo\Desktop\FRST64.exe
2020-05-09 14:13 - 2020-05-09 14:13 - 000388608 _____ (Trend Micro Inc.) C:\Users\KKaSo\Desktop\HijackThis.exe
2020-05-09 14:07 - 2020-01-22 12:07 - 018223104 _____ C:\Users\KKaSo\AppData\Roaming\Sandra.mdb
2020-05-09 14:06 - 2020-05-09 14:06 - 000001190 _____ C:\Users\Public\Desktop\SiSoftware Sandra Lite 2020.lnk
2020-05-09 14:06 - 2020-05-09 14:06 - 000001190 _____ C:\ProgramData\Desktop\SiSoftware Sandra Lite 2020.lnk
2020-05-09 14:06 - 2020-05-09 14:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware
2020-05-09 14:06 - 2020-05-09 14:06 - 000000000 ____D C:\Program Files\SiSoftware
2020-05-09 04:16 - 2020-05-09 15:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2020-05-08 15:47 - 2020-05-08 15:48 - 000000607 ____C C:\Users\KKaSo\Desktop\Neues Textdokument.txt
2020-05-05 04:26 - 2020-05-05 04:26 - 000030738 _____ C:\Users\KKaSo\Downloads\STADTPROZELTEN.pdf
2020-05-05 04:10 - 2020-05-05 04:10 - 000044544 _____ C:\Users\KKaSo\Downloads\1_1_personel_sayisi.xls
2020-04-30 16:28 - 2020-04-30 16:29 - 000000000 ____D C:\ProgramData\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000001299 _____ C:\Users\Public\Desktop\PDFelement 6 Pro.lnk
2020-04-30 16:28 - 2020-04-30 16:28 - 000001299 _____ C:\ProgramData\Desktop\PDFelement 6 Pro.lnk
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\ProgramData\PDFelement 6 Pro
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-04-30 16:28 - 2018-06-28 10:38 - 011011136 _____ C:\WINDOWS\SysWOW64\WSPECRT.dll
2020-04-30 16:28 - 2017-10-19 10:17 - 000271360 _____ (Wondershare Software) C:\WINDOWS\system32\WSPDFelementMonitor.dll
2020-04-22 14:49 - 2020-05-03 14:45 - 000001932 ____C C:\Users\KKaSo\Desktop\Ve Selam.txt
2020-04-21 02:01 - 2020-04-21 02:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2020-04-20 12:08 - 2020-04-27 00:30 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-04-19 16:59 - 2020-04-19 16:59 - 000000000 ___DC C:\Users\KKaSo\Documents\Call of Duty Modern Warfare
2020-04-19 05:31 - 2020-04-19 05:31 - 000000759 _____ C:\Users\Public\Desktop\Call of Duty Modern Warfare.lnk
2020-04-19 05:31 - 2020-04-19 05:31 - 000000759 _____ C:\ProgramData\Desktop\Call of Duty Modern Warfare.lnk
2020-04-19 05:31 - 2020-04-19 05:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare
2020-04-19 01:59 - 2020-04-19 01:59 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2020-04-19 01:58 - 2020-04-26 23:58 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Battle.net
2020-04-19 01:58 - 2020-04-19 01:59 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\Battle.net
2020-04-19 01:58 - 2020-04-19 01:58 - 000000946 _____ C:\Users\Public\Desktop\Battle.net.lnk
2020-04-19 01:58 - 2020-04-19 01:58 - 000000946 _____ C:\ProgramData\Desktop\Battle.net.lnk
2020-04-19 01:58 - 2020-04-19 01:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2020-04-19 01:57 - 2020-04-19 01:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-04-19 01:57 - 2020-04-19 01:58 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Blizzard Entertainment
2020-04-19 01:56 - 2020-04-19 01:57 - 000000000 ____D C:\ProgramData\Battle.net
2020-04-19 01:56 - 2020-04-19 01:56 - 004934824 _____ (Blizzard Entertainment) C:\Users\KKaSo\Desktop\Modern-Warfare-Setup.exe
2020-04-15 02:10 - 2020-04-15 02:10 - 001402450 _____ C:\Users\KKaSo\Downloads\Flyer 4.2017.pdf
2020-04-14 21:03 - 2020-04-14 21:03 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 018027520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 005910016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 004611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 004129624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 003512320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 002951832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001870408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001545216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 001310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001013000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2020-04-14 21:03 - 2020-04-14 21:03 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000420152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 022636544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 017790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 014818816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 007849216 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 007756800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 006523048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 004563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003802624 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003753472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003587384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 003547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 002767928 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002717184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002126144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002114560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002086656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001960448 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-04-14 21:02 - 2020-04-14 21:02 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001726264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001665216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001646048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001603584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001512832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001484384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001427456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001397576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001378528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 001263856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001261808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001243648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001077064 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000993280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000879616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000811320 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000775696 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000759272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000684560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000673704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000673464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000638480 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000628616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000618296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2020-04-14 21:02 - 2020-04-14 21:02 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000538160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000515600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000513576 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000510792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000487784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-04-14 21:02 - 2020-04-14 21:02 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000437560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000339304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000297272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000277864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000268008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000147696 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000123952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000050544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000033080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-04-14 20:51 - 2020-04-14 20:52 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-04-14 20:51 - 2020-04-14 20:52 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-04-11 14:00 - 2020-05-04 16:54 - 000000475 ____C C:\Users\KKaSo\Desktop\new text.txt
2020-04-10 12:44 - 2020-04-10 12:44 - 016718093 _____ C:\Users\KKaSo\Downloads\Ohne Titel.wmv
2020-04-10 00:05 - 2020-04-10 12:21 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\VEGAS
2020-04-10 00:05 - 2020-04-10 00:05 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\VEGAS Pro
2020-04-10 00:05 - 2020-04-10 00:05 - 000000000 ____D C:\Users\KKaSo\AppData\Local\VEGAS Pro
2020-04-10 00:05 - 2020-04-10 00:05 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Sony
2020-04-10 00:05 - 2020-04-10 00:05 - 000000000 ____D C:\Users\KKaSo\AppData\Local\MAGIX
2020-04-10 00:05 - 2020-04-10 00:05 - 000000000 ____D C:\ProgramData\VEGAS Pro
2020-04-10 00:04 - 2020-04-10 00:04 - 000001147 ____C C:\Users\KKaSo\Desktop\VEGAS Pro 15.0.lnk
2020-04-10 00:03 - 2020-04-10 00:03 - 000000000 ____D C:\Users\KKaSo\AppData\Local\VEGAS
2020-04-10 00:03 - 2020-04-10 00:03 - 000000000 ____D C:\ProgramData\VEGAS
2020-04-10 00:03 - 2020-04-10 00:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2020-04-10 00:03 - 2020-04-10 00:03 - 000000000 ____D C:\Program Files\VEGAS
2020-04-10 00:03 - 2020-04-10 00:03 - 000000000 ____D C:\Program Files (x86)\VEGAS
2020-04-10 00:02 - 2020-04-10 00:02 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\Sony
2020-04-09 23:48 - 2020-04-09 23:49 - 482868693 _____ C:\Users\KKaSo\Downloads\VEGAS_Pro_15.0.0.416.Oneindir.com.rar
2020-04-09 00:02 - 2020-04-09 00:02 - 000002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Produktpalette.lnk
2020-04-09 00:02 - 2020-04-09 00:02 - 000001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc-Brennprogramm.lnk
2020-04-09 00:02 - 2020-04-09 00:02 - 000000000 ____D C:\Users\KKaSo\NCH Software Produktpalette

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-05-09 23:55 - 2020-03-23 09:14 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-05-09 23:55 - 2019-10-30 19:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-05-09 23:55 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-05-09 23:55 - 2018-04-24 16:54 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-05-09 23:54 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-05-09 23:54 - 2017-03-13 10:30 - 000000000 ____D C:\ProgramData\Acer
2020-05-09 23:54 - 2017-03-13 10:30 - 000000000 ____D C:\Program Files (x86)\Acer
2020-05-09 23:54 - 2017-03-13 10:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2020-05-09 23:54 - 2017-03-13 10:14 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2020-05-09 23:53 - 2019-10-30 19:16 - 000565496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-05-09 23:53 - 2018-06-04 19:56 - 000000000 ____D C:\ProgramData\AVAST Software
2020-05-09 23:48 - 2017-03-13 10:29 - 000000000 ____D C:\ProgramData\OEM
2020-05-09 23:47 - 2018-09-09 12:17 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2020-05-09 23:46 - 2018-05-01 12:30 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\Adobe
2020-05-09 23:46 - 2018-04-29 20:21 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\CrashDumps
2020-05-09 23:45 - 2018-06-04 19:56 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\FileZilla
2020-05-09 23:44 - 2018-06-04 19:56 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\FileZilla
2020-05-09 23:44 - 2018-06-04 19:56 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2020-05-09 23:44 - 2018-05-01 12:30 - 000000000 ____D C:\Program Files (x86)\Google
2020-05-09 23:37 - 2019-10-30 19:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-05-09 17:17 - 2018-04-29 09:54 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\TS3Client
2020-05-09 17:00 - 2019-10-30 19:28 - 002570690 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-05-09 17:00 - 2019-10-30 18:55 - 000699050 _____ C:\WINDOWS\system32\perfh01F.dat
2020-05-09 17:00 - 2019-10-30 18:55 - 000146194 _____ C:\WINDOWS\system32\perfc01F.dat
2020-05-09 17:00 - 2019-03-19 14:16 - 000743888 _____ C:\WINDOWS\system32\perfh007.dat
2020-05-09 17:00 - 2019-03-19 14:16 - 000150212 _____ C:\WINDOWS\system32\perfc007.dat
2020-05-09 17:00 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-05-09 16:54 - 2018-04-21 18:12 - 000000000 ____D C:\Program Files\Opera
2020-05-09 16:54 - 2017-03-13 10:36 - 000000000 ____D C:\ProgramData\Norton
2020-05-09 16:54 - 2017-03-13 10:36 - 000000000 ____D C:\Program Files (x86)\Norton Security
2020-05-09 16:53 - 2019-10-30 19:20 - 000000000 ____D C:\Users\KKaSo
2020-05-09 16:52 - 2019-05-04 15:15 - 000000000 ____D C:\Program Files (x86)\Metin2
2020-05-09 16:39 - 2018-04-29 11:57 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\discord
2020-05-09 15:25 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-05-09 15:25 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-05-09 15:22 - 2017-03-13 10:36 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2020-05-09 14:07 - 2018-09-25 18:27 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\D3DSCache
2020-05-09 14:07 - 2017-03-13 10:02 - 000000000 ____D C:\ProgramData\Package Cache
2020-05-09 13:56 - 2018-08-15 10:48 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\AVAST Software
2020-05-09 04:03 - 2020-03-12 18:49 - 000003542 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1584031787
2020-05-09 04:03 - 2020-02-08 14:49 - 000003518 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1581166179
2020-05-09 04:03 - 2019-12-04 18:35 - 000002388 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2020-05-09 04:03 - 2019-10-30 19:26 - 000003328 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1524327143
2020-05-09 04:03 - 2019-10-30 19:26 - 000002850 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-841053766-362285273-718638101-1001
2020-05-09 00:30 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-05-09 00:30 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-05-08 14:12 - 2018-05-10 09:33 - 000000000 ____D C:\Program Files (x86)\Steam
2020-05-08 01:17 - 2017-03-13 09:49 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-05-05 04:10 - 2018-04-21 18:08 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\Packages
2020-05-01 23:03 - 2018-06-13 22:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-04-30 16:21 - 2018-04-21 18:12 - 000001112 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2020-04-30 04:01 - 2018-04-21 18:08 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\AMD
2020-04-27 00:30 - 2019-10-09 21:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-04-21 02:03 - 2018-04-21 18:10 - 000000000 ___DC C:\Users\KKaSo\AppData\LocalLow\Mozilla
2020-04-21 02:01 - 2019-10-09 21:07 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-04-16 22:29 - 2019-10-30 19:20 - 000002380 ____C C:\Users\KKaSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-04-16 22:29 - 2018-04-21 18:10 - 000000000 ___RD C:\Users\KKaSo\OneDrive
2020-04-16 08:12 - 2019-10-30 19:20 - 000000000 ____D C:\Users\defaultuser0
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-04-16 00:02 - 2019-10-30 19:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2020-04-14 21:05 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-04-12 13:49 - 2018-07-11 15:41 - 000000000 ____D C:\ProgramData\Packages
2020-04-10 10:28 - 2020-04-06 15:15 - 000000000 __RDC C:\Users\KKaSo\Desktop\Programm
2020-04-10 00:05 - 2019-01-31 21:29 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\MAGIX
2020-04-09 00:02 - 2019-01-03 13:12 - 000000000 ____D C:\ProgramData\NCH Software
2020-04-09 00:02 - 2019-01-03 13:12 - 000000000 ____D C:\Program Files (x86)\NCH Software

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2018-04-21 19:02 - 2018-04-21 19:04 - 000000624 ____C () C:\Users\KKaSo\AppData\Roaming\All CPU MeterV3_Settings.ini
2019-02-17 21:59 - 2019-02-17 21:59 - 000000137 ____C () C:\Users\KKaSo\AppData\Roaming\bios.ini
2018-04-21 19:04 - 2018-04-21 19:04 - 000000997 ____C () C:\Users\KKaSo\AppData\Roaming\Currency Meter_Settings.ini
2020-05-09 14:07 - 2020-01-22 12:07 - 018223104 _____ () C:\Users\KKaSo\AppData\Roaming\Sandra.mdb
2019-09-14 11:39 - 2019-09-14 11:39 - 000883952 ____C (Teknopars) C:\Users\KKaSo\AppData\Local\CikcikOkey.exe
2019-12-07 23:54 - 2019-12-07 23:54 - 000007605 _____ () C:\Users\KKaSo\AppData\Local\Resmon.ResmonCfg
2019-02-17 21:59 - 2019-02-17 21:59 - 000010026 ____C () C:\Users\KKaSo\AppData\Local\ringin.wav
2019-02-17 21:58 - 2019-02-17 21:58 - 000776944 ____C (Teknopars) C:\Users\KKaSo\AppData\Local\SuperDama.exe
2019-02-18 20:08 - 2019-02-18 20:08 - 011963632 ____C (Teknopars Bilisim Teknolojileri) C:\Users\KKaSo\AppData\Local\SuperDamaX.exe

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 09-05-2020
durchgeführt von KKaSo (09-05-2020 23:59:07)
Gestartet von C:\Users\KKaSo\Desktop
Windows 10 Home Version 1903 18362.778 (X64) (2019-10-30 17:27:06)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-841053766-362285273-718638101-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-841053766-362285273-718638101-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-841053766-362285273-718638101-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-841053766-362285273-718638101-501 - Limited - Disabled)
KKaSo (S-1-5-21-841053766-362285273-718638101-1001 - Administrator - Enabled) => C:\Users\KKaSo
WDAGUtilityAccount (S-1-5-21-841053766-362285273-718638101-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton Security (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Norton Security (Disabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.07.2004 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 4.00.2001.1 - Acer Incorporated)
Acronis True Image (HKLM-x32\...\{9BB8598B-C237-446F-AD4E-8F0FA6A93D10}) (Version: 22.6.15470 - Acronis) Hidden
Acronis True Image (HKLM-x32\...\{9BB8598B-C237-446F-AD4E-8F0FA6A93D10}Visible) (Version: 22.6.15470 - Acronis)
Adobe Audition 2020 (HKLM-x32\...\AUDT_13_0_4) (Version: 13.0.4 - Adobe Systems Incorporated)
Adobe Audition 3.0 (HKLM-x32\...\Adobe Audition 3.0) (Version: 3.0 - Adobe Systems Incorporated)
Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 29.0.0.140 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.12.1 - Advanced Micro Devices, Inc.)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.25.2001.0 - Acer Incorporated)
Audacity 2.3.0 (HKLM-x32\...\Audacity_is1) (Version: 2.3.0 - Audacity Team)
balenaEtcher 1.5.76 (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\{d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b}) (Version: 1.5.76 - Balena Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{0473af6f-6d5b-448f-8410-50c98e43ed00}) (Version: 4.3.1.1 - Brother Industries, Ltd.)
Brother iPrint&Scan (HKLM-x32\...\{F9F653E2-4490-471B-BF2C-A8CFF2C68AED}) (Version: 4.3.1.1 - Brother Industries, Ltd.) Hidden
Brother PCFax Driver (HKLM-x32\...\{56BA05BD-7A67-4EF8-85A7-8C6528AEE2AC}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{272543B6-B337-4C8F-B9F1-19E884C2C7AC}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{1162495D-7CE7-4EF9-A0F8-151196F3A660}) (Version: 1.0.17.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version:  - Blizzard Entertainment)
Catalyst Control Center Next Localization BR (HKLM\...\{5591A46B-4FD3-21E2-039C-737CC739F52E}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{1165E935-AA00-7CE4-C458-B6C7290682CC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{272BFE26-87E0-B8DE-54F2-FD44A32DFBD5}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{BB45FEF8-167F-72F7-A631-5DB3D93A8872}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{B78A2258-5630-C1DF-0F27-AD1F1E59AEC6}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{8DEF9006-FC17-6332-79C6-49A47B86ABFD}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{EA0D8B3B-ADB3-6DBC-DA34-51B70AE29C16}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{052F0949-D33A-3128-9DCE-50BEA1B341B7}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{081C8424-2C7F-573E-ED3B-61E063111DC5}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{A3571290-2E3C-F314-866E-52A3B9295DA9}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{964640D0-AC6C-9549-892E-DB0E3AAC5CEF}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{EA54F30D-6AB0-7870-A0F2-E802632E3AE1}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{C1B17BA3-56B2-47B1-E4EE-6602392724AE}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{78B5EF49-6FD5-0A1F-C7C3-A5B8214C1DAC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{2ED86AAF-9DA0-8F95-21E1-01D6878E312D}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{1B77DD3D-8DA4-CE05-36CE-6FBF71995D74}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{7461FCE1-D63D-C463-00F4-55864E06079D}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{234B355E-EFF0-C923-A496-FA032E54F820}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{FDEFB5D3-92AC-4A94-1682-92143E3DA051}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{D2115CD4-D30A-9605-FAE8-B21EF4CD20EC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{DA3AE593-6667-EAD6-4BBF-3936FE1164D7}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.6795 - CDBurnerXP)
ControlCenter4 (HKLM-x32\...\{9091B952-8719-49C3-9CC7-6E20EC61081F}) (Version: 4.6.6.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
Debut Video-Aufnahme-Programm (HKLM-x32\...\Debut) (Version: 5.23 - NCH Software)
Discord (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Doxillion Dokumentkonverter (HKLM-x32\...\Doxillion) (Version: 3.16 - NCH Software)
DriverSetupUtility (HKLM\...\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}) (Version: 1.00.3019 - Acer Incorporated)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Express Burn Disc-Brennprogramm (HKLM-x32\...\ExpressBurn) (Version: 9.03 - NCH Software)
FFmpeg (Windows) for Audacity Version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
FileZilla Client 3.48.0 (HKLM-x32\...\FileZilla Client) (Version: 3.48.0 - Tim Kosse)
Gameforge Client (HKLM-x32\...\{d3b2a0c1-f0d0-4888-ae0b-1c5e1febdafb}_is1) (Version: 2.0.54.131 - Gameforge)
Git version 2.25.0 (HKLM\...\Git_is1) (Version: 2.25.0 - The Git Development Community)
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.26) (Version: 9.26 - Artifex Software Inc.)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
Intel Processor Diagnostic Tool 64bit (HKLM-x32\...\{d23ef847-2a5d-49ad-a6b5-7ffc8f255179}) (Version: 4.1.4.36 - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{8790ED90-756F-45DD-B38F-7436093963C6}) (Version: 19.11.1639.0649 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel® Hardware Accelerated Execution Manager (HKLM\...\{73250D12-B600-4ED6-AFC0-10D9D8EDA745}) (Version: 7.3.2 - Intel Corporation)
Intel® Processor Identification Utility (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Intel® Programm für die Prozessorerkennung 6.1.0731) (Version: 6.1.0731 - Intel Corporation)
Intel® Programm für die Prozessorerkennung (HKLM-x32\...\{909744AA-EECD-4786-9624-93C146B68D92}) (Version: 6.1.0731 - Intel Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{bc883058-299e-461f-8e52-4f1dbb355f86}) (Version: 19.0.1 - Intel Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Logitech Gaming Software 9.02 (HKLM\...\Logitech Gaming Software) (Version: 9.02.61 - Logitech Inc.)
MAGIX Connect (HKLM\...\{B0C73D27-EB3E-4D0E-B40D-0141DAF708CC}) (Version: 3.0.0.1 - MAGIX Software GmbH) Hidden
MAGIX Connect (HKLM\...\MX.{B0C73D27-EB3E-4D0E-B40D-0141DAF708CC}) (Version: 3.0.0.1 - MAGIX Software GmbH)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH)
MAGIX PC Check & Tuning 2019 (HKLM-x32\...\PC Check Tuning 2019_is1) (Version: 2.7.0.56 - MAGIX Software GmbH)
MAGIX Soundpool Music Maker - Feel good (HKLM\...\{83D2491E-E25D-4CEB-9AFD-CEF77BF03974}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 7.0.1 - CEWE Stiftung u Co. KGaA)
Metin2 (HKLM-x32\...\Metin2_DE_is1) (Version:  - Gameforge 4D GmbH)
Metin2 (HKLM-x32\...\Metin2_PA_is1) (Version:  - Gameforge 4D GmbH)
Metin2 de-DE (HKLM-x32\...\{fab180a3-cd65-4b7e-bd0e-2ef77fd0c258.de-DE}) (Version:  - Gameforge)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.12730.20250 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0012 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox 75.0 (x64 de) (HKLM\...\Mozilla Firefox 75.0 (x64 de)) (Version: 75.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 69.0.2 - Mozilla)
Music Maker (HKLM\...\{A03DDADD-6280-46A7-B101-93EF16E78DE4}) (Version: 27.0.2.28 - MAGIX Software GmbH) Hidden
Music Maker (HKLM-x32\...\MX.{A03DDADD-6280-46A7-B101-93EF16E78DE4}) (Version: 27.0.2.28 - MAGIX Software GmbH)
NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.6 - Notepad++ Team)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 21.1.2 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
OpenOffice 4.1.7 (HKLM-x32\...\{81D7585D-3E44-4984-B99B-911492419D3E}) (Version: 4.17.9800 - Apache Software Foundation)
Opera GX Stable 67.0.3575.130 (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Opera GX 67.0.3575.130) (Version: 67.0.3575.130 - Opera Software)
Opera Stable 68.0.3618.63 (HKLM-x32\...\Opera 68.0.3618.63) (Version: 68.0.3618.63 - Opera Software)
Oracle VM VirtualBox 6.0.14 (HKLM\...\{5F88BE85-569B-46F5-B961-463A445AC5EA}) (Version: 6.0.14 - Oracle Corporation)
osrss (HKLM-x32\...\{1BA1133B-1C7A-41A0-8CBF-9B993E63D296}) (Version: 1.0.0 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{BAFF7E40-25F2-4681-95F1-9D0E8EF0ABA4}) (Version: 4.2.8 - dotPDN LLC)
PC-FAXReceive (HKLM-x32\...\{65EA2C86-30CD-444C-ADAB-8762BE4E2E8C}) (Version: 1.8.003.0 - Brother Insutries Ltd.) Hidden
PCFaxTx (HKLM-x32\...\{03BF5A21-6363-410C-B3BE-0946B0012704}) (Version: 3.7.3.1 - Brother Industries Ltd.) Hidden
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.0 beta r2613 - Win10 Widgets)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7954 - Realtek Semiconductor Corp.)
RemoteSetup (HKLM-x32\...\{FAB8A30A-B074-48F9-9D73-5E9A757403F8}) (Version: 3.10.2.0 - Brother Industries Ltd.) Hidden
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
SiSoftware Sandra Lite 2020 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 30.27.2020.1 - SiSoftware)
SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{40578A7A-6E36-457F-A4F0-45BC37EB61FD}) (Version: 1.20.1.0 - Brother Insutries Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.1.8 - TeamSpeak Systems GmbH)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.0.8397 - TeamViewer)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VEGAS Pro 15.0 (HKLM\...\{EAFAE361-EC36-11E8-9A08-00155D6302F2}) (Version: 15.0.416 - VEGAS)
Vita Concert Grand LE (HKLM\...\{CB5D721E-C919-4CDF-8356-D6F84490FB3F}) (Version: 2.4.0.96 - MAGIX Software GmbH) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22402 - Microsoft Corporation)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)
Wondershare PDFelement 6 Pro(Build 6.8.0) (HKLM-x32\...\{B026557A-EF19-4812-8A79-B30F94AA0A78}_is1) (Version: 6.8.0.3523 - Wondershare Software Co.,Ltd.)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Booking.com -> C:\Program Files\WindowsApps\Booking.com_1.0.1606.2210_x64__96rgg7pjt343r [2017-03-13] (CN=Acer Incorporated)
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.8.5.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)
eBay -> C:\Program Files\WindowsApps\eBay_1.0.1606.2210_x64__96rgg7pjt343r [2017-03-13] (CN=Acer Incorporated)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2019-10-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad]
Microsoft News – Nachrichten -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]
MSN Wetter -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2020-01-16] (MAGIX)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)
One Calendar -> C:\Program Files\WindowsApps\64885BlueEdge.OneCalendar_2020.229.1.0_x64__8kea50m9krsh2 [2020-03-09] (Code Spark)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0 [2020-05-09] (Spotify AB) [Startup Task]
WildTangent Games -> C:\Program Files\WindowsApps\WildTangentGames.63435CFB65F55_2.0.82.0_x64__qt5r5pa5dyg8m [2019-12-24] (WildTangent Games)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.4.0_x86__xpfg3f7e9an52 [2020-04-06] (New Work SE)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-841053766-362285273-718638101-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Users\KKaSo\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll (AddGadgets IT -> )
CustomCLSID: HKU\S-1-5-21-841053766-362285273-718638101-1001_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\KKaSo\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-841053766-362285273-718638101-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\KKaSo\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-03-19] (Notepad++ -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-11-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.i420] => lvcod64.dll
HKLM\...\Drivers32-x32: [vidc.i420] => lvcodec2.dll

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2020-04-30 16:28 - 2016-07-21 10:54 - 000137728 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2020-04-30 16:28 - 2016-10-08 16:48 - 001506304 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 048936448 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\libcef.dll
2019-05-04 15:16 - 2019-07-16 07:53 - 000075264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\libegl.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 001665024 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\libglesv2.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 000083456 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssa3d.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000070656 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssds3d.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000093696 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssdsp.flt
2019-05-04 15:16 - 2019-07-16 07:45 - 000080896 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssdx7.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000103424 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\msseax.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000125952 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssmp3.asi
2019-05-04 15:16 - 2019-07-16 07:45 - 000354816 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssrsx.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000067072 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\msssoft.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000197120 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssvoice.asi
2019-05-04 15:16 - 2019-07-16 07:53 - 000349696 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\mss32.dll
2019-05-04 15:25 - 2019-07-16 07:45 - 001806336 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\SpeedTreeRT.dll
2019-05-17 21:56 - 2005-04-22 13:36 - 000143360 _____ () [Datei ist nicht signiert] C:\WINDOWS\system32\BrSNMP64.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 000269312 _____ (Abysmal Software) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\DevIL.dll
2019-05-17 21:56 - 2016-11-01 11:27 - 000090112 _____ (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll
2019-05-04 15:16 - 2019-07-16 07:53 - 000401462 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\MSVCP60.dll
2019-05-04 15:25 - 2019-07-16 07:53 - 002436608 _____ (Python Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\python27.dll
2019-05-04 15:16 - 2020-02-03 19:55 - 000663040 _____ (RAD Game Tools, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\granny2.dll
2020-04-30 16:28 - 2017-10-19 10:17 - 000271360 _____ (Wondershare Software) [Datei ist nicht signiert] C:\WINDOWS\System32\WSPDFelementMonitor.dll
2020-04-30 16:28 - 2016-10-08 16:49 - 000708608 _____ (Wondershare) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Public\AppData:CSM [474]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ==========

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2019-01-04 13:20 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\Common Files\Adobe\AGL;C:\Program Files\Git\cmd
HKU\S-1-5-21-841053766-362285273-718638101-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\KKaSo\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\hintergrund.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
 ist deaktiviert.

Network Binding:
=============
WLAN: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKLM\...\StartupApproved\Run32: => "M17A"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "BrotherSoftwareUpdateNotification"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "QMxNetworkSync"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{88EA8042-D2C8-4CB5-B16C-DABD44A5DCC5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{0E2E227B-CDBC-4156-B670-68DB02ED1068}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B1CE5C41-5D3B-4BE3-A46A-2FAE9BFE0C0C}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{435536C1-FACC-47D1-BD5F-22EA04C77F04}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{79EAB191-F63A-43E7-B076-036B50A66868}] => (Allow) LPort=54955
FirewallRules: [{7A5E79BF-1386-45CB-90B8-92D6103564B4}] => (Allow) LPort=54950
FirewallRules: [{8C8C99E4-DA76-4715-B906-F8A1C6817A35}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{006EE698-1A1A-4544-9D9A-7807657E65A3}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )
FirewallRules: [{28E62D8A-F0AC-41E9-A7A0-AB64EB953C77}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )
FirewallRules: [{91C988AC-E117-468F-9A35-33E40784F72A}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )
FirewallRules: [{F581B51F-6979-4909-B597-EB14856DBB6D}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{A3D7A217-3028-444B-93E7-4E557EC0CEBA}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )
FirewallRules: [{5CB330AA-27F4-4CB0-8C0D-3736512552F8}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )
FirewallRules: [{73AB4E3D-A530-4011-9CA1-065B024976D1}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )
FirewallRules: [{A2594CD0-BBE5-4544-8347-136429262591}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> )
FirewallRules: [{B6A00CC7-4916-4DDF-9F5F-1B827C99CCEA}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> )
FirewallRules: [{6AFEA669-E396-488F-BBFD-91184B1643A0}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )
FirewallRules: [{42AC73E6-9C75-4EA5-9B48-450223F9F111}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )
FirewallRules: [{6821CCF6-CA99-471B-963A-DFA50322309B}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{2495D374-0A57-4E70-B9DE-290C4731151A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )
FirewallRules: [{98FD5162-04FB-45A2-A0C1-048227CFFA4A}] => (Allow) C:\Program Files (x86)\MAGIX\Music Maker\27\MusicMaker.exe (MAGIX Software GmbH -> MAGIX Software GmbH)
FirewallRules: [{50D2D912-B7C9-4490-8D13-5D755659137A}] => (Allow) C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe (MAGIX Software GmbH -> MAGIX)
FirewallRules: [UDP Query User{4C424CBC-20F5-4B8A-8F81-E4F015C704A9}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{B8CAF9E6-7CE3-46EB-8191-AC42FA0B6008}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{9EB8268A-8689-4F72-B938-13A949B0F9C8}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{7A08B5B7-D291-4CEC-8EEA-8FD5056D79D7}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{8F3E2996-A8E8-4EFB-ACF2-C8AFE054CFBD}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{091761A1-8522-43EE-9247-7C2026865841}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{7B3974F0-900B-4E08-8480-AEB5D04F7620}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{598840E3-FE66-4E33-962B-C4C6895D464C}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{1227BA55-0543-4427-94B3-4DD3049BE0AA}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{97539F4C-D2A3-443C-845D-B0EA6CF01C31}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{1454E727-53EC-428F-9C78-6D40EE830FB4}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{0825EAB9-1828-488E-A39A-96EDE595A039}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe => Keine Datei
FirewallRules: [{F29699F2-BE3E-4F4D-8B53-5BBCD11139A9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{751D4079-5366-4101-8327-CB73606C66FD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{6C3C311E-BDEE-4884-8B44-E1B7B564D83E}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{38E42B91-F245-4911-82E8-A7F5C048B61C}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{29ADD970-EC1D-47B8-B741-B68229B8DEDA}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{791255EC-337A-4EC2-8301-D3BD6B56D7CA}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{CA46ABA0-0E82-4077-98F6-FD651670EB24}C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe] => (Allow) C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe => Keine Datei
FirewallRules: [TCP Query User{0B16CDFB-6B7F-47EA-AF21-76148E26E7C0}C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe] => (Allow) C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe => Keine Datei
FirewallRules: [UDP Query User{A3529D96-BD01-402D-BC43-05B33FF1FD21}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{75AA240F-9951-488F-BBF6-BB7009A9A1B6}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{FA04502D-BF6E-4CF6-AFF6-D4C17EA213E1}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{9AFB9BAD-2631-4393-898E-1B39563754E8}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{FA9BC5EF-9AC1-4EAA-BD09-38D65CB3B39F}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{37E6BB58-8D11-4601-B730-F455BC10D05E}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{30C66F72-E85F-48C4-B63A-AAD464C8A778}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{D3521CB0-23DA-43B9-BCD7-686B8B0492F8}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{E1235920-A10F-4011-A6DB-B6DD2032B7CE}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{90562295-D12B-4CB4-AF6F-34A0C9BC535E}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe => Keine Datei
FirewallRules: [{9163DCCC-D216-4E11-AD6A-65F09A6DA883}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Wireless Connectivity Solutions -> )
FirewallRules: [{E6610B27-4F94-4B8B-8FDE-391F986917DF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => Keine Datei
FirewallRules: [{C8728630-61B3-4775-9F15-65F4FC21733F}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Acer Incorporated -> Acer Cloud Technology)
FirewallRules: [{88E761A2-B1BF-4FB9-B789-34BE6AD4A694}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Acer Incorporated -> Acer Cloud Technology)
FirewallRules: [{6C7E0EA2-A82C-484E-BCE0-BE3CBB11BE64}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{5A97F05C-F488-441D-993D-7A32964D20D1}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{A4378B8B-3B77-405B-B7FE-7AC38A0B7FB5}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe (Acer Incorporated -> acer)
FirewallRules: [{116D4AA4-4FCF-4551-8301-2E0B95C20D57}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe (Acer Incorporated -> acer)
FirewallRules: [TCP Query User{2AD426E3-9A7B-4B30-80C9-86F1C01479E4}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{0610B7FF-D31A-49FC-BCEC-4135DC7D589F}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe => Keine Datei
FirewallRules: [{0561BE02-0074-4DF8-BDDB-A951DE56E621}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{E6BAF630-3BD6-4DF3-8F3D-BD1EF8936139}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{4461734C-D586-4845-8FCA-474BAB2CD99D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{9F09BF2D-06D8-465D-B12E-8CBC53BD7DEA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{31F49FB7-5667-4F96-8C67-706F5CF61097}] => (Allow) E:\Game\Doom 4\steamapps\common\quakechampions\client\bin\pc\QuakeChampions.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [{5B0FE106-D3CA-40F6-882B-9DD9B6325BAC}] => (Allow) E:\Game\Doom 4\steamapps\common\quakechampions\client\bin\pc\QuakeChampions.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [{4F4AFF6C-B799-44B4-B50F-AD35853CF9FD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{3A2F4C19-6E1E-41EF-90FC-FE094F100AA1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B8A0A138-B514-48B4-976D-7F36D89203D9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D897672E-0DAE-42D2-B48D-1220B537D2D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D7478FB9-3BFB-494A-8942-2E2F73A290D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{14BC13BA-7216-4F77-9603-29ABD430EE86}] => (Allow) C:\Program Files\Opera\67.0.3575.137\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{F0C6A780-1E1A-4762-953F-77608B67A1BC}] => (Allow) C:\Program Files\Opera\68.0.3618.63\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{2F72ED59-D47A-4E5A-B016-FBF1286718E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F4F5159C-6C3A-4068-982F-E39F21E4AA1E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9CB1A2C9-5C5A-4619-85B8-03FAD82EF8E7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8322DB6F-4047-4DD1-9FE0-735C217A69B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1985680C-8200-4B51-BCFB-6DDA4FC76709}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D744B78A-2A1B-491D-88E1-96AEF1128236}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B1C662F7-9F52-4BCF-A960-9AD7DCB1D7BA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5C0CC554-8683-41D9-94FC-BA8EE6B96898}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8C6C46A9-7E34-41FA-80A6-7C22B6DA874A}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\RpcAgentSrv.exe (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]
FirewallRules: [{6C5659C8-E714-45D5-9771-2A9D6D013780}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\WNt600x64\RpcSandraSrv.exe (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:118.13 GB) (Free:42.89 GB) (36%)

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (05/09/2020 11:55:32 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Metin2\metin2launch.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Broadcast Receiver Server...

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList[1]: 192.168.56.1

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList[0]: fe80::3416:4b88:92c9:e936%15

Error: (05/09/2020 11:55:28 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList.Length: 2


Systemfehler:
=============
Error: (05/09/2020 04:52:38 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 04:46:55 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{0134A8B2-3407-4B45-AD25-E9F7C92A80BC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 04:42:43 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{0134A8B2-3407-4B45-AD25-E9F7C92A80BC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 03:18:56 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{0134A8B2-3407-4B45-AD25-E9F7C92A80BC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 02:17:48 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{0134A8B2-3407-4B45-AD25-E9F7C92A80BC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 02:04:38 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{0134A8B2-3407-4B45-AD25-E9F7C92A80BC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 01:58:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9D3QBDC)
Description: Der Server "{0134A8B2-3407-4B45-AD25-E9F7C92A80BC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/09/2020 05:14:39 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-9D3QBDC)
Description: Fehler "1053" in DCOM, als der Dienst "BcastDVRUserService_6b296787" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
Windows.Media.Capture.Internal.AppCaptureShell


Windows Defender:
===================================
Date: 2020-04-30 16:27:21.478
Description: 
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.C!ml&threatid=2147749372&enterprise=0
Name: Trojan:Win32/Wacatac.C!ml
ID: 2147749372
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\KKaSo\Downloads\Adobe Audition 2020 Kurulum.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: FastPath
Erkennungsquelle: System
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: Unknown
Sicherheitsversion: AV: 1.313.2652.0, AS: 1.313.2652.0, NIS: 1.313.2652.0
Modulversion: AM: 1.1.16900.4, NIS: 1.1.16900.4

CodeIntegrity:
===================================

Date: 2020-05-09 16:56:24.439
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 16:56:24.412
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 16:54:26.087
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 13:55:52.416
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 13:55:52.403
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Norton Security\Engine\22.20.1.69\symamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 05:14:47.235
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20180618.001\BHDrvx64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-09 05:14:47.206
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20180618.001\BHDrvx64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-09 04:36:12.598
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. R02-A0 11/17/2016
Hauptplatine: Acer Aspire GX-781
Prozessor: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 59%
Installierter physikalischer RAM: 8150.51 MB
Verfügbarer physikalischer RAM: 3306.86 MB
Summe virtueller Speicher: 21974.51 MB
Verfügbarer virtueller Speicher: 14754.07 MB

==================== Laufwerke ================================

Drive c: (Win10) (Fixed) (Total:118.13 GB) (Free:42.9 GB) NTFS
Drive e: (Daten) (Fixed) (Total:931.39 GB) (Free:728.08 GB) NTFS

\\?\Volume{c5433f53-0e1b-4820-a4ee-6657be27695b}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.56 GB) NTFS
\\?\Volume{73a3d34e-2aee-4e6f-9073-b64050ddf70a}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 33B61532)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: E1B31D3A)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

So,.. ich habe nun meine aktuelle neue Logs hochgeladen. Ich habe OpenOffice und FileZila auf die neueste Version geupdatet.

Nur bei Photoshop kann ich derzeit nichts machen, da ich kein Update für die Version bekomme und es schon jahrelang als Software CD habe.

Mein Rechner läuft schonmal etwas besser als davor.

Ich habe OpenOffice und FileZila auf die neueste Version geupdatet.

Meine Beiträge mal richtig lesen?
OpenOffice sollte komplett runter, FileZilla und den Rest aktualisieren solltest du ERST MACHEN wenn wir hier durch sind

Außerdem hab ich da ncoh weiteren Schwachsinn entdeckt: MAGIX PC Check & Tuning 2019

Das und OpenOffice bitte deinstallieren. Einfach nur Bescheid geben wenn das runter ist.

Magix PC Check und Tuning 2019 + OpenOffice wurden vom Rechner deinstalliert.

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

# -------------------------------
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build:    04-03-2020
# Database: 2020-04-08.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    05-11-2020
# Duration: 00:00:03
# OS:       Windows 10 Home
# Cleaned:  10
# Failed:   1


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Users\defaultuser0\AppData\Local\Host App Service
Deleted       C:\Windows\ServiceProfiles\LocalService\AppData\Local\Host App Service
Deleted       C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Host App Service

***** [ Files ] *****

Deleted       C:\Windows\System32\Tasks_Migrated\App Explorer

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\csastats
Deleted       HKLM\Software\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted       HKLM\Software\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}
Deleted       HKLM\Software\Wow6432Node\\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}

***** [ Chromium (and derivatives) ] *****

Not Deleted   Amazon Assistant for Chrome - pbjikboenpfhbbejgkoklgkhjpfogcam

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete IFEO
[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset BITS
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3086 octets] - [11/05/2020 00:32:28]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
         

adwcleaner bitte zwecks Kontrolle wiederholen

# -------------------------------
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build:    04-03-2020
# Database: 2020-04-08.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    05-12-2020
# Duration: 00:00:01
# OS:       Windows 10 Home
# Cleaned:  6
# Failed:   1


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Not Deleted   Amazon Assistant for Chrome - pbjikboenpfhbbejgkoklgkhjpfogcam

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.ACERAOPFramework   Folder   C:\Program Files (x86)\ACER\AOP FRAMEWORK
Deleted       Preinstalled.ACERAOPFramework   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{4A37A114-702F-4055-A4B6-16571D4A5353}
Deleted       Preinstalled.ACERClear.fiShellExtension   Registry   HKLM\Software\Classes\CLSID\{ED32C084-BABB-11E1-B491-D4D66088709B}
Deleted       Preinstalled.ACERClear.fiShellExtension   Registry   HKLM\Software\Wow6432Node\\Classes\CLSID\{ED32C084-BABB-11E1-B491-D4D66088709B}
Deleted       Preinstalled.AcerUEIPFramework   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{12A718F2-2357-4D41-9E1F-18583A4745F7}
Deleted       Preinstalled.AcerUpdater   Folder   C:\ProgramData\ACER\ACER UPDATER


*************************

[+] Delete IFEO
[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset BITS
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3086 octets] - [11/05/2020 00:32:28]
AdwCleaner[C00].txt - [2500 octets] - [11/05/2020 00:32:55]
AdwCleaner[S01].txt - [2262 octets] - [12/05/2020 19:59:24]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
         

Da wurde ja schon wieder was gefunden. adwCleaner nochmal bitte.

# -------------------------------
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build:    04-03-2020
# Database: 2020-05-13.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    05-13-2020
# Duration: 00:00:00
# OS:       Windows 10 Home
# Cleaned:  0
# Failed:   1


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Not Deleted   Amazon Assistant for Chrome - pbjikboenpfhbbejgkoklgkhjpfogcam

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete IFEO
[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset BITS
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3086 octets] - [11/05/2020 00:32:28]
AdwCleaner[C00].txt - [2500 octets] - [11/05/2020 00:32:55]
AdwCleaner[S01].txt - [2262 octets] - [12/05/2020 19:59:24]
AdwCleaner[C01].txt - [2614 octets] - [12/05/2020 19:59:38]
AdwCleaner[S02].txt - [1708 octets] - [13/05/2020 17:14:21]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
         

Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 13-05-2020 01
durchgeführt von KKaSo (Administrator) auf DESKTOP-9D3QBDC (Acer Aspire GX-781) (13-05-2020 17:09:57)
Gestartet von C:\Users\KKaSo\Desktop
Geladene Profile: KKaSo
Platform: Windows 10 Home Version 1903 18362.778 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atiesrxx.exe
(Gameforge 4D GmbH -> ) C:\Program Files (x86)\GameforgeClient\gfclient.exe
(Gameforge 4D GmbH -> ) C:\Program Files (x86)\GameforgeClient\gfservice.exe
(Gameforge 4D GmbH -> ) C:\Program Files (x86)\GameforgeClient\SparkWebHelper.exe <2>
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.220.4152.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.220.4152.0_x64__8wekyb3d8bbwe\GameBarFT.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.220.4152.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.772_none_5f13f94c58ff41d3\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\NisSrv.exe
(Microsoft) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe
(Microsoft) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\68.0.3618.63\opera.exe <18>
(Opera Software AS -> Opera Software) C:\Program Files\Opera\68.0.3618.63\opera_crashreporter.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TeamViewer GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(WEBZEN Inc. -> ) C:\Program Files (x86)\Metin2\metin2client.exe <2>
(Wondershare software CO., LIMITED -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18723976 2018-08-08] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [585336 2019-02-01] (Acronis International GmbH -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16709128 2016-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [3004440 2020-04-29] (Opera Software AS -> Opera Software)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare software CO., LIMITED -> Wondershare)
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Run: [Discord] => C:\Users\KKaSo\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3148576 2019-06-18] (Valve -> Valve Corporation)
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe [851704 2018-11-13] (MAGIX Software GmbH -> MAGIX)
GroupPolicy: Beschränkung ? <==== ACHTUNG
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0BAA15FC-2D92-4F64-B90C-CEF92FFEEBCA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {111E17C9-5A2F-45AA-8E2F-D46721E0B12B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124760 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {12F5F713-3828-4311-87D7-56F190EB3156} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61112 2019-11-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {17172F1E-BE45-4A71-B255-5F88E186CE31} - System32\Tasks\FubToolByPLD => C:\OEM\Preload\FubTool\FubTool.exe [30976 2015-05-14] (Acer Incorporated -> )
Task: {1B1F7CEF-21D2-4D8F-9BB5-6956FA8178B1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124760 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {1C019796-7385-468E-8D96-E5FF707C6366} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772528 2020-04-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {38BE3E87-E2C6-4C03-B002-DFC47EA83637} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-11-27] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
Task: {3EB42681-8D82-4C40-9BBE-F217099703F4} - System32\Tasks\Opera scheduled assistant Autoupdate 1581166179 => C:\Program Files\Opera\launcher.exe [1517592 2020-04-29] (Opera Software AS -> Opera Software)
Task: {46E7BF54-66A7-4365-AFD9-A221F9448643} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {960DD0A6-04A3-435B-8DBC-467B8A55852D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B1AA0DC8-097B-4D48-A697-65B97672B711} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68280 2019-11-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {B3C4678E-7E01-445A-B633-FF307C3FCFD3} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
Task: {CB00CED8-5731-461B-9820-293A6DD72BEE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772528 2020-04-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {D39CEC84-D511-4C46-8892-7FB56AD2E55D} - System32\Tasks\PCMeter\Startup => C:\Users\KKaSo\Downloads\PCMeter\PCMeterV4\PCMeterV0.4.exe
Task: {DD663E53-405A-4581-B941-998916120DB0} - System32\Tasks\Opera GX scheduled Autoupdate 1584031787 => C:\Users\KKaSo\AppData\Local\Programs\Opera GX\launcher.exe [1480216 2020-04-02] (Opera Software AS -> Opera Software)
Task: {DE43D125-7AAC-4FBA-B2E2-0C61B1699248} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [126152 2020-04-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {E23CFDEE-0953-4647-9607-8B2262625E3F} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-11-27] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
Task: {EAD4ECCE-8458-461E-8E75-186293D62691} - System32\Tasks\Opera scheduled Autoupdate 1524327143 => C:\Program Files\Opera\launcher.exe [1517592 2020-04-29] (Opera Software AS -> Opera Software)
Task: {F6715EBD-7D73-47B0-B92E-1D54E14F9FA0} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [472992 2016-06-17] (Acer Incorporated -> Acer Incorporated)
Task: {F8F09A7F-B395-481B-979B-FA6001DAB253} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FDD7308D-8022-44E3-BCD8-DABD6EE43180} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{4b180d20-a2c2-489c-980a-37167ccc12db}: [DhcpNameServer] 172.20.0.1
Tcpip\..\Interfaces\{da7b4a71-fe5a-46a3-b109-fb6328d4ff7b}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-841053766-362285273-718638101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-841053766-362285273-718638101-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-841053766-362285273-718638101-1001 -> DefaultScope {4B40680C-09D5-4181-BB17-88FB09364F48} URL = 
SearchScopes: HKU\S-1-5-21-841053766-362285273-718638101-1001 -> {4B40680C-09D5-4181-BB17-88FB09364F48} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-02] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
======
DownloadDir: C:\Users\KKaSo\Downloads

FireFox:
========
FF DefaultProfile: i2d5qi1s.default
FF ProfilePath: C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\d53oewcb.default-release-1570648074959 [2020-04-21]
FF ProfilePath: C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default [2019-12-08]
FF Extension: (Amazon Assistant for Firefox) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\abb-acer@amazon.com [2018-04-21] []
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\langpack-de@firefox.mozilla.org [2018-04-21] []
FF Extension: (Mozilla Partner Defaults) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\partnerdefaults@mozilla.com [2018-04-21] []
FF Extension: (Avast Online Security) - C:\Users\KKaSo\AppData\Roaming\Mozilla\Firefox\Profiles\i2d5qi1s.default\Extensions\wrc@avast.com.xpi [2018-08-10]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-14] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default [2020-05-08]
CHR Notifications: Default -> hxxps://community.woltlab.com; hxxps://www.xhilfe-board.de
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.bing.com/?FORM=SLBRDF&PC=SL09"
CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?FORM=SLBRDF&PC=SL10&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Präsentationen) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-05-02]
CHR Extension: (Docs) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-05-02]
CHR Extension: (Google Drive) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-05-02]
CHR Extension: (YouTube) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-05-02]
CHR Extension: (Norton Security Toolbar) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2019-04-26]
CHR Extension: (Tabellen) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-05-02]
CHR Extension: (Google Docs Offline) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-21]
CHR Extension: (Avast Online Security) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-02-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-22]
CHR Extension: (Amazon Assistant for Chrome) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2020-04-08]
CHR Extension: (Google Mail) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-02]
CHR Extension: (Chrome Media Router) - C:\Users\KKaSo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam]

Opera: 
=======
OPR Notifications: hxxps://breadfish.de; hxxps://sponsor-universe.eu; hxxps://www.babyclub.de; hxxps://www.burningboards.de; hxxps://www.cls-design.com; hxxps://www.compiware-forum.de; hxxps://www.extrem-bodybuilding.de; hxxps://www.modanisa.com; hxxps://www.reddit.com
OPR Extension: (ColorPicker Eyedropper) - C:\Users\KKaSo\AppData\Roaming\Opera Software\Opera Stable\Extensions\cipppkeobpmlmliibpodfhifcanklcog [2018-11-17]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\KKaSo\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2020-04-03]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2725920 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2019-04-29] (Adobe Systems) [Datei ist nicht signiert]
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atiesrxx.exe [509144 2019-12-02] (Advanced Micro Devices, Inc. -> AMD)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [298496 2017-03-22] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10610544 2020-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [775296 2018-04-29] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R3 GameforgeClientService; C:\Program Files (x86)\GameforgeClient\gfservice.exe [529568 2020-04-03] (Gameforge 4D GmbH -> )
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [529696 2019-04-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-09-14] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-08-08] (Logitech Inc -> Logitech Inc.)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1745344 2019-02-01] (Acronis International GmbH -> )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-05-03] (Intel Corporation-Wireless Connectivity Solutions -> )
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\RpcAgentSrv.exe [136712 2020-01-30] (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12097024 2019-11-06] (TeamViewer GmbH -> TeamViewer Germany GmbH)
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [12288 2019-04-16] (Microsoft) [Datei ist nicht signiert]
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [694016 2019-10-10] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\NisSrv.exe [3304992 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MsMpEng.exe [103376 2020-05-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [20480 2019-04-16] (Microsoft) [Datei ist nicht signiert]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-05-03] (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atikmdag.sys [60671704 2019-12-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0348909.inf_amd64_f9f8b711ad4efca4\B349181\atikmpag.sys [598232 2019-12-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [103664 2019-12-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-07-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-10-30] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 fiddrv64; kein ImagePath
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [569392 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [191992 2019-04-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-08-08] (Logitech Inc -> Logitech Inc.)
R3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2018-08-08] (Logitech -> Logitech Inc.)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7708160 2019-03-19] (Microsoft Windows -> Intel Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-01] (Realtek Semiconductor Corp. -> Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [418784 2016-08-05] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware Ltd -> SiSoftware)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [237376 2019-10-11] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [248464 2019-10-11] (Oracle Corporation -> Oracle Corporation)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2019-03-08] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-05-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [394680 2020-05-01] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64944 2020-05-01] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; kein ImagePath
S3 EverestDriver; \??\C:\Users\KKaSo\AppData\Local\Temp\EverestDriver.sys [X] <==== ACHTUNG

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-05-13 17:09 - 2020-05-13 17:11 - 000026961 ____C C:\Users\KKaSo\Desktop\FRST.txt
2020-05-13 17:09 - 2020-05-13 17:09 - 000000000 ___DC C:\Users\KKaSo\Desktop\FRST-OlderVersion
2020-05-11 00:30 - 2020-05-11 00:32 - 000000000 ____D C:\AdwCleaner
2020-05-11 00:30 - 2020-05-11 00:30 - 008196784 _____ (Malwarebytes) C:\Users\KKaSo\Downloads\adwcleaner_8.0.4.exe
2020-05-09 23:48 - 2020-05-09 23:48 - 000000337 _____ C:\UBT_UninstallLog.txt
2020-05-09 23:46 - 2020-05-09 23:46 - 001224264 _____ (Adobe Inc) C:\Users\KKaSo\Downloads\flashplayer32pp_a_install.exe
2020-05-09 23:44 - 2020-05-09 23:44 - 008148680 _____ (Tim Kosse) C:\Users\KKaSo\Downloads\FileZilla_3.48.0_win64-setup.exe
2020-05-09 23:43 - 2020-05-09 23:44 - 175255024 _____ C:\Users\KKaSo\Downloads\Apache_OpenOffice_4.1.7_Win_x86_install_de.exe
2020-05-09 14:27 - 2020-05-13 17:10 - 000000000 ____D C:\FRST
2020-05-09 14:27 - 2020-05-13 17:09 - 002286080 _____ (Farbar) C:\Users\KKaSo\Desktop\FRST64.exe
2020-05-09 14:13 - 2020-05-09 14:13 - 000388608 _____ (Trend Micro Inc.) C:\Users\KKaSo\Desktop\HijackThis.exe
2020-05-09 14:07 - 2020-01-22 12:07 - 018223104 _____ C:\Users\KKaSo\AppData\Roaming\Sandra.mdb
2020-05-09 14:06 - 2020-05-09 14:06 - 000001190 _____ C:\Users\Public\Desktop\SiSoftware Sandra Lite 2020.lnk
2020-05-09 14:06 - 2020-05-09 14:06 - 000001190 _____ C:\ProgramData\Desktop\SiSoftware Sandra Lite 2020.lnk
2020-05-09 14:06 - 2020-05-09 14:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware
2020-05-09 14:06 - 2020-05-09 14:06 - 000000000 ____D C:\Program Files\SiSoftware
2020-05-09 04:16 - 2020-05-09 15:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2020-05-08 15:47 - 2020-05-08 15:48 - 000000607 ____C C:\Users\KKaSo\Desktop\Neues Textdokument.txt
2020-05-05 04:26 - 2020-05-05 04:26 - 000030738 _____ C:\Users\KKaSo\Downloads\STADTPROZELTEN.pdf
2020-05-05 04:10 - 2020-05-05 04:10 - 000044544 _____ C:\Users\KKaSo\Downloads\1_1_personel_sayisi.xls
2020-04-30 16:28 - 2020-04-30 16:29 - 000000000 ____D C:\ProgramData\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000001299 _____ C:\Users\Public\Desktop\PDFelement 6 Pro.lnk
2020-04-30 16:28 - 2020-04-30 16:28 - 000001299 _____ C:\ProgramData\Desktop\PDFelement 6 Pro.lnk
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\ProgramData\PDFelement 6 Pro
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2020-04-30 16:28 - 2020-04-30 16:28 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-04-30 16:28 - 2018-06-28 10:38 - 011011136 _____ C:\WINDOWS\SysWOW64\WSPECRT.dll
2020-04-30 16:28 - 2017-10-19 10:17 - 000271360 _____ (Wondershare Software) C:\WINDOWS\system32\WSPDFelementMonitor.dll
2020-04-22 14:49 - 2020-05-03 14:45 - 000001932 ____C C:\Users\KKaSo\Desktop\Ve Selam.txt
2020-04-21 02:01 - 2020-04-21 02:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2020-04-20 12:08 - 2020-04-27 00:30 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-04-19 16:59 - 2020-04-19 16:59 - 000000000 ___DC C:\Users\KKaSo\Documents\Call of Duty Modern Warfare
2020-04-19 05:31 - 2020-04-19 05:31 - 000000759 _____ C:\Users\Public\Desktop\Call of Duty Modern Warfare.lnk
2020-04-19 05:31 - 2020-04-19 05:31 - 000000759 _____ C:\ProgramData\Desktop\Call of Duty Modern Warfare.lnk
2020-04-19 05:31 - 2020-04-19 05:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare
2020-04-19 01:59 - 2020-04-19 01:59 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2020-04-19 01:58 - 2020-04-26 23:58 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Battle.net
2020-04-19 01:58 - 2020-04-19 01:59 - 000000000 ____D C:\Users\KKaSo\AppData\Roaming\Battle.net
2020-04-19 01:58 - 2020-04-19 01:58 - 000000946 _____ C:\Users\Public\Desktop\Battle.net.lnk
2020-04-19 01:58 - 2020-04-19 01:58 - 000000946 _____ C:\ProgramData\Desktop\Battle.net.lnk
2020-04-19 01:58 - 2020-04-19 01:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2020-04-19 01:57 - 2020-04-19 01:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-04-19 01:57 - 2020-04-19 01:58 - 000000000 ____D C:\Users\KKaSo\AppData\Local\Blizzard Entertainment
2020-04-19 01:56 - 2020-04-19 01:57 - 000000000 ____D C:\ProgramData\Battle.net
2020-04-19 01:56 - 2020-04-19 01:56 - 004934824 _____ (Blizzard Entertainment) C:\Users\KKaSo\Desktop\Modern-Warfare-Setup.exe
2020-04-15 02:10 - 2020-04-15 02:10 - 001402450 _____ C:\Users\KKaSo\Downloads\Flyer 4.2017.pdf
2020-04-14 21:03 - 2020-04-14 21:03 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 018027520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 005910016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 004611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 004129624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 003512320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 002951832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001870408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001545216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 001310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 001013000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2020-04-14 21:03 - 2020-04-14 21:03 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000420152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-04-14 21:03 - 2020-04-14 21:03 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-04-14 21:03 - 2020-04-14 21:03 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 022636544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 017790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 014818816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 007849216 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 007756800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 006523048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 004563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003802624 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003753472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003587384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 003547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 002767928 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002717184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002126144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002114560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 002086656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001960448 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-04-14 21:02 - 2020-04-14 21:02 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001726264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001665216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001646048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001603584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001512832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001484384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001427456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001397576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001378528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 001263856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001261808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001243648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001077064 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000993280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000879616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000811320 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000775696 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000759272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000684560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000673704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000673464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000638480 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000628616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000618296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2020-04-14 21:02 - 2020-04-14 21:02 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000538160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000515600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000513576 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000510792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000487784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-04-14 21:02 - 2020-04-14 21:02 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000437560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000339304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000297272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000277864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000268008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000147696 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000123952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000050544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000033080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys
2020-04-14 21:02 - 2020-04-14 21:02 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-04-14 21:02 - 2020-04-14 21:02 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-04-14 21:02 - 2020-04-14 21:02 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-04-14 20:51 - 2020-04-14 20:52 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-04-14 20:51 - 2020-04-14 20:52 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-05-13 17:09 - 2018-04-29 20:21 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\CrashDumps
2020-05-13 17:08 - 2020-03-23 09:14 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-05-12 22:15 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-05-12 21:30 - 2019-10-30 19:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-05-12 20:37 - 2018-04-29 09:54 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\TS3Client
2020-05-12 20:31 - 2018-09-25 18:27 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\D3DSCache
2020-05-12 20:07 - 2019-10-30 19:28 - 002570690 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-05-12 20:07 - 2019-10-30 18:55 - 000699050 _____ C:\WINDOWS\system32\perfh01F.dat
2020-05-12 20:07 - 2019-10-30 18:55 - 000146194 _____ C:\WINDOWS\system32\perfc01F.dat
2020-05-12 20:07 - 2019-03-19 14:16 - 000743888 _____ C:\WINDOWS\system32\perfh007.dat
2020-05-12 20:07 - 2019-03-19 14:16 - 000150212 _____ C:\WINDOWS\system32\perfc007.dat
2020-05-12 20:07 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-05-12 20:00 - 2019-10-30 19:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-05-12 20:00 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-05-12 20:00 - 2018-04-24 16:54 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-05-12 20:00 - 2017-03-13 10:14 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2020-05-12 19:59 - 2017-03-13 10:30 - 000000000 ____D C:\ProgramData\Acer
2020-05-12 19:59 - 2017-03-13 10:30 - 000000000 ____D C:\Program Files (x86)\Acer
2020-05-12 19:58 - 2019-10-30 19:26 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-841053766-362285273-718638101-1001
2020-05-12 19:58 - 2019-10-30 19:20 - 000002380 ____C C:\Users\KKaSo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-05-12 19:58 - 2018-04-21 18:10 - 000000000 ___RD C:\Users\KKaSo\OneDrive
2020-05-11 00:33 - 2019-10-30 19:16 - 000563496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-05-11 00:32 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-05-11 00:28 - 2018-09-09 12:17 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2020-05-11 00:27 - 2019-01-31 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2020-05-11 00:27 - 2019-01-31 21:34 - 000000000 ____D C:\Program Files (x86)\MAGIX
2020-05-10 00:10 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-05-09 23:54 - 2017-03-13 10:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2020-05-09 23:54 - 2016-10-05 12:13 - 000000000 ___HD C:\OEM
2020-05-09 23:53 - 2018-06-04 19:56 - 000000000 ____D C:\ProgramData\AVAST Software
2020-05-09 23:48 - 2017-03-13 10:29 - 000000000 ____D C:\ProgramData\OEM
2020-05-09 23:46 - 2018-05-01 12:30 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\Adobe
2020-05-09 23:45 - 2018-06-04 19:56 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\FileZilla
2020-05-09 23:44 - 2018-06-04 19:56 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\FileZilla
2020-05-09 23:44 - 2018-06-04 19:56 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2020-05-09 23:44 - 2018-05-01 12:30 - 000000000 ____D C:\Program Files (x86)\Google
2020-05-09 16:54 - 2018-04-21 18:12 - 000000000 ____D C:\Program Files\Opera
2020-05-09 16:54 - 2017-03-13 10:36 - 000000000 ____D C:\ProgramData\Norton
2020-05-09 16:54 - 2017-03-13 10:36 - 000000000 ____D C:\Program Files (x86)\Norton Security
2020-05-09 16:53 - 2019-10-30 19:20 - 000000000 ____D C:\Users\KKaSo
2020-05-09 16:52 - 2019-05-04 15:15 - 000000000 ____D C:\Program Files (x86)\Metin2
2020-05-09 16:39 - 2018-04-29 11:57 - 000000000 ___DC C:\Users\KKaSo\AppData\Roaming\discord
2020-05-09 15:25 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-05-09 15:25 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-05-09 15:22 - 2017-03-13 10:36 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2020-05-09 14:07 - 2017-03-13 10:02 - 000000000 ____D C:\ProgramData\Package Cache
2020-05-09 13:56 - 2018-08-15 10:48 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\AVAST Software
2020-05-09 04:03 - 2020-03-12 18:49 - 000003542 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1584031787
2020-05-09 04:03 - 2020-02-08 14:49 - 000003518 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1581166179
2020-05-09 04:03 - 2019-12-04 18:35 - 000002388 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2020-05-09 04:03 - 2019-10-30 19:26 - 000003328 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1524327143
2020-05-09 00:30 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-05-08 14:12 - 2018-05-10 09:33 - 000000000 ____D C:\Program Files (x86)\Steam
2020-05-08 01:17 - 2017-03-13 09:49 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-05-05 04:10 - 2018-04-21 18:08 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\Packages
2020-05-04 16:54 - 2020-04-11 14:00 - 000000475 ____C C:\Users\KKaSo\Desktop\new text.txt
2020-05-01 23:03 - 2018-06-13 22:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-04-30 16:21 - 2018-04-21 18:12 - 000001112 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2020-04-30 04:01 - 2018-04-21 18:08 - 000000000 ___DC C:\Users\KKaSo\AppData\Local\AMD
2020-04-27 00:30 - 2019-10-09 21:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-04-21 02:03 - 2018-04-21 18:10 - 000000000 ___DC C:\Users\KKaSo\AppData\LocalLow\Mozilla
2020-04-21 02:01 - 2019-10-09 21:07 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-04-16 08:12 - 2019-10-30 19:20 - 000000000 ____D C:\Users\defaultuser0
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-04-16 08:11 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-04-16 00:02 - 2019-10-30 19:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2020-04-14 21:05 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2018-04-21 19:02 - 2018-04-21 19:04 - 000000624 ____C () C:\Users\KKaSo\AppData\Roaming\All CPU MeterV3_Settings.ini
2019-02-17 21:59 - 2019-02-17 21:59 - 000000137 ____C () C:\Users\KKaSo\AppData\Roaming\bios.ini
2018-04-21 19:04 - 2018-04-21 19:04 - 000000997 ____C () C:\Users\KKaSo\AppData\Roaming\Currency Meter_Settings.ini
2020-05-09 14:07 - 2020-01-22 12:07 - 018223104 _____ () C:\Users\KKaSo\AppData\Roaming\Sandra.mdb
2019-09-14 11:39 - 2019-09-14 11:39 - 000883952 ____C (Teknopars) C:\Users\KKaSo\AppData\Local\CikcikOkey.exe
2019-12-07 23:54 - 2019-12-07 23:54 - 000007605 _____ () C:\Users\KKaSo\AppData\Local\Resmon.ResmonCfg
2019-02-17 21:59 - 2019-02-17 21:59 - 000010026 ____C () C:\Users\KKaSo\AppData\Local\ringin.wav
2019-02-17 21:58 - 2019-02-17 21:58 - 000776944 ____C (Teknopars) C:\Users\KKaSo\AppData\Local\SuperDama.exe
2019-02-18 20:08 - 2019-02-18 20:08 - 011963632 ____C (Teknopars Bilisim Teknolojileri) C:\Users\KKaSo\AppData\Local\SuperDamaX.exe

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 13-05-2020 01
durchgeführt von KKaSo (13-05-2020 17:12:15)
Gestartet von C:\Users\KKaSo\Desktop
Windows 10 Home Version 1903 18362.778 (X64) (2019-10-30 17:27:06)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-841053766-362285273-718638101-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-841053766-362285273-718638101-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-841053766-362285273-718638101-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-841053766-362285273-718638101-501 - Limited - Disabled)
KKaSo (S-1-5-21-841053766-362285273-718638101-1001 - Administrator - Enabled) => C:\Users\KKaSo
WDAGUtilityAccount (S-1-5-21-841053766-362285273-718638101-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton Security (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Norton Security (Disabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.07.2004 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 4.00.2001.1 - Acer Incorporated)
Acronis True Image (HKLM-x32\...\{9BB8598B-C237-446F-AD4E-8F0FA6A93D10}) (Version: 22.6.15470 - Acronis) Hidden
Acronis True Image (HKLM-x32\...\{9BB8598B-C237-446F-AD4E-8F0FA6A93D10}Visible) (Version: 22.6.15470 - Acronis)
Adobe Audition 2020 (HKLM-x32\...\AUDT_13_0_4) (Version: 13.0.4 - Adobe Systems Incorporated)
Adobe Audition 3.0 (HKLM-x32\...\Adobe Audition 3.0) (Version: 3.0 - Adobe Systems Incorporated)
Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 29.0.0.140 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.12.1 - Advanced Micro Devices, Inc.)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
Audacity 2.3.0 (HKLM-x32\...\Audacity_is1) (Version: 2.3.0 - Audacity Team)
balenaEtcher 1.5.76 (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\{d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b}) (Version: 1.5.76 - Balena Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{0473af6f-6d5b-448f-8410-50c98e43ed00}) (Version: 4.3.1.1 - Brother Industries, Ltd.)
Brother iPrint&Scan (HKLM-x32\...\{F9F653E2-4490-471B-BF2C-A8CFF2C68AED}) (Version: 4.3.1.1 - Brother Industries, Ltd.) Hidden
Brother PCFax Driver (HKLM-x32\...\{56BA05BD-7A67-4EF8-85A7-8C6528AEE2AC}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{272543B6-B337-4C8F-B9F1-19E884C2C7AC}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{1162495D-7CE7-4EF9-A0F8-151196F3A660}) (Version: 1.0.17.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version:  - Blizzard Entertainment)
Catalyst Control Center Next Localization BR (HKLM\...\{5591A46B-4FD3-21E2-039C-737CC739F52E}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{1165E935-AA00-7CE4-C458-B6C7290682CC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{272BFE26-87E0-B8DE-54F2-FD44A32DFBD5}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{BB45FEF8-167F-72F7-A631-5DB3D93A8872}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{B78A2258-5630-C1DF-0F27-AD1F1E59AEC6}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{8DEF9006-FC17-6332-79C6-49A47B86ABFD}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{EA0D8B3B-ADB3-6DBC-DA34-51B70AE29C16}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{052F0949-D33A-3128-9DCE-50BEA1B341B7}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{081C8424-2C7F-573E-ED3B-61E063111DC5}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{A3571290-2E3C-F314-866E-52A3B9295DA9}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{964640D0-AC6C-9549-892E-DB0E3AAC5CEF}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{EA54F30D-6AB0-7870-A0F2-E802632E3AE1}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{C1B17BA3-56B2-47B1-E4EE-6602392724AE}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{78B5EF49-6FD5-0A1F-C7C3-A5B8214C1DAC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{2ED86AAF-9DA0-8F95-21E1-01D6878E312D}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{1B77DD3D-8DA4-CE05-36CE-6FBF71995D74}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{7461FCE1-D63D-C463-00F4-55864E06079D}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{234B355E-EFF0-C923-A496-FA032E54F820}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{FDEFB5D3-92AC-4A94-1682-92143E3DA051}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{D2115CD4-D30A-9605-FAE8-B21EF4CD20EC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{DA3AE593-6667-EAD6-4BBF-3936FE1164D7}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.6795 - CDBurnerXP)
ControlCenter4 (HKLM-x32\...\{9091B952-8719-49C3-9CC7-6E20EC61081F}) (Version: 4.6.6.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
Debut Video-Aufnahme-Programm (HKLM-x32\...\Debut) (Version: 5.23 - NCH Software)
Discord (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Doxillion Dokumentkonverter (HKLM-x32\...\Doxillion) (Version: 3.16 - NCH Software)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Express Burn Disc-Brennprogramm (HKLM-x32\...\ExpressBurn) (Version: 9.03 - NCH Software)
FFmpeg (Windows) for Audacity Version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
FileZilla Client 3.48.0 (HKLM-x32\...\FileZilla Client) (Version: 3.48.0 - Tim Kosse)
Gameforge Client (HKLM-x32\...\{d3b2a0c1-f0d0-4888-ae0b-1c5e1febdafb}_is1) (Version: 2.0.54.131 - Gameforge)
Git version 2.25.0 (HKLM\...\Git_is1) (Version: 2.25.0 - The Git Development Community)
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.26) (Version: 9.26 - Artifex Software Inc.)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
Intel Processor Diagnostic Tool 64bit (HKLM-x32\...\{d23ef847-2a5d-49ad-a6b5-7ffc8f255179}) (Version: 4.1.4.36 - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{8790ED90-756F-45DD-B38F-7436093963C6}) (Version: 19.11.1639.0649 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel® Hardware Accelerated Execution Manager (HKLM\...\{73250D12-B600-4ED6-AFC0-10D9D8EDA745}) (Version: 7.3.2 - Intel Corporation)
Intel® Processor Identification Utility (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Intel® Programm für die Prozessorerkennung 6.1.0731) (Version: 6.1.0731 - Intel Corporation)
Intel® Programm für die Prozessorerkennung (HKLM-x32\...\{909744AA-EECD-4786-9624-93C146B68D92}) (Version: 6.1.0731 - Intel Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{bc883058-299e-461f-8e52-4f1dbb355f86}) (Version: 19.0.1 - Intel Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Logitech Gaming Software 9.02 (HKLM\...\Logitech Gaming Software) (Version: 9.02.61 - Logitech Inc.)
MAGIX Connect (HKLM\...\{B0C73D27-EB3E-4D0E-B40D-0141DAF708CC}) (Version: 3.0.0.1 - MAGIX Software GmbH) Hidden
MAGIX Connect (HKLM\...\MX.{B0C73D27-EB3E-4D0E-B40D-0141DAF708CC}) (Version: 3.0.0.1 - MAGIX Software GmbH)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH)
MAGIX Soundpool Music Maker - Feel good (HKLM\...\{83D2491E-E25D-4CEB-9AFD-CEF77BF03974}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 7.0.1 - CEWE Stiftung u Co. KGaA)
Metin2 (HKLM-x32\...\Metin2_DE_is1) (Version:  - Gameforge 4D GmbH)
Metin2 (HKLM-x32\...\Metin2_PA_is1) (Version:  - Gameforge 4D GmbH)
Metin2 de-DE (HKLM-x32\...\{fab180a3-cd65-4b7e-bd0e-2ef77fd0c258.de-DE}) (Version:  - Gameforge)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.12730.20250 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\OneDriveSetup.exe) (Version: 20.052.0311.0011 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox 75.0 (x64 de) (HKLM\...\Mozilla Firefox 75.0 (x64 de)) (Version: 75.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 69.0.2 - Mozilla)
Music Maker (HKLM\...\{A03DDADD-6280-46A7-B101-93EF16E78DE4}) (Version: 27.0.2.28 - MAGIX Software GmbH) Hidden
Music Maker (HKLM-x32\...\MX.{A03DDADD-6280-46A7-B101-93EF16E78DE4}) (Version: 27.0.2.28 - MAGIX Software GmbH)
NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.6 - Notepad++ Team)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 21.1.2 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Opera GX Stable 67.0.3575.130 (HKU\S-1-5-21-841053766-362285273-718638101-1001\...\Opera GX 67.0.3575.130) (Version: 67.0.3575.130 - Opera Software)
Opera Stable 68.0.3618.63 (HKLM-x32\...\Opera 68.0.3618.63) (Version: 68.0.3618.63 - Opera Software)
Oracle VM VirtualBox 6.0.14 (HKLM\...\{5F88BE85-569B-46F5-B961-463A445AC5EA}) (Version: 6.0.14 - Oracle Corporation)
osrss (HKLM-x32\...\{1BA1133B-1C7A-41A0-8CBF-9B993E63D296}) (Version: 1.0.0 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{BAFF7E40-25F2-4681-95F1-9D0E8EF0ABA4}) (Version: 4.2.8 - dotPDN LLC)
PC-FAXReceive (HKLM-x32\...\{65EA2C86-30CD-444C-ADAB-8762BE4E2E8C}) (Version: 1.8.003.0 - Brother Insutries Ltd.) Hidden
PCFaxTx (HKLM-x32\...\{03BF5A21-6363-410C-B3BE-0946B0012704}) (Version: 3.7.3.1 - Brother Industries Ltd.) Hidden
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.0 beta r2613 - Win10 Widgets)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7954 - Realtek Semiconductor Corp.)
RemoteSetup (HKLM-x32\...\{FAB8A30A-B074-48F9-9D73-5E9A757403F8}) (Version: 3.10.2.0 - Brother Industries Ltd.) Hidden
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
SiSoftware Sandra Lite 2020 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 30.27.2020.1 - SiSoftware)
SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{40578A7A-6E36-457F-A4F0-45BC37EB61FD}) (Version: 1.20.1.0 - Brother Insutries Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Sweet Home 3D version 5.7 (HKLM\...\Sweet Home 3D_is1) (Version: 5.7 - eTeks)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.1.8 - TeamSpeak Systems GmbH)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.0.8397 - TeamViewer)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VEGAS Pro 15.0 (HKLM\...\{EAFAE361-EC36-11E8-9A08-00155D6302F2}) (Version: 15.0.416 - VEGAS)
Vita Concert Grand LE (HKLM\...\{CB5D721E-C919-4CDF-8356-D6F84490FB3F}) (Version: 2.4.0.96 - MAGIX Software GmbH) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22402 - Microsoft Corporation)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)
Wondershare PDFelement 6 Pro(Build 6.8.0) (HKLM-x32\...\{B026557A-EF19-4812-8A79-B30F94AA0A78}_is1) (Version: 6.8.0.3523 - Wondershare Software Co.,Ltd.)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Booking.com -> C:\Program Files\WindowsApps\Booking.com_1.0.1606.2210_x64__96rgg7pjt343r [2017-03-13] (CN=Acer Incorporated)
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.8.5.0_x86__kgqvnymyfvs32 [2020-04-09] (king.com)
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.167.200.0_x86__kgqvnymyfvs32 [2020-05-06] (king.com)
eBay -> C:\Program Files\WindowsApps\eBay_1.0.1606.2210_x64__96rgg7pjt343r [2017-03-13] (CN=Acer Incorporated)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2019-10-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad]
Microsoft News – Nachrichten -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad]
MSN Wetter -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2020-01-16] (MAGIX)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.96.725.0_x64__mcm4njqhnhss8 [2020-04-10] (Netflix, Inc.)
One Calendar -> C:\Program Files\WindowsApps\64885BlueEdge.OneCalendar_2020.229.1.0_x64__8kea50m9krsh2 [2020-03-09] (Code Spark)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0 [2020-05-09] (Spotify AB) [Startup Task]
WildTangent Games -> C:\Program Files\WindowsApps\WildTangentGames.63435CFB65F55_2.0.82.0_x64__qt5r5pa5dyg8m [2019-12-24] (WildTangent Games)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.4.0_x86__xpfg3f7e9an52 [2020-04-06] (New Work SE)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-841053766-362285273-718638101-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Users\KKaSo\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll (AddGadgets IT -> )
CustomCLSID: HKU\S-1-5-21-841053766-362285273-718638101-1001_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\KKaSo\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-841053766-362285273-718638101-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\KKaSo\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2019-02-01] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-03-19] (Notepad++ -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2019-11-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.i420] => lvcod64.dll
HKLM\...\Drivers32-x32: [vidc.i420] => lvcodec2.dll

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2020-04-30 16:28 - 2016-07-21 10:54 - 000137728 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2020-04-30 16:28 - 2016-10-08 16:48 - 001506304 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 048936448 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\libcef.dll
2019-05-04 15:16 - 2019-07-16 07:53 - 000075264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\libegl.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 001665024 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\libglesv2.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 000083456 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssa3d.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000070656 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssds3d.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000093696 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssdsp.flt
2019-05-04 15:16 - 2019-07-16 07:45 - 000080896 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssdx7.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000103424 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\msseax.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000125952 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssmp3.asi
2019-05-04 15:16 - 2019-07-16 07:45 - 000354816 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssrsx.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000067072 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\msssoft.m3d
2019-05-04 15:16 - 2019-07-16 07:45 - 000197120 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\miles\mssvoice.asi
2019-05-04 15:16 - 2019-07-16 07:53 - 000349696 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\mss32.dll
2019-05-04 15:25 - 2019-07-16 07:45 - 001806336 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\SpeedTreeRT.dll
2019-05-17 21:56 - 2005-04-22 13:36 - 000143360 _____ () [Datei ist nicht signiert] C:\WINDOWS\system32\BrSNMP64.dll
2019-05-04 15:16 - 2019-07-16 07:45 - 000269312 _____ (Abysmal Software) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\DevIL.dll
2019-05-17 21:56 - 2016-11-01 11:27 - 000090112 _____ (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll
2019-05-04 15:16 - 2019-07-16 07:53 - 000401462 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\MSVCP60.dll
2019-05-04 15:25 - 2019-07-16 07:53 - 002436608 _____ (Python Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\python27.dll
2019-05-04 15:16 - 2020-02-03 19:55 - 000663040 _____ (RAD Game Tools, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Metin2\granny2.dll
2020-04-30 16:28 - 2017-10-19 10:17 - 000271360 _____ (Wondershare Software) [Datei ist nicht signiert] C:\WINDOWS\System32\WSPDFelementMonitor.dll
2020-04-30 16:28 - 2016-10-08 16:49 - 000708608 _____ (Wondershare) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Public\AppData:CSM [474]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ==========

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 13:47 - 2019-01-04 13:20 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\Common Files\Adobe\AGL;C:\Program Files\Git\cmd
HKU\S-1-5-21-841053766-362285273-718638101-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\KKaSo\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\hintergrund.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
 ist deaktiviert.

Network Binding:
=============
WLAN: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKLM\...\StartupApproved\Run32: => "M17A"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "BrotherSoftwareUpdateNotification"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "QMxNetworkSync"
HKU\S-1-5-21-841053766-362285273-718638101-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{88EA8042-D2C8-4CB5-B16C-DABD44A5DCC5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{0E2E227B-CDBC-4156-B670-68DB02ED1068}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B1CE5C41-5D3B-4BE3-A46A-2FAE9BFE0C0C}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{435536C1-FACC-47D1-BD5F-22EA04C77F04}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{79EAB191-F63A-43E7-B076-036B50A66868}] => (Allow) LPort=54955
FirewallRules: [{7A5E79BF-1386-45CB-90B8-92D6103564B4}] => (Allow) LPort=54950
FirewallRules: [{8C8C99E4-DA76-4715-B906-F8A1C6817A35}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{006EE698-1A1A-4544-9D9A-7807657E65A3}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )
FirewallRules: [{28E62D8A-F0AC-41E9-A7A0-AB64EB953C77}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )
FirewallRules: [{91C988AC-E117-468F-9A35-33E40784F72A}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )
FirewallRules: [{F581B51F-6979-4909-B597-EB14856DBB6D}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{A3D7A217-3028-444B-93E7-4E557EC0CEBA}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )
FirewallRules: [{5CB330AA-27F4-4CB0-8C0D-3736512552F8}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )
FirewallRules: [{73AB4E3D-A530-4011-9CA1-065B024976D1}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )
FirewallRules: [{A2594CD0-BBE5-4544-8347-136429262591}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> )
FirewallRules: [{B6A00CC7-4916-4DDF-9F5F-1B827C99CCEA}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> )
FirewallRules: [{6AFEA669-E396-488F-BBFD-91184B1643A0}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )
FirewallRules: [{42AC73E6-9C75-4EA5-9B48-450223F9F111}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )
FirewallRules: [{6821CCF6-CA99-471B-963A-DFA50322309B}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{2495D374-0A57-4E70-B9DE-290C4731151A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )
FirewallRules: [{98FD5162-04FB-45A2-A0C1-048227CFFA4A}] => (Allow) C:\Program Files (x86)\MAGIX\Music Maker\27\MusicMaker.exe (MAGIX Software GmbH -> MAGIX Software GmbH)
FirewallRules: [{50D2D912-B7C9-4490-8D13-5D755659137A}] => (Allow) C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe (MAGIX Software GmbH -> MAGIX)
FirewallRules: [UDP Query User{4C424CBC-20F5-4B8A-8F81-E4F015C704A9}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{B8CAF9E6-7CE3-46EB-8191-AC42FA0B6008}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{9EB8268A-8689-4F72-B938-13A949B0F9C8}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{7A08B5B7-D291-4CEC-8EEA-8FD5056D79D7}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{8F3E2996-A8E8-4EFB-ACF2-C8AFE054CFBD}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{091761A1-8522-43EE-9247-7C2026865841}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.164\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{7B3974F0-900B-4E08-8480-AEB5D04F7620}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{598840E3-FE66-4E33-962B-C4C6895D464C}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{1227BA55-0543-4427-94B3-4DD3049BE0AA}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{97539F4C-D2A3-443C-845D-B0EA6CF01C31}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.163\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{1454E727-53EC-428F-9C78-6D40EE830FB4}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{0825EAB9-1828-488E-A39A-96EDE595A039}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.160\deploy\leagueclient.exe => Keine Datei
FirewallRules: [{F29699F2-BE3E-4F4D-8B53-5BBCD11139A9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{751D4079-5366-4101-8327-CB73606C66FD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{6C3C311E-BDEE-4884-8B44-E1B7B564D83E}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{38E42B91-F245-4911-82E8-A7F5C048B61C}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.159\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{29ADD970-EC1D-47B8-B741-B68229B8DEDA}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{791255EC-337A-4EC2-8301-D3BD6B56D7CA}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{CA46ABA0-0E82-4077-98F6-FD651670EB24}C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe] => (Allow) C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe => Keine Datei
FirewallRules: [TCP Query User{0B16CDFB-6B7F-47EA-AF21-76148E26E7C0}C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe] => (Allow) C:\users\kkaso\appdata\local\temp\scoped_dir15660_8440\anydesk.exe => Keine Datei
FirewallRules: [UDP Query User{A3529D96-BD01-402D-BC43-05B33FF1FD21}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{75AA240F-9951-488F-BBF6-BB7009A9A1B6}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.157\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{FA04502D-BF6E-4CF6-AFF6-D4C17EA213E1}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{9AFB9BAD-2631-4393-898E-1B39563754E8}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.156\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{FA9BC5EF-9AC1-4EAA-BD09-38D65CB3B39F}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{37E6BB58-8D11-4601-B730-F455BC10D05E}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.155\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{30C66F72-E85F-48C4-B63A-AAD464C8A778}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{D3521CB0-23DA-43B9-BCD7-686B8B0492F8}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.154\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{E1235920-A10F-4011-A6DB-B6DD2032B7CE}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe => Keine Datei
FirewallRules: [TCP Query User{90562295-D12B-4CB4-AF6F-34A0C9BC535E}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.151\deploy\leagueclient.exe => Keine Datei
FirewallRules: [{9163DCCC-D216-4E11-AD6A-65F09A6DA883}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Wireless Connectivity Solutions -> )
FirewallRules: [{E6610B27-4F94-4B8B-8FDE-391F986917DF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => Keine Datei
FirewallRules: [{C8728630-61B3-4775-9F15-65F4FC21733F}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe => Keine Datei
FirewallRules: [{88E761A2-B1BF-4FB9-B789-34BE6AD4A694}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe => Keine Datei
FirewallRules: [{6C7E0EA2-A82C-484E-BCE0-BE3CBB11BE64}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{5A97F05C-F488-441D-993D-7A32964D20D1}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{A4378B8B-3B77-405B-B7FE-7AC38A0B7FB5}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe (Acer Incorporated -> acer)
FirewallRules: [{116D4AA4-4FCF-4551-8301-2E0B95C20D57}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe (Acer Incorporated -> acer)
FirewallRules: [TCP Query User{2AD426E3-9A7B-4B30-80C9-86F1C01479E4}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe => Keine Datei
FirewallRules: [UDP Query User{0610B7FF-D31A-49FC-BCEC-4135DC7D589F}C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe] => (Allow) C:\program files\game\leagueoflegends\rads\projects\league_client\releases\0.0.0.140\deploy\leagueclient.exe => Keine Datei
FirewallRules: [{0561BE02-0074-4DF8-BDDB-A951DE56E621}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{E6BAF630-3BD6-4DF3-8F3D-BD1EF8936139}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{4461734C-D586-4845-8FCA-474BAB2CD99D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{9F09BF2D-06D8-465D-B12E-8CBC53BD7DEA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{31F49FB7-5667-4F96-8C67-706F5CF61097}] => (Allow) E:\Game\Doom 4\steamapps\common\quakechampions\client\bin\pc\QuakeChampions.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [{5B0FE106-D3CA-40F6-882B-9DD9B6325BAC}] => (Allow) E:\Game\Doom 4\steamapps\common\quakechampions\client\bin\pc\QuakeChampions.exe (id Software) [Datei ist nicht signiert]
FirewallRules: [{4F4AFF6C-B799-44B4-B50F-AD35853CF9FD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{3A2F4C19-6E1E-41EF-90FC-FE094F100AA1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B8A0A138-B514-48B4-976D-7F36D89203D9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D897672E-0DAE-42D2-B48D-1220B537D2D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D7478FB9-3BFB-494A-8942-2E2F73A290D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{14BC13BA-7216-4F77-9603-29ABD430EE86}] => (Allow) C:\Program Files\Opera\67.0.3575.137\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{F0C6A780-1E1A-4762-953F-77608B67A1BC}] => (Allow) C:\Program Files\Opera\68.0.3618.63\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{2F72ED59-D47A-4E5A-B016-FBF1286718E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F4F5159C-6C3A-4068-982F-E39F21E4AA1E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9CB1A2C9-5C5A-4619-85B8-03FAD82EF8E7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8322DB6F-4047-4DD1-9FE0-735C217A69B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1985680C-8200-4B51-BCFB-6DDA4FC76709}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D744B78A-2A1B-491D-88E1-96AEF1128236}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B1C662F7-9F52-4BCF-A960-9AD7DCB1D7BA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5C0CC554-8683-41D9-94FC-BA8EE6B96898}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.132.618.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8C6C46A9-7E34-41FA-80A6-7C22B6DA874A}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\RpcAgentSrv.exe (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]
FirewallRules: [{2A570904-251F-4CB7-9231-CF8912D4111D}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2020\WNt600x64\RpcSandraSrv.exe (SiSoftware SPC -> SiSoftware) [Datei ist nicht signiert]

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:118.13 GB) (Free:42.52 GB) (36%)

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (05/13/2020 05:09:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CB.exe, Version: 0.0.0.0, Zeitstempel: 0x5df9d842
Name des fehlerhaften Moduls: CB.exe, Version: 0.0.0.0, Zeitstempel: 0x5df9d842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00003f7b
ID des fehlerhaften Prozesses: 0x2610
Startzeit der fehlerhaften Anwendung: 0x01d629387d2a4daa
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Metin2\CHEAT_BLOCKER\CB.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Metin2\CHEAT_BLOCKER\CB.exe
Berichtskennung: ea5a3b7c-4951-4ba1-8db6-721c9a959245
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (05/13/2020 05:08:43 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Metin2\metin2launch.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.

Error: (05/12/2020 10:05:39 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (724,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (05/12/2020 10:00:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3904,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (05/12/2020 09:47:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (10040,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (05/12/2020 09:35:59 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (9252,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (05/12/2020 09:05:40 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5016,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (05/12/2020 08:50:16 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11704,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.


Systemfehler:
=============
Error: (05/12/2020 08:00:02 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\system32\IntelWifiIhv04.dll

Error: (05/12/2020 08:00:02 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\system32\IntelWifiIhv04.dll

Error: (05/12/2020 08:00:00 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Übermittlungsoptimierung konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (05/12/2020 07:59:45 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\system32\IntelWifiIhv04.dll

Error: (05/12/2020 07:59:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Acronis Nonstop Backup Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/12/2020 07:59:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Acronis Managed Machine Service Mini" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/12/2020 07:59:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/12/2020 07:59:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office-Klick-und-Los-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.


Windows Defender:
===================================
Date: 2020-05-10 16:43:17.472
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {F9836DC5-9F37-431D-9588-A3A405FA5621}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2020-05-10 00:31:07.201
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {36C1AC67-4CC2-48AE-BC22-50CF0AA920E9}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2020-04-30 16:27:21.478
Description: 
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.C!ml&threatid=2147749372&enterprise=0
Name: Trojan:Win32/Wacatac.C!ml
ID: 2147749372
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\KKaSo\Downloads\Adobe Audition 2020 Kurulum.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: FastPath
Erkennungsquelle: System
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: Unknown
Sicherheitsversion: AV: 1.313.2652.0, AS: 1.313.2652.0, NIS: 1.313.2652.0
Modulversion: AM: 1.1.16900.4, NIS: 1.1.16900.4

CodeIntegrity:
===================================

Date: 2020-05-09 16:56:24.439
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 16:56:24.412
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 16:54:26.087
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 13:55:52.416
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 13:55:52.403
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Norton Security\Engine\22.20.1.69\symamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-05-09 05:14:47.235
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20180618.001\BHDrvx64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-09 05:14:47.206
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\BASHDefs\20180618.001\BHDrvx64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-09 04:36:12.598
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. R02-A0 11/17/2016
Hauptplatine: Acer Aspire GX-781
Prozessor: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 8150.51 MB
Verfügbarer physikalischer RAM: 3198.62 MB
Summe virtueller Speicher: 21974.51 MB
Verfügbarer virtueller Speicher: 14593.03 MB

==================== Laufwerke ================================

Drive c: (Win10) (Fixed) (Total:118.13 GB) (Free:42.53 GB) NTFS
Drive e: (Daten) (Fixed) (Total:931.39 GB) (Free:728.08 GB) NTFS

\\?\Volume{c5433f53-0e1b-4820-a4ee-6657be27695b}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.56 GB) NTFS
\\?\Volume{73a3d34e-2aee-4e6f-9073-b64050ddf70a}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 33B61532)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: E1B31D3A)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

C:\Users\KKaSo\Downloads\Adobe Audition 2020 Kurulum.exe

Was soll das bitte sein?

C:\Users\KKaSo\AppData\Local\SuperDama.exe
C:\Users\KKaSo\AppData\Local\CikcikOkey.exe

Bitte diese Dateien bei Virustotal auswerten lassen und von jeder den Ergebnislink posten. Falls Du die Dateien nicht siehst, musst Du sie evtl. vorher sichtbar machen.
Wenn eine Datei schon ausgewerte sein sollte, bitte eine weitere Auswertung starten.